Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/4b9a4c-802d-4b1e-94fe-c8f56c122fec/1/I4RnTqAHoSAwrI0r5WDbIfT8C5k.mft
File: I4RnTqAHoSAwrI0r5WDbIfT8C5k.mft (raw, json)
Hash identifier: JVlVxptjgq5i8UIhUW9UBTaVpdcEP5zj9U+vetnG3Ww=
Subject key identifier: 17:22:B7:8E:6D:42:08:A6:E3:19:BD:2E:E5:C6:1C:9E:78:25:64:94
Authority key identifier: 23:84:67:4E:A0:07:A1:20:30:AC:8D:2B:E5:60:DB:21:F4:FC:0B:99
Certificate issuer: /CN=2384674ea007a12030ac8d2be560db21f4fc0b99
Certificate serial: 019848F78B334305B90D7DF0D04D75727BFE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I4RnTqAHoSAwrI0r5WDbIfT8C5k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/4b9a4c-802d-4b1e-94fe-c8f56c122fec/1/I4RnTqAHoSAwrI0r5WDbIfT8C5k.mft
Manifest number: 014B
Signing time: Sat 26 Jul 2025 23:00:39 +0000
Manifest this update: Sat 26 Jul 2025 23:00:39 +0000
Manifest next update: Sun 27 Jul 2025 23:00:39 +0000
Files and hashes: 1: I4RnTqAHoSAwrI0r5WDbIfT8C5k.crl (hash: NEK22IM/dXYa0heu2C8Zlzy2oWwwegOj4VWAWdWa+Vo=)
2: b-r28Bu4MGj-UsbsE6JV2xkR_Kg.roa (hash: CYtDxQh2JoY//+IHHkS7DA+4Jm80AdOA6Xho21YVow0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/4b9a4c-802d-4b1e-94fe-c8f56c122fec/1/I4RnTqAHoSAwrI0r5WDbIfT8C5k.crl
rsync://rpki.ripe.net/repository/DEFAULT/b0/4b9a4c-802d-4b1e-94fe-c8f56c122fec/1/I4RnTqAHoSAwrI0r5WDbIfT8C5k.mft
rsync://rpki.ripe.net/repository/DEFAULT/I4RnTqAHoSAwrI0r5WDbIfT8C5k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 23:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:48:f7:8b:33:43:05:b9:0d:7d:f0:d0:4d:75:72:7b:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2384674ea007a12030ac8d2be560db21f4fc0b99
Validity
Not Before: Jul 26 23:00:39 2025 GMT
Not After : Jul 27 23:00:39 2025 GMT
Subject: CN=1722b78e6d4208a6e319bd2ee5c61c9e78256494
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:b9:76:ff:27:4d:85:ab:3e:82:a7:72:84:74:
28:ee:1f:76:5c:04:ac:e4:62:90:85:28:e6:27:aa:
1d:b8:9c:44:56:1b:f0:4d:77:67:d3:da:e2:8d:93:
de:e0:55:2d:b5:8d:c3:96:8c:9d:8d:8e:6a:21:9a:
2d:2a:9a:69:d4:99:52:b9:b2:a4:e4:7b:2e:05:d2:
90:83:5d:53:fb:69:e9:b3:2b:2d:f7:34:6b:68:53:
f1:26:4a:54:20:b3:0c:ed:73:94:a1:b0:06:72:8a:
16:ee:23:f0:05:d3:91:78:2f:f8:8e:b3:10:06:d0:
8c:e2:3e:cc:8e:75:73:74:f3:75:1a:0e:3c:bc:48:
56:06:8c:98:ae:f8:6b:da:6c:7a:f2:69:8f:6f:90:
e7:c1:d3:b7:f9:b8:73:eb:a3:4b:82:cd:76:27:75:
00:53:6f:4c:9f:5e:90:63:23:95:84:de:cf:ae:9c:
6f:84:21:0c:ee:b5:02:6e:58:06:08:fe:19:db:dd:
49:63:7a:c0:1b:5b:b5:d1:92:28:d6:3a:1f:dc:68:
f5:d9:fa:6d:c4:fa:7d:66:e9:4b:9f:57:57:da:46:
ea:5b:f5:dc:9a:09:6e:b5:4d:d1:15:bd:ec:57:cd:
bc:ca:ea:b9:a9:7f:32:aa:2d:2e:ca:b1:bd:dc:52:
e5:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:22:B7:8E:6D:42:08:A6:E3:19:BD:2E:E5:C6:1C:9E:78:25:64:94
X509v3 Authority Key Identifier:
keyid:23:84:67:4E:A0:07:A1:20:30:AC:8D:2B:E5:60:DB:21:F4:FC:0B:99
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I4RnTqAHoSAwrI0r5WDbIfT8C5k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/4b9a4c-802d-4b1e-94fe-c8f56c122fec/1/I4RnTqAHoSAwrI0r5WDbIfT8C5k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/4b9a4c-802d-4b1e-94fe-c8f56c122fec/1/I4RnTqAHoSAwrI0r5WDbIfT8C5k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:fb:2a:48:65:34:89:aa:fa:d2:f8:61:90:11:f2:b4:db:f5:
a8:e8:a1:e2:18:7e:f5:f9:42:4d:48:67:a5:65:7e:56:4d:6d:
89:e8:2c:1b:1f:75:ce:ee:7e:a9:5c:21:a4:66:27:a0:c2:5d:
53:49:b0:db:e4:b4:1d:d6:64:82:8c:7f:92:e5:a2:bb:a3:39:
ca:0d:ec:ad:98:8c:38:6e:f5:5e:dd:42:75:d2:12:dd:e8:b9:
37:2c:65:2f:df:13:3b:45:14:bd:52:6f:6f:43:8c:e5:a7:cf:
56:8c:e0:19:88:71:20:0a:41:71:d6:14:a9:bf:25:8a:a2:9d:
15:ee:d5:a4:26:6a:72:cf:27:86:84:93:96:98:72:c8:5d:a0:
c2:4b:82:41:19:e8:3d:a7:0a:23:37:5e:9f:d8:23:e4:61:f7:
e5:e4:5d:cb:be:be:71:6b:6a:32:54:75:bd:fb:76:6f:70:c4:
ba:2a:15:ab:1d:69:e8:b3:a7:35:5f:b0:6f:49:8a:bc:d7:7a:
ed:7d:3b:42:a3:10:4d:e5:a4:96:56:8c:c9:a2:42:53:1f:7f:
74:f0:1d:70:e9:50:96:7c:5c:e1:11:46:fa:91:46:12:6a:2b:
75:c9:76:13:0e:54:58:c6:8c:4f:76:f1:8d:97:00:a2:ff:06:
dc:aa:25:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 07:47:10 2025 by rpki-client