Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/b7f5cc-53ab-45a8-aad6-f5116bc11067/1/Rcy76zs3q8oa-qTnkXdme1zY56Y.mft
File: Rcy76zs3q8oa-qTnkXdme1zY56Y.mft (raw, json)
Hash identifier: voZd31N99/bwJjGYj9Gl99prJC6qzYG8zS/fF3ygKA8=
Subject key identifier: 85:6D:49:03:14:F9:58:7A:00:09:41:D9:E0:A3:5E:92:25:96:62:B6
Authority key identifier: 45:CC:BB:EB:3B:37:AB:CA:1A:FA:A4:E7:91:77:66:7B:5C:D8:E7:A6
Certificate issuer: /CN=45ccbbeb3b37abca1afaa4e79177667b5cd8e7a6
Certificate serial: 019828234347AD6AEAC70DD48586DD65D04D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Rcy76zs3q8oa-qTnkXdme1zY56Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/b7f5cc-53ab-45a8-aad6-f5116bc11067/1/Rcy76zs3q8oa-qTnkXdme1zY56Y.mft
Manifest number: 4A
Signing time: Sun 20 Jul 2025 14:00:56 +0000
Manifest this update: Sun 20 Jul 2025 14:00:56 +0000
Manifest next update: Mon 21 Jul 2025 14:00:56 +0000
Files and hashes: 1: Rcy76zs3q8oa-qTnkXdme1zY56Y.crl (hash: hq/3WIiJOIEaLg9ZJN4TwEcUkwiUxcQ4mH1XTF3bkxw=)
2: S8TepbiQXeRCqnwRb_Kf4gbokA4.roa (hash: Z/Vh03WpNWn3U5M6zjyjL69BpjSHNYWSMdO+UDP54Q8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/b7f5cc-53ab-45a8-aad6-f5116bc11067/1/Rcy76zs3q8oa-qTnkXdme1zY56Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/b7f5cc-53ab-45a8-aad6-f5116bc11067/1/Rcy76zs3q8oa-qTnkXdme1zY56Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/Rcy76zs3q8oa-qTnkXdme1zY56Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Jul 2025 13:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:28:23:43:47:ad:6a:ea:c7:0d:d4:85:86:dd:65:d0:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=45ccbbeb3b37abca1afaa4e79177667b5cd8e7a6
Validity
Not Before: Jul 20 14:00:56 2025 GMT
Not After : Jul 21 14:00:56 2025 GMT
Subject: CN=856d490314f9587a000941d9e0a35e92259662b6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:17:f4:35:b8:2d:71:95:09:14:81:40:00:a2:
01:e4:46:98:6a:ea:ef:bb:14:23:cd:07:e4:35:5b:
5a:b0:fe:3e:4f:05:4f:6b:46:02:7a:64:76:49:14:
05:19:f3:08:29:87:b2:20:68:ab:0b:54:48:37:09:
de:ea:7f:e1:70:bf:e3:18:78:22:5e:d2:3e:66:c5:
e7:c7:51:64:ca:51:68:85:29:58:57:da:05:4e:57:
ec:1b:a3:2f:a2:5d:f8:2e:4b:8b:cf:fb:01:00:f3:
c3:d2:f0:c0:29:28:43:47:4f:d9:07:30:13:37:d4:
7d:6c:87:85:7a:14:db:27:75:b4:2c:0d:60:41:b4:
46:22:84:cb:20:0b:ba:24:f1:76:a1:3a:4d:f6:88:
33:e6:d0:7a:10:7d:6b:08:7c:d1:9e:63:bf:3f:b3:
60:10:09:89:c7:b7:46:ee:df:34:24:d8:dc:ca:55:
07:57:88:b4:85:35:b0:f8:ac:e2:69:1c:13:db:94:
03:e1:9e:a8:8c:07:84:89:5c:17:b5:17:f6:e7:62:
35:87:54:d5:ca:2c:7e:42:f1:98:ca:65:ed:68:dd:
fd:60:5f:66:00:53:19:b3:31:5c:3f:fc:e5:ee:88:
08:0b:e0:02:64:13:3e:75:a4:5e:93:a5:f2:61:90:
3a:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:6D:49:03:14:F9:58:7A:00:09:41:D9:E0:A3:5E:92:25:96:62:B6
X509v3 Authority Key Identifier:
keyid:45:CC:BB:EB:3B:37:AB:CA:1A:FA:A4:E7:91:77:66:7B:5C:D8:E7:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Rcy76zs3q8oa-qTnkXdme1zY56Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/b7f5cc-53ab-45a8-aad6-f5116bc11067/1/Rcy76zs3q8oa-qTnkXdme1zY56Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/b7f5cc-53ab-45a8-aad6-f5116bc11067/1/Rcy76zs3q8oa-qTnkXdme1zY56Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:f6:9c:e0:19:f1:b2:39:b4:07:09:09:30:91:af:d4:4b:d8:
83:7d:f5:0a:58:47:44:33:ae:17:b6:1a:a4:b4:8e:ab:ae:18:
59:7b:2a:f5:04:58:a4:25:bb:bb:20:6f:b9:9e:10:78:85:07:
eb:a1:f4:71:38:a8:9e:0e:9e:2d:25:05:39:9a:47:41:11:5f:
68:76:e9:64:c0:31:d2:d1:df:4a:d9:84:2f:bf:9a:63:f2:19:
76:c7:db:97:42:13:6d:b9:6b:e4:9f:62:f8:f7:db:81:49:da:
51:04:6a:69:1f:de:9d:20:8a:c9:48:ba:dc:71:cc:44:f2:95:
ce:bc:3e:d4:b5:64:31:ec:fe:12:ce:e1:2c:9e:ec:11:da:b3:
b2:47:da:5d:60:a2:85:1c:6a:01:4f:d5:f6:88:71:55:ae:21:
6e:ef:c8:a8:5c:c2:9d:73:76:e2:d0:e9:7b:64:eb:92:0c:77:
9d:1a:c9:28:56:00:49:b5:6b:fd:28:86:08:bb:57:05:13:4c:
13:9a:fb:d7:7e:66:6d:55:1d:2d:66:42:d9:03:c1:2e:cf:2b:
25:15:a1:f0:d5:5f:ac:ee:d7:e2:8d:3e:d9:eb:50:7b:fd:ac:
5d:51:a8:30:bd:ad:63:08:2d:c8:2d:a0:33:8d:32:e0:9a:4d:
8b:71:22:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 20:21:22 2025 by rpki-client