Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/d080c7-cee6-4b41-8c1c-0ef8c036b616/1/A9yMYjke_dTdGORoGeF3gAKpoYc.mft
File: A9yMYjke_dTdGORoGeF3gAKpoYc.mft (raw, json)
Hash identifier: teI8LJNmnqRlfzoBjoZfw6GgdNdvCM0sqwBG+uVKjhI=
Subject key identifier: 70:4E:AD:61:D2:14:5F:41:A2:89:29:43:78:F5:CF:92:CB:49:A9:53
Authority key identifier: 03:DC:8C:62:39:1E:FD:D4:DD:18:E4:68:19:E1:77:80:02:A9:A1:87
Certificate issuer: /CN=03dc8c62391efdd4dd18e46819e1778002a9a187
Certificate serial: 0198D54DDEF682FC9E66E35FC1B41E79CAC4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A9yMYjke_dTdGORoGeF3gAKpoYc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/d080c7-cee6-4b41-8c1c-0ef8c036b616/1/A9yMYjke_dTdGORoGeF3gAKpoYc.mft
Manifest number: 0409
Signing time: Sat 23 Aug 2025 05:01:46 +0000
Manifest this update: Sat 23 Aug 2025 05:01:46 +0000
Manifest next update: Sun 24 Aug 2025 05:01:46 +0000
Files and hashes: 1: A9yMYjke_dTdGORoGeF3gAKpoYc.crl (hash: VIBPoUpOddHrE/i6HBku5Bn4zhPEDR0xKghbo4ch1Io=)
2: KMKlBIWdbSLJxhG6mlrGw76dE8w.roa (hash: wMSY3OLmFX6U/ZLAS1pVuwf7520K0rZUrgx8A8ShiM0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/d080c7-cee6-4b41-8c1c-0ef8c036b616/1/A9yMYjke_dTdGORoGeF3gAKpoYc.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/d080c7-cee6-4b41-8c1c-0ef8c036b616/1/A9yMYjke_dTdGORoGeF3gAKpoYc.mft
rsync://rpki.ripe.net/repository/DEFAULT/A9yMYjke_dTdGORoGeF3gAKpoYc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:4d:de:f6:82:fc:9e:66:e3:5f:c1:b4:1e:79:ca:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=03dc8c62391efdd4dd18e46819e1778002a9a187
Validity
Not Before: Aug 23 05:01:46 2025 GMT
Not After : Aug 24 05:01:46 2025 GMT
Subject: CN=704ead61d2145f41a289294378f5cf92cb49a953
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:18:f7:e5:5d:51:8e:17:9c:a5:2b:9c:6f:dd:
25:ac:5b:ed:72:b2:eb:b7:d3:13:1b:f1:70:25:5b:
f6:68:11:12:4a:ca:ff:7f:f8:74:2e:64:52:6b:68:
8f:6e:14:54:6d:80:38:a9:c2:50:1f:e1:6a:61:32:
bd:e9:00:78:df:78:de:bd:d9:a6:5c:e7:5d:34:5c:
b1:26:41:18:b1:48:85:c9:38:28:1a:6a:6f:ed:94:
20:09:df:38:f4:59:33:32:b9:67:e0:cd:71:17:e8:
7e:ed:6e:72:2f:c3:38:5e:aa:b6:ad:49:b8:ce:cd:
ac:b4:ac:32:26:4d:59:ea:87:4f:f4:7f:8c:57:5f:
3d:17:24:16:99:a9:79:23:01:e1:9d:f1:64:16:9d:
07:3b:3c:13:d5:f0:54:0f:61:a1:35:a4:79:03:95:
e8:e3:ab:5d:a4:0f:e7:d9:9b:f2:cd:77:32:72:bf:
c9:d2:33:c6:4a:55:be:44:b5:aa:d6:1f:c3:a1:3b:
08:2a:c1:10:e5:8e:56:eb:54:b3:24:93:7e:83:c6:
f3:1d:4a:f0:5c:06:e9:d5:e8:14:28:1b:d3:98:e1:
30:29:0d:d3:a0:54:24:ea:b7:d2:e1:76:ee:fb:21:
64:21:e1:be:c3:5b:9a:eb:2f:a1:d3:f8:fc:63:bd:
b2:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:4E:AD:61:D2:14:5F:41:A2:89:29:43:78:F5:CF:92:CB:49:A9:53
X509v3 Authority Key Identifier:
keyid:03:DC:8C:62:39:1E:FD:D4:DD:18:E4:68:19:E1:77:80:02:A9:A1:87
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A9yMYjke_dTdGORoGeF3gAKpoYc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/d080c7-cee6-4b41-8c1c-0ef8c036b616/1/A9yMYjke_dTdGORoGeF3gAKpoYc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/d080c7-cee6-4b41-8c1c-0ef8c036b616/1/A9yMYjke_dTdGORoGeF3gAKpoYc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:fc:e8:cd:33:b5:df:35:8e:ec:5c:13:ae:f2:1d:a0:53:57:
3c:c5:fa:51:a1:98:a8:61:7b:cb:d0:68:1b:3c:68:ed:e2:f8:
a9:2c:1f:78:3e:70:9f:89:62:d0:fe:27:38:7c:c1:ef:55:15:
8a:a0:5a:71:1d:de:ec:42:29:b9:04:61:45:fc:1a:05:b1:f8:
5d:d2:7d:06:2e:05:a8:e4:8d:46:1b:99:aa:80:e5:ca:36:de:
15:51:2e:ef:8d:ba:32:e2:26:f6:5f:9d:e4:d2:b1:51:8d:0d:
78:46:22:57:ab:e3:a7:da:e3:32:a0:fb:c4:9b:07:7a:e9:d3:
b1:3d:18:da:8c:3f:53:ce:42:2e:64:86:dd:d8:fe:9e:b9:79:
4e:f4:a3:ca:6d:6c:28:c8:71:ce:f3:7f:cf:9a:a3:67:d5:bc:
31:82:b6:88:d1:e3:33:2b:2f:f2:e9:6c:b7:f7:7c:bc:af:a9:
12:cf:e7:16:5d:ca:51:f8:6c:7f:be:05:35:80:45:ba:fa:28:
8b:90:b2:2e:7e:bd:5c:86:68:15:bc:f2:5a:23:b7:0e:7f:20:
84:bb:cf:75:b5:a6:36:02:e0:e1:82:99:da:9b:f7:0d:ac:10:
4a:39:e1:78:5b:e5:23:d3:5b:76:74:d4:35:c5:1a:8e:f9:6c:
c6:e0:93:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 14:14:11 2025 by rpki-client