Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/9eb346-7b07-4108-9fb0-d7270905e923/1/A-pQioW8c6mqogOop7r5wWLm82w.mft
File: A-pQioW8c6mqogOop7r5wWLm82w.mft (raw, json)
Hash identifier: 0HLo4oAc2LWE5JTJ8//olYxAk4djIWY+0fhVE+YOtvc=
Subject key identifier: 0E:7D:A9:34:5D:E1:5E:F6:C2:5F:81:EB:0A:A7:5D:01:66:53:31:A9
Authority key identifier: 03:EA:50:8A:85:BC:73:A9:AA:A2:03:A8:A7:BA:F9:C1:62:E6:F3:6C
Certificate issuer: /CN=03ea508a85bc73a9aaa203a8a7baf9c162e6f36c
Certificate serial: 0198D58367D97443525A4DD22A1260E7C271
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A-pQioW8c6mqogOop7r5wWLm82w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/9eb346-7b07-4108-9fb0-d7270905e923/1/A-pQioW8c6mqogOop7r5wWLm82w.mft
Manifest number: 07BB
Signing time: Sat 23 Aug 2025 06:00:15 +0000
Manifest this update: Sat 23 Aug 2025 06:00:15 +0000
Manifest next update: Sun 24 Aug 2025 06:00:15 +0000
Files and hashes: 1: 2j9Y51xwRYelF6JrKcKDFxJ1u_0.roa (hash: 0/wxjfgZFvKq0jXNMFirhtTQajhUkEHAhxXEqfHBgNk=)
2: A-pQioW8c6mqogOop7r5wWLm82w.crl (hash: n9OBeSW0U8Cx8mIQ2Hr1nQnZ0QKQ2wp0RZBtTu649a4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/9eb346-7b07-4108-9fb0-d7270905e923/1/A-pQioW8c6mqogOop7r5wWLm82w.crl
rsync://rpki.ripe.net/repository/DEFAULT/bf/9eb346-7b07-4108-9fb0-d7270905e923/1/A-pQioW8c6mqogOop7r5wWLm82w.mft
rsync://rpki.ripe.net/repository/DEFAULT/A-pQioW8c6mqogOop7r5wWLm82w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:83:67:d9:74:43:52:5a:4d:d2:2a:12:60:e7:c2:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=03ea508a85bc73a9aaa203a8a7baf9c162e6f36c
Validity
Not Before: Aug 23 06:00:15 2025 GMT
Not After : Aug 24 06:00:15 2025 GMT
Subject: CN=0e7da9345de15ef6c25f81eb0aa75d01665331a9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:cf:4e:7c:a4:86:f1:36:21:88:c9:37:5d:32:
f7:ab:f1:71:65:09:ad:8b:46:4e:64:ac:51:fa:50:
b8:54:fa:93:c3:11:2b:d0:d1:fb:6b:a7:4d:9f:d9:
d1:4f:4d:d3:ae:b0:a9:2b:ef:ca:9a:1c:80:6c:00:
50:69:d3:fc:02:e2:47:1a:4f:39:dd:1b:7b:05:44:
13:18:ac:71:08:ad:dc:ef:06:e1:78:2d:5b:74:c7:
5b:a9:76:0c:f7:19:54:c0:41:ff:e5:97:46:45:85:
57:9d:2b:b2:25:12:c6:77:dc:f1:24:e1:75:d0:6a:
c0:7b:47:11:6c:60:62:e0:a6:35:fb:7b:43:1a:72:
17:0e:90:5d:4b:f0:28:97:03:24:96:e3:78:ff:25:
3a:38:05:04:a1:d1:06:b2:71:f4:92:ed:f2:50:70:
b7:24:34:ff:11:8a:70:52:bd:b9:ea:9c:7b:87:22:
75:96:44:5e:40:f9:71:99:64:4c:d0:c7:e9:b2:e3:
46:fb:cf:a6:62:e5:c5:3a:ba:26:c2:b2:66:32:e1:
2d:2e:24:07:29:4f:87:28:a4:4c:81:2e:38:b1:d5:
bd:c8:c0:97:81:24:07:70:63:51:d5:25:9b:3d:cb:
a6:99:07:30:45:7d:4e:85:03:c5:b5:9a:48:b9:b2:
cf:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:7D:A9:34:5D:E1:5E:F6:C2:5F:81:EB:0A:A7:5D:01:66:53:31:A9
X509v3 Authority Key Identifier:
keyid:03:EA:50:8A:85:BC:73:A9:AA:A2:03:A8:A7:BA:F9:C1:62:E6:F3:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A-pQioW8c6mqogOop7r5wWLm82w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/9eb346-7b07-4108-9fb0-d7270905e923/1/A-pQioW8c6mqogOop7r5wWLm82w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/9eb346-7b07-4108-9fb0-d7270905e923/1/A-pQioW8c6mqogOop7r5wWLm82w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:97:46:17:54:08:24:16:ee:cd:43:d3:22:95:e3:b4:11:00:
32:91:04:e9:7a:51:ab:cd:4e:ae:4c:ce:75:d3:02:d2:b5:a6:
df:a8:c2:0a:13:f0:a3:f8:33:93:64:e7:07:14:2c:24:a3:28:
7a:6e:f5:4b:11:6a:d2:75:e0:4f:ae:bd:80:b7:aa:f0:1e:fd:
ae:bf:d1:f1:b3:4a:b2:12:bb:c3:7a:21:8c:a5:49:84:1d:de:
e9:f5:d5:63:3c:0f:8a:e8:7a:90:68:f2:f6:a7:10:c2:53:a5:
0d:10:22:2b:bd:ce:b7:59:b3:46:58:96:38:a3:65:62:40:46:
db:de:b9:ca:a4:a7:7a:8f:43:ad:d5:a2:af:8e:ca:10:3d:36:
fd:63:fe:1b:ca:c7:b4:e3:be:8a:d0:30:8b:7f:72:76:fb:dd:
d1:f9:a6:68:0c:84:69:60:65:4e:55:de:f9:b4:d8:2e:57:9b:
08:4e:b5:47:30:62:4c:2b:1b:69:7d:dc:c2:e7:cf:3f:83:62:
35:61:bf:45:e1:62:2d:0e:d6:08:49:ff:e9:4c:9b:dc:bd:c7:
72:94:19:cf:af:5c:b2:de:6b:b7:c3:37:21:db:72:11:79:c0:
09:e3:25:d1:49:81:d5:d2:39:24:77:67:fd:59:23:5f:7f:61:
74:53:c9:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:40:06 2025 by rpki-client