Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/1afe53-f1b8-4315-ab1c-f474f7bd3531/1/A3hitGCMefRQKV7FyAx8etbf4qI.mft
File: A3hitGCMefRQKV7FyAx8etbf4qI.mft (raw, json)
Hash identifier: AZzW4vZkH0oKVQrzUGachsShyOylR83NkzkzCq9F2JU=
Subject key identifier: 0A:AC:92:2E:61:68:DF:95:9F:A4:F9:FB:52:3A:9F:C3:14:0C:63:0A
Authority key identifier: 03:78:62:B4:60:8C:79:F4:50:29:5E:C5:C8:0C:7C:7A:D6:DF:E2:A2
Certificate issuer: /CN=037862b4608c79f450295ec5c80c7c7ad6dfe2a2
Certificate serial: 0199FF597941D90AC702B1F062AC02228AE9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A3hitGCMefRQKV7FyAx8etbf4qI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/1afe53-f1b8-4315-ab1c-f474f7bd3531/1/A3hitGCMefRQKV7FyAx8etbf4qI.mft
Manifest number: 11F4
Signing time: Mon 20 Oct 2025 02:01:17 +0000
Manifest this update: Mon 20 Oct 2025 02:01:17 +0000
Manifest next update: Tue 21 Oct 2025 02:01:17 +0000
Files and hashes: 1: A3hitGCMefRQKV7FyAx8etbf4qI.crl (hash: qiNBDOxCYZ6NbxcSXKXFoHpFXJw/LWbEku8gUb9zIiw=)
2: H1OMOC2BAR_5642Cu7ZwMViudi8.roa (hash: XWP0BQbCva9Xp/f//R3LpuOJ9bWFeCg7RqrDman+FAE=)
3: _KO8Oi7vtPgAowOISHE5epxFK5Q.roa (hash: 8164lOA7eSdWjoo8q/K2tQc7tm9W3hWFjEkyCggGOH4=)
4: pg2Uo1mGaRZ4g8oAbIXuXT68ouw.roa (hash: dY7d7wlBY9scutfRZI+Jc0/ht66poZjZN1QodpAABEg=)
5: rS4RgydKxGdwOWf1j4StfouO-tE.roa (hash: sFUBBhbDyvVoCqaYLXicDjVpE7stEZC/MmSdQhndwec=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/1afe53-f1b8-4315-ab1c-f474f7bd3531/1/A3hitGCMefRQKV7FyAx8etbf4qI.crl
rsync://rpki.ripe.net/repository/DEFAULT/b9/1afe53-f1b8-4315-ab1c-f474f7bd3531/1/A3hitGCMefRQKV7FyAx8etbf4qI.mft
rsync://rpki.ripe.net/repository/DEFAULT/A3hitGCMefRQKV7FyAx8etbf4qI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 02:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:ff:59:79:41:d9:0a:c7:02:b1:f0:62:ac:02:22:8a:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=037862b4608c79f450295ec5c80c7c7ad6dfe2a2
Validity
Not Before: Oct 20 02:01:17 2025 GMT
Not After : Oct 21 02:01:17 2025 GMT
Subject: CN=0aac922e6168df959fa4f9fb523a9fc3140c630a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:67:50:6c:c3:d4:ed:99:af:71:31:da:20:43:
7d:32:ce:de:46:af:72:48:36:64:c2:7f:14:6a:c3:
4d:a4:24:85:35:99:d5:a4:18:48:64:51:70:d0:42:
91:b6:3f:c9:5f:79:30:3b:4c:ce:39:f9:64:c0:dc:
6c:25:58:d7:bc:fe:b2:e2:16:77:d8:70:ff:e6:56:
de:cb:62:82:3b:0a:59:5f:f6:b1:9e:90:db:7e:0f:
d9:9d:aa:61:9c:d3:9d:d7:3b:72:4a:3d:e6:ba:7d:
d6:22:5b:ba:1c:c9:43:9f:5d:67:7f:4c:92:75:9b:
ab:5a:c9:8d:58:c8:e8:f2:7a:1e:dd:e2:eb:4c:1e:
d1:64:4f:4b:02:bb:9b:c3:d1:cb:51:cd:ec:6a:3d:
bd:cf:36:1c:6d:d9:5c:00:29:34:3f:cb:7c:63:df:
00:c5:59:67:d4:9a:f5:00:23:b7:d6:57:c8:5d:1a:
d6:dc:52:75:b4:21:a5:d8:8b:af:19:c2:ae:a3:aa:
6a:6e:33:bc:67:2e:0f:99:99:9c:81:36:b2:d7:2e:
6e:d6:ea:c2:40:f6:f9:6d:4d:8c:18:4c:df:b9:e6:
0a:f1:44:de:61:c3:92:7b:af:2b:06:d3:39:19:89:
0b:5d:30:ff:60:57:9f:fb:7f:c5:b9:69:39:1d:c3:
04:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:AC:92:2E:61:68:DF:95:9F:A4:F9:FB:52:3A:9F:C3:14:0C:63:0A
X509v3 Authority Key Identifier:
keyid:03:78:62:B4:60:8C:79:F4:50:29:5E:C5:C8:0C:7C:7A:D6:DF:E2:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A3hitGCMefRQKV7FyAx8etbf4qI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/1afe53-f1b8-4315-ab1c-f474f7bd3531/1/A3hitGCMefRQKV7FyAx8etbf4qI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/1afe53-f1b8-4315-ab1c-f474f7bd3531/1/A3hitGCMefRQKV7FyAx8etbf4qI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:65:13:33:8f:69:aa:d0:8e:bd:7f:4d:0b:74:03:76:e9:9c:
f0:63:b6:55:cf:25:71:c6:92:0d:82:6e:a5:bc:d8:8b:97:a1:
18:1b:bc:3e:bf:cb:3b:53:92:20:6f:95:ae:9f:d4:36:77:61:
85:b1:f0:ab:2d:5f:de:0f:e8:e0:f7:7e:6c:4b:e8:ea:88:8f:
63:79:56:7b:77:8d:6e:c0:e0:4b:f5:91:bd:df:75:eb:ed:a2:
e9:0b:fc:7c:f2:f9:15:c9:8c:da:43:56:23:61:36:c4:88:c9:
14:81:9d:fb:94:d7:3b:7d:00:0b:ff:35:89:08:b7:2a:a2:d8:
b6:74:2e:f6:2c:4a:97:39:fd:4b:d5:c5:21:3e:e2:d4:88:29:
4b:d8:30:6f:7e:97:1c:31:1f:1d:43:2f:01:36:f9:38:6d:85:
31:6a:68:cc:b1:8b:fe:a8:b1:22:19:8f:7d:af:42:72:ab:4c:
e0:1e:5b:bc:81:54:bc:70:31:c4:89:d0:5e:57:d8:f3:04:87:
a1:c8:cb:d9:ea:bb:e7:3e:c8:44:68:38:4f:f0:02:31:e3:fa:
6c:f3:60:5e:9a:35:61:cc:30:1d:e8:7b:9a:db:2f:bb:72:af:
3c:14:c1:a8:b7:19:c0:13:1b:60:2c:db:1d:c4:e7:11:09:60:
8d:6e:62:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 12:08:34 2025 by rpki-client