Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/a46c86-4b08-482b-92ca-84ee22a3ee5b/1/_a1h2OjBq9qFlpMOIfGCEaUXaB8.mft
File: _a1h2OjBq9qFlpMOIfGCEaUXaB8.mft (raw, json)
Hash identifier: KKDty9liYzVAqAkov5OKDzQUjMrrOgd9cajje8wbjEs=
Subject key identifier: 8C:65:31:2F:23:21:E7:D3:BE:06:CD:45:61:A6:87:F7:E7:F8:16:0B
Authority key identifier: FD:AD:61:D8:E8:C1:AB:DA:85:96:93:0E:21:F1:82:11:A5:17:68:1F
Certificate issuer: /CN=fdad61d8e8c1abda8596930e21f18211a517681f
Certificate serial: 0198D583FEF844380052075F00B9537EE9A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_a1h2OjBq9qFlpMOIfGCEaUXaB8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/a46c86-4b08-482b-92ca-84ee22a3ee5b/1/_a1h2OjBq9qFlpMOIfGCEaUXaB8.mft
Manifest number: 157A
Signing time: Sat 23 Aug 2025 06:00:54 +0000
Manifest this update: Sat 23 Aug 2025 06:00:54 +0000
Manifest next update: Sun 24 Aug 2025 06:00:54 +0000
Files and hashes: 1: Fcl_aJsJt4KiIjhLtFxpQAZ--TI.roa (hash: aS0+JitqaJojivrvqxvVApMU+OsS1deS84dQZzA8Tnc=)
2: YaQeUaPm7DT5i6DIJSP2oPk6asc.roa (hash: Xe3hwh1S9IdquQYZSTUC+SBDReDUDM3Us/vWljHz8KQ=)
3: _a1h2OjBq9qFlpMOIfGCEaUXaB8.crl (hash: 6LmYE7XqhSjoymzWrf3eRGiv4vO84mA92krGghmYxUo=)
4: b3VRvUBoZO6M6gjGueykiziKPRc.roa (hash: VBIsT3fCceZgm7iHJXEBP5n/OLHn0+1WoqHHXWi6Cy8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/a46c86-4b08-482b-92ca-84ee22a3ee5b/1/_a1h2OjBq9qFlpMOIfGCEaUXaB8.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/a46c86-4b08-482b-92ca-84ee22a3ee5b/1/_a1h2OjBq9qFlpMOIfGCEaUXaB8.mft
rsync://rpki.ripe.net/repository/DEFAULT/_a1h2OjBq9qFlpMOIfGCEaUXaB8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:83:fe:f8:44:38:00:52:07:5f:00:b9:53:7e:e9:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fdad61d8e8c1abda8596930e21f18211a517681f
Validity
Not Before: Aug 23 06:00:54 2025 GMT
Not After : Aug 24 06:00:54 2025 GMT
Subject: CN=8c65312f2321e7d3be06cd4561a687f7e7f8160b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:fc:79:d4:d3:51:0d:ef:cc:82:bc:a9:63:72:
13:f1:21:92:a5:01:db:c4:16:d2:55:fb:2a:5b:3a:
6a:4e:7b:17:3e:9d:58:13:27:16:6f:c0:5e:d2:5a:
f0:c6:b6:81:e2:3e:3b:66:03:f4:4d:cb:56:42:b8:
eb:a1:de:6b:eb:16:ca:6f:5a:b1:09:46:3d:28:5c:
c5:f9:41:53:38:d0:96:df:7b:17:3f:23:2e:49:0c:
87:5d:7e:4e:14:5e:8b:01:65:01:cb:3d:65:8b:d3:
b7:5d:17:ce:27:41:77:3b:cf:d0:b8:eb:7e:af:f8:
96:8b:2c:eb:9d:c7:9b:e1:c3:5a:4a:ed:14:6f:cc:
5f:4d:97:01:41:8c:2b:67:4c:15:4b:8c:17:02:f1:
4e:11:2b:d8:b6:d7:d1:e2:92:92:54:a8:37:60:e7:
ed:44:f0:ba:cb:f8:5e:ca:39:f2:5d:0b:e7:6b:89:
d1:5f:93:67:74:55:d9:b9:6a:af:7e:0b:eb:14:a6:
19:6f:05:6a:f7:0a:3f:f0:a8:05:32:60:4e:af:c9:
37:46:08:8b:29:a1:60:46:a8:b6:60:ab:2f:c7:08:
3e:3a:d6:0c:23:36:7d:47:22:4f:42:03:ef:4f:e8:
62:c2:b0:17:38:cf:7d:59:18:fb:9a:9d:2b:31:0e:
af:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:65:31:2F:23:21:E7:D3:BE:06:CD:45:61:A6:87:F7:E7:F8:16:0B
X509v3 Authority Key Identifier:
keyid:FD:AD:61:D8:E8:C1:AB:DA:85:96:93:0E:21:F1:82:11:A5:17:68:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_a1h2OjBq9qFlpMOIfGCEaUXaB8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/a46c86-4b08-482b-92ca-84ee22a3ee5b/1/_a1h2OjBq9qFlpMOIfGCEaUXaB8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/a46c86-4b08-482b-92ca-84ee22a3ee5b/1/_a1h2OjBq9qFlpMOIfGCEaUXaB8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:48:13:d6:83:b4:5f:c1:b4:b9:30:ff:7b:30:f4:bd:35:47:
b1:42:20:d5:2c:38:d1:72:1b:62:93:98:0b:48:aa:c4:30:bb:
32:d2:bf:89:78:a1:1f:a8:02:d8:8b:7f:43:f8:89:9f:45:30:
96:58:b0:d2:d3:7a:37:d7:1e:01:f7:11:0f:09:28:f7:ae:98:
81:9a:e8:37:a3:b4:ce:11:94:5c:c9:ff:d1:a4:f5:22:ad:b6:
f1:3d:be:ac:6d:b8:71:67:ea:cb:48:b2:8d:26:27:4a:ab:ad:
fc:ea:6b:82:d1:cc:b3:b8:44:ed:64:78:2c:fb:19:1b:a2:89:
1d:34:13:eb:7b:1d:19:fd:c5:14:a8:de:35:0c:9b:fd:b2:84:
af:bb:d5:39:a5:a3:b3:9b:13:b4:b9:cd:00:8a:99:7d:80:c9:
c2:01:40:58:e1:bf:98:ac:48:92:e0:f7:da:86:7a:4f:4b:f4:
77:95:6b:f4:b3:48:d2:b8:bd:fa:93:46:a3:e4:2f:1c:6e:74:
28:1b:67:05:b1:d7:64:fd:d7:12:62:3a:c0:7b:df:e1:14:2d:
14:04:a1:24:42:1a:58:db:28:d7:48:d3:41:a4:09:e1:85:b9:
91:d0:02:4a:f3:a2:8c:f0:64:82:07:d2:20:b7:5a:b7:1b:02:
29:02:df:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:52:38 2025 by rpki-client