Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/57e419-42f4-4d8c-b6b4-431f27a62ed8/1/A4r4Z5VBejWE1hY3UgmnLv7iRis.mft
File: A4r4Z5VBejWE1hY3UgmnLv7iRis.mft (raw, json)
Hash identifier: X3w/ITPFhpSTm0Te5J8uvDFT2jSEOXHUbm1EMQaZzjg=
Subject key identifier: F5:A6:73:8E:95:5D:28:23:C3:2D:47:2B:92:09:A9:23:47:F1:82:E0
Authority key identifier: 03:8A:F8:67:95:41:7A:35:84:D6:16:37:52:09:A7:2E:FE:E2:46:2B
Certificate issuer: /CN=038af86795417a3584d616375209a72efee2462b
Certificate serial: 0198D54DE4E9FC25BD7EBDE1BB70AC2AFAF7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A4r4Z5VBejWE1hY3UgmnLv7iRis.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/57e419-42f4-4d8c-b6b4-431f27a62ed8/1/A4r4Z5VBejWE1hY3UgmnLv7iRis.mft
Manifest number: 0DD0
Signing time: Sat 23 Aug 2025 05:01:48 +0000
Manifest this update: Sat 23 Aug 2025 05:01:48 +0000
Manifest next update: Sun 24 Aug 2025 05:01:48 +0000
Files and hashes: 1: 1-ojoRJbswRkkiGkqXab5Mi6LHY.roa (hash: 60oY4GGKsVQvbVXZplutdFLjGZggdXVeIQnzzP1SLeY=)
2: A4r4Z5VBejWE1hY3UgmnLv7iRis.crl (hash: ss5GNrz5VX01F8u8dI6Pmoj5WyQtbUAlIOPk1O0tiYY=)
3: WIaOGWdkdCPNTnZSI-W-XTK4te4.roa (hash: jVJuCp2YFk4DEa8ZbdmENwzLLMmsULw4LDZkckWi3gI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/57e419-42f4-4d8c-b6b4-431f27a62ed8/1/A4r4Z5VBejWE1hY3UgmnLv7iRis.crl
rsync://rpki.ripe.net/repository/DEFAULT/7b/57e419-42f4-4d8c-b6b4-431f27a62ed8/1/A4r4Z5VBejWE1hY3UgmnLv7iRis.mft
rsync://rpki.ripe.net/repository/DEFAULT/A4r4Z5VBejWE1hY3UgmnLv7iRis.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:4d:e4:e9:fc:25:bd:7e:bd:e1:bb:70:ac:2a:fa:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=038af86795417a3584d616375209a72efee2462b
Validity
Not Before: Aug 23 05:01:48 2025 GMT
Not After : Aug 24 05:01:48 2025 GMT
Subject: CN=f5a6738e955d2823c32d472b9209a92347f182e0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:b7:33:0e:ae:07:07:0b:83:27:da:2b:c4:98:
80:d6:f8:b6:56:ed:a8:71:73:23:0b:d2:3f:be:f7:
63:a2:e2:c0:fc:31:4c:6c:5b:bb:de:18:83:f7:5c:
42:8b:4c:3b:fd:4d:8d:f4:30:76:62:67:2e:8e:00:
c1:89:ce:c1:49:5a:30:c0:27:c4:1f:10:ff:fe:00:
f3:e2:1d:1b:d8:45:17:c7:ef:ca:b2:5a:84:b7:0a:
81:dd:f6:f7:93:f1:f9:a5:f3:d0:9c:5e:e7:14:3c:
84:28:1f:74:b6:7e:17:03:fa:6d:99:12:6a:4d:2e:
08:4e:e4:67:ac:02:6f:70:b1:34:38:2b:b5:8d:bd:
72:d9:d0:a7:f0:c4:2a:06:39:b3:77:be:f1:71:91:
62:4b:7a:23:6c:4f:8a:ce:5c:12:23:2f:58:19:4f:
7c:5d:9b:1d:ce:e8:62:d5:48:bf:04:51:3e:7a:a3:
d0:66:c2:1c:15:63:fa:07:9b:5f:4a:6a:67:1e:16:
18:93:a6:c2:3a:ff:f3:21:59:5e:72:63:bb:f8:38:
54:30:05:0e:43:87:84:31:7b:3a:5f:cb:9b:b4:a6:
c7:c6:66:1a:f7:ff:56:ce:a1:10:0b:16:8b:a7:04:
d8:8e:f4:e8:47:55:52:4b:97:e0:64:d2:95:4e:8e:
2d:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:A6:73:8E:95:5D:28:23:C3:2D:47:2B:92:09:A9:23:47:F1:82:E0
X509v3 Authority Key Identifier:
keyid:03:8A:F8:67:95:41:7A:35:84:D6:16:37:52:09:A7:2E:FE:E2:46:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A4r4Z5VBejWE1hY3UgmnLv7iRis.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/57e419-42f4-4d8c-b6b4-431f27a62ed8/1/A4r4Z5VBejWE1hY3UgmnLv7iRis.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/57e419-42f4-4d8c-b6b4-431f27a62ed8/1/A4r4Z5VBejWE1hY3UgmnLv7iRis.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9d:93:dc:f8:09:f3:c5:c2:b1:30:6e:8a:db:a5:8a:9f:05:6a:
0a:60:20:b0:1c:80:5b:70:d6:ea:0b:9f:fe:90:1a:97:17:bd:
3e:b6:a5:ca:a1:b7:31:fa:44:8d:91:de:5a:6e:d5:db:5c:1a:
b2:af:7b:07:26:b3:0f:49:ee:64:4d:26:c2:16:48:22:87:1d:
9e:32:41:4c:ec:ef:77:b2:ad:e6:44:e9:fc:e4:0f:4f:72:3e:
e0:4b:39:ef:4e:3b:b0:25:01:1f:5b:3d:2b:03:7a:9f:51:34:
3d:d2:b3:fc:6f:be:c0:ef:3b:7a:38:69:c7:f5:71:f2:37:b0:
9a:66:e4:da:36:68:9e:d9:45:1d:35:06:25:f2:e3:dd:4b:60:
cf:84:7f:de:97:f2:f4:e4:e9:e2:dc:6d:4d:d6:d2:e6:7f:23:
7a:fc:06:35:2b:c4:ff:71:d9:97:79:91:af:ce:5d:9f:05:bd:
48:c5:9e:d3:d1:c1:42:ec:83:17:a0:bc:b2:72:a3:c7:49:43:
31:c1:34:29:0f:87:af:4b:10:a6:4e:b5:13:ca:52:23:08:51:
6f:cc:b6:65:45:3b:95:61:ff:c0:25:f8:35:4d:29:8e:1e:a0:
48:eb:ce:1f:a9:06:a6:22:e6:14:c5:51:dd:e3:a6:a8:6f:55:
9c:9e:d1:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:14:50 2025 by rpki-client