Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/5562a1-e1a4-4174-9918-baa05c8190de/1/_u3yFAZ0rm_z5GRWDElWq24hre4.mft
File: _u3yFAZ0rm_z5GRWDElWq24hre4.mft (raw, json)
Hash identifier: EibmLqaMWhyGM6mF/YcrvC677bOtzx7LzAeeLwYk3R4=
Subject key identifier: A8:81:C1:FC:0B:BD:83:EF:86:11:35:6B:0A:C0:B3:9B:E3:08:F0:FB
Authority key identifier: FE:ED:F2:14:06:74:AE:6F:F3:E4:64:56:0C:49:56:AB:6E:21:AD:EE
Certificate issuer: /CN=feedf2140674ae6ff3e464560c4956ab6e21adee
Certificate serial: 019848893A01F88BF79A13A0E0E62FC22345
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_u3yFAZ0rm_z5GRWDElWq24hre4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/5562a1-e1a4-4174-9918-baa05c8190de/1/_u3yFAZ0rm_z5GRWDElWq24hre4.mft
Manifest number: 0A4B
Signing time: Sat 26 Jul 2025 21:00:09 +0000
Manifest this update: Sat 26 Jul 2025 21:00:09 +0000
Manifest next update: Sun 27 Jul 2025 21:00:09 +0000
Files and hashes: 1: M58q90VZFeP3jvyPYnq7UDFhR3E.roa (hash: pfDDAToaRStBIBYW01WrjbiSm0zCrXjT/V6YwQttWeY=)
2: _u3yFAZ0rm_z5GRWDElWq24hre4.crl (hash: mE2pU/9p9y4S/oTkYTy7kWLEp6A482jdXgZx/kdsIWU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/94/5562a1-e1a4-4174-9918-baa05c8190de/1/_u3yFAZ0rm_z5GRWDElWq24hre4.crl
rsync://rpki.ripe.net/repository/DEFAULT/94/5562a1-e1a4-4174-9918-baa05c8190de/1/_u3yFAZ0rm_z5GRWDElWq24hre4.mft
rsync://rpki.ripe.net/repository/DEFAULT/_u3yFAZ0rm_z5GRWDElWq24hre4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 20:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:48:89:3a:01:f8:8b:f7:9a:13:a0:e0:e6:2f:c2:23:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=feedf2140674ae6ff3e464560c4956ab6e21adee
Validity
Not Before: Jul 26 21:00:09 2025 GMT
Not After : Jul 27 21:00:09 2025 GMT
Subject: CN=a881c1fc0bbd83ef8611356b0ac0b39be308f0fb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:9c:4e:61:9f:e8:60:e4:89:f2:56:b3:e2:ea:
e0:41:a2:37:15:c9:b7:a3:f3:9f:f0:cf:9e:32:5e:
ed:e2:2c:6c:e4:32:c0:eb:c1:dd:6d:33:23:a7:ed:
0b:a0:16:cb:e2:d9:c8:6e:3b:a6:99:a7:a5:ab:45:
90:96:5e:c4:ce:1c:19:8a:87:ff:71:53:13:0f:42:
02:ca:30:4d:11:ec:fc:a1:29:22:f5:c0:91:89:9b:
e4:9d:8d:fb:ad:e9:74:30:01:c4:b2:ac:1e:af:bf:
65:e3:52:20:dc:3e:8d:5f:d3:0c:46:59:1e:a3:d9:
67:ac:27:fc:4a:c8:d7:dc:c7:28:05:2b:f9:89:50:
48:f0:7e:8b:3e:11:cd:9e:38:d2:3c:7a:b7:74:2f:
b8:c1:22:38:24:c1:62:04:2c:f4:4d:30:c6:16:77:
34:6f:02:c4:e6:7b:e7:99:1b:fb:45:6d:7b:cb:d2:
c0:83:df:48:6e:92:c6:f2:0c:a2:d0:80:ee:83:e3:
a5:a6:c0:5d:6a:4f:43:cb:c1:20:43:5c:dc:28:5a:
c5:5f:8e:3a:bb:d4:81:50:49:00:22:b9:dc:2e:d1:
07:cc:bb:76:5b:6b:03:4a:54:aa:c0:c5:16:2b:df:
55:61:df:44:02:1b:da:c6:a4:5d:10:7b:47:8c:af:
94:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:81:C1:FC:0B:BD:83:EF:86:11:35:6B:0A:C0:B3:9B:E3:08:F0:FB
X509v3 Authority Key Identifier:
keyid:FE:ED:F2:14:06:74:AE:6F:F3:E4:64:56:0C:49:56:AB:6E:21:AD:EE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_u3yFAZ0rm_z5GRWDElWq24hre4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/5562a1-e1a4-4174-9918-baa05c8190de/1/_u3yFAZ0rm_z5GRWDElWq24hre4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/94/5562a1-e1a4-4174-9918-baa05c8190de/1/_u3yFAZ0rm_z5GRWDElWq24hre4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:6c:66:45:eb:16:37:76:8b:0d:01:c0:ae:68:ad:16:a2:a7:
59:03:a5:e8:c3:1a:f8:52:5d:2c:4e:96:53:ba:71:60:30:ed:
a6:cb:80:61:40:f7:6c:29:7c:4e:b9:fd:97:83:15:46:e7:59:
4b:96:60:66:4c:a9:de:96:1b:41:74:eb:0a:97:d3:d9:a4:dd:
32:21:60:ab:11:1b:28:f9:d6:05:11:e0:91:bc:04:2c:d3:9c:
a5:c7:5f:07:56:04:7a:f3:ab:dc:de:bb:18:b8:0f:16:11:6a:
f7:c3:dc:f1:73:67:41:52:e4:ff:04:56:53:49:a0:aa:43:93:
fe:e5:e8:ba:41:4f:bf:5e:fe:75:d9:e0:e5:c5:a5:33:31:d9:
7b:b4:55:a8:66:48:b0:4e:95:df:af:7f:96:fc:2e:c2:55:aa:
b4:a9:52:51:84:eb:46:87:ed:5e:1f:10:37:4c:d1:de:39:ed:
6e:d2:d9:dd:0f:e3:90:33:0b:50:8a:da:6a:ac:d9:c7:e1:19:
ef:99:3b:18:fa:2c:17:ba:4a:51:04:b2:f1:60:aa:1a:5f:58:
10:87:32:e0:49:d0:b7:5b:62:27:e2:6c:e3:d9:d8:87:87:b9:
63:24:70:26:c2:7f:bc:0e:8b:56:84:9c:17:5e:04:02:71:bc:
1e:fb:f1:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 06:05:56 2025 by rpki-client