Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/2160f4-7d57-4c7c-89af-98f1a2dfc39c/1/pB97t76hWBYk_LZQOrWnD0IMmz4.mft
File: pB97t76hWBYk_LZQOrWnD0IMmz4.mft (raw, json)
Hash identifier: qbWZUd8Fez5U4ttCPZ8sTqk7fB3ML2ugX8xCT6DS/7M=
Subject key identifier: 1F:E7:6B:D9:6A:E2:08:49:61:C1:A0:60:78:A9:62:45:1A:89:A9:F7
Authority key identifier: A4:1F:7B:B7:BE:A1:58:16:24:FC:B6:50:3A:B5:A7:0F:42:0C:9B:3E
Certificate issuer: /CN=a41f7bb7bea1581624fcb6503ab5a70f420c9b3e
Certificate serial: 0198C610A4509F4BABCFF795DF4A12E76FAD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pB97t76hWBYk_LZQOrWnD0IMmz4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/2160f4-7d57-4c7c-89af-98f1a2dfc39c/1/pB97t76hWBYk_LZQOrWnD0IMmz4.mft
Manifest number: F4
Signing time: Wed 20 Aug 2025 06:00:36 +0000
Manifest this update: Wed 20 Aug 2025 06:00:36 +0000
Manifest next update: Thu 21 Aug 2025 06:00:36 +0000
Files and hashes: 1: TOnoVfX8Ap4KHroZhyTiZTPqFbo.roa (hash: h8XoURF67JqruQUoq14dZxGEi4Cnu4hmR974XbY5rg8=)
2: bktyDBqNSVITQAf_MKFUeQ2s_nU.roa (hash: q/tuR42MGkp/VtZe/IwxRfy5LTdFIBVwnpSc5i4a68A=)
3: pB97t76hWBYk_LZQOrWnD0IMmz4.crl (hash: hlG+tNk2BMvHVNBKw1nFV7ovlMhTOOCr6uth4CJQwZQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9f/2160f4-7d57-4c7c-89af-98f1a2dfc39c/1/pB97t76hWBYk_LZQOrWnD0IMmz4.crl
rsync://rpki.ripe.net/repository/DEFAULT/9f/2160f4-7d57-4c7c-89af-98f1a2dfc39c/1/pB97t76hWBYk_LZQOrWnD0IMmz4.mft
rsync://rpki.ripe.net/repository/DEFAULT/pB97t76hWBYk_LZQOrWnD0IMmz4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 21 Aug 2025 06:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:c6:10:a4:50:9f:4b:ab:cf:f7:95:df:4a:12:e7:6f:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a41f7bb7bea1581624fcb6503ab5a70f420c9b3e
Validity
Not Before: Aug 20 06:00:36 2025 GMT
Not After : Aug 21 06:00:36 2025 GMT
Subject: CN=1fe76bd96ae2084961c1a06078a962451a89a9f7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:e1:3a:df:ab:88:9e:25:7c:4a:f9:58:c4:3e:
be:c5:42:f7:88:6d:ae:3c:e9:88:c2:e9:26:2a:f7:
34:65:2d:48:85:d0:b4:80:32:a5:a2:8a:b3:4b:22:
44:87:c7:67:88:88:e8:c0:32:78:70:be:ac:f7:e2:
49:fc:05:cf:51:f2:c2:bb:2c:d8:e2:ce:61:f2:f4:
cf:a5:13:9d:6c:0b:09:2d:90:7b:2e:de:ca:fd:a0:
cf:5e:21:34:9c:df:fa:a6:25:75:6a:e5:9c:e2:17:
ed:88:2e:2c:bc:8c:33:19:9c:20:9c:7c:52:fa:8e:
9f:05:9e:aa:58:39:e0:fa:e0:f5:c3:19:fd:00:79:
ca:1d:45:fe:26:d5:f8:01:51:71:de:18:7f:02:16:
b8:b6:95:91:07:ca:27:33:17:c2:1c:49:15:31:2c:
4b:3e:4c:ef:f5:13:a3:8e:69:b7:6e:e7:de:5a:88:
3e:42:52:7e:3c:14:ea:a2:50:7e:d8:49:cc:fa:08:
08:9e:e8:27:0d:41:9d:a2:81:a1:c2:80:35:25:46:
d4:90:88:cd:bc:2f:8b:9b:b3:6a:15:f4:d3:8d:37:
c5:ae:f6:fa:72:19:94:f2:29:75:97:25:12:a4:76:
da:84:76:3c:9d:46:df:a7:8b:71:49:3b:7c:4c:40:
57:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:E7:6B:D9:6A:E2:08:49:61:C1:A0:60:78:A9:62:45:1A:89:A9:F7
X509v3 Authority Key Identifier:
keyid:A4:1F:7B:B7:BE:A1:58:16:24:FC:B6:50:3A:B5:A7:0F:42:0C:9B:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pB97t76hWBYk_LZQOrWnD0IMmz4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/2160f4-7d57-4c7c-89af-98f1a2dfc39c/1/pB97t76hWBYk_LZQOrWnD0IMmz4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/2160f4-7d57-4c7c-89af-98f1a2dfc39c/1/pB97t76hWBYk_LZQOrWnD0IMmz4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a3:cf:b4:a7:32:93:37:86:c9:cf:69:06:c6:c9:cb:65:4f:7d:
33:13:f6:72:5d:e8:e3:66:16:41:2f:71:1f:a6:eb:cb:e1:27:
1a:43:13:a8:e8:48:c2:be:90:20:21:53:04:6c:a0:74:10:c0:
83:dd:7a:00:aa:63:7a:9f:78:57:3b:d5:cd:8f:d6:eb:88:42:
96:d1:60:de:dd:e2:07:7a:2a:12:9b:73:23:8f:d9:d2:4f:80:
b8:7a:e7:e5:9e:d7:15:ad:65:e8:e9:aa:7c:bd:47:da:ff:a4:
f3:4b:cc:3b:9f:dd:5f:94:6e:8b:34:ba:7e:d4:e9:27:8c:fb:
70:63:ae:5f:64:53:b4:58:ac:a2:04:c8:76:1b:cb:cd:eb:ac:
b8:df:f9:20:1f:ba:b0:5e:a2:9d:cf:fd:ac:97:f7:2d:60:bb:
39:67:aa:cb:3f:c3:a7:83:fb:29:34:dc:4d:94:4e:cf:3d:ad:
6a:dd:1d:08:a9:52:20:6a:94:bc:0e:42:a6:a4:d4:89:ca:e1:
0a:bc:c4:47:2b:7f:57:91:cc:6a:dd:f7:08:c4:38:06:73:3b:
3a:bd:46:cc:42:98:4b:5c:bb:a3:95:ef:75:15:25:32:c5:25:
80:b5:61:fd:34:b6:08:d5:f9:f9:1c:33:8b:e0:5f:ff:35:d8:
d2:f9:3c:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 20 15:25:54 2025 by rpki-client