Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/6aeda8-b75c-4bbb-8e7d-8feaafac7e89/1/c4P6Q4pvrmKzX5CRh2xE3tucDaM.mft
File: c4P6Q4pvrmKzX5CRh2xE3tucDaM.mft (raw, json)
Hash identifier: ghrDSZLTgQVsWiZt2/PpfKD/eqE5z9pz7aiysq2Y3Do=
Subject key identifier: BA:4E:B8:BE:7E:F8:F0:01:99:8E:5C:EB:B3:EA:56:8C:71:AB:91:5B
Authority key identifier: 73:83:FA:43:8A:6F:AE:62:B3:5F:90:91:87:6C:44:DE:DB:9C:0D:A3
Certificate issuer: /CN=7383fa438a6fae62b35f9091876c44dedb9c0da3
Certificate serial: 0199228D05C4DBB78D50C53A9D9AC23257AC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/c4P6Q4pvrmKzX5CRh2xE3tucDaM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/6aeda8-b75c-4bbb-8e7d-8feaafac7e89/1/c4P6Q4pvrmKzX5CRh2xE3tucDaM.mft
Manifest number: 0B16
Signing time: Sun 07 Sep 2025 05:01:31 +0000
Manifest this update: Sun 07 Sep 2025 05:01:31 +0000
Manifest next update: Mon 08 Sep 2025 05:01:31 +0000
Files and hashes: 1: c4P6Q4pvrmKzX5CRh2xE3tucDaM.crl (hash: f5YUM/OyWagD1Eedqkhn4To+wCcASx+dGHkNSJTjgTI=)
2: cJOETGpzF01z2PB9BHQ2YdHB3Oo.roa (hash: ddSAvoAgeQ9Rf29fTQhbhEaJlnO0oFB6dwFmZVNzK/g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/6aeda8-b75c-4bbb-8e7d-8feaafac7e89/1/c4P6Q4pvrmKzX5CRh2xE3tucDaM.crl
rsync://rpki.ripe.net/repository/DEFAULT/58/6aeda8-b75c-4bbb-8e7d-8feaafac7e89/1/c4P6Q4pvrmKzX5CRh2xE3tucDaM.mft
rsync://rpki.ripe.net/repository/DEFAULT/c4P6Q4pvrmKzX5CRh2xE3tucDaM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:8d:05:c4:db:b7:8d:50:c5:3a:9d:9a:c2:32:57:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7383fa438a6fae62b35f9091876c44dedb9c0da3
Validity
Not Before: Sep 7 05:01:31 2025 GMT
Not After : Sep 8 05:01:31 2025 GMT
Subject: CN=ba4eb8be7ef8f001998e5cebb3ea568c71ab915b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:a6:4c:f9:5a:c8:58:5a:aa:7c:74:f1:d8:4a:
96:17:59:99:cc:e1:d9:f4:45:1f:72:b0:da:a5:05:
bd:73:9d:45:1d:35:9f:ab:c5:ec:95:13:a5:f7:fe:
7d:6d:e4:55:ea:17:0a:82:96:f1:24:fd:4b:0d:74:
ed:03:05:7e:dd:79:dc:f5:24:df:55:3f:66:85:31:
a1:75:8c:50:e5:da:3d:1a:47:13:a6:94:eb:a8:b1:
4c:47:3d:b5:df:f4:43:79:4f:06:b7:e7:ec:05:a4:
d4:9b:59:7d:7e:7e:cf:03:0a:67:cb:73:36:57:6b:
d2:a7:81:36:b3:76:70:95:8b:a0:13:8e:91:03:ae:
f8:d9:79:0f:1f:d2:5b:67:7e:86:6e:fd:26:4b:09:
02:75:52:f6:e2:08:21:d9:da:23:df:f0:8e:74:c7:
7b:73:26:54:da:b7:06:ae:7a:fd:45:53:7c:cc:45:
1c:2d:e0:9d:0e:91:04:b3:cb:36:de:ee:6a:de:bd:
83:e0:85:36:66:7f:29:59:69:7f:ab:b4:33:30:d8:
2a:c6:b7:22:1f:85:b4:c8:e5:52:c4:f0:07:11:ec:
fc:c0:0b:c0:a0:fe:d9:97:6f:57:f3:cf:61:6b:d1:
92:7d:76:2a:31:55:de:a5:da:b6:3c:c7:bd:dd:c1:
ec:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:4E:B8:BE:7E:F8:F0:01:99:8E:5C:EB:B3:EA:56:8C:71:AB:91:5B
X509v3 Authority Key Identifier:
keyid:73:83:FA:43:8A:6F:AE:62:B3:5F:90:91:87:6C:44:DE:DB:9C:0D:A3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4P6Q4pvrmKzX5CRh2xE3tucDaM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/6aeda8-b75c-4bbb-8e7d-8feaafac7e89/1/c4P6Q4pvrmKzX5CRh2xE3tucDaM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/6aeda8-b75c-4bbb-8e7d-8feaafac7e89/1/c4P6Q4pvrmKzX5CRh2xE3tucDaM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:bb:65:bd:8b:a0:92:53:c4:0e:a4:5e:4a:05:11:7e:65:ed:
38:c9:32:f7:38:43:82:a5:8c:ff:08:94:b0:e4:0b:41:33:9d:
58:29:ff:9d:54:9f:84:cc:87:03:22:75:a7:56:c1:fe:c2:02:
66:5a:ba:ca:fe:80:7e:08:7c:2b:86:00:09:f1:73:03:d4:74:
f7:78:74:8a:e6:00:bc:2b:27:5e:74:f8:7d:ea:34:11:1c:83:
bf:d6:05:09:97:99:d6:5e:0f:28:e7:8d:ed:9f:f7:b3:5e:c0:
9e:ca:ee:f6:72:5f:45:2e:18:86:e3:67:9f:3f:4b:a5:0f:81:
ce:78:05:0c:bc:1f:d2:48:56:42:09:a4:5a:c1:d1:47:22:9d:
74:4a:b3:a2:78:4f:f0:ca:b1:69:30:b6:f0:7a:28:fe:0e:fb:
ba:4b:a4:f3:dd:08:0e:0a:06:1f:10:4e:f6:90:81:ee:f8:e7:
5b:cb:e6:12:61:62:c2:30:e2:13:23:94:f2:61:5a:31:6c:9a:
5f:65:b4:bb:9f:6f:ad:99:f9:55:ed:cf:dd:b8:b1:a1:ef:3a:
a1:e5:4a:11:e4:bf:a0:f7:5f:54:04:0b:5a:5e:93:61:02:bf:
ec:3d:cd:cb:85:6a:60:4a:f3:9d:cb:1c:4b:55:46:64:19:96:
a3:31:36:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 11:41:16 2025 by rpki-client