Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/bec783-5b48-4938-87e7-7371b7d1a107/1/A2G_1FDhLplUBKROs3ovnkK_4Hw.mft
File: A2G_1FDhLplUBKROs3ovnkK_4Hw.mft (raw, json)
Hash identifier: DK/bn9dfeUDjFVnqg7QgdVR9MWGTIyjOvymrj8057vg=
Subject key identifier: 49:8C:82:D0:0E:99:62:36:80:4A:A0:94:35:35:B7:CF:D2:00:3C:2B
Authority key identifier: 03:61:BF:D4:50:E1:2E:99:54:04:A4:4E:B3:7A:2F:9E:42:BF:E0:7C
Certificate issuer: /CN=0361bfd450e12e995404a44eb37a2f9e42bfe07c
Certificate serial: 0199FBEB8638D2EC54550D8E83781107AC27
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A2G_1FDhLplUBKROs3ovnkK_4Hw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/bec783-5b48-4938-87e7-7371b7d1a107/1/A2G_1FDhLplUBKROs3ovnkK_4Hw.mft
Manifest number: 0363
Signing time: Sun 19 Oct 2025 10:02:20 +0000
Manifest this update: Sun 19 Oct 2025 10:02:20 +0000
Manifest next update: Mon 20 Oct 2025 10:02:20 +0000
Files and hashes: 1: A2G_1FDhLplUBKROs3ovnkK_4Hw.crl (hash: 2lRk3d24d9xvXlfIUoLU6ajGGUdhP8m4FJgvv3EGUVI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9b/bec783-5b48-4938-87e7-7371b7d1a107/1/A2G_1FDhLplUBKROs3ovnkK_4Hw.crl
rsync://rpki.ripe.net/repository/DEFAULT/9b/bec783-5b48-4938-87e7-7371b7d1a107/1/A2G_1FDhLplUBKROs3ovnkK_4Hw.mft
rsync://rpki.ripe.net/repository/DEFAULT/A2G_1FDhLplUBKROs3ovnkK_4Hw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:eb:86:38:d2:ec:54:55:0d:8e:83:78:11:07:ac:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0361bfd450e12e995404a44eb37a2f9e42bfe07c
Validity
Not Before: Oct 19 10:02:20 2025 GMT
Not After : Oct 20 10:02:20 2025 GMT
Subject: CN=498c82d00e996236804aa0943535b7cfd2003c2b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:40:15:ff:3b:90:13:c6:f9:50:53:9e:eb:16:
e0:b9:01:2f:44:94:30:a8:d4:88:72:64:77:e8:ca:
13:d4:de:86:6c:28:7f:2a:b0:54:05:08:36:94:f6:
4c:38:5c:8b:ee:4e:35:f7:26:f0:ec:af:74:c3:e3:
56:2b:f7:2e:cd:02:81:4b:c8:0a:85:ca:36:71:1c:
08:1f:a9:55:76:0f:9f:53:a0:93:89:c6:4e:c2:57:
10:7a:f9:3b:bc:0b:78:a4:c9:be:de:ca:34:be:a1:
24:f6:dd:ac:2d:f5:cf:c0:1d:9b:bf:4a:52:1e:f5:
f1:d2:41:1a:b3:80:20:d5:4b:1b:00:1f:80:6f:8a:
41:b5:c4:aa:23:e7:57:b5:75:01:02:23:f2:17:01:
37:bf:84:06:e9:c9:61:9a:5e:6a:f0:5c:35:2a:31:
63:11:e5:c7:3b:e1:2a:2f:57:5b:20:f5:67:f0:c8:
c0:51:7c:42:8f:b4:d9:87:d1:3c:d2:0f:01:1a:71:
16:f7:d3:fc:2c:30:28:be:da:a9:49:db:05:d5:c5:
bc:18:fb:e1:a0:1c:8c:e9:08:2a:25:45:74:f9:0b:
01:ba:ac:39:09:6f:45:36:0e:04:81:46:a3:70:72:
eb:1b:f1:83:22:10:f2:d5:79:a8:dc:5b:cd:8f:5f:
16:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:8C:82:D0:0E:99:62:36:80:4A:A0:94:35:35:B7:CF:D2:00:3C:2B
X509v3 Authority Key Identifier:
keyid:03:61:BF:D4:50:E1:2E:99:54:04:A4:4E:B3:7A:2F:9E:42:BF:E0:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A2G_1FDhLplUBKROs3ovnkK_4Hw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/bec783-5b48-4938-87e7-7371b7d1a107/1/A2G_1FDhLplUBKROs3ovnkK_4Hw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/bec783-5b48-4938-87e7-7371b7d1a107/1/A2G_1FDhLplUBKROs3ovnkK_4Hw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:46:4f:37:8c:1d:d2:b7:45:6f:7b:c2:22:3a:b8:78:84:57:
f9:25:f4:63:f6:47:4e:6d:86:b4:77:fb:c9:2b:ec:87:0a:94:
75:c6:8b:9e:a1:70:e3:90:d9:19:d2:96:0e:39:bd:44:c9:4a:
c8:ed:5b:f7:7d:ca:18:cf:e1:d6:be:d6:f7:1c:75:4f:00:bc:
3d:7b:2b:22:ec:fd:e9:5d:47:a4:8a:b7:b8:72:88:f3:75:bc:
a1:41:79:39:0e:83:dc:10:ab:6b:3b:3d:fd:eb:22:f7:7e:8c:
0c:be:51:83:ba:80:e2:14:f3:19:af:ee:1f:60:8f:eb:0d:0f:
75:16:44:60:20:a8:fb:0a:58:08:4e:0b:25:98:1e:1a:c6:e1:
3b:1b:d9:65:cb:11:03:5a:70:6c:6b:71:5f:48:4a:45:ea:16:
68:f8:27:6e:5e:d6:76:33:4a:86:16:8a:8b:a0:99:82:27:a7:
fb:c0:ba:97:5f:d4:c0:9d:ac:db:da:bd:7f:48:92:35:7e:e2:
94:d8:b7:7f:0a:28:d1:46:6c:2f:16:dc:d9:e0:bf:88:1f:5c:
80:17:c6:e0:a1:e6:46:05:53:5b:4d:6a:85:3b:80:4c:43:61:
9f:82:89:44:37:c7:69:a2:82:07:f2:d0:28:ec:c2:c8:18:84:
d9:6e:eb:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:19:56 2025 by rpki-client