Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/1ebf55-e7a4-4026-9a22-8889ef131d89/1/b4E3h12v_gGPo4rUPMaKH6szXvg.mft
File: b4E3h12v_gGPo4rUPMaKH6szXvg.mft (raw, json)
Hash identifier: cKruasQ+24YRBzP78Svx8IHckh/roxQi1gBX9sNvtlg=
Subject key identifier: B1:84:1D:B8:9C:C4:38:75:7F:55:6D:AD:5F:10:EC:A1:14:B3:43:89
Authority key identifier: 6F:81:37:87:5D:AF:FE:01:8F:A3:8A:D4:3C:C6:8A:1F:AB:33:5E:F8
Certificate issuer: /CN=6f8137875daffe018fa38ad43cc68a1fab335ef8
Certificate serial: 019932A3E0F61D06966A09D09D24410287D6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b4E3h12v_gGPo4rUPMaKH6szXvg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/1ebf55-e7a4-4026-9a22-8889ef131d89/1/b4E3h12v_gGPo4rUPMaKH6szXvg.mft
Manifest number: 0254
Signing time: Wed 10 Sep 2025 08:00:24 +0000
Manifest this update: Wed 10 Sep 2025 08:00:24 +0000
Manifest next update: Thu 11 Sep 2025 08:00:24 +0000
Files and hashes: 1: E8IBaZpVVPVTT3vcZdwsZeHwPG4.roa (hash: 0UXW9577f81NC0CmIqC0W/KDB1+9xji40a5s/Ktdi/g=)
2: b4E3h12v_gGPo4rUPMaKH6szXvg.crl (hash: obs9CzSfW9mUHT0n4wgKPxp8iQdFI7MoCtxOOeKRB2M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/1ebf55-e7a4-4026-9a22-8889ef131d89/1/b4E3h12v_gGPo4rUPMaKH6szXvg.crl
rsync://rpki.ripe.net/repository/DEFAULT/86/1ebf55-e7a4-4026-9a22-8889ef131d89/1/b4E3h12v_gGPo4rUPMaKH6szXvg.mft
rsync://rpki.ripe.net/repository/DEFAULT/b4E3h12v_gGPo4rUPMaKH6szXvg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 11 Sep 2025 08:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:32:a3:e0:f6:1d:06:96:6a:09:d0:9d:24:41:02:87:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f8137875daffe018fa38ad43cc68a1fab335ef8
Validity
Not Before: Sep 10 08:00:24 2025 GMT
Not After : Sep 11 08:00:24 2025 GMT
Subject: CN=b1841db89cc438757f556dad5f10eca114b34389
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:1f:a8:1a:8e:13:1b:c6:ab:d7:aa:6e:48:e5:
7a:3f:0d:38:f6:c7:dd:92:9e:2a:85:a4:c1:b4:3c:
c5:3a:39:51:1e:c2:e5:ce:c8:bb:08:0a:c7:f8:0a:
eb:43:d3:17:08:c0:7f:de:07:b2:ea:ea:d8:8f:59:
02:b0:28:36:bc:24:0e:cb:64:31:55:67:dc:c8:bb:
ab:bf:fe:5b:d7:92:db:2d:a0:fa:88:10:2e:d3:94:
29:35:a8:05:c5:ef:6a:4c:90:71:a2:3f:14:20:6f:
84:ca:13:fa:a8:c8:a8:ab:c2:25:87:59:59:e3:f5:
96:57:8a:49:6e:74:5e:b7:8a:fc:a7:04:c7:8e:34:
de:16:16:05:1b:c0:e8:09:58:40:6b:99:69:47:ce:
1b:96:6b:66:5c:38:14:8e:39:72:f8:41:81:71:10:
13:34:9a:7f:07:4a:f0:32:cc:02:64:a2:20:e5:ba:
86:5d:f2:b0:39:7c:d6:e8:43:d3:a2:7e:f9:41:e3:
db:b0:a1:19:62:6c:a3:9d:c5:3a:b9:c1:1e:27:27:
74:d5:8c:22:d9:60:a7:5f:c8:cb:fa:62:0a:1c:18:
45:18:0c:5e:97:8b:6e:c3:cf:56:df:0d:c7:26:a7:
70:b5:90:9d:c9:bc:59:a6:5b:ca:af:22:e6:e6:2a:
4d:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:84:1D:B8:9C:C4:38:75:7F:55:6D:AD:5F:10:EC:A1:14:B3:43:89
X509v3 Authority Key Identifier:
keyid:6F:81:37:87:5D:AF:FE:01:8F:A3:8A:D4:3C:C6:8A:1F:AB:33:5E:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4E3h12v_gGPo4rUPMaKH6szXvg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/1ebf55-e7a4-4026-9a22-8889ef131d89/1/b4E3h12v_gGPo4rUPMaKH6szXvg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/1ebf55-e7a4-4026-9a22-8889ef131d89/1/b4E3h12v_gGPo4rUPMaKH6szXvg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:68:33:77:05:04:da:06:0f:03:00:77:29:81:8b:d1:fc:fc:
80:92:27:ab:eb:fa:07:3b:87:29:de:a9:54:f2:31:6a:35:b8:
00:18:4a:b1:64:29:2d:a0:0a:9e:aa:ea:86:50:ec:16:6c:04:
7a:62:69:a8:6a:28:a2:3d:de:b5:1e:e3:f3:19:cd:27:8f:f7:
93:09:29:e3:65:e2:b2:08:54:7a:4d:99:0a:b9:f4:fb:8c:fc:
a1:d2:4c:0f:07:b5:82:06:47:81:ac:9c:b6:31:10:89:b6:8c:
17:24:a8:46:c9:80:e7:40:ca:fe:41:cb:b2:06:a9:df:98:85:
55:a3:43:08:21:17:e9:76:c3:66:fc:c0:2a:19:65:66:aa:44:
be:e1:ad:61:ea:dd:bc:58:60:13:48:75:c2:54:cb:d7:a2:fe:
7c:f5:66:ac:1e:7e:d5:89:de:4c:1c:6e:fb:f4:80:df:b8:14:
14:05:95:ab:33:a2:0f:8e:69:4c:41:0c:80:69:41:6f:56:d0:
30:29:ac:c5:98:ea:3a:8e:bd:66:e0:e6:08:56:73:7c:ef:8e:
7d:80:fa:2a:62:c9:07:ad:37:4f:d3:b0:cd:78:43:86:d2:f4:
a3:dd:f3:6f:99:30:32:27:1b:b5:1a:d1:b2:3d:d2:cf:07:c9:
93:99:dc:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 10 13:49:49 2025 by rpki-client