Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/2fc167-b357-4394-b4e8-c825be2813bc/1/C4TqVJ-IIRBYs0v8qwZAwwMDk8M.mft
File: C4TqVJ-IIRBYs0v8qwZAwwMDk8M.mft (raw, json)
Hash identifier: Ks77kSQNFX9wk68qF3MmzehRyxfD9lD1G8xuBHFnh4s=
Subject key identifier: 6C:36:E0:25:A5:CE:6A:74:02:E2:23:07:40:BC:2C:8A:C2:93:1C:D3
Authority key identifier: 0B:84:EA:54:9F:88:21:10:58:B3:4B:FC:AB:06:40:C3:03:03:93:C3
Certificate issuer: /CN=0b84ea549f88211058b34bfcab0640c3030393c3
Certificate serial: 019856EB7054531E2B290DB1BEE6BF20887B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C4TqVJ-IIRBYs0v8qwZAwwMDk8M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/2fc167-b357-4394-b4e8-c825be2813bc/1/C4TqVJ-IIRBYs0v8qwZAwwMDk8M.mft
Manifest number: 1608
Signing time: Tue 29 Jul 2025 16:02:06 +0000
Manifest this update: Tue 29 Jul 2025 16:02:06 +0000
Manifest next update: Wed 30 Jul 2025 16:02:06 +0000
Files and hashes: 1: C4TqVJ-IIRBYs0v8qwZAwwMDk8M.crl (hash: 1lbbLMbslKMDGKBhokiFF8ZFwoNfZEZK23ZY1WV9EjE=)
2: P-Dx0ihfKx4UBeNlSrnWTMyyfvY.roa (hash: viXxvbgM6fcm3+uNTvobtmlKGENasOgtCzi4bFmu9u0=)
3: VjB61y70CykGJrI1joYA_LZs7BQ.roa (hash: 0fdGzWqdSh6FPKMh+lErtdFv9hP3dlRfbAfCokMP6HQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/2fc167-b357-4394-b4e8-c825be2813bc/1/C4TqVJ-IIRBYs0v8qwZAwwMDk8M.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/2fc167-b357-4394-b4e8-c825be2813bc/1/C4TqVJ-IIRBYs0v8qwZAwwMDk8M.mft
rsync://rpki.ripe.net/repository/DEFAULT/C4TqVJ-IIRBYs0v8qwZAwwMDk8M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Jul 2025 14:07:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:56:eb:70:54:53:1e:2b:29:0d:b1:be:e6:bf:20:88:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0b84ea549f88211058b34bfcab0640c3030393c3
Validity
Not Before: Jul 29 16:02:06 2025 GMT
Not After : Jul 30 16:02:06 2025 GMT
Subject: CN=6c36e025a5ce6a7402e2230740bc2c8ac2931cd3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:43:6b:07:f0:29:23:9d:fc:71:0c:8c:77:be:
36:96:92:c6:ce:4f:29:17:02:d5:c9:79:d7:4c:b1:
e9:c7:4c:27:ab:c7:50:43:bd:57:c8:20:46:d7:f2:
3e:6d:60:4f:97:d6:f4:4a:cb:c9:75:66:81:94:94:
9a:e9:99:e5:20:4e:4b:7e:2d:8e:8e:0a:e6:10:84:
70:05:06:f0:9e:76:9d:88:e1:b1:99:d1:77:2b:ba:
fd:53:6e:47:ac:fa:62:a0:c4:ce:47:32:38:3d:e1:
8a:32:e8:22:f5:3c:af:7b:55:fc:d5:b7:c6:7f:ad:
c0:1a:4f:1c:2c:3d:f5:c8:b3:22:f1:90:09:57:a3:
c3:d4:ba:96:7b:4d:d5:28:59:54:87:bd:48:21:4c:
80:51:ff:dc:9c:85:2f:0d:a9:7f:1d:e4:a7:67:8d:
9b:d6:25:6e:c4:3d:34:aa:06:d6:6a:2d:cc:43:98:
3e:38:37:93:92:22:a0:da:6f:8b:66:0e:bd:2d:bf:
96:77:54:26:d0:5e:1b:cd:0c:46:08:d6:88:91:4d:
9f:a4:e3:9d:77:7a:2f:47:21:66:b0:ab:eb:af:48:
72:9d:61:54:4f:08:66:19:b1:b2:75:db:a5:97:f2:
46:9e:6d:d6:29:77:60:0b:b0:41:54:a2:db:34:9c:
cc:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:36:E0:25:A5:CE:6A:74:02:E2:23:07:40:BC:2C:8A:C2:93:1C:D3
X509v3 Authority Key Identifier:
keyid:0B:84:EA:54:9F:88:21:10:58:B3:4B:FC:AB:06:40:C3:03:03:93:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C4TqVJ-IIRBYs0v8qwZAwwMDk8M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/2fc167-b357-4394-b4e8-c825be2813bc/1/C4TqVJ-IIRBYs0v8qwZAwwMDk8M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/2fc167-b357-4394-b4e8-c825be2813bc/1/C4TqVJ-IIRBYs0v8qwZAwwMDk8M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:8b:56:fe:19:c4:d4:9c:22:65:55:87:51:9c:2c:b5:ac:10:
c7:c7:b3:44:26:2c:0f:02:1d:e2:da:e2:15:23:5f:ad:7f:68:
36:ff:23:b7:05:cf:be:68:01:d9:c6:97:01:33:dd:61:23:5c:
29:d4:7f:84:29:d8:91:7d:03:b5:dc:a4:31:7c:94:e0:8d:79:
09:a9:07:69:11:69:0c:04:c5:81:5d:03:49:df:b4:93:c9:2c:
52:73:3e:be:41:9a:1c:67:f5:40:b3:51:52:92:ec:41:e4:d5:
8f:0c:ec:97:a0:0f:9a:57:3d:e3:36:de:eb:6e:3f:b9:d8:13:
69:e6:8d:74:0b:5a:3b:3f:cc:11:ef:e0:22:85:9d:57:6e:68:
11:06:0a:b3:69:56:4c:ab:c5:ba:d4:c8:89:56:9a:98:db:f5:
8d:2b:33:c0:9e:90:59:72:41:a7:79:5d:62:a2:8d:e2:12:d0:
e2:6d:11:5c:f0:19:78:b9:4d:18:20:c2:c2:e6:f1:24:bb:3c:
50:41:93:dd:5b:41:6d:27:98:ac:69:a3:72:e9:6c:fa:e7:d0:
72:33:38:a2:f6:3a:c9:22:39:f6:1e:35:e2:02:f1:29:df:81:
b4:3d:f7:ef:f4:69:a0:9d:83:34:df:d1:13:05:c9:63:51:49:
5f:40:cf:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 29 18:55:05 2025 by rpki-client