Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/4a7d7f-886d-4bdf-83d6-f66138066358/1/A8vbBZX8SJApOKePQsHq8KFZv0Y.mft
File: A8vbBZX8SJApOKePQsHq8KFZv0Y.mft (raw, json)
Hash identifier: surFI76e0osH8J2ErC3a0nKKDHjlIdCY3ntwiK40sa0=
Subject key identifier: EE:A7:DD:B6:E8:EA:75:A7:DA:F5:F8:95:24:09:99:5D:C8:02:EE:7B
Authority key identifier: 03:CB:DB:05:95:FC:48:90:29:38:A7:8F:42:C1:EA:F0:A1:59:BF:46
Certificate issuer: /CN=03cbdb0595fc48902938a78f42c1eaf0a159bf46
Certificate serial: 0197B6A04D813F7A3205D64B2A0DECDE17AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A8vbBZX8SJApOKePQsHq8KFZv0Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/4a7d7f-886d-4bdf-83d6-f66138066358/1/A8vbBZX8SJApOKePQsHq8KFZv0Y.mft
Manifest number: 0AA0
Signing time: Sat 28 Jun 2025 13:00:48 +0000
Manifest this update: Sat 28 Jun 2025 13:00:48 +0000
Manifest next update: Sun 29 Jun 2025 13:00:48 +0000
Files and hashes: 1: A8vbBZX8SJApOKePQsHq8KFZv0Y.crl (hash: +2Wr9qdqLk3tGVOqTLZpl7tb0VgrkgMrcbRPUpbEu1o=)
2: CkMelDZYJ8wLYR1cBeOcNR-SbG4.roa (hash: 6DRW9xC/bgUNN/0DP+fJRep1JSUrKnuaZJm7l+ZDw18=)
3: GK_repQ6rwK9wKBexoj_8KHn0ps.roa (hash: BVRGH6L3m9qE1hNSh0udH+0Cqw8KHPDP3+FP2Bc+9Fo=)
4: PwFex15w_vGu9rMsC-NGPYybEsw.roa (hash: oh3ulFFupTLJCwmoHULEmcM0EU2doUd+YoDkAtl9zLo=)
5: Se_t6NLKu8IA2sTkrVOBiKVsQwY.roa (hash: phtV0BDD2FsHScjhDeHLatllFRKkRPV0UJtMe0PEg8c=)
6: cWH5PPaYfZWUJba_G0n_uzh_rsc.roa (hash: C8oVSKijBzzlBacVotbOoAmP0eM+u3jK9TaM8PG08eI=)
7: eK7sZ1D_OT19uO-hHprpcrVXcWU.roa (hash: bVKg53TVS+OiFbk3Bkeg0BfOZQFTwlQ5IxwlXslILAc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/43/4a7d7f-886d-4bdf-83d6-f66138066358/1/A8vbBZX8SJApOKePQsHq8KFZv0Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/43/4a7d7f-886d-4bdf-83d6-f66138066358/1/A8vbBZX8SJApOKePQsHq8KFZv0Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/A8vbBZX8SJApOKePQsHq8KFZv0Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a0:4d:81:3f:7a:32:05:d6:4b:2a:0d:ec:de:17:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=03cbdb0595fc48902938a78f42c1eaf0a159bf46
Validity
Not Before: Jun 28 13:00:48 2025 GMT
Not After : Jun 29 13:00:48 2025 GMT
Subject: CN=eea7ddb6e8ea75a7daf5f8952409995dc802ee7b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:cf:53:12:ab:92:87:a7:c6:83:97:28:e1:1e:
7a:9f:25:df:6f:7a:dc:ab:72:6f:9b:37:1f:2c:a2:
66:a9:e2:4b:7d:84:37:2f:87:38:69:ee:f8:0a:cc:
4f:91:5d:a3:97:d5:0c:dd:4e:a3:04:4e:8a:0e:c5:
6e:29:27:41:4c:ce:92:c7:93:51:7f:6a:5b:38:64:
ef:08:f1:67:79:ac:bd:ee:8f:fa:ce:03:8e:84:0d:
9e:14:89:ed:eb:e9:65:ea:ff:f9:ab:1b:ee:fc:79:
77:9a:d5:a5:16:0d:d6:92:91:2c:7a:3f:0e:7d:fc:
77:f4:e5:bd:4e:ae:90:35:23:ae:e7:ad:9e:17:82:
b2:23:54:4c:c3:03:84:68:73:22:a2:40:ba:c4:b3:
bb:3a:ab:d0:97:ef:8a:1f:8b:cd:ae:8b:61:5b:65:
3e:f1:06:a1:13:8f:9f:0a:7d:aa:a3:78:3f:65:71:
37:56:3e:ac:e3:37:cf:fb:75:aa:05:ba:b8:bd:60:
c0:8e:ac:87:ae:df:76:1e:09:22:d2:b6:1a:25:69:
97:33:ef:95:ee:2f:ac:b9:3a:0a:46:d8:00:67:3b:
3c:f3:f8:d3:b2:89:34:d0:e0:42:58:26:98:5f:3b:
36:c6:bc:20:0e:ef:b2:cf:45:f3:a3:c5:c6:88:ff:
35:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:A7:DD:B6:E8:EA:75:A7:DA:F5:F8:95:24:09:99:5D:C8:02:EE:7B
X509v3 Authority Key Identifier:
keyid:03:CB:DB:05:95:FC:48:90:29:38:A7:8F:42:C1:EA:F0:A1:59:BF:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A8vbBZX8SJApOKePQsHq8KFZv0Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/4a7d7f-886d-4bdf-83d6-f66138066358/1/A8vbBZX8SJApOKePQsHq8KFZv0Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/43/4a7d7f-886d-4bdf-83d6-f66138066358/1/A8vbBZX8SJApOKePQsHq8KFZv0Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:56:03:19:67:8a:25:9c:5b:c0:ec:73:0a:ee:ca:fe:41:b6:
77:7a:44:74:6f:29:a8:e6:8c:04:38:c4:b6:3d:5a:71:18:51:
0e:f2:35:e3:a6:90:68:56:00:c0:27:bf:78:f0:db:6d:4c:59:
97:1a:55:97:7b:ff:b5:ce:a2:72:10:db:7a:dc:b5:8b:13:8a:
08:e6:1c:76:1d:ae:1d:d5:71:83:55:f7:a0:ea:7d:55:05:b2:
e0:ab:cc:17:f1:17:96:1c:19:ac:04:7a:51:f9:ef:4a:5b:b0:
a9:3e:6d:42:e4:cf:05:f6:e1:29:78:1b:ae:52:06:1e:68:f0:
3f:02:ba:22:fb:11:15:c2:4c:fc:7a:71:66:ab:d1:e8:ce:9b:
c1:2a:d8:c2:91:bb:45:33:5a:a3:9e:ea:e6:f9:e7:ea:ee:5c:
6e:17:11:53:4f:2c:5a:38:3c:d2:2c:88:c6:62:da:c2:f8:45:
44:d5:e9:1f:fd:10:c4:6a:6b:f1:44:2b:55:1a:4c:2e:8b:29:
cd:6f:7d:74:70:e1:13:e3:8f:a9:7c:34:cd:26:cc:c5:ef:59:
f3:3e:6c:a1:30:00:94:cd:ff:95:47:02:e9:88:ec:4f:4e:72:
dc:71:dd:3e:dd:6e:43:b8:ea:81:bb:ee:d9:17:18:30:34:9f:
28:de:f8:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 19:57:15 2025 by rpki-client