Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/01608d-08f1-4ab5-a926-be561ccded2c/1/_4ztOwmpBeuWhpxY9mtPi1kVA7A.mft
File: _4ztOwmpBeuWhpxY9mtPi1kVA7A.mft (raw, json)
Hash identifier: yMXYke3XgQ419ozKiqvew8YmwqKTE6CHygsvNtEyveY=
Subject key identifier: 05:D7:07:B1:00:10:64:82:BA:D2:DC:59:60:F7:5B:40:1D:18:BF:32
Authority key identifier: FF:8C:ED:3B:09:A9:05:EB:96:86:9C:58:F6:6B:4F:8B:59:15:03:B0
Certificate issuer: /CN=ff8ced3b09a905eb96869c58f66b4f8b591503b0
Certificate serial: 019849653772621094404A6750ADC9184ADF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_4ztOwmpBeuWhpxY9mtPi1kVA7A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/01608d-08f1-4ab5-a926-be561ccded2c/1/_4ztOwmpBeuWhpxY9mtPi1kVA7A.mft
Manifest number: 1601
Signing time: Sun 27 Jul 2025 01:00:26 +0000
Manifest this update: Sun 27 Jul 2025 01:00:26 +0000
Manifest next update: Mon 28 Jul 2025 01:00:26 +0000
Files and hashes: 1: _4ztOwmpBeuWhpxY9mtPi1kVA7A.crl (hash: kdFfncWcqSh/AZikXOv+tbzDRqyTdqqeijd6GU//VZU=)
2: xOQc72Z94YWZ0x4WXA9ac2DfTkA.roa (hash: JOazIpcEkdoXe7dHpDJ/1wfs3pC+0YfgMICoYiHagPk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/01608d-08f1-4ab5-a926-be561ccded2c/1/_4ztOwmpBeuWhpxY9mtPi1kVA7A.crl
rsync://rpki.ripe.net/repository/DEFAULT/f5/01608d-08f1-4ab5-a926-be561ccded2c/1/_4ztOwmpBeuWhpxY9mtPi1kVA7A.mft
rsync://rpki.ripe.net/repository/DEFAULT/_4ztOwmpBeuWhpxY9mtPi1kVA7A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 00:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:49:65:37:72:62:10:94:40:4a:67:50:ad:c9:18:4a:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ff8ced3b09a905eb96869c58f66b4f8b591503b0
Validity
Not Before: Jul 27 01:00:26 2025 GMT
Not After : Jul 28 01:00:26 2025 GMT
Subject: CN=05d707b100106482bad2dc5960f75b401d18bf32
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:1e:a1:66:4e:2a:bd:a0:47:33:6a:2d:99:96:
a9:c7:d3:36:14:a1:72:c9:53:37:89:d2:2d:a0:5c:
01:3f:d7:0f:cc:cf:59:f0:24:32:47:da:24:f6:33:
99:e0:d1:5e:0a:22:f5:9d:9b:25:b3:ff:0c:0f:02:
05:a6:26:63:f4:ef:dd:12:03:9f:4f:85:5f:85:51:
a8:4d:f7:c1:ff:5e:21:56:a7:68:f8:79:a3:30:48:
b6:dc:73:a3:dc:1d:38:2f:b2:9a:92:96:95:65:a5:
e6:64:e8:85:1b:fb:29:da:dd:b7:0a:8d:ec:19:99:
9b:8c:89:85:e3:4d:c0:b1:9e:f0:b6:8c:b2:a9:86:
27:93:77:18:5e:46:8d:04:df:0e:5e:56:52:b4:9d:
87:a0:13:df:48:5e:da:3b:0e:95:68:76:95:24:5c:
ee:ae:52:36:6e:d9:a3:9c:f0:f3:dd:3d:18:7b:f6:
9e:d4:13:5e:f1:cf:15:a9:7f:4e:51:c4:c8:25:e5:
ba:dd:23:f4:dd:09:e6:dd:23:8a:a3:fa:d1:a2:ed:
8d:a5:58:ba:14:93:56:df:99:69:d2:78:c4:12:17:
d4:87:0c:f6:d5:43:a9:07:11:19:ac:a0:79:3c:67:
08:96:4d:9b:c6:1b:54:2d:bc:9c:fa:ac:72:fc:d8:
ca:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:D7:07:B1:00:10:64:82:BA:D2:DC:59:60:F7:5B:40:1D:18:BF:32
X509v3 Authority Key Identifier:
keyid:FF:8C:ED:3B:09:A9:05:EB:96:86:9C:58:F6:6B:4F:8B:59:15:03:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_4ztOwmpBeuWhpxY9mtPi1kVA7A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/01608d-08f1-4ab5-a926-be561ccded2c/1/_4ztOwmpBeuWhpxY9mtPi1kVA7A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/01608d-08f1-4ab5-a926-be561ccded2c/1/_4ztOwmpBeuWhpxY9mtPi1kVA7A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:58:81:37:44:5f:88:20:42:10:db:31:2e:f3:2c:a3:5f:76:
f6:d1:89:ec:59:7a:f3:44:6d:65:ba:d2:27:96:03:e4:fd:00:
ab:1c:4d:ef:cc:d8:9f:b4:4a:56:7b:c0:ec:dc:08:e8:9f:07:
ca:64:63:2f:58:1d:59:d0:f8:7f:c9:5c:ad:d7:37:6a:a6:f7:
c1:1b:cb:3d:ba:36:ae:91:41:c3:e1:9d:b9:cc:41:69:45:17:
d0:b8:56:52:fc:1f:8c:9b:62:44:0a:bc:df:a1:db:b2:a6:af:
e9:ab:ff:e6:3a:c9:fc:29:ea:37:be:bb:b8:6d:f3:81:33:4c:
b4:14:4e:98:35:66:3e:50:66:35:e2:1e:34:c0:44:24:a6:2b:
d5:96:e1:c9:a2:39:8b:39:ce:28:39:f7:23:6d:94:97:d6:a7:
2a:1b:9b:b2:e6:fc:d6:d6:7a:74:7d:bb:63:1e:10:6a:c2:62:
8f:bd:89:7a:75:5f:6b:11:a1:ed:2f:6c:2c:77:71:c3:be:52:
a8:1d:6f:15:c9:7c:03:1d:de:7e:19:38:06:8d:f9:be:76:88:
7e:8d:d9:6b:52:6c:ed:4d:a4:a1:91:fb:32:eb:3f:07:d9:f4:
11:14:36:fe:22:b0:2b:d9:fa:b6:99:65:f5:be:35:3b:5c:82:
80:aa:f1:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 07:30:12 2025 by rpki-client