Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/0789aa-9e73-45ee-91b6-143ff60d9991/1/RA6IwxN_ipFffaG1wDQcoYwsI0w.mft
File: RA6IwxN_ipFffaG1wDQcoYwsI0w.mft (raw, json)
Hash identifier: AtP7bppwUWxTtbAI0ldQ7OTVOAB69Yzmv4CWm758jeg=
Subject key identifier: 23:A2:90:B0:CB:6B:35:6F:BA:89:C5:61:35:1D:9D:00:95:9A:96:59
Authority key identifier: 44:0E:88:C3:13:7F:8A:91:5F:7D:A1:B5:C0:34:1C:A1:8C:2C:23:4C
Certificate issuer: /CN=440e88c3137f8a915f7da1b5c0341ca18c2c234c
Certificate serial: 01984C3012E48757B5581DB6647A5AD92AD3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RA6IwxN_ipFffaG1wDQcoYwsI0w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/0789aa-9e73-45ee-91b6-143ff60d9991/1/RA6IwxN_ipFffaG1wDQcoYwsI0w.mft
Manifest number: 0126
Signing time: Sun 27 Jul 2025 14:01:15 +0000
Manifest this update: Sun 27 Jul 2025 14:01:15 +0000
Manifest next update: Mon 28 Jul 2025 14:01:15 +0000
Files and hashes: 1: ERKKjb9maK6l2D8S98DiUvq_sHY.roa (hash: K5h5Qq2Di55EgzF5bOxkfD2fsAbyW8q02xX4iijsUmk=)
2: RA6IwxN_ipFffaG1wDQcoYwsI0w.crl (hash: XZrUlrDecoZc3OHeboe079wZwh+RxvJIL10Wudr8M2o=)
3: uC4_l-E2xjwrvlqz30Q-HpJhGxI.roa (hash: eCi9fijMSbE+YJ8x/iuJrnNqx//o/hxhFT+nJZyvJ+A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4b/0789aa-9e73-45ee-91b6-143ff60d9991/1/RA6IwxN_ipFffaG1wDQcoYwsI0w.crl
rsync://rpki.ripe.net/repository/DEFAULT/4b/0789aa-9e73-45ee-91b6-143ff60d9991/1/RA6IwxN_ipFffaG1wDQcoYwsI0w.mft
rsync://rpki.ripe.net/repository/DEFAULT/RA6IwxN_ipFffaG1wDQcoYwsI0w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 09:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4c:30:12:e4:87:57:b5:58:1d:b6:64:7a:5a:d9:2a:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=440e88c3137f8a915f7da1b5c0341ca18c2c234c
Validity
Not Before: Jul 27 14:01:15 2025 GMT
Not After : Jul 28 14:01:15 2025 GMT
Subject: CN=23a290b0cb6b356fba89c561351d9d00959a9659
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:7d:51:f9:5d:fe:e1:cd:ca:6d:f3:af:5b:35:
99:28:4a:86:0b:8a:9c:f9:e3:be:40:d3:80:d4:a2:
1e:3e:ee:c1:f0:3a:7b:6f:55:80:a9:b9:30:0d:f8:
1e:28:ae:83:7a:ed:98:12:94:86:bc:0d:e1:64:85:
97:42:dc:e8:46:1c:8a:71:94:eb:38:20:b1:9d:1a:
e5:eb:e0:b2:68:06:67:fb:0c:50:5b:75:34:37:59:
50:0f:ec:d2:10:5c:40:28:49:fe:45:43:69:d5:a7:
e5:f2:79:7a:09:3f:1d:4a:80:ad:df:be:fd:11:54:
1f:92:2b:f3:fb:1f:ae:f3:56:29:64:a1:8a:56:a5:
89:fa:60:6d:49:a0:a4:4f:a7:80:39:d2:86:c4:29:
0d:16:94:22:20:99:3f:00:bf:36:14:4a:30:cd:9d:
36:24:9a:05:dd:6f:9e:fb:5d:e7:ba:e9:d3:aa:08:
1a:2b:87:c2:4c:88:0e:0f:cc:c0:99:d2:c2:c4:50:
ad:61:1e:d6:ea:56:a4:24:90:cd:89:2e:fc:d1:b3:
44:95:14:e5:87:13:65:8d:60:2b:bb:2d:48:f6:5a:
da:8d:9a:9b:09:fa:83:f7:73:bc:6b:43:08:f5:c2:
50:03:96:79:ba:ce:db:bf:43:4a:f8:98:1c:d3:0c:
01:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:A2:90:B0:CB:6B:35:6F:BA:89:C5:61:35:1D:9D:00:95:9A:96:59
X509v3 Authority Key Identifier:
keyid:44:0E:88:C3:13:7F:8A:91:5F:7D:A1:B5:C0:34:1C:A1:8C:2C:23:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RA6IwxN_ipFffaG1wDQcoYwsI0w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/0789aa-9e73-45ee-91b6-143ff60d9991/1/RA6IwxN_ipFffaG1wDQcoYwsI0w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/0789aa-9e73-45ee-91b6-143ff60d9991/1/RA6IwxN_ipFffaG1wDQcoYwsI0w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
90:dc:7a:23:a9:54:a4:45:92:e6:21:9a:8a:f7:79:37:53:1c:
1d:1e:1a:9a:10:64:28:6f:39:5e:5d:b4:a7:9b:eb:ff:d8:d4:
09:55:aa:57:c7:80:8a:79:49:04:88:58:ac:ea:36:66:df:04:
a4:6d:d5:94:5f:bf:a2:59:3d:4a:97:ad:68:3c:8d:c3:95:b6:
dd:31:13:06:9c:ff:d7:7c:1e:ac:41:72:ef:ca:2c:e9:c8:03:
2f:86:ad:8b:be:0a:03:16:8c:94:8a:2a:ab:96:60:b4:1f:60:
9b:b3:dc:e9:01:7f:53:fa:e8:61:f4:8b:18:45:36:e1:34:87:
88:91:e0:d9:c4:fd:3d:82:46:68:74:a8:0a:3b:13:d3:09:30:
90:29:b2:be:55:f6:56:7a:6a:19:97:7e:c9:8d:11:03:c8:b0:
29:6d:17:1d:45:62:bc:c3:9f:73:10:27:f4:87:5c:16:fc:fa:
e3:15:cd:b6:d3:4d:35:57:35:97:af:9c:62:0e:8c:84:d7:9a:
ee:ce:24:d2:d2:1c:f2:07:3c:9c:fe:1e:66:c4:21:2c:b7:85:
22:6b:f5:b1:49:63:b7:ee:14:2c:b3:eb:a9:40:0b:95:4b:d6:
db:2a:7c:fe:b5:f8:64:24:c2:8b:9f:aa:18:c6:e0:06:a9:fe:
43:e5:ca:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 15:59:04 2025 by rpki-client