Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/5687c1-df9f-4ae5-a4cc-ec03ebd19000/1/TIp4hmYiVL456hrdcnKOAA6ywlo.mft
File: TIp4hmYiVL456hrdcnKOAA6ywlo.mft (raw, json)
Hash identifier: gy/8O+eu4SR1zqeZntkDwK76KZtZjAvkGdl+XfmbouQ=
Subject key identifier: 4A:87:DE:F8:DD:D5:E2:95:B5:82:56:3F:D2:BE:3A:FA:F8:81:AD:6B
Authority key identifier: 4C:8A:78:86:66:22:54:BE:39:EA:1A:DD:72:72:8E:00:0E:B2:C2:5A
Certificate issuer: /CN=4c8a7886662254be39ea1add72728e000eb2c25a
Certificate serial: 01984965F4FC3B886B5224CB27EE951F6B26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TIp4hmYiVL456hrdcnKOAA6ywlo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/5687c1-df9f-4ae5-a4cc-ec03ebd19000/1/TIp4hmYiVL456hrdcnKOAA6ywlo.mft
Manifest number: 1604
Signing time: Sun 27 Jul 2025 01:01:15 +0000
Manifest this update: Sun 27 Jul 2025 01:01:15 +0000
Manifest next update: Mon 28 Jul 2025 01:01:15 +0000
Files and hashes: 1: JjwEZWBFYdro1bclN7oB-fRyAwA.roa (hash: k4IvqBYPxW6gaMsyO55esYb4IVeV/xHT6lju64eLGfA=)
2: TIp4hmYiVL456hrdcnKOAA6ywlo.crl (hash: iDQk/wEKMe72kdAVjbfIGj8ujr8niIjo/OOjKDj/YZU=)
3: a9wio39nY7HA5Emvyn8dQazuTJQ.roa (hash: NmO/lOJq3pD1F19fAJROTywj9iP7yhDSrwvmQCnkS38=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/5687c1-df9f-4ae5-a4cc-ec03ebd19000/1/TIp4hmYiVL456hrdcnKOAA6ywlo.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/5687c1-df9f-4ae5-a4cc-ec03ebd19000/1/TIp4hmYiVL456hrdcnKOAA6ywlo.mft
rsync://rpki.ripe.net/repository/DEFAULT/TIp4hmYiVL456hrdcnKOAA6ywlo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 00:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:49:65:f4:fc:3b:88:6b:52:24:cb:27:ee:95:1f:6b:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4c8a7886662254be39ea1add72728e000eb2c25a
Validity
Not Before: Jul 27 01:01:15 2025 GMT
Not After : Jul 28 01:01:15 2025 GMT
Subject: CN=4a87def8ddd5e295b582563fd2be3afaf881ad6b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:fe:1d:09:99:de:25:2e:70:98:b6:6a:96:f5:
11:52:31:44:f7:e2:c7:5b:f0:10:b0:17:c9:50:c1:
33:4f:40:b2:39:7f:9f:2c:b1:b9:4a:0b:f5:8a:8b:
66:a2:e6:98:71:c7:97:42:2c:23:f2:79:a4:75:42:
00:0f:c8:06:88:49:c5:c3:fb:6b:d5:a3:e7:62:4e:
79:bb:0b:51:7a:10:4f:2e:b6:6e:b3:37:d8:46:a4:
45:f7:68:55:d8:75:8b:94:c1:1c:16:66:23:ed:60:
91:0b:16:ff:34:3a:a5:bd:b1:70:eb:11:9c:ec:be:
51:56:42:37:5f:1f:ab:5a:06:00:f0:98:9e:a3:2f:
03:53:3c:f0:85:9b:35:74:6c:9b:d6:8d:83:87:2d:
d1:39:3d:fb:86:31:11:a9:33:87:5e:85:bf:90:a3:
a3:35:91:55:60:a5:f2:96:a9:fd:23:49:8c:c7:d2:
be:48:94:d2:76:f7:ec:ba:4c:3f:0a:00:68:1f:5c:
6e:b1:cf:7c:bb:90:57:88:62:91:24:1b:57:97:2b:
e1:1a:8a:ad:bd:5b:67:46:9b:e9:cb:64:b4:bf:0c:
ff:a7:1c:0b:37:ca:6b:24:cf:11:4c:9e:04:0e:d9:
d8:b2:d1:b0:3d:a0:cb:36:f2:b7:f2:68:e1:1f:ac:
e7:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:87:DE:F8:DD:D5:E2:95:B5:82:56:3F:D2:BE:3A:FA:F8:81:AD:6B
X509v3 Authority Key Identifier:
keyid:4C:8A:78:86:66:22:54:BE:39:EA:1A:DD:72:72:8E:00:0E:B2:C2:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TIp4hmYiVL456hrdcnKOAA6ywlo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/5687c1-df9f-4ae5-a4cc-ec03ebd19000/1/TIp4hmYiVL456hrdcnKOAA6ywlo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/5687c1-df9f-4ae5-a4cc-ec03ebd19000/1/TIp4hmYiVL456hrdcnKOAA6ywlo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:25:49:a0:15:81:00:d6:c4:5d:10:f6:28:68:ec:05:5a:9f:
29:85:51:8a:d1:c7:ff:85:6e:97:b4:88:f2:af:8d:17:59:0e:
41:e3:77:a2:63:3a:fe:81:83:4c:46:f9:03:ee:4b:55:53:a6:
4e:be:70:bc:2c:8a:00:36:54:b0:3c:54:7c:3a:70:a3:97:71:
40:6c:3e:01:9c:55:3a:61:dd:ba:9e:a8:e0:56:67:a3:08:d9:
28:c1:e7:3d:5e:e8:34:38:2e:b5:35:b1:37:ed:b3:bb:14:41:
77:2a:60:d8:11:ea:68:37:c9:a8:ae:a4:69:0b:d9:cd:ba:81:
e5:24:37:8b:07:ec:51:56:fb:52:c3:2f:08:89:0e:2d:5d:ef:
17:e6:d0:e8:28:d3:db:20:8f:f3:e7:29:9c:a3:b3:9e:54:82:
57:bf:be:61:d7:29:65:ce:4d:78:d2:cb:15:48:58:1c:32:0e:
39:b2:7d:f6:11:16:27:69:55:2f:0b:8d:30:e0:ab:84:c0:f4:
d7:ef:57:6d:c4:4b:3f:79:81:94:18:26:c1:a5:a8:06:b5:99:
af:94:69:fb:6e:2e:65:78:e6:0b:9f:fb:7e:59:32:0a:a9:87:
34:c4:63:a4:d0:2f:14:a5:d5:69:6b:ac:b6:b7:03:ef:a9:0a:
df:6d:9b:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 08:28:08 2025 by rpki-client