Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/bef6e8-8873-4529-8e72-238c6d8a4c17/1/pId4Lj9wxc0nsy9SdNDlvGLpXK8.mft
File: pId4Lj9wxc0nsy9SdNDlvGLpXK8.mft (raw, json)
Hash identifier: R7oQOnn2j8q2xnmrwpjMAo3v1OFkV5LzXAjsNGqHD+0=
Subject key identifier: B8:3F:DF:74:AB:74:64:A6:29:80:96:07:0D:7F:5C:1F:43:94:D9:4C
Authority key identifier: A4:87:78:2E:3F:70:C5:CD:27:B3:2F:52:74:D0:E5:BC:62:E9:5C:AF
Certificate issuer: /CN=a487782e3f70c5cd27b32f5274d0e5bc62e95caf
Certificate serial: 01984889598AD782A94ABC81A86BB40F746E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pId4Lj9wxc0nsy9SdNDlvGLpXK8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/bef6e8-8873-4529-8e72-238c6d8a4c17/1/pId4Lj9wxc0nsy9SdNDlvGLpXK8.mft
Manifest number: 0FF0
Signing time: Sat 26 Jul 2025 21:00:17 +0000
Manifest this update: Sat 26 Jul 2025 21:00:17 +0000
Manifest next update: Sun 27 Jul 2025 21:00:17 +0000
Files and hashes: 1: 03LlpQC3OthhaMKAkoHkTsK5DvM.roa (hash: MXfk52dc+50VpTuEktAwLc5jK+27W4bau786/NbUnKQ=)
2: FDaJnwtdKIaCGJVg6QNctNX3wpA.roa (hash: nG1/6+0MejULa30YNNdRkzBTjiM/zpm9raBFToCey7o=)
3: pId4Lj9wxc0nsy9SdNDlvGLpXK8.crl (hash: xqfPJF6qJplZImpySd9giYA63KLaHFIGUKMrGCJ0CEw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/bef6e8-8873-4529-8e72-238c6d8a4c17/1/pId4Lj9wxc0nsy9SdNDlvGLpXK8.crl
rsync://rpki.ripe.net/repository/DEFAULT/4f/bef6e8-8873-4529-8e72-238c6d8a4c17/1/pId4Lj9wxc0nsy9SdNDlvGLpXK8.mft
rsync://rpki.ripe.net/repository/DEFAULT/pId4Lj9wxc0nsy9SdNDlvGLpXK8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 20:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:48:89:59:8a:d7:82:a9:4a:bc:81:a8:6b:b4:0f:74:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a487782e3f70c5cd27b32f5274d0e5bc62e95caf
Validity
Not Before: Jul 26 21:00:17 2025 GMT
Not After : Jul 27 21:00:17 2025 GMT
Subject: CN=b83fdf74ab7464a6298096070d7f5c1f4394d94c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:10:01:84:d6:55:8d:a4:16:2c:a5:34:3f:10:
33:33:4b:20:3a:03:6b:19:f4:dc:f0:cd:63:8b:07:
60:10:32:7f:7d:79:5e:42:05:4b:c7:2a:6a:ab:cf:
f6:b1:6d:91:53:30:cb:6a:86:71:2e:5b:f8:6f:b7:
be:33:53:cc:bf:83:e9:e0:4f:8f:b1:28:1a:dd:01:
d2:63:4b:f5:f1:4c:57:42:74:fa:a2:8c:0f:da:49:
3c:b7:79:6a:0f:a6:e7:f4:bf:84:58:c4:ca:96:f8:
87:c5:ac:18:52:35:84:fe:39:47:45:ee:88:9b:fd:
30:6a:4f:00:dc:a1:bf:2d:64:72:f7:f9:2a:cc:ba:
d1:28:9a:14:f0:bb:67:cc:89:eb:14:4f:cd:9a:2b:
18:ab:e6:df:e4:b8:ed:3c:49:d7:14:cc:d3:65:38:
fe:8b:42:4c:0d:82:f2:8a:5c:7a:ed:14:f5:78:20:
ad:fc:f1:1f:97:60:98:9a:62:33:e0:c0:e1:d3:45:
3b:a2:69:d9:6c:d2:a3:9c:e0:7b:0a:8d:be:fc:a0:
18:e8:5d:e0:d4:ba:98:5f:74:f0:ab:41:52:ee:bd:
10:37:28:87:8b:76:b0:ab:bc:ff:bc:2b:d3:24:4f:
3a:e0:71:d5:11:71:5b:87:79:88:a1:42:3a:ef:23:
28:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:3F:DF:74:AB:74:64:A6:29:80:96:07:0D:7F:5C:1F:43:94:D9:4C
X509v3 Authority Key Identifier:
keyid:A4:87:78:2E:3F:70:C5:CD:27:B3:2F:52:74:D0:E5:BC:62:E9:5C:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pId4Lj9wxc0nsy9SdNDlvGLpXK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/bef6e8-8873-4529-8e72-238c6d8a4c17/1/pId4Lj9wxc0nsy9SdNDlvGLpXK8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/bef6e8-8873-4529-8e72-238c6d8a4c17/1/pId4Lj9wxc0nsy9SdNDlvGLpXK8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:6f:a8:fd:34:6f:f2:f5:68:c1:e4:0d:64:1d:0d:b7:2f:03:
44:67:02:2e:1c:c1:4b:ab:ba:21:b0:ee:3a:c6:a8:1c:fd:c0:
45:7d:62:8b:7d:18:f9:29:0e:7a:de:af:09:5e:8e:82:9e:d5:
f0:9e:00:fa:4c:a3:c5:21:c6:b7:84:a1:58:83:d7:13:e3:8c:
28:d4:5c:b9:16:30:8f:15:00:2e:3b:25:a4:fd:c2:88:fb:c8:
7f:c9:36:41:c9:38:dc:ea:69:4c:ee:40:0f:55:1d:d4:75:9c:
8d:b5:c8:6d:19:f4:8f:90:e9:41:33:a6:bb:d9:e8:7f:af:26:
90:51:e7:c2:51:f5:67:60:87:8e:1f:29:91:71:64:72:9d:ff:
5b:e7:77:e6:62:1b:00:8a:2e:d8:81:e3:a7:36:f5:ca:f4:2c:
dc:ea:a6:ab:07:45:3a:64:27:dd:57:80:1d:c2:a0:4d:85:0b:
42:cf:51:33:57:35:67:f4:db:ea:d4:f5:a7:2b:3f:6a:11:d0:
dc:bd:8e:df:d5:0c:cf:92:47:98:ea:6b:c8:49:ea:61:a6:29:
e9:6a:bb:0c:04:a3:7c:ab:9c:4a:1d:73:95:e6:c6:4b:f5:d1:
e8:9b:ae:f0:6b:00:07:1b:bc:f3:87:e8:ec:26:e6:5b:a3:b5:
cf:58:54:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 02:28:19 2025 by rpki-client