Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/08e57c-d716-4705-9561-03adfbc68c91/1/A39TL6Ji9ca9lhW8151u3UPy4HU.mft
File: A39TL6Ji9ca9lhW8151u3UPy4HU.mft (raw, json)
Hash identifier: ZaUc2iJtQD89CWVWYA2lP8mtLOt8NKWMx1fgCq2cIqA=
Subject key identifier: 15:35:E7:76:84:54:47:08:91:FB:32:94:B4:C2:36:92:FB:B9:2D:1E
Authority key identifier: 03:7F:53:2F:A2:62:F5:C6:BD:96:15:BC:D7:9D:6E:DD:43:F2:E0:75
Certificate issuer: /CN=037f532fa262f5c6bd9615bcd79d6edd43f2e075
Certificate serial: 0198D5BBCAC08A223332FE47318E33AFADE3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A39TL6Ji9ca9lhW8151u3UPy4HU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/08e57c-d716-4705-9561-03adfbc68c91/1/A39TL6Ji9ca9lhW8151u3UPy4HU.mft
Manifest number: 164A
Signing time: Sat 23 Aug 2025 07:01:50 +0000
Manifest this update: Sat 23 Aug 2025 07:01:50 +0000
Manifest next update: Sun 24 Aug 2025 07:01:50 +0000
Files and hashes: 1: 3TsgJTCqJzOcEWU1D_eLkn9vlVQ.roa (hash: FocquAr/i2n2K968hOeO0r6QOp/B6G9WWrm69jbwUbg=)
2: A39TL6Ji9ca9lhW8151u3UPy4HU.crl (hash: oRyhApBX1Uf4R2KSx1zxLMbF1B0nFHhgujJnKRnaxqU=)
3: XfddXSazKRwlAti_xB3GX9aF4dA.roa (hash: 6Q++0e98qDqGZws++WyKl8Tb8aXZP/cVoTXv/5uSSrM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/08e57c-d716-4705-9561-03adfbc68c91/1/A39TL6Ji9ca9lhW8151u3UPy4HU.crl
rsync://rpki.ripe.net/repository/DEFAULT/69/08e57c-d716-4705-9561-03adfbc68c91/1/A39TL6Ji9ca9lhW8151u3UPy4HU.mft
rsync://rpki.ripe.net/repository/DEFAULT/A39TL6Ji9ca9lhW8151u3UPy4HU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:bb:ca:c0:8a:22:33:32:fe:47:31:8e:33:af:ad:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=037f532fa262f5c6bd9615bcd79d6edd43f2e075
Validity
Not Before: Aug 23 07:01:50 2025 GMT
Not After : Aug 24 07:01:50 2025 GMT
Subject: CN=1535e7768454470891fb3294b4c23692fbb92d1e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:ad:bf:9d:1c:2a:85:0c:e7:32:88:22:c9:34:
7d:2d:a5:a9:f7:bf:92:4e:e0:40:b0:9c:4d:b4:e5:
5a:ae:38:ea:58:50:0a:9c:27:29:58:04:68:f4:c2:
fc:0c:0e:7e:80:c0:df:cc:19:ae:1d:1f:42:38:51:
ef:fb:06:dd:56:af:1b:af:1d:bd:27:01:b3:8f:89:
86:60:0b:62:31:dc:4e:49:35:36:4a:70:e2:25:c7:
4f:3f:22:f9:00:44:9a:85:76:65:78:55:34:50:09:
8e:36:6a:58:16:27:ea:88:dd:90:43:b4:17:6d:b8:
92:87:92:d3:83:4b:63:18:73:41:8a:91:d6:d4:e0:
43:57:58:cb:7a:5a:71:84:6d:92:30:37:75:d6:a3:
51:a4:6f:85:71:a1:e9:79:1f:89:0d:20:ab:f3:1a:
d4:b3:40:07:d7:44:5c:37:43:e3:6d:9f:b0:a9:52:
99:0e:62:af:a4:4c:e4:4a:a4:90:cc:43:cd:96:0f:
d6:c2:6e:08:a9:30:a5:a5:15:df:4c:4f:3c:95:6c:
02:d2:57:f4:7e:1e:0c:25:5e:0c:7f:d5:2e:54:7a:
36:79:3f:17:3b:e7:20:9c:27:1a:f0:18:5e:12:ef:
24:80:f3:de:9e:7b:a3:a9:a5:ef:88:6e:6a:95:09:
bb:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:35:E7:76:84:54:47:08:91:FB:32:94:B4:C2:36:92:FB:B9:2D:1E
X509v3 Authority Key Identifier:
keyid:03:7F:53:2F:A2:62:F5:C6:BD:96:15:BC:D7:9D:6E:DD:43:F2:E0:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A39TL6Ji9ca9lhW8151u3UPy4HU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/08e57c-d716-4705-9561-03adfbc68c91/1/A39TL6Ji9ca9lhW8151u3UPy4HU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/08e57c-d716-4705-9561-03adfbc68c91/1/A39TL6Ji9ca9lhW8151u3UPy4HU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:f9:63:9c:09:9a:c8:cf:1a:ae:4f:7a:0e:7b:93:47:a4:db:
e4:36:7c:a0:1a:1e:00:8d:88:7f:3d:37:b2:b6:c9:04:a5:ab:
bd:6b:97:07:78:e0:5a:c2:f7:fa:3c:29:a7:ac:3a:d6:71:9a:
f3:98:21:b9:b0:4b:1d:ce:7a:f3:22:07:bb:9d:92:65:a6:c5:
5b:94:2d:0d:2e:b6:12:99:5d:06:a6:b4:92:ba:06:6a:de:34:
8a:75:bc:91:1c:cc:80:34:a0:31:60:88:f8:0d:c4:f4:bb:9e:
9d:e4:f6:1a:fd:47:bb:21:bb:a0:32:7b:8b:0f:a3:ae:ae:26:
5c:56:37:cc:f4:c4:cc:11:58:9f:49:42:d1:88:1b:ed:0c:3b:
08:db:18:6b:dd:d8:4f:2e:0d:dd:82:bd:26:aa:c7:dc:d4:ec:
7a:af:a2:9d:8b:0d:f1:4b:c3:0a:f2:2c:57:26:2e:c4:7c:6f:
b3:9b:47:66:4d:38:b4:3c:fc:97:09:25:35:d1:df:89:73:0c:
df:13:00:c6:9d:fe:b1:db:bf:9f:73:46:96:ab:56:87:c7:73:
38:1b:4e:ab:85:b3:32:22:1c:fd:0b:68:0f:1c:b2:46:fb:80:
fe:3c:ff:f0:91:f7:98:87:78:a7:e1:e6:d2:1d:10:8f:fd:4c:
97:38:33:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:23:30 2025 by rpki-client