Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/e7d0f0-f481-4fe3-8677-1cd33c62c45c/1/A8nqT5ZYixa9T8o41MHd9lwav9o.mft
File: A8nqT5ZYixa9T8o41MHd9lwav9o.mft (raw, json)
Hash identifier: DCLp7OAJ7N2ASVdbC/RuogpP8hpnssoanwKSOetVRe8=
Subject key identifier: 89:06:20:B1:F0:10:75:A0:65:E1:96:7B:60:56:B0:F3:53:99:77:C1
Authority key identifier: 03:C9:EA:4F:96:58:8B:16:BD:4F:CA:38:D4:C1:DD:F6:5C:1A:BF:DA
Certificate issuer: /CN=03c9ea4f96588b16bd4fca38d4c1ddf65c1abfda
Certificate serial: 0198D73B3D2F7D107709A644A46B3660E50D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A8nqT5ZYixa9T8o41MHd9lwav9o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/e7d0f0-f481-4fe3-8677-1cd33c62c45c/1/A8nqT5ZYixa9T8o41MHd9lwav9o.mft
Manifest number: 0258
Signing time: Sat 23 Aug 2025 14:00:40 +0000
Manifest this update: Sat 23 Aug 2025 14:00:40 +0000
Manifest next update: Sun 24 Aug 2025 14:00:40 +0000
Files and hashes: 1: A8nqT5ZYixa9T8o41MHd9lwav9o.crl (hash: 2r0uVnNgDofUDxn7BTGJFgqLyXOI6UBHFX19Oz1eMyg=)
2: jMIN8b0BVc9eEY8W0xUyZYn9gu0.roa (hash: T+38e+ztuuV+6KtpVMPU6c7/hBQtyKbXl9bJ797XzNw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/e7d0f0-f481-4fe3-8677-1cd33c62c45c/1/A8nqT5ZYixa9T8o41MHd9lwav9o.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/e7d0f0-f481-4fe3-8677-1cd33c62c45c/1/A8nqT5ZYixa9T8o41MHd9lwav9o.mft
rsync://rpki.ripe.net/repository/DEFAULT/A8nqT5ZYixa9T8o41MHd9lwav9o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 14:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d7:3b:3d:2f:7d:10:77:09:a6:44:a4:6b:36:60:e5:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=03c9ea4f96588b16bd4fca38d4c1ddf65c1abfda
Validity
Not Before: Aug 23 14:00:40 2025 GMT
Not After : Aug 24 14:00:40 2025 GMT
Subject: CN=890620b1f01075a065e1967b6056b0f3539977c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:eb:74:e4:78:ad:7c:ef:79:35:1e:7c:2f:ef:
b8:fa:67:f8:5f:e3:89:fd:fd:77:a3:8d:2a:34:96:
8d:05:42:8e:23:70:6a:f1:fe:1d:11:11:ec:9b:e0:
35:35:4d:9e:f5:f9:d3:5c:0e:f4:e9:ce:45:51:63:
1a:b7:b7:09:a0:32:cf:2e:31:b8:0c:d4:31:c2:c7:
36:5a:89:67:a0:e8:a1:06:f2:f4:5b:e9:c2:0d:6b:
22:b2:ad:e1:3a:d3:78:c8:7c:26:11:c1:69:17:40:
8e:94:48:8a:de:b5:ce:ec:df:66:f4:fc:76:64:d1:
97:76:b3:18:b7:c7:46:14:01:2c:c1:94:b1:4e:05:
44:9e:45:65:58:77:66:1a:f0:0a:2d:02:56:ee:89:
7b:45:fd:1d:1d:44:69:01:bd:01:06:8b:8e:d7:5e:
27:6e:a6:77:8f:41:e7:66:8a:bb:4b:bf:d3:e7:5c:
ad:d1:b0:65:ad:71:af:93:22:c3:97:c8:6d:63:40:
be:d2:a4:7b:a0:45:1d:3d:a0:7b:d2:38:30:5e:cc:
01:22:f2:7c:2c:85:67:44:b2:3c:8e:79:b2:49:d6:
6f:ff:e3:e1:6a:01:a1:49:5d:00:ab:17:72:38:22:
8d:e2:94:c0:e8:74:05:dc:fa:67:71:09:d0:cc:d8:
4c:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:06:20:B1:F0:10:75:A0:65:E1:96:7B:60:56:B0:F3:53:99:77:C1
X509v3 Authority Key Identifier:
keyid:03:C9:EA:4F:96:58:8B:16:BD:4F:CA:38:D4:C1:DD:F6:5C:1A:BF:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A8nqT5ZYixa9T8o41MHd9lwav9o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/e7d0f0-f481-4fe3-8677-1cd33c62c45c/1/A8nqT5ZYixa9T8o41MHd9lwav9o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/e7d0f0-f481-4fe3-8677-1cd33c62c45c/1/A8nqT5ZYixa9T8o41MHd9lwav9o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:1e:33:83:97:4a:97:af:73:4a:ab:e6:d9:eb:67:a8:44:8a:
51:f2:0f:a3:a2:03:b4:2e:9b:8e:03:3b:57:06:0a:86:6c:c6:
5c:ec:42:c9:6d:0f:28:3b:0b:67:04:bc:e1:1c:60:9d:16:e1:
99:b3:c6:ae:59:25:46:60:54:2d:6e:7f:d5:dd:e8:fe:29:31:
c2:c4:f9:7d:c1:db:1d:d2:2b:df:3d:aa:e5:9a:00:47:4c:5b:
fe:9d:ea:8d:e9:0b:b4:6f:f1:b2:44:4c:1f:60:ed:db:a6:84:
74:41:59:64:17:02:7c:e8:1f:00:1a:9a:6e:ca:ca:6f:cc:8d:
c0:c9:c9:b5:a7:2c:38:43:34:67:c3:b3:6a:00:da:bc:23:18:
d1:b8:87:78:18:f7:6f:db:dc:91:e9:c8:15:d8:53:1e:e2:56:
b1:77:42:ba:1e:2d:e2:0d:ec:ff:5d:90:10:3c:f8:78:96:c9:
98:41:cb:0e:8a:b2:57:d3:40:d5:95:85:a6:be:5e:34:ca:90:
4a:74:8b:9a:53:0b:4e:98:cf:8e:4a:bd:50:37:49:45:4c:9c:
ce:64:be:8f:58:e3:b7:7d:d8:98:ee:36:c1:2c:7c:be:10:1b:
72:6d:c9:d9:f0:45:11:34:46:04:a5:5b:55:8f:a7:9c:a7:a3:
35:fd:d3:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 19:30:37 2025 by rpki-client