Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/4a7d7f-886d-4bdf-83d6-f66138066358/1/A8vbBZX8SJApOKePQsHq8KFZv0Y.mft
File: A8vbBZX8SJApOKePQsHq8KFZv0Y.mft (raw, json)
Hash identifier: Zb+OxzuwlK4MjyMRBFWZLGcXn0M0KKVONvSiqYhkEhk=
Subject key identifier: 29:E2:E7:18:08:78:A4:0D:75:54:8D:F9:BB:B5:FA:99:F5:39:63:C2
Authority key identifier: 03:CB:DB:05:95:FC:48:90:29:38:A7:8F:42:C1:EA:F0:A1:59:BF:46
Certificate issuer: /CN=03cbdb0595fc48902938a78f42c1eaf0a159bf46
Certificate serial: 0198D660FF3572584836F870013A8807D86F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A8vbBZX8SJApOKePQsHq8KFZv0Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/4a7d7f-886d-4bdf-83d6-f66138066358/1/A8vbBZX8SJApOKePQsHq8KFZv0Y.mft
Manifest number: 0B36
Signing time: Sat 23 Aug 2025 10:02:17 +0000
Manifest this update: Sat 23 Aug 2025 10:02:17 +0000
Manifest next update: Sun 24 Aug 2025 10:02:17 +0000
Files and hashes: 1: A8vbBZX8SJApOKePQsHq8KFZv0Y.crl (hash: BjNXw+MuPqNvjbWTk8ztejQMKBjAsNpjFxE5QClcsMQ=)
2: GK_repQ6rwK9wKBexoj_8KHn0ps.roa (hash: BVRGH6L3m9qE1hNSh0udH+0Cqw8KHPDP3+FP2Bc+9Fo=)
3: PwFex15w_vGu9rMsC-NGPYybEsw.roa (hash: oh3ulFFupTLJCwmoHULEmcM0EU2doUd+YoDkAtl9zLo=)
4: Se_t6NLKu8IA2sTkrVOBiKVsQwY.roa (hash: phtV0BDD2FsHScjhDeHLatllFRKkRPV0UJtMe0PEg8c=)
5: VrAK-3V8CNeDpB5qVeCvMUDkHWY.roa (hash: LENa2mgDZKaaSJWhIwKS7EyivXKjCiNw/jcO9yMBo6I=)
6: cWH5PPaYfZWUJba_G0n_uzh_rsc.roa (hash: C8oVSKijBzzlBacVotbOoAmP0eM+u3jK9TaM8PG08eI=)
7: eK7sZ1D_OT19uO-hHprpcrVXcWU.roa (hash: bVKg53TVS+OiFbk3Bkeg0BfOZQFTwlQ5IxwlXslILAc=)
8: gHxt-7VNY3fc7Ia-bzrqoQMWyk4.roa (hash: zNJ0Kmvb3CH4yE59hTArSJep5ChElM6AnbN5rY/o7aE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/43/4a7d7f-886d-4bdf-83d6-f66138066358/1/A8vbBZX8SJApOKePQsHq8KFZv0Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/43/4a7d7f-886d-4bdf-83d6-f66138066358/1/A8vbBZX8SJApOKePQsHq8KFZv0Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/A8vbBZX8SJApOKePQsHq8KFZv0Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 10:02:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:60:ff:35:72:58:48:36:f8:70:01:3a:88:07:d8:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=03cbdb0595fc48902938a78f42c1eaf0a159bf46
Validity
Not Before: Aug 23 10:02:17 2025 GMT
Not After : Aug 24 10:02:17 2025 GMT
Subject: CN=29e2e7180878a40d75548df9bbb5fa99f53963c2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:ce:57:69:c6:20:fc:26:07:50:6e:f0:b6:ba:
7b:6b:6c:61:63:d2:94:e3:71:29:56:cb:e1:0f:00:
2a:40:0c:c1:e6:c2:a2:1b:21:4e:c9:ea:fc:f5:ce:
4b:98:e6:da:12:0e:fb:55:d9:49:9e:c4:d9:2c:a0:
ce:c7:8f:56:e4:63:10:60:17:59:f8:68:2f:ee:c3:
f0:51:09:9f:8c:25:e4:b1:aa:ee:77:4c:d6:98:15:
ee:c7:69:f2:87:4f:32:17:cd:cc:c4:fb:13:28:71:
94:cd:4c:72:3a:20:90:38:5c:7f:00:e3:53:eb:8f:
86:ee:1a:df:14:3a:67:a8:2d:7f:8a:31:99:92:25:
e6:1e:91:f9:19:ca:5e:08:cd:8b:fb:8e:9e:df:a2:
60:6b:b7:23:9e:7c:73:d0:bc:1e:a1:35:b0:57:20:
38:29:68:d1:fb:57:0a:8d:fb:f5:1a:8d:45:45:9a:
75:54:35:0e:fe:62:f1:7b:6d:3d:08:0a:80:04:32:
aa:a3:cf:4c:8c:59:72:79:16:18:e7:7a:97:89:35:
7e:e1:3f:e5:d2:4d:f8:26:bb:a2:fe:d1:a8:26:57:
c4:c1:a0:13:ac:db:60:4f:db:40:01:f2:a5:86:06:
95:20:26:29:4e:c7:8e:28:73:08:fc:29:d1:89:08:
aa:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:E2:E7:18:08:78:A4:0D:75:54:8D:F9:BB:B5:FA:99:F5:39:63:C2
X509v3 Authority Key Identifier:
keyid:03:CB:DB:05:95:FC:48:90:29:38:A7:8F:42:C1:EA:F0:A1:59:BF:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A8vbBZX8SJApOKePQsHq8KFZv0Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/4a7d7f-886d-4bdf-83d6-f66138066358/1/A8vbBZX8SJApOKePQsHq8KFZv0Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/43/4a7d7f-886d-4bdf-83d6-f66138066358/1/A8vbBZX8SJApOKePQsHq8KFZv0Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:41:1a:42:6d:71:4a:49:93:05:94:d1:b0:3d:8d:6c:68:34:
87:69:f4:1d:99:aa:5f:be:aa:6b:dd:30:65:ba:50:d4:e5:74:
ba:54:c3:6c:cd:67:0d:d0:2a:4c:e3:f5:f1:22:f8:6b:b8:55:
36:db:80:66:12:b4:d4:b8:30:27:49:77:bc:5f:9e:87:63:28:
83:6b:fc:05:dd:7d:c5:0b:09:81:26:d5:35:f5:e0:44:c1:58:
bd:d7:0c:83:9d:36:35:73:2a:13:d1:d3:2f:2e:3e:c5:6e:ae:
5f:9f:5a:cb:32:94:6f:68:6a:72:38:6c:20:d9:5a:10:c9:5b:
68:f3:62:d1:1f:71:0d:3c:27:a9:8e:05:78:83:3e:8d:0c:31:
19:82:99:d9:fd:fa:b5:0a:0d:db:0b:3c:4d:8b:38:d0:9c:a1:
18:e9:55:e2:53:ea:f5:23:58:c6:73:93:4e:d4:be:77:11:63:
25:18:95:f2:8e:63:6e:fe:ef:b3:0b:85:06:ff:96:44:a2:13:
45:02:dd:82:d3:54:e3:00:88:92:4c:4a:9b:3c:fd:d8:a8:73:
53:4b:f5:05:32:0f:9e:38:4f:c4:71:2d:63:6a:bc:c0:c3:8e:
0f:b5:f7:97:4d:ee:29:8b:b7:51:6c:de:67:aa:f2:64:ae:d4:
4e:df:81:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 19:47:03 2025 by rpki-client