Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/73/fc763b-83e6-4bd1-b93a-f8785a58106c/1/C4-x3rCeckJbMJoUFJF9r4k771k.mft
File: C4-x3rCeckJbMJoUFJF9r4k771k.mft (raw, json)
Hash identifier: 9QNoX+OAEmWXiqnjKEvD1bcMkqeRE+zw34rdFt/V/R0=
Subject key identifier: 81:8F:5E:49:CA:20:67:E7:DB:F9:43:4E:11:5E:D1:4E:97:BD:BA:40
Authority key identifier: 0B:8F:B1:DE:B0:9E:72:42:5B:30:9A:14:14:91:7D:AF:89:3B:EF:59
Certificate issuer: /CN=0b8fb1deb09e72425b309a1414917daf893bef59
Certificate serial: 019849667D0FD824E228E99CDA19D11CD879
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C4-x3rCeckJbMJoUFJF9r4k771k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/73/fc763b-83e6-4bd1-b93a-f8785a58106c/1/C4-x3rCeckJbMJoUFJF9r4k771k.mft
Manifest number: 1602
Signing time: Sun 27 Jul 2025 01:01:50 +0000
Manifest this update: Sun 27 Jul 2025 01:01:50 +0000
Manifest next update: Mon 28 Jul 2025 01:01:50 +0000
Files and hashes: 1: C4-x3rCeckJbMJoUFJF9r4k771k.crl (hash: qVKJEtkoBYvaMkquZQRqiJfO4X014dO5MIog7cgMzI0=)
2: xbK0xWiY34_RomWctzp72CJLeyA.roa (hash: uGlhM5SP1wH5GgbXheJ7ZYAOlhLuCV1Bj19dNLN10ho=)
3: ztCPKk8w1aeaQKuLHJz_e0TSo9Y.roa (hash: eX6lgcMXGHHyxYwjBqAxjQIWBeaf2J3CyUG15tvpJ0o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/73/fc763b-83e6-4bd1-b93a-f8785a58106c/1/C4-x3rCeckJbMJoUFJF9r4k771k.crl
rsync://rpki.ripe.net/repository/DEFAULT/73/fc763b-83e6-4bd1-b93a-f8785a58106c/1/C4-x3rCeckJbMJoUFJF9r4k771k.mft
rsync://rpki.ripe.net/repository/DEFAULT/C4-x3rCeckJbMJoUFJF9r4k771k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 20:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:49:66:7d:0f:d8:24:e2:28:e9:9c:da:19:d1:1c:d8:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0b8fb1deb09e72425b309a1414917daf893bef59
Validity
Not Before: Jul 27 01:01:50 2025 GMT
Not After : Jul 28 01:01:50 2025 GMT
Subject: CN=818f5e49ca2067e7dbf9434e115ed14e97bdba40
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:88:8a:46:3b:b7:1b:51:5a:9b:c8:19:f8:87:
7d:d4:ad:76:df:4e:a7:5a:ae:ba:90:09:36:4d:08:
87:d7:bb:b9:ea:72:a3:cd:85:40:f4:46:24:c5:38:
82:e5:54:62:56:64:0a:98:ea:ac:70:5b:3f:34:5c:
82:0c:5d:60:09:a2:cc:a8:58:2e:74:2d:b7:11:7d:
d9:14:f2:2b:1f:e8:d7:5e:f4:a3:b5:e0:9e:0f:55:
0b:69:2d:0c:dc:3e:1b:2e:7b:b0:55:d2:ac:7b:5c:
e1:1b:88:dc:58:c8:84:d2:86:4a:ee:ea:06:84:45:
a8:85:6f:10:cb:0a:87:a4:18:16:1a:bc:03:55:c1:
7c:77:1e:bc:5d:c9:80:20:00:6f:2e:9d:b2:a8:2b:
3a:17:ea:5b:58:70:aa:90:3a:a4:9b:8b:13:f8:84:
8e:bc:b2:c9:04:53:dc:c5:ac:c8:b9:2a:b0:3a:31:
d8:d8:9d:6e:4d:99:ce:77:3d:9f:72:84:7f:6e:04:
3e:6e:72:97:56:10:7c:5c:e6:f0:fa:e9:ce:d8:f7:
99:0f:ab:98:d3:b1:d9:02:a1:e7:9e:99:92:4e:8b:
e9:41:ae:2e:c8:01:f0:00:0e:c2:84:c7:6b:f4:5b:
a2:91:41:23:f1:88:63:b1:e5:07:70:72:f7:c0:2d:
e0:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:8F:5E:49:CA:20:67:E7:DB:F9:43:4E:11:5E:D1:4E:97:BD:BA:40
X509v3 Authority Key Identifier:
keyid:0B:8F:B1:DE:B0:9E:72:42:5B:30:9A:14:14:91:7D:AF:89:3B:EF:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C4-x3rCeckJbMJoUFJF9r4k771k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/fc763b-83e6-4bd1-b93a-f8785a58106c/1/C4-x3rCeckJbMJoUFJF9r4k771k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/73/fc763b-83e6-4bd1-b93a-f8785a58106c/1/C4-x3rCeckJbMJoUFJF9r4k771k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:77:23:25:b4:c3:f7:42:8e:ff:77:84:31:93:52:cf:d5:66:
2d:1a:bf:80:6a:99:9e:f6:05:47:ba:d9:46:b2:61:06:96:5e:
28:4b:36:d2:aa:ee:92:9d:2c:d7:6b:fd:23:6e:2b:e0:a4:b3:
d5:6d:52:9d:0b:1b:4e:7d:01:d0:7b:e0:a0:0b:3d:e9:a4:ea:
3e:3d:3f:1a:1d:c7:71:0b:f7:ba:2c:18:76:8d:d0:f6:11:2d:
7f:cb:8d:40:78:6f:92:21:f3:ba:28:fa:a6:c6:ca:cd:20:32:
96:68:6e:02:a1:2b:c1:0a:16:d4:ed:bc:b8:1c:9c:55:a9:a0:
68:e3:9b:77:f0:0c:e4:89:cd:c7:f4:58:ae:05:31:f0:59:89:
3b:97:7d:5a:3c:96:78:b7:d8:6c:72:b9:a5:e0:6a:91:ce:4e:
64:ad:04:f8:e0:19:94:08:d6:11:1f:b1:17:cc:e3:2f:3b:cf:
2f:d9:f9:d4:3d:ae:08:22:31:c1:f5:5a:0f:3e:1d:f7:b4:d9:
48:b8:32:76:17:b2:c3:48:8b:83:57:39:ae:bd:8c:ab:fa:7c:
b9:4b:69:29:de:0c:c8:79:26:f7:77:33:71:c1:34:05:05:49:
8b:a5:18:5e:97:f6:51:22:fc:8b:9e:b2:40:55:c9:ad:0d:51:
9d:82:df:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 05:52:39 2025 by rpki-client