
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/5ff78e-db14-4b05-9cc6-7403e13675ab/1/A3tIRJuhyuFb3iwvCG2UIY4HILs.mft
File: A3tIRJuhyuFb3iwvCG2UIY4HILs.mft (raw, json)
Hash identifier: h7M0kkBqguwb0xb2zlTGYPzu1cqKuPYnyb6dfyvx8WU=
Subject key identifier: DB:17:9F:56:FF:4C:44:57:34:D8:9D:6F:52:D9:38:50:EA:D5:AC:9E
Authority key identifier: 03:7B:48:44:9B:A1:CA:E1:5B:DE:2C:2F:08:6D:94:21:8E:07:20:BB
Certificate issuer: /CN=037b48449ba1cae15bde2c2f086d94218e0720bb
Certificate serial: 0198D583EBBFA3AF389F7612134496BB93A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A3tIRJuhyuFb3iwvCG2UIY4HILs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/5ff78e-db14-4b05-9cc6-7403e13675ab/1/A3tIRJuhyuFb3iwvCG2UIY4HILs.mft
Manifest number: 0890
Signing time: Sat 23 Aug 2025 06:00:49 +0000
Manifest this update: Sat 23 Aug 2025 06:00:49 +0000
Manifest next update: Sun 24 Aug 2025 06:00:49 +0000
Files and hashes: 1: 5cQ1B8qaCGZjX6eh03Gxbe2gyAs.roa (hash: UnXYlFiyJBM2cbEBf2cCAcTXlYLcyD51tGVhPbgsuJM=)
2: A3tIRJuhyuFb3iwvCG2UIY4HILs.crl (hash: lP44V5/qn544nyHoTCXR6zIN1IXFAyuqNCxRk78VRAQ=)
3: lVXMGaXCeYAS9UTzuCTj9xPIgOs.roa (hash: ACZLuIV4fCglmS12ajGiBEyZ0FBoWBDoJRm4zWyNSbY=)
4: m3FPA0gDGVnI8PjPCwmDJXS3am4.roa (hash: iJU0JEqNybrVIOi6Wb4fvKKuySMZyuaXFdEyadAN0OM=)
5: x-3D4SyWxTWtE8fU6h7K761mso0.roa (hash: KVo2GWCkNTOgM8bW+F4avHQXlq7DnsAvg8lQU9Oqt1E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/5ff78e-db14-4b05-9cc6-7403e13675ab/1/A3tIRJuhyuFb3iwvCG2UIY4HILs.crl
rsync://rpki.ripe.net/repository/DEFAULT/a5/5ff78e-db14-4b05-9cc6-7403e13675ab/1/A3tIRJuhyuFb3iwvCG2UIY4HILs.mft
rsync://rpki.ripe.net/repository/DEFAULT/A3tIRJuhyuFb3iwvCG2UIY4HILs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:83:eb:bf:a3:af:38:9f:76:12:13:44:96:bb:93:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=037b48449ba1cae15bde2c2f086d94218e0720bb
Validity
Not Before: Aug 23 06:00:49 2025 GMT
Not After : Aug 24 06:00:49 2025 GMT
Subject: CN=db179f56ff4c445734d89d6f52d93850ead5ac9e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:04:1b:99:03:7c:97:a9:06:7d:f6:e2:6e:bf:
02:53:b9:12:04:06:67:03:5a:55:7a:c9:10:89:a1:
d0:54:98:25:a5:72:d6:d8:48:4b:d2:eb:c3:46:b4:
41:4f:7c:80:39:9b:78:cf:dd:86:82:9d:2f:34:9b:
d9:57:c0:e6:b1:39:87:65:49:9c:ac:60:10:9f:ab:
d0:45:f5:a0:f5:ff:d4:3b:19:29:42:ee:6d:1c:80:
9f:5f:a0:33:00:db:03:54:a6:b8:66:45:57:10:9d:
ca:be:dc:1d:c8:4f:a6:1e:c1:f1:5a:22:ba:e2:35:
c9:61:6e:bd:05:36:2f:d4:9e:11:eb:86:4e:e0:83:
f8:99:c6:95:25:97:78:87:b7:99:8c:9c:b5:1a:04:
38:dc:6b:98:d2:66:fa:dd:a3:96:1e:32:58:5e:d3:
14:90:56:22:7c:e1:9a:09:ce:73:77:5e:7d:cf:7d:
88:fc:b4:b1:a9:04:56:fb:3f:d2:c6:a4:5d:50:84:
3b:c9:02:0f:79:56:2b:f1:12:00:59:52:5b:f0:29:
cd:7e:d5:db:73:08:97:15:46:c4:b1:05:8a:a3:d0:
a2:58:6a:18:e1:da:00:d6:6e:23:69:6d:26:f6:63:
ac:e0:e2:7a:6f:a2:77:cc:32:d4:db:f0:08:c8:cb:
9c:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:17:9F:56:FF:4C:44:57:34:D8:9D:6F:52:D9:38:50:EA:D5:AC:9E
X509v3 Authority Key Identifier:
keyid:03:7B:48:44:9B:A1:CA:E1:5B:DE:2C:2F:08:6D:94:21:8E:07:20:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A3tIRJuhyuFb3iwvCG2UIY4HILs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/5ff78e-db14-4b05-9cc6-7403e13675ab/1/A3tIRJuhyuFb3iwvCG2UIY4HILs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/5ff78e-db14-4b05-9cc6-7403e13675ab/1/A3tIRJuhyuFb3iwvCG2UIY4HILs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:ff:93:d8:a8:8a:60:98:f7:eb:c3:7d:17:e1:02:80:25:4a:
1c:da:77:81:91:cf:7c:42:dd:f5:78:15:58:ba:cd:87:02:3c:
45:0f:b6:42:a6:50:c8:c6:3b:99:0d:d0:21:a5:a3:f2:8b:7a:
fe:7f:1d:b0:c9:61:e2:80:54:a0:e8:92:f3:81:f4:38:5f:4e:
fc:8f:79:3e:ad:e5:00:5d:81:c3:0c:b4:8e:e5:07:17:6a:96:
a7:87:ee:61:c8:4c:4a:3c:47:f3:90:74:03:93:26:25:93:1b:
70:de:37:cd:01:f5:08:85:61:9b:9e:80:f3:c4:62:77:16:aa:
ee:1b:ad:27:90:3e:4c:94:77:b9:b1:b6:75:80:aa:5e:2b:ca:
0a:75:aa:f0:5e:3f:18:c1:15:4e:0c:13:09:16:f1:ab:53:4e:
bd:c1:83:cf:37:1b:ef:10:a0:0d:4d:c4:9c:70:b4:f7:b0:d6:
60:e0:f9:29:70:8d:bc:57:f5:28:70:aa:63:01:84:1e:ae:95:
e2:9d:27:a0:4f:37:d5:41:37:66:78:3d:ba:b0:bb:ef:f7:eb:
cf:72:a5:20:f1:5d:42:c1:74:79:7d:e7:59:de:cc:56:34:f3:
9f:67:66:c4:c9:8e:e0:13:dd:bd:fc:da:49:d3:c9:f2:37:98:
b8:6c:43:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:08:34 2025 by rpki-client