Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/506801-b94d-4b5d-94ab-6163b997b642/1/A4uZY8lywdegPflvrSX2jr1PoUk.mft
File: A4uZY8lywdegPflvrSX2jr1PoUk.mft (raw, json)
Hash identifier: r0gdM29zSA5Ap4KAQ+Gpe8+/xbJJxBuZ3qe4aKe+/CA=
Subject key identifier: B8:0B:E3:26:53:17:8E:B4:AC:DA:27:C2:40:7D:75:BA:A2:AE:E5:F9
Authority key identifier: 03:8B:99:63:C9:72:C1:D7:A0:3D:F9:6F:AD:25:F6:8E:BD:4F:A1:49
Certificate issuer: /CN=038b9963c972c1d7a03df96fad25f68ebd4fa149
Certificate serial: 0198D404CF3FC660102A6D6C9F895100FAC3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A4uZY8lywdegPflvrSX2jr1PoUk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/85/506801-b94d-4b5d-94ab-6163b997b642/1/A4uZY8lywdegPflvrSX2jr1PoUk.mft
Manifest number: 1649
Signing time: Fri 22 Aug 2025 23:02:21 +0000
Manifest this update: Fri 22 Aug 2025 23:02:21 +0000
Manifest next update: Sat 23 Aug 2025 23:02:21 +0000
Files and hashes: 1: 3Et5DSQTmjw5JoMUf-Wa1H5e4PY.roa (hash: FOwnE+/UGLrWULx1HSQ846yUR+XWmJ/pKo/EVwX3S1M=)
2: A4uZY8lywdegPflvrSX2jr1PoUk.crl (hash: jiFQafkdtZe8NmM6fJWEKqLfIyax1LlhFiA9rQe+9Fc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/85/506801-b94d-4b5d-94ab-6163b997b642/1/A4uZY8lywdegPflvrSX2jr1PoUk.crl
rsync://rpki.ripe.net/repository/DEFAULT/85/506801-b94d-4b5d-94ab-6163b997b642/1/A4uZY8lywdegPflvrSX2jr1PoUk.mft
rsync://rpki.ripe.net/repository/DEFAULT/A4uZY8lywdegPflvrSX2jr1PoUk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Aug 2025 23:02:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:04:cf:3f:c6:60:10:2a:6d:6c:9f:89:51:00:fa:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=038b9963c972c1d7a03df96fad25f68ebd4fa149
Validity
Not Before: Aug 22 23:02:21 2025 GMT
Not After : Aug 23 23:02:21 2025 GMT
Subject: CN=b80be32653178eb4acda27c2407d75baa2aee5f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:fd:95:4e:5b:5a:25:c0:57:e4:a5:4d:f2:23:
c3:13:cd:f1:21:b2:64:ee:28:de:70:ba:d6:3d:d3:
bc:bb:ca:ae:d7:e4:bc:b5:a9:32:1b:59:b7:b3:58:
ea:41:ae:07:2e:90:b4:76:27:4e:53:d1:68:20:87:
84:f2:b1:5c:96:19:e9:01:ec:82:e9:09:ba:8e:a6:
1f:a9:8e:d5:06:e1:2d:8c:2f:39:6a:a7:31:bd:ed:
43:5e:73:72:1f:fd:b2:2a:6a:22:b8:1f:ce:0a:56:
76:be:e9:02:4e:c4:71:4f:03:12:e4:0e:cc:b5:1a:
0b:c0:18:18:ca:b8:d0:4f:a3:e5:ce:c7:9d:4f:75:
e9:8b:c0:3d:85:5d:8b:7b:b1:50:a9:e2:b8:ae:b5:
cf:d3:b4:0d:56:72:b0:af:b0:fd:f9:cd:d1:8c:e7:
c8:b4:4c:80:dc:f4:62:07:ab:30:3f:a0:c3:9f:74:
ca:aa:bc:bf:3c:50:c9:03:aa:9d:b4:b3:fe:3d:11:
a8:88:8c:73:25:11:70:8e:83:03:c9:04:17:97:9c:
23:30:b3:e0:2a:ac:2c:fb:a4:68:31:7f:b3:67:2d:
46:14:3f:8c:99:3f:57:f3:f6:e8:2a:46:2f:2a:10:
08:c6:4d:3b:f2:48:f9:9d:9c:03:c6:30:b2:7e:59:
0f:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:0B:E3:26:53:17:8E:B4:AC:DA:27:C2:40:7D:75:BA:A2:AE:E5:F9
X509v3 Authority Key Identifier:
keyid:03:8B:99:63:C9:72:C1:D7:A0:3D:F9:6F:AD:25:F6:8E:BD:4F:A1:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A4uZY8lywdegPflvrSX2jr1PoUk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/506801-b94d-4b5d-94ab-6163b997b642/1/A4uZY8lywdegPflvrSX2jr1PoUk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/85/506801-b94d-4b5d-94ab-6163b997b642/1/A4uZY8lywdegPflvrSX2jr1PoUk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
af:79:b5:9c:4e:67:3f:c5:f5:48:6a:db:2a:94:93:17:e0:21:
2b:e4:39:23:49:5e:4d:f0:1e:8a:c2:4f:5c:dc:1c:7c:4b:b9:
d9:00:7c:15:fb:92:e0:b3:a9:aa:2c:20:3a:ea:78:92:40:a6:
76:6c:d0:e4:5c:f8:2b:c4:7d:ca:0b:20:9a:a0:03:27:55:72:
48:51:2d:ea:18:82:37:cb:04:31:c3:af:eb:41:c7:58:44:64:
b1:7c:11:c6:7d:f2:a5:12:00:ca:6a:e2:49:f3:5b:b2:2e:95:
81:84:92:e2:6e:a3:e4:dd:2b:cb:f0:e7:af:53:b9:b5:95:25:
52:97:67:dc:ef:fc:e3:55:d9:89:02:3c:d0:29:29:60:26:4c:
4a:8b:d0:30:44:cf:7e:e3:43:b0:76:1b:ce:40:83:2a:5b:28:
42:33:0f:af:c0:92:8b:a2:72:b9:24:ed:b9:9d:70:3f:d3:c8:
e1:3c:ac:f1:de:44:ae:c8:78:69:06:66:d8:ee:af:30:c0:bb:
9f:5e:09:01:7e:30:7c:f2:52:fb:89:71:cc:d5:93:ff:23:da:
32:d4:68:ba:fe:c6:fa:c1:8f:99:f9:d5:f6:82:6e:c3:e6:60:
d0:66:7b:5c:9e:8e:7e:0b:ed:a9:b9:56:db:6d:3f:a0:96:e6:
55:5d:d3:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:31:37 2025 by rpki-client