Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/4cd72d-d8a5-46ce-8674-0d22232c34a0/1/pOuetVR8f18ar8CtoUCAVBlhhyY.mft
File: pOuetVR8f18ar8CtoUCAVBlhhyY.mft (raw, json)
Hash identifier: XeuOlUXu9gaVc95mpYmPd1M0imcdEjSeM7mWurTm3eE=
Subject key identifier: BE:B2:E9:AD:B2:57:60:DD:DD:F2:CB:8A:B3:C2:B0:F7:49:15:6D:AB
Authority key identifier: A4:EB:9E:B5:54:7C:7F:5F:1A:AF:C0:AD:A1:40:80:54:19:61:87:26
Certificate issuer: /CN=a4eb9eb5547c7f5f1aafc0ada140805419618726
Certificate serial: 01984A77BDC4F68C7EBAD91ABBDD2BA0FAB0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pOuetVR8f18ar8CtoUCAVBlhhyY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/4cd72d-d8a5-46ce-8674-0d22232c34a0/1/pOuetVR8f18ar8CtoUCAVBlhhyY.mft
Manifest number: 09F2
Signing time: Sun 27 Jul 2025 06:00:17 +0000
Manifest this update: Sun 27 Jul 2025 06:00:17 +0000
Manifest next update: Mon 28 Jul 2025 06:00:17 +0000
Files and hashes: 1: J_w-klg8Fz7usxtg6f6kBplmW2Q.roa (hash: wSUiP/GQT3afkhYb4zAVk2weNrXx80BBBUvY2crSbB8=)
2: pOuetVR8f18ar8CtoUCAVBlhhyY.crl (hash: cjz4Ia6f9F6oWoDYVMXFWaa+RZX+GpvDEqY06JrmeE0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/4cd72d-d8a5-46ce-8674-0d22232c34a0/1/pOuetVR8f18ar8CtoUCAVBlhhyY.crl
rsync://rpki.ripe.net/repository/DEFAULT/ff/4cd72d-d8a5-46ce-8674-0d22232c34a0/1/pOuetVR8f18ar8CtoUCAVBlhhyY.mft
rsync://rpki.ripe.net/repository/DEFAULT/pOuetVR8f18ar8CtoUCAVBlhhyY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4a:77:bd:c4:f6:8c:7e:ba:d9:1a:bb:dd:2b:a0:fa:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a4eb9eb5547c7f5f1aafc0ada140805419618726
Validity
Not Before: Jul 27 06:00:17 2025 GMT
Not After : Jul 28 06:00:17 2025 GMT
Subject: CN=beb2e9adb25760ddddf2cb8ab3c2b0f749156dab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:f1:33:2c:4a:f1:ae:96:1d:0a:f1:e4:43:11:
ce:ab:9e:75:f8:60:66:92:b2:b2:ff:da:d3:c3:1d:
46:3b:ff:b4:d4:fb:f3:7d:2b:e5:01:2e:0f:d1:b7:
2f:2c:56:9f:7c:a6:06:46:fd:20:10:18:05:ee:08:
2d:a3:c7:97:c6:c7:dc:6e:76:18:83:0b:28:70:af:
62:8e:3b:92:fc:47:cb:bb:bf:3f:18:f4:9e:f0:1c:
0a:bb:f3:1c:2b:b9:0c:7b:bb:a8:ae:26:64:18:95:
70:01:86:f1:85:cb:e5:80:bc:08:e9:4d:0f:95:a6:
6e:df:6c:8d:58:9a:c6:d0:bf:f7:78:de:8e:6e:0c:
07:5a:8d:32:fc:0e:07:6e:7b:bc:d3:24:5b:29:ef:
6a:ee:24:20:db:9d:f9:7c:86:64:ec:f0:21:f8:a9:
16:4e:f4:43:98:f5:8f:b4:03:9e:f1:b6:ee:22:69:
4e:d4:1d:16:62:60:10:9e:aa:3f:a7:26:0c:d3:f1:
40:b8:6d:86:37:53:57:84:ff:d7:e5:ec:30:5c:86:
7c:55:75:13:3d:d9:6e:62:3a:c3:0a:ce:e7:dc:a9:
45:ed:19:fb:64:70:13:68:29:a2:8e:ba:d8:cc:7b:
f0:7d:6c:97:60:be:3b:8a:f4:72:4a:62:e0:96:d7:
0c:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:B2:E9:AD:B2:57:60:DD:DD:F2:CB:8A:B3:C2:B0:F7:49:15:6D:AB
X509v3 Authority Key Identifier:
keyid:A4:EB:9E:B5:54:7C:7F:5F:1A:AF:C0:AD:A1:40:80:54:19:61:87:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pOuetVR8f18ar8CtoUCAVBlhhyY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/4cd72d-d8a5-46ce-8674-0d22232c34a0/1/pOuetVR8f18ar8CtoUCAVBlhhyY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/4cd72d-d8a5-46ce-8674-0d22232c34a0/1/pOuetVR8f18ar8CtoUCAVBlhhyY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
69:a9:94:2d:57:6e:88:2b:ef:5e:73:16:9d:c4:27:2e:2a:88:
be:7b:f9:dd:03:d9:81:db:65:e5:06:35:76:5f:e3:ae:5a:20:
36:0b:74:dd:0e:f7:6a:6f:07:55:0a:88:68:2a:2d:5c:12:8e:
0b:b8:ba:ed:51:d0:4c:be:1c:3b:59:61:6f:74:7c:83:25:e5:
3e:84:5e:e1:37:09:03:ed:6a:4f:a5:c1:de:9b:fc:3d:41:cd:
99:e8:71:50:52:78:36:7e:25:dc:9a:09:87:7c:24:b3:7f:6c:
95:70:19:76:c6:c5:87:ea:c1:58:c3:92:ff:3a:0d:46:12:ec:
20:9f:1b:91:3b:3c:25:87:8d:9f:f3:8f:8a:f6:78:48:d3:44:
ab:f0:e9:98:35:fc:09:d6:a6:95:ff:4f:4e:36:23:57:7f:cb:
f6:25:ff:78:78:45:0f:6c:51:81:89:02:30:f0:43:db:5a:b2:
3a:af:ca:27:15:48:1f:7b:e2:16:80:7b:13:cb:d5:a7:e0:1e:
4c:25:34:67:12:76:db:bd:84:c3:2f:91:d4:5e:23:68:51:c3:
e0:a2:63:98:d7:1d:9b:ae:24:34:27:70:d9:25:17:6a:51:2d:
14:d6:85:c9:f8:a7:95:13:33:dd:84:e5:b7:21:e8:b6:ad:88:
ad:d7:e9:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 10:30:09 2025 by rpki-client