Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/02fdfd-7ac8-4321-b930-8fa551e6ae75/1/tR4_a-vNBSkdxSZeCLHNbEAbnP0.mft
File: tR4_a-vNBSkdxSZeCLHNbEAbnP0.mft (raw, json)
Hash identifier: QSErkXD42v/iRNtH7/DieAs5GCt4waq+NyeWbUpc1jc=
Subject key identifier: 66:2D:84:DB:F0:BB:D3:D9:5B:17:D4:CB:A5:E5:5D:41:F2:92:D1:12
Authority key identifier: B5:1E:3F:6B:EB:CD:05:29:1D:C5:26:5E:08:B1:CD:6C:40:1B:9C:FD
Certificate issuer: /CN=b51e3f6bebcd05291dc5265e08b1cd6c401b9cfd
Certificate serial: 0198499BD7B96C45FC43F77B1C906C17135E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tR4_a-vNBSkdxSZeCLHNbEAbnP0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/02fdfd-7ac8-4321-b930-8fa551e6ae75/1/tR4_a-vNBSkdxSZeCLHNbEAbnP0.mft
Manifest number: 1605
Signing time: Sun 27 Jul 2025 02:00:06 +0000
Manifest this update: Sun 27 Jul 2025 02:00:06 +0000
Manifest next update: Mon 28 Jul 2025 02:00:06 +0000
Files and hashes: 1: XhX8A-oz684Iwe53pFqloQYS-kU.roa (hash: Mq5uGJtvZYMl6nllrQZDhX8D38boD4gAAjpBeZPZFnU=)
2: tR4_a-vNBSkdxSZeCLHNbEAbnP0.crl (hash: gMQYjr4KJMdotH6NzwctgQ7smzHQ2O8ND15VWVOhYhc=)
3: xq7eF4vg8c3V2xQvveah7LJZv-A.roa (hash: atQkAxpvj5iGJRjdwa/1uBWThI8y8UsCB5Ad2gGNyxg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/02fdfd-7ac8-4321-b930-8fa551e6ae75/1/tR4_a-vNBSkdxSZeCLHNbEAbnP0.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/02fdfd-7ac8-4321-b930-8fa551e6ae75/1/tR4_a-vNBSkdxSZeCLHNbEAbnP0.mft
rsync://rpki.ripe.net/repository/DEFAULT/tR4_a-vNBSkdxSZeCLHNbEAbnP0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 20:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:49:9b:d7:b9:6c:45:fc:43:f7:7b:1c:90:6c:17:13:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b51e3f6bebcd05291dc5265e08b1cd6c401b9cfd
Validity
Not Before: Jul 27 02:00:06 2025 GMT
Not After : Jul 28 02:00:06 2025 GMT
Subject: CN=662d84dbf0bbd3d95b17d4cba5e55d41f292d112
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:58:a0:dc:1f:d4:b3:60:32:04:d3:69:d8:6a:
c8:7e:ba:23:80:e4:8f:2f:f6:84:5b:96:5e:fb:12:
44:f9:e1:b3:05:19:c0:e0:8d:6a:00:11:17:91:1c:
2d:98:2a:7c:59:38:80:ff:e8:d5:6c:94:0c:96:4d:
8b:f5:ad:90:6d:83:97:5b:c0:63:45:10:05:16:f8:
02:97:0b:16:49:8a:53:bf:4b:71:bd:1e:c8:8c:a0:
2d:dc:1b:a4:d1:ce:37:89:5f:b9:94:c3:cd:11:b3:
e8:84:b4:84:c9:b9:61:ea:d7:dd:0b:b7:74:f4:38:
70:98:82:71:1a:0c:0c:81:bc:76:a7:ea:f1:8a:16:
5b:77:4f:1e:63:c6:d3:63:30:be:4a:d9:19:55:76:
8e:40:6d:79:89:a6:83:61:d6:f4:bf:48:cf:e8:73:
5a:4c:c1:7d:76:70:90:a4:56:77:4a:81:fc:c8:fc:
b7:0a:fe:75:bd:d9:c0:64:dd:f1:4a:38:79:a3:04:
23:f0:a6:f7:0e:ba:2f:f6:6a:71:c1:fa:6b:de:0e:
a1:6d:5a:c6:b1:1a:24:9a:25:59:68:ed:c6:da:55:
5e:fc:94:08:84:fe:d4:0b:3a:37:86:bf:39:79:36:
6f:11:29:69:8e:ed:18:63:c9:62:40:01:38:5f:60:
b2:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:2D:84:DB:F0:BB:D3:D9:5B:17:D4:CB:A5:E5:5D:41:F2:92:D1:12
X509v3 Authority Key Identifier:
keyid:B5:1E:3F:6B:EB:CD:05:29:1D:C5:26:5E:08:B1:CD:6C:40:1B:9C:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tR4_a-vNBSkdxSZeCLHNbEAbnP0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/02fdfd-7ac8-4321-b930-8fa551e6ae75/1/tR4_a-vNBSkdxSZeCLHNbEAbnP0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/02fdfd-7ac8-4321-b930-8fa551e6ae75/1/tR4_a-vNBSkdxSZeCLHNbEAbnP0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:78:45:cc:d3:63:09:79:e5:96:a2:a5:13:a7:dc:8a:e6:4c:
bd:67:ac:b9:cc:66:56:76:0d:0c:bb:f0:9e:df:c4:55:99:65:
f6:dd:dc:4b:f5:1b:28:b4:dc:19:2e:85:67:b4:47:2e:12:82:
12:c0:6d:7b:06:c8:ef:21:97:84:d9:e5:d3:12:ed:fa:b6:54:
a8:55:fd:8d:db:bb:2d:c7:31:8c:ad:91:70:93:58:6b:e1:80:
34:fc:94:85:2b:00:5c:a8:c6:9d:91:e5:43:40:6d:57:67:2c:
44:c7:e9:4f:a7:30:f8:a3:8f:1d:f6:98:22:19:45:c9:24:31:
f4:0f:88:6d:45:ff:1d:97:81:de:44:29:b7:5c:e2:62:da:b0:
80:df:29:d3:6d:64:ba:a4:45:76:03:d3:ae:84:e3:1d:b4:d6:
bb:04:16:b1:13:d6:48:16:11:e6:50:cb:f0:8f:00:01:18:b7:
2a:ba:fe:3e:4a:28:9d:b2:6f:70:ba:c6:5c:83:91:62:c1:07:
4b:15:c8:34:20:d0:cb:69:2b:22:1b:58:cd:b1:5f:87:3d:89:
c1:1a:76:9c:19:59:3f:0b:32:3e:a2:e2:74:f1:8b:b2:83:1e:
a7:6c:52:74:19:cf:32:57:e7:1d:b6:3a:e3:e9:62:7b:d2:39:
04:46:f2:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 05:15:25 2025 by rpki-client