Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/311f57-6404-446a-9f08-11b92906406d/1/A1KD5iNe2yXotUdJtihfXj74U3E.mft
File: A1KD5iNe2yXotUdJtihfXj74U3E.mft (raw, json)
Hash identifier: tbPpxnmJUG9oK+XtEnvWZzfqJVqStX12Km22Fav20PE=
Subject key identifier: 72:E6:01:3F:06:FF:59:C7:64:76:6D:9E:C2:9D:4A:04:1D:E4:A7:F0
Authority key identifier: 03:52:83:E6:23:5E:DB:25:E8:B5:47:49:B6:28:5F:5E:3E:F8:53:71
Certificate issuer: /CN=035283e6235edb25e8b54749b6285f5e3ef85371
Certificate serial: 0198D5837CF6774905E15711D3D696771902
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A1KD5iNe2yXotUdJtihfXj74U3E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/311f57-6404-446a-9f08-11b92906406d/1/A1KD5iNe2yXotUdJtihfXj74U3E.mft
Manifest number: 0197
Signing time: Sat 23 Aug 2025 06:00:20 +0000
Manifest this update: Sat 23 Aug 2025 06:00:20 +0000
Manifest next update: Sun 24 Aug 2025 06:00:20 +0000
Files and hashes: 1: A1KD5iNe2yXotUdJtihfXj74U3E.crl (hash: 6L2kL6JHwsbglAOmAlFZLsP2OowJfAR45QSBM0A6WOU=)
2: z96_ZJgr9Ouwu3H857DM3qPVUxI.roa (hash: XUjlH+TkzMgkjT2OPVskc/V8eVbqCCBWMoR0ix6MWrI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/311f57-6404-446a-9f08-11b92906406d/1/A1KD5iNe2yXotUdJtihfXj74U3E.crl
rsync://rpki.ripe.net/repository/DEFAULT/69/311f57-6404-446a-9f08-11b92906406d/1/A1KD5iNe2yXotUdJtihfXj74U3E.mft
rsync://rpki.ripe.net/repository/DEFAULT/A1KD5iNe2yXotUdJtihfXj74U3E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:83:7c:f6:77:49:05:e1:57:11:d3:d6:96:77:19:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=035283e6235edb25e8b54749b6285f5e3ef85371
Validity
Not Before: Aug 23 06:00:20 2025 GMT
Not After : Aug 24 06:00:20 2025 GMT
Subject: CN=72e6013f06ff59c764766d9ec29d4a041de4a7f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:10:0d:f5:27:65:fd:04:c5:6f:db:db:ce:8f:
6f:35:1e:82:7b:a5:4d:c8:b4:f0:ff:e8:8b:ee:0c:
0c:c8:80:dd:8f:a0:aa:18:a5:96:bd:bb:6a:6b:99:
bf:4e:c9:3b:5f:86:5c:fd:9f:0c:57:92:f9:a6:1c:
a1:40:45:b4:8f:8b:5d:0f:60:89:26:da:82:42:02:
ef:5e:be:7c:3b:f6:83:39:73:84:fa:10:05:6f:5f:
e6:1c:70:b8:f2:8e:b8:b0:91:92:7e:20:9b:85:e9:
af:95:7d:17:56:df:f9:16:bc:8e:33:fd:b4:b7:62:
65:84:c9:87:3b:ea:16:bd:83:9f:29:39:ea:02:01:
b0:0f:87:59:1a:85:cb:14:39:70:f3:0d:29:c6:ce:
ab:63:6a:58:e7:13:58:b9:31:f4:e5:e2:09:79:59:
cc:f2:63:4a:ac:3f:03:af:8b:95:62:d8:d2:3e:c1:
af:c6:1f:55:cd:d9:90:2f:26:e8:7b:14:5b:1f:3c:
4b:19:9f:1e:a1:27:9e:29:8c:11:7f:4c:1e:5f:78:
3d:c4:eb:db:a3:43:d6:28:da:2c:92:82:95:a7:30:
50:a6:14:4b:76:fb:a8:25:91:86:83:a9:cc:3e:2b:
f9:8d:39:57:25:bf:2f:d5:d5:7c:ce:0e:b5:0d:2a:
d5:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:E6:01:3F:06:FF:59:C7:64:76:6D:9E:C2:9D:4A:04:1D:E4:A7:F0
X509v3 Authority Key Identifier:
keyid:03:52:83:E6:23:5E:DB:25:E8:B5:47:49:B6:28:5F:5E:3E:F8:53:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A1KD5iNe2yXotUdJtihfXj74U3E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/311f57-6404-446a-9f08-11b92906406d/1/A1KD5iNe2yXotUdJtihfXj74U3E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/311f57-6404-446a-9f08-11b92906406d/1/A1KD5iNe2yXotUdJtihfXj74U3E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:6d:24:f3:c6:34:a6:0e:72:89:16:81:14:15:71:64:bd:22:
e8:0a:a7:26:a8:84:81:98:59:b5:70:69:f4:a8:14:71:09:33:
0f:08:62:af:e5:5b:d3:8a:f8:df:08:ab:1f:b5:3b:e7:8c:cf:
ec:97:03:9b:b6:1b:98:db:15:e7:c8:8a:72:48:ec:2f:9f:f1:
35:b4:d4:c3:c3:eb:f2:0b:cb:28:a9:c9:66:5e:37:8d:9f:d0:
8f:0b:63:0e:39:2d:12:2f:d6:55:8d:7d:b2:3e:ac:49:4a:c0:
01:0f:e7:7c:c3:ee:b2:b9:c6:25:8b:4e:ea:e4:16:b6:c7:c1:
5f:c3:c1:12:cd:4b:4e:bf:04:bb:14:7b:3c:c6:16:62:2a:c3:
60:73:42:de:88:7a:61:2e:01:10:cd:7c:4e:8d:9f:6b:e2:11:
d4:7c:21:ea:eb:7e:fb:09:4a:2d:88:d8:93:fb:6f:02:5a:02:
46:d0:43:60:19:5e:c2:c2:de:49:48:88:4e:60:5e:5b:7e:d3:
5e:ae:c3:3b:eb:c2:e1:a8:c2:80:8f:33:e4:ac:ad:2a:b9:8f:
b6:df:5f:b1:49:05:fb:89:f4:b4:e9:b0:dc:d0:19:98:63:d7:
e7:7e:e9:45:63:be:b1:43:bd:71:5e:91:d4:67:6d:3f:3e:1e:
5d:88:f0:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:38:20 2025 by rpki-client