Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/c129ab-79a7-4bc0-9a3b-41efeace7a71/1/A5aaE8t8Nxi9NxdxJijnqxszsKU.mft
File: A5aaE8t8Nxi9NxdxJijnqxszsKU.mft (raw, json)
Hash identifier: 32yBY0PmMshdWfTiIQ87AGAnh1GesGl/tFwF4x2++cY=
Subject key identifier: 09:10:BD:B7:7E:0A:37:B7:92:EE:66:A9:02:DA:DA:D8:1E:CE:92:20
Authority key identifier: 03:96:9A:13:CB:7C:37:18:BD:37:17:71:26:28:E7:AB:1B:33:B0:A5
Certificate issuer: /CN=03969a13cb7c3718bd3717712628e7ab1b33b0a5
Certificate serial: 0198D73BAB210B7C758273B645C6EA8F6FAA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A5aaE8t8Nxi9NxdxJijnqxszsKU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/c129ab-79a7-4bc0-9a3b-41efeace7a71/1/A5aaE8t8Nxi9NxdxJijnqxszsKU.mft
Manifest number: 0A78
Signing time: Sat 23 Aug 2025 14:01:08 +0000
Manifest this update: Sat 23 Aug 2025 14:01:08 +0000
Manifest next update: Sun 24 Aug 2025 14:01:08 +0000
Files and hashes: 1: A5aaE8t8Nxi9NxdxJijnqxszsKU.crl (hash: dlmERnxaZ7KsNnPkZhhc0vCjrI4t+NMfLeFLBL6zuLA=)
2: MK6Wt26ubZnx8uPGofYFajPlEuM.roa (hash: pNoc6zxMnN0pQF1kB42eiM3UzngOuAJOl2Ggh4EWIBo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/91/c129ab-79a7-4bc0-9a3b-41efeace7a71/1/A5aaE8t8Nxi9NxdxJijnqxszsKU.crl
rsync://rpki.ripe.net/repository/DEFAULT/91/c129ab-79a7-4bc0-9a3b-41efeace7a71/1/A5aaE8t8Nxi9NxdxJijnqxszsKU.mft
rsync://rpki.ripe.net/repository/DEFAULT/A5aaE8t8Nxi9NxdxJijnqxszsKU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 14:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d7:3b:ab:21:0b:7c:75:82:73:b6:45:c6:ea:8f:6f:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=03969a13cb7c3718bd3717712628e7ab1b33b0a5
Validity
Not Before: Aug 23 14:01:08 2025 GMT
Not After : Aug 24 14:01:08 2025 GMT
Subject: CN=0910bdb77e0a37b792ee66a902dadad81ece9220
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:c3:09:48:16:8b:f0:a8:b7:c5:cc:dc:eb:be:
97:07:96:a7:47:d4:9d:be:a6:68:b4:d6:dc:c5:10:
a9:ac:81:a0:9d:82:d7:ea:7b:67:07:a1:8c:47:b6:
56:ee:46:ec:5a:26:38:de:a5:70:aa:3c:1e:78:88:
c8:b7:af:85:ec:43:33:6f:c1:d8:6c:a6:17:d8:de:
ca:e8:5a:73:70:54:f7:2b:27:ca:76:39:a5:55:44:
71:6a:51:a8:da:9b:66:e6:25:b6:66:4d:89:c6:f4:
63:5f:8f:e0:66:53:53:de:41:83:87:f8:bf:eb:c1:
ac:e8:9c:ff:f7:7e:fc:95:3c:d1:09:7b:24:57:a5:
18:5c:37:29:31:70:92:a7:86:b8:42:70:46:45:b5:
68:73:6b:67:69:11:fd:ae:45:d6:3b:d6:28:b6:94:
fe:59:bb:9c:a2:5d:f8:a1:00:fc:59:99:fb:d6:36:
5d:62:bb:55:ad:aa:31:2d:8d:3c:0b:d3:e9:2f:38:
81:83:3f:b8:2a:0a:26:08:78:21:82:4c:d2:36:0e:
93:47:38:5f:f4:9a:99:6a:c6:87:fd:08:6d:2a:fb:
3a:d2:20:c6:73:ff:93:e6:46:17:87:1d:4d:9f:0d:
30:ed:f6:46:af:aa:1b:45:25:89:d7:dd:05:3b:f2:
e5:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:10:BD:B7:7E:0A:37:B7:92:EE:66:A9:02:DA:DA:D8:1E:CE:92:20
X509v3 Authority Key Identifier:
keyid:03:96:9A:13:CB:7C:37:18:BD:37:17:71:26:28:E7:AB:1B:33:B0:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A5aaE8t8Nxi9NxdxJijnqxszsKU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/c129ab-79a7-4bc0-9a3b-41efeace7a71/1/A5aaE8t8Nxi9NxdxJijnqxszsKU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/91/c129ab-79a7-4bc0-9a3b-41efeace7a71/1/A5aaE8t8Nxi9NxdxJijnqxszsKU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
97:3d:cd:c2:c6:07:a9:36:86:38:af:e8:5d:20:dd:dc:3c:b4:
f1:98:64:92:f4:ef:4c:71:d8:a5:6f:d9:a1:86:3a:7a:4a:34:
23:d3:f1:ba:ac:dc:5b:80:b0:61:dd:70:27:47:15:a3:fd:85:
47:9f:6b:cc:05:59:e2:aa:db:ac:82:a1:89:c6:03:f6:9f:75:
66:f0:a6:db:7b:a8:80:18:ef:86:3a:1e:4d:f3:68:61:60:cb:
fc:66:83:58:88:5f:aa:01:3e:e6:f6:e9:ed:81:41:08:97:c8:
ce:6f:13:d6:7e:71:dc:a4:52:20:8c:53:d3:6a:77:99:f4:e8:
34:1f:db:d0:03:01:3e:1e:7e:cc:ba:9d:69:09:f9:33:28:c1:
30:21:f3:0f:08:88:0c:06:2b:d5:5c:69:55:73:2b:b9:3c:4e:
9f:9e:34:7b:d8:5e:58:78:3c:68:13:6f:32:4a:5e:7a:c4:76:
9d:7c:3a:f0:04:b7:57:a7:16:ef:8f:38:66:44:8a:87:38:21:
01:24:0a:81:cb:96:34:2e:02:8c:0a:1d:14:5f:09:8d:d5:72:
e1:55:3f:f6:77:df:3e:6a:8d:92:f2:e8:31:2d:0b:eb:64:de:
64:11:5f:4c:84:93:2e:25:53:ec:61:26:ce:76:dd:a1:d8:05:
e1:d6:c2:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 22:19:06 2025 by rpki-client