Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/5841b1-012f-4046-b1d5-099bad03768e/1/d44TTk_7X7E6woT-lIgnaCYVZjI.mft
File: d44TTk_7X7E6woT-lIgnaCYVZjI.mft (raw, json)
Hash identifier: WwnTeadEov23NsTYQTjK/IdTrFQ89GUIufdzoHOO+Mc=
Subject key identifier: 4F:B7:89:BA:CF:70:38:EA:2E:44:A4:37:EA:28:A7:8F:14:D1:6F:78
Authority key identifier: 77:8E:13:4E:4F:FB:5F:B1:3A:C2:84:FE:94:88:27:68:26:15:66:32
Certificate issuer: /CN=778e134e4ffb5fb13ac284fe9488276826156632
Certificate serial: 0198CCB8D76EF92793ABC61D8BA1E9ED348D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/d44TTk_7X7E6woT-lIgnaCYVZjI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/5841b1-012f-4046-b1d5-099bad03768e/1/d44TTk_7X7E6woT-lIgnaCYVZjI.mft
Manifest number: 0BA0
Signing time: Thu 21 Aug 2025 13:02:02 +0000
Manifest this update: Thu 21 Aug 2025 13:02:02 +0000
Manifest next update: Fri 22 Aug 2025 13:02:02 +0000
Files and hashes: 1: YmdDnE-Vn1310ZEVyUeueCTQcs4.roa (hash: NlHhFYGZnQdX8LSnZttscO3Rwl4+d4S2jrYpL4VTU9k=)
2: d44TTk_7X7E6woT-lIgnaCYVZjI.crl (hash: jsBeCfNrqfUPpYQ95Dxgd1XTqjF6czV8gOsMcuszjro=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/5841b1-012f-4046-b1d5-099bad03768e/1/d44TTk_7X7E6woT-lIgnaCYVZjI.crl
rsync://rpki.ripe.net/repository/DEFAULT/a3/5841b1-012f-4046-b1d5-099bad03768e/1/d44TTk_7X7E6woT-lIgnaCYVZjI.mft
rsync://rpki.ripe.net/repository/DEFAULT/d44TTk_7X7E6woT-lIgnaCYVZjI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 22 Aug 2025 08:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:cc:b8:d7:6e:f9:27:93:ab:c6:1d:8b:a1:e9:ed:34:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=778e134e4ffb5fb13ac284fe9488276826156632
Validity
Not Before: Aug 21 13:02:02 2025 GMT
Not After : Aug 22 13:02:02 2025 GMT
Subject: CN=4fb789bacf7038ea2e44a437ea28a78f14d16f78
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:7e:d5:fa:49:43:0a:f6:c6:e4:17:ea:0b:8f:
ec:54:37:c6:73:1c:f2:92:12:a9:19:60:9e:94:fa:
d4:3e:6f:a0:1b:e2:98:7b:8c:1c:87:cb:fa:bb:06:
e5:cc:2d:b5:c0:3c:5e:2b:77:01:71:7b:3f:eb:a0:
0b:a8:9f:da:76:db:86:2a:55:44:98:5c:69:fc:5b:
0b:c4:60:0a:51:ff:15:e5:57:59:ff:a6:c2:6c:81:
eb:92:01:50:e2:6b:28:9c:cd:d0:e2:9c:d6:51:a3:
4b:14:7b:58:be:5b:59:be:bc:2a:05:18:ab:e6:b0:
be:44:12:f7:17:0f:25:24:b5:6f:ed:0f:ca:4c:78:
cc:0a:ca:4b:c9:e9:ff:34:41:17:38:9a:e7:e4:ae:
fc:67:bf:24:61:3f:64:5f:ff:a8:4a:78:e3:74:92:
24:b7:43:67:47:6e:a8:a1:02:22:50:80:bc:8a:ec:
14:58:3b:77:c9:1b:97:17:e7:2f:cd:0a:5a:b8:9f:
6e:b2:28:cd:83:a8:57:5b:07:c2:1f:bb:2b:4c:90:
e7:f8:af:3c:7f:6e:42:a2:b7:a2:da:c1:5d:a0:3f:
0a:2c:8f:45:41:db:9c:8e:da:97:52:d1:1c:93:8d:
26:33:17:d0:d5:9c:6d:84:bf:24:61:df:de:be:5f:
1c:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:B7:89:BA:CF:70:38:EA:2E:44:A4:37:EA:28:A7:8F:14:D1:6F:78
X509v3 Authority Key Identifier:
keyid:77:8E:13:4E:4F:FB:5F:B1:3A:C2:84:FE:94:88:27:68:26:15:66:32
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d44TTk_7X7E6woT-lIgnaCYVZjI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/5841b1-012f-4046-b1d5-099bad03768e/1/d44TTk_7X7E6woT-lIgnaCYVZjI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/5841b1-012f-4046-b1d5-099bad03768e/1/d44TTk_7X7E6woT-lIgnaCYVZjI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:bd:80:51:45:aa:d9:12:91:2f:55:9e:5b:83:0f:1b:c5:99:
1b:d6:5e:2f:b4:c1:8c:1a:b0:e3:fb:0b:82:e5:0c:23:a0:58:
31:b1:57:fd:e2:d3:e8:b6:78:46:90:b3:1b:7f:f3:c7:2f:f7:
83:c4:53:55:dd:e6:8d:68:a5:99:0f:c0:43:38:d6:11:d5:9b:
b8:13:5a:85:ff:af:bb:37:19:d6:95:d1:9b:99:57:b3:63:16:
16:a1:d8:cc:3b:43:86:78:ad:e7:67:46:8d:a4:6c:61:e2:bb:
58:77:49:bd:b6:39:43:8c:3d:4d:10:dd:a2:b0:45:79:ef:a4:
85:6b:a3:47:90:06:59:f0:e9:f2:e7:51:ee:d5:1b:7c:ba:de:
f4:b9:9d:47:d1:ab:54:9f:7a:fb:61:05:90:be:0c:80:07:7e:
30:f9:90:cc:07:85:fd:9a:1c:9c:0d:16:39:78:37:b2:00:46:
c9:94:b3:20:e3:2b:12:94:b8:c3:5e:d0:7e:87:ad:4e:21:8e:
ba:80:85:53:3a:05:b2:8d:19:81:45:3b:de:d2:9e:34:c7:5b:
6b:0e:91:a6:56:1f:65:36:d3:e7:07:e3:21:c4:87:13:1c:8d:
ad:dc:52:d7:03:69:49:6c:b9:74:0a:15:59:c2:5f:83:19:eb:
a8:e5:0f:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 21 15:56:37 2025 by rpki-client