Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/2ed5da-85cf-449f-bd85-628b0fbcd0b6/1/A4IOlk39PSgUIK_aIM6UnmDUzEQ.mft
File: A4IOlk39PSgUIK_aIM6UnmDUzEQ.mft (raw, json)
Hash identifier: zgQST/gLJ39vZ8SD5ua+MKXimwsMu317LOMuxyEH0jE=
Subject key identifier: 15:AA:CA:04:AC:FB:2D:03:01:06:1C:82:0B:DA:21:8C:73:91:FA:4A
Authority key identifier: 03:82:0E:96:4D:FD:3D:28:14:20:AF:DA:20:CE:94:9E:60:D4:CC:44
Certificate issuer: /CN=03820e964dfd3d281420afda20ce949e60d4cc44
Certificate serial: 0198D7A936650EF707220C36798D94BB0DA0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A4IOlk39PSgUIK_aIM6UnmDUzEQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/95/2ed5da-85cf-449f-bd85-628b0fbcd0b6/1/A4IOlk39PSgUIK_aIM6UnmDUzEQ.mft
Manifest number: 164C
Signing time: Sat 23 Aug 2025 16:00:47 +0000
Manifest this update: Sat 23 Aug 2025 16:00:47 +0000
Manifest next update: Sun 24 Aug 2025 16:00:47 +0000
Files and hashes: 1: A4IOlk39PSgUIK_aIM6UnmDUzEQ.crl (hash: LsMt5Z7Ctm0/wW0H11z467U2qRxwgqmuh320c7Icpro=)
2: LXtV1SOyemLIBBZI_VMF85otBtE.roa (hash: GHDun7QlntuZhx8oP1im/VJfuudrY5drYDWrntuirXo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/95/2ed5da-85cf-449f-bd85-628b0fbcd0b6/1/A4IOlk39PSgUIK_aIM6UnmDUzEQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/95/2ed5da-85cf-449f-bd85-628b0fbcd0b6/1/A4IOlk39PSgUIK_aIM6UnmDUzEQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/A4IOlk39PSgUIK_aIM6UnmDUzEQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 12:50:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d7:a9:36:65:0e:f7:07:22:0c:36:79:8d:94:bb:0d:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=03820e964dfd3d281420afda20ce949e60d4cc44
Validity
Not Before: Aug 23 16:00:47 2025 GMT
Not After : Aug 24 16:00:47 2025 GMT
Subject: CN=15aaca04acfb2d0301061c820bda218c7391fa4a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:1f:4a:67:92:cb:a9:48:41:b5:68:6d:3f:84:
4d:d8:df:fe:2d:5f:89:52:de:98:00:97:a8:e6:06:
80:3e:78:02:fd:5c:63:cd:9f:fb:3f:12:61:94:e4:
df:35:c7:c3:c9:e5:0c:7a:95:5f:eb:0c:54:47:3e:
35:bb:01:80:5f:97:70:6b:90:38:41:97:bc:c9:9a:
56:28:ad:2d:28:aa:4b:d2:c5:50:e8:42:ef:e7:36:
6c:cc:d7:b9:6c:4c:0b:e5:77:95:12:70:c6:73:fe:
f6:c7:f0:76:e9:94:ad:a7:01:e1:c2:5a:e1:21:ef:
9b:25:5d:e1:15:e3:de:c0:e7:1f:7b:4a:83:ae:8a:
73:18:5e:95:22:cc:83:1b:88:70:11:42:21:5f:fb:
10:db:39:8d:3a:5f:40:45:36:78:e4:72:88:3f:42:
3b:44:fb:78:27:89:6b:d1:4a:f5:df:a0:59:e5:d0:
f9:22:16:db:a8:3f:13:be:60:2f:7c:5d:d8:54:90:
22:af:4f:76:3a:20:1c:f3:a9:61:d5:9a:c8:6c:4d:
86:93:2d:a1:5f:a6:c1:65:6c:bb:08:81:5a:aa:f0:
ef:ae:8e:3a:49:20:2e:2c:e5:16:04:e8:fb:db:a3:
31:b9:d5:90:69:d4:1e:ae:30:6b:07:45:2c:a2:96:
a9:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:AA:CA:04:AC:FB:2D:03:01:06:1C:82:0B:DA:21:8C:73:91:FA:4A
X509v3 Authority Key Identifier:
keyid:03:82:0E:96:4D:FD:3D:28:14:20:AF:DA:20:CE:94:9E:60:D4:CC:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A4IOlk39PSgUIK_aIM6UnmDUzEQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/2ed5da-85cf-449f-bd85-628b0fbcd0b6/1/A4IOlk39PSgUIK_aIM6UnmDUzEQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/95/2ed5da-85cf-449f-bd85-628b0fbcd0b6/1/A4IOlk39PSgUIK_aIM6UnmDUzEQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:aa:4b:7f:03:ca:73:67:32:d8:e0:23:4b:92:5c:8b:77:4e:
02:44:2f:bd:fb:b5:3e:64:e0:47:70:10:d0:b7:58:20:60:1f:
73:b9:a9:59:fc:de:8d:95:1b:07:42:1f:6a:43:9b:d4:f2:92:
dc:33:11:83:b9:e9:40:30:f0:ec:ff:d6:91:a2:13:71:9a:b0:
90:79:fc:68:c4:d1:9c:d4:3c:b2:0f:4c:13:ea:82:e6:a3:19:
b1:26:bb:10:4e:e7:f0:d1:43:f0:dc:00:90:fc:84:44:ce:07:
07:c4:f4:cf:7f:53:ce:fd:c3:48:8e:87:20:48:70:3c:4e:62:
b4:e8:92:62:c9:35:c2:c1:6c:a3:4b:91:c0:a0:b6:7d:1d:01:
bc:c5:12:26:bf:57:29:2a:5d:71:74:f6:5f:50:a4:44:8c:21:
05:34:56:06:fb:68:36:a1:b1:52:db:73:eb:dc:ef:e6:c1:96:
38:f4:ca:95:33:87:dd:57:8b:2a:1e:20:ba:e0:7d:5f:17:b8:
2f:77:3d:ec:25:81:fc:36:f9:cd:83:cc:5e:f0:83:bd:d5:8c:
50:39:b8:ee:b3:0b:73:58:0f:3c:c2:45:bc:58:44:52:6a:9f:
ce:b2:46:bc:45:3f:cf:19:64:e6:12:a4:e6:9e:dd:8f:38:09:
6f:eb:72:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 17:43:58 2025 by rpki-client