Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/98dffa-810b-49b5-addd-061fc1aeb158/1/b4Wk1WQoOn_d9jRWl9a8M3OjIkY.mft
File: b4Wk1WQoOn_d9jRWl9a8M3OjIkY.mft (raw, json)
Hash identifier: nemc6ie2dHe3CU/J9sRfM6eJxWqdIjC8yvT9tVjtG9Y=
Subject key identifier: 4A:85:DD:44:78:08:8A:16:10:C5:7A:14:41:47:27:7A:5F:81:7E:73
Authority key identifier: 6F:85:A4:D5:64:28:3A:7F:DD:F6:34:56:97:D6:BC:33:73:A3:22:46
Certificate issuer: /CN=6f85a4d564283a7fddf6345697d6bc3373a32246
Certificate serial: 019849D3B6E0B1D64A82F4E5DFA6AF1545BB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b4Wk1WQoOn_d9jRWl9a8M3OjIkY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/98dffa-810b-49b5-addd-061fc1aeb158/1/b4Wk1WQoOn_d9jRWl9a8M3OjIkY.mft
Manifest number: 1603
Signing time: Sun 27 Jul 2025 03:01:08 +0000
Manifest this update: Sun 27 Jul 2025 03:01:08 +0000
Manifest next update: Mon 28 Jul 2025 03:01:08 +0000
Files and hashes: 1: b4Wk1WQoOn_d9jRWl9a8M3OjIkY.crl (hash: Mr9OyfpYtH2oRGt36WVM7+MKbLeaYwICazXnlGw+qrU=)
2: hnLpwyr61Y9rfW-orNijGQDSlok.roa (hash: JEbPbaPqAJUCWgWRtGXMytB73uHDdZ/eD28RxoLxK4I=)
3: qsQCT6UNZXlqsu2v2DLFUykH7sk.roa (hash: GXnPWBj7LIlynkpTHAuJodlLFiW6fUYPHh7FYEk3i3A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/98dffa-810b-49b5-addd-061fc1aeb158/1/b4Wk1WQoOn_d9jRWl9a8M3OjIkY.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/98dffa-810b-49b5-addd-061fc1aeb158/1/b4Wk1WQoOn_d9jRWl9a8M3OjIkY.mft
rsync://rpki.ripe.net/repository/DEFAULT/b4Wk1WQoOn_d9jRWl9a8M3OjIkY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 03:01:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:49:d3:b6:e0:b1:d6:4a:82:f4:e5:df:a6:af:15:45:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f85a4d564283a7fddf6345697d6bc3373a32246
Validity
Not Before: Jul 27 03:01:08 2025 GMT
Not After : Jul 28 03:01:08 2025 GMT
Subject: CN=4a85dd4478088a1610c57a144147277a5f817e73
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:b8:8d:1a:ab:1c:8f:5e:dc:a7:a4:be:18:96:
b1:02:8a:cf:fa:6f:49:e3:2e:3b:db:61:2c:aa:21:
d3:45:68:b2:08:c3:b8:8f:26:ce:98:f3:8d:81:42:
da:2c:f8:27:aa:d7:3c:5d:7e:59:0a:bd:b9:03:89:
18:ba:7b:38:14:45:cb:22:58:bf:dc:ec:72:4e:28:
3e:1e:e7:d0:99:94:18:4a:53:c1:b9:b5:06:59:f1:
cf:d2:c1:8e:57:8a:38:4c:9d:47:6a:63:a2:33:d5:
84:ae:b7:59:f0:a9:76:ee:9e:81:8a:e5:9f:eb:ee:
2e:2f:63:a3:59:3b:50:2c:39:7c:4e:29:0c:d1:42:
27:95:3c:51:55:60:5b:02:54:40:c4:ef:63:78:03:
01:b6:ca:ed:e1:fa:c2:bd:f9:48:46:df:79:e9:00:
87:4a:8b:2c:28:bb:3e:21:6d:9e:d9:6e:6a:5f:a5:
cd:4b:37:53:bb:8a:9e:20:0b:e4:95:d6:cf:97:cf:
4f:d5:23:4a:a2:ee:11:70:4c:b3:2a:90:b6:27:e5:
28:49:b7:37:44:6c:d5:e0:a1:7d:85:eb:7a:4b:c2:
06:4f:e6:74:37:3d:2d:bf:6c:82:48:1d:18:dc:b0:
91:49:93:2d:94:3a:40:cf:5a:24:97:7b:cd:44:11:
03:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:85:DD:44:78:08:8A:16:10:C5:7A:14:41:47:27:7A:5F:81:7E:73
X509v3 Authority Key Identifier:
keyid:6F:85:A4:D5:64:28:3A:7F:DD:F6:34:56:97:D6:BC:33:73:A3:22:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4Wk1WQoOn_d9jRWl9a8M3OjIkY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/98dffa-810b-49b5-addd-061fc1aeb158/1/b4Wk1WQoOn_d9jRWl9a8M3OjIkY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/98dffa-810b-49b5-addd-061fc1aeb158/1/b4Wk1WQoOn_d9jRWl9a8M3OjIkY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:50:08:af:79:df:fa:60:59:46:ce:8e:f0:59:03:35:57:14:
4d:59:eb:08:33:38:af:3a:78:06:1e:4f:56:1f:df:9c:d0:70:
ff:11:35:d3:3c:76:bc:3c:66:95:8d:54:99:56:82:59:09:00:
03:22:3c:d4:8e:b7:09:c9:5e:d9:d4:98:f4:3d:b0:a0:81:a2:
1e:45:8a:ca:2d:c4:80:b9:b3:b6:1f:61:7d:85:5c:0b:c7:02:
af:7e:dc:f1:6c:60:c0:68:2b:3f:5e:f6:d4:e3:f5:2a:d8:60:
57:bf:c7:42:0e:25:60:a4:12:ca:80:b8:3a:bb:67:58:19:65:
fa:82:f8:3a:4f:4e:43:1f:03:7b:5f:97:8b:bd:ed:a0:a8:4c:
37:3e:88:a3:8d:88:13:50:0a:03:0b:c9:8d:52:c5:5d:a9:16:
02:15:2c:eb:c4:31:2e:78:7a:08:53:bd:2a:02:da:53:72:86:
8d:bc:a0:8c:9d:b0:f2:61:35:c6:33:9e:b7:b3:2d:5d:b4:84:
86:07:6e:69:1d:f8:8b:27:35:0f:8d:a2:76:7a:7b:c9:03:16:
bf:1c:87:eb:0e:ed:b0:64:bf:26:78:f2:0d:b5:cf:d5:8e:eb:
ac:53:93:bd:ed:34:84:91:16:fe:6d:58:26:35:d7:4b:07:0a:
c4:65:03:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 12:09:58 2025 by rpki-client