
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/a13c40-dc67-423c-979e-2fad9a2fc3ef/1/a30fHod8EnmCdOATNFVPiZ846sE.mft
File: a30fHod8EnmCdOATNFVPiZ846sE.mft (raw, json)
Hash identifier: iScwrtxd4X8by01KoalRlay6LFKJwGSrrUg+l3i0d6E=
Subject key identifier: AA:31:04:16:AD:47:35:7C:2D:CE:A9:88:C0:36:E6:6B:F2:54:45:C9
Authority key identifier: 6B:7D:1F:1E:87:7C:12:79:82:74:E0:13:34:55:4F:89:9F:38:EA:C1
Certificate issuer: /CN=6b7d1f1e877c12798274e01334554f899f38eac1
Certificate serial: 0198D62987A23DECCC3B9EAF7BFEA776F645
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a30fHod8EnmCdOATNFVPiZ846sE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/a13c40-dc67-423c-979e-2fad9a2fc3ef/1/a30fHod8EnmCdOATNFVPiZ846sE.mft
Manifest number: 10D8
Signing time: Sat 23 Aug 2025 09:01:42 +0000
Manifest this update: Sat 23 Aug 2025 09:01:42 +0000
Manifest next update: Sun 24 Aug 2025 09:01:42 +0000
Files and hashes: 1: 1-47yB099htuBv2m-mnsxmo5hMaE.roa (hash: glbHBbOOXucvNPZBEZEZlyBvhlSEAVVGrvhxKUG4Uz4=)
2: 5Y2NPf-2wwHQNFwN222T-_ksWjs.roa (hash: 7vHIYZQTiGeFh0mU2zpcuuX7KVBld5DcIlwlMA6in8o=)
3: St4HRjoesIgHRfExOBffE_pcBIw.roa (hash: zj7JSUVTgp8pR7SRQVxha79Is1N6T3q+JK526mfdo5s=)
4: ZRn8_lnFsXvgqivcUn4eIrUv-Ic.roa (hash: ViUiWV5ebu4waGuKqQE1IWidKaFMMzGFtUARe3tVsh4=)
5: a30fHod8EnmCdOATNFVPiZ846sE.crl (hash: 8dQosTANrVVLwWxkYa8yozfwc+xZ50yjaWV5h76grAc=)
6: lKdTsJ9TvIICTgPRcm3O1hlBWiM.roa (hash: py16JH9zUXcJT+HWUygN67vLSyq6kBTksveRhrIkt/k=)
7: pTwzFC29LPXNKIBj8fs94m0Kbbg.roa (hash: sPgk9WDd2v8KxrBOyyp78OiRQG9IETqQ+gnNWNn4qjQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/a13c40-dc67-423c-979e-2fad9a2fc3ef/1/a30fHod8EnmCdOATNFVPiZ846sE.crl
rsync://rpki.ripe.net/repository/DEFAULT/3c/a13c40-dc67-423c-979e-2fad9a2fc3ef/1/a30fHod8EnmCdOATNFVPiZ846sE.mft
rsync://rpki.ripe.net/repository/DEFAULT/a30fHod8EnmCdOATNFVPiZ846sE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:29:87:a2:3d:ec:cc:3b:9e:af:7b:fe:a7:76:f6:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6b7d1f1e877c12798274e01334554f899f38eac1
Validity
Not Before: Aug 23 09:01:42 2025 GMT
Not After : Aug 24 09:01:42 2025 GMT
Subject: CN=aa310416ad47357c2dcea988c036e66bf25445c9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:ec:ba:d3:58:3b:90:0b:19:f3:b3:82:c4:8f:
1f:2d:47:c6:8e:da:4d:4e:7a:83:0b:79:22:a5:06:
e4:be:69:33:b9:89:be:0a:ad:39:4a:82:d5:35:af:
ad:f2:b9:4b:e9:c5:50:33:a9:82:2e:8d:84:df:24:
b4:ae:6b:c1:b2:aa:88:f0:ec:2b:d9:a8:a2:0c:0f:
62:65:ca:d2:f2:c4:34:63:20:1f:d8:ef:5d:25:7b:
2d:23:80:35:f6:82:59:6b:41:8d:45:9b:f4:7e:4e:
a7:1a:05:f2:c1:88:e1:b3:dc:de:6a:c7:40:a3:5c:
2c:7c:7b:fb:6d:91:dc:77:55:ff:f1:05:35:77:d2:
db:1e:66:ad:33:a0:e7:12:7b:4f:9c:73:31:2a:76:
55:d8:d3:ad:24:75:a7:b6:60:01:d5:c5:fe:b5:10:
8f:49:86:c4:56:33:40:d0:29:b3:af:29:f6:bb:ea:
5b:ad:49:f7:ea:ee:a6:35:e3:70:44:5a:f2:3c:78:
01:11:a6:73:2d:29:8b:af:ee:af:e0:08:87:80:de:
75:20:c4:1a:16:e3:5f:d9:69:26:80:b5:e2:4b:2c:
e8:7d:81:a3:b9:7e:b3:cf:da:41:18:55:eb:57:b9:
b6:39:6b:75:b1:41:34:46:3a:61:62:d0:d6:d6:51:
87:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:31:04:16:AD:47:35:7C:2D:CE:A9:88:C0:36:E6:6B:F2:54:45:C9
X509v3 Authority Key Identifier:
keyid:6B:7D:1F:1E:87:7C:12:79:82:74:E0:13:34:55:4F:89:9F:38:EA:C1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a30fHod8EnmCdOATNFVPiZ846sE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/a13c40-dc67-423c-979e-2fad9a2fc3ef/1/a30fHod8EnmCdOATNFVPiZ846sE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/a13c40-dc67-423c-979e-2fad9a2fc3ef/1/a30fHod8EnmCdOATNFVPiZ846sE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:21:16:54:62:0d:ff:3f:89:0c:f4:b2:71:69:82:82:96:63:
36:77:16:2f:be:15:14:ea:37:62:47:6b:9e:44:37:6b:f5:9d:
0c:65:e1:f4:81:a8:0d:de:eb:22:bc:00:9b:13:a1:fe:a3:93:
85:7c:11:18:d5:e1:f3:76:06:b0:4a:a0:ec:63:69:9e:54:94:
28:d7:7e:6b:0c:85:cf:bf:96:ae:2e:e4:14:ab:1d:f0:fb:2d:
10:81:3b:db:e7:94:ec:ad:65:9e:a5:1f:8b:ff:ab:64:93:d3:
b3:65:6a:3e:3b:de:02:38:2b:84:3d:d1:3a:51:98:74:a7:a9:
9a:08:84:00:c8:23:a6:e9:de:43:58:ef:07:37:79:7b:32:b4:
38:02:61:b0:86:be:9d:fe:2a:6a:4a:e8:4c:60:c7:c3:79:2c:
98:03:8e:69:47:b0:72:91:a2:e8:d6:15:c7:f2:79:32:ac:d9:
02:92:84:bf:8d:f8:c8:c5:e5:b6:db:d4:3d:dd:ae:28:45:2a:
fb:51:c9:58:f3:c4:8f:ad:4c:37:20:88:fe:5f:76:3d:e5:94:
50:85:4c:23:e4:9e:b8:c4:48:3e:68:b6:ab:e0:6c:56:31:57:
f7:e7:1c:b3:39:8d:ea:ff:1e:23:5b:d6:71:6e:95:4e:eb:37:
4c:80:61:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 15:32:20 2025 by rpki-client