Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/98a8b9-8e99-4db3-b061-e9230e588626/1/rLwtpPrHe7qtKaWYa0EH9THtLj4.mft
File: rLwtpPrHe7qtKaWYa0EH9THtLj4.mft (raw, json)
Hash identifier: SMg36U6pBxrO599+i7mmj3V3tSW1h5jyP3Fy0PLCk1A=
Subject key identifier: 33:58:C8:F7:38:2E:76:86:F8:5B:E2:8D:F3:CE:11:58:6B:67:9F:55
Authority key identifier: AC:BC:2D:A4:FA:C7:7B:BA:AD:29:A5:98:6B:41:07:F5:31:ED:2E:3E
Certificate issuer: /CN=acbc2da4fac77bbaad29a5986b4107f531ed2e3e
Certificate serial: 01984852A1C9031E88F3C77E116A7153EDFE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rLwtpPrHe7qtKaWYa0EH9THtLj4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/98a8b9-8e99-4db3-b061-e9230e588626/1/rLwtpPrHe7qtKaWYa0EH9THtLj4.mft
Manifest number: 14B6
Signing time: Sat 26 Jul 2025 20:00:31 +0000
Manifest this update: Sat 26 Jul 2025 20:00:31 +0000
Manifest next update: Sun 27 Jul 2025 20:00:31 +0000
Files and hashes: 1: idTCOx8-4Tst-Qoz7K6F7H3dYN4.roa (hash: arkT/3jnb38g6YOrTZp9aafP6pWkmdDHWiUSBAjozQo=)
2: rLwtpPrHe7qtKaWYa0EH9THtLj4.crl (hash: hrof59QGQ8J47cYHpxm+o0R9bJtH3J3yPBlsCx3t6UE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/98a8b9-8e99-4db3-b061-e9230e588626/1/rLwtpPrHe7qtKaWYa0EH9THtLj4.crl
rsync://rpki.ripe.net/repository/DEFAULT/4a/98a8b9-8e99-4db3-b061-e9230e588626/1/rLwtpPrHe7qtKaWYa0EH9THtLj4.mft
rsync://rpki.ripe.net/repository/DEFAULT/rLwtpPrHe7qtKaWYa0EH9THtLj4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 20:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:48:52:a1:c9:03:1e:88:f3:c7:7e:11:6a:71:53:ed:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=acbc2da4fac77bbaad29a5986b4107f531ed2e3e
Validity
Not Before: Jul 26 20:00:31 2025 GMT
Not After : Jul 27 20:00:31 2025 GMT
Subject: CN=3358c8f7382e7686f85be28df3ce11586b679f55
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:f2:b7:f5:9c:7b:88:b5:dc:fb:2a:05:ee:e6:
46:17:a8:04:f9:5d:ac:4e:71:40:1a:a2:d5:1a:66:
35:02:5e:8a:77:8e:f4:5e:9f:b4:37:6d:c0:96:a7:
44:86:29:00:46:c8:3c:89:4f:43:35:a3:fe:8e:5b:
29:ae:4c:b4:c9:5f:2d:02:83:e1:0f:33:31:5b:03:
8a:fb:af:a9:b3:fe:be:91:c2:fb:a7:6c:87:c7:34:
5a:01:a3:97:2e:46:30:c5:ac:13:b1:d8:8a:a9:02:
32:7e:da:bc:71:6d:45:be:87:52:42:6f:5c:82:c8:
ba:fb:84:dd:76:fc:10:bf:41:da:33:b8:21:e1:da:
51:a7:95:4a:29:c7:07:bb:e6:fc:99:f7:58:8c:75:
49:ae:43:ed:b7:59:86:7a:4a:e5:12:fd:97:a0:0c:
9e:1a:6c:eb:26:df:39:f3:e1:f7:50:10:49:50:ae:
4c:f0:73:7e:b0:2f:8f:21:a6:f4:12:39:1d:3e:f2:
73:39:96:7d:03:d0:cc:ae:e7:ab:75:5b:bd:45:61:
25:92:94:3f:7d:69:3e:c7:be:97:57:f1:63:b7:ef:
5f:4c:96:5a:b6:bf:bd:d3:87:b7:b2:88:82:bd:4d:
1b:da:79:5b:0f:8d:9e:bf:70:75:2f:be:ba:76:bb:
dc:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:58:C8:F7:38:2E:76:86:F8:5B:E2:8D:F3:CE:11:58:6B:67:9F:55
X509v3 Authority Key Identifier:
keyid:AC:BC:2D:A4:FA:C7:7B:BA:AD:29:A5:98:6B:41:07:F5:31:ED:2E:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rLwtpPrHe7qtKaWYa0EH9THtLj4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/98a8b9-8e99-4db3-b061-e9230e588626/1/rLwtpPrHe7qtKaWYa0EH9THtLj4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/98a8b9-8e99-4db3-b061-e9230e588626/1/rLwtpPrHe7qtKaWYa0EH9THtLj4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
aa:a0:f7:65:05:98:6a:58:fc:1e:d9:3d:54:7d:45:1a:cc:e4:
b8:1c:b5:f2:f3:3f:e5:bc:e8:c1:c8:09:cc:49:e7:f8:f9:07:
7d:ce:88:8a:e1:a1:e8:e6:c3:31:5e:ec:23:f5:d2:cf:a0:fc:
9f:05:d0:c3:ed:38:0c:de:42:59:b7:c9:9d:0c:e3:24:ba:d4:
c8:db:62:4d:e3:ed:da:37:89:a9:9a:48:d3:99:df:6c:1d:83:
e1:cd:92:2b:92:0f:46:65:0d:71:b7:66:3a:98:37:85:5b:1c:
34:48:4b:76:93:08:ff:6b:59:95:f6:73:c5:9c:ab:00:b7:45:
2d:f2:8b:56:f5:c5:37:02:0f:fc:8f:8a:ce:1e:8b:59:82:0c:
5c:d5:ce:b2:26:9f:1e:5b:00:08:b2:d7:56:f9:82:95:31:90:
97:5f:6f:52:7d:63:c0:7b:3b:2d:0f:38:55:cd:ab:74:cd:24:
a3:aa:08:4a:12:84:c4:65:d4:db:10:a1:ce:13:77:cd:e7:b4:
50:61:b6:ef:5d:1d:74:2b:cf:9c:5c:90:5b:13:d3:7c:a5:a0:
46:41:65:86:1c:5a:b6:fb:31:e7:fc:72:6b:39:d1:5f:5d:f3:
cc:3c:7e:21:b2:62:42:d2:e9:52:cc:2f:78:5d:16:9f:7e:2b:
b6:7c:d4:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 01:40:57 2025 by rpki-client