Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/a0735a-511c-48c9-a61a-0c2ff7937e6f/1/INW4SDsXErcCNUEFbnMIU2bSk0Y.mft
File: INW4SDsXErcCNUEFbnMIU2bSk0Y.mft (raw, json)
Hash identifier: K0dfhqEEq66bYgpTFRuKpCI5zjC2CpsQMpJq1e+PgWY=
Subject key identifier: 76:CF:0E:B2:4B:52:03:44:69:A3:71:DF:FB:38:FF:5A:CE:A8:35:0C
Authority key identifier: 20:D5:B8:48:3B:17:12:B7:02:35:41:05:6E:73:08:53:66:D2:93:46
Certificate issuer: /CN=20d5b8483b1712b7023541056e73085366d29346
Certificate serial: 0199228CB9B3C49C3180C32E8C6123F7686B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/INW4SDsXErcCNUEFbnMIU2bSk0Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/a0735a-511c-48c9-a61a-0c2ff7937e6f/1/INW4SDsXErcCNUEFbnMIU2bSk0Y.mft
Manifest number: 0BB8
Signing time: Sun 07 Sep 2025 05:01:11 +0000
Manifest this update: Sun 07 Sep 2025 05:01:11 +0000
Manifest next update: Mon 08 Sep 2025 05:01:11 +0000
Files and hashes: 1: INW4SDsXErcCNUEFbnMIU2bSk0Y.crl (hash: C8B64h35RMYZD4mX84+lJOUaGtXM7XxxPm7wqQtU6kQ=)
2: ttJJaBUZDaYcQDBtp6etg0tHOcw.roa (hash: eyDaETbBTLM6QaTgVh4ZT2/g+b+CTdUyos3+nCYyg/Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/a0735a-511c-48c9-a61a-0c2ff7937e6f/1/INW4SDsXErcCNUEFbnMIU2bSk0Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/a0735a-511c-48c9-a61a-0c2ff7937e6f/1/INW4SDsXErcCNUEFbnMIU2bSk0Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/INW4SDsXErcCNUEFbnMIU2bSk0Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:8c:b9:b3:c4:9c:31:80:c3:2e:8c:61:23:f7:68:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=20d5b8483b1712b7023541056e73085366d29346
Validity
Not Before: Sep 7 05:01:11 2025 GMT
Not After : Sep 8 05:01:11 2025 GMT
Subject: CN=76cf0eb24b52034469a371dffb38ff5acea8350c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:de:30:0b:25:f2:9c:cb:f5:ea:d1:be:08:f4:
83:ce:66:b5:e7:03:6d:07:2f:a0:f2:90:46:ea:3c:
03:8b:fb:be:2c:fa:9c:ef:b4:63:46:d5:f8:65:d3:
a1:ce:43:4c:e5:73:74:7c:f2:27:35:64:80:31:84:
45:62:ca:2a:e8:db:08:51:4d:79:04:34:6b:7e:98:
96:f8:59:fa:88:7d:5f:49:29:4c:3e:7e:35:0d:fe:
c1:90:4b:0d:d7:70:1a:62:db:17:45:f3:cd:60:98:
77:09:21:ff:3e:07:63:7d:82:fb:ce:53:d0:5b:26:
2c:15:ec:51:d3:89:d4:3d:5d:4e:e3:50:ff:f1:85:
3c:db:f0:22:be:69:4b:ee:55:28:dc:b5:2e:69:05:
b5:1b:b1:63:96:70:f7:c9:6f:c1:bb:4b:e8:ae:5b:
43:a4:d5:65:48:df:50:77:68:f5:97:cc:8d:6d:ed:
60:61:99:80:2f:41:5b:d5:f8:bc:bb:ef:af:dc:21:
63:37:0e:e0:c4:43:13:b5:cb:62:2d:fa:dd:ed:e4:
ac:f8:d4:78:cf:c4:88:45:47:a4:4b:be:f9:4f:ff:
d7:ff:26:92:44:33:a3:21:dc:a1:3e:e4:7e:cd:30:
fe:81:30:e1:af:de:ce:80:f6:02:78:3a:60:f3:d1:
03:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:CF:0E:B2:4B:52:03:44:69:A3:71:DF:FB:38:FF:5A:CE:A8:35:0C
X509v3 Authority Key Identifier:
keyid:20:D5:B8:48:3B:17:12:B7:02:35:41:05:6E:73:08:53:66:D2:93:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/INW4SDsXErcCNUEFbnMIU2bSk0Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/a0735a-511c-48c9-a61a-0c2ff7937e6f/1/INW4SDsXErcCNUEFbnMIU2bSk0Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/a0735a-511c-48c9-a61a-0c2ff7937e6f/1/INW4SDsXErcCNUEFbnMIU2bSk0Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b7:23:28:a5:81:9d:da:17:9c:d5:ce:78:dd:f1:d1:fe:b8:29:
b1:95:79:f2:28:5e:29:0b:6c:91:ac:06:9b:86:b9:49:05:3f:
5d:0a:a4:e3:13:34:e7:b3:8c:4d:ad:ae:e2:48:fc:9a:a0:52:
2a:77:5d:ac:a2:cf:06:46:46:af:87:1b:47:35:ec:ad:c2:e2:
19:f0:a0:2f:49:57:4f:03:6d:10:60:fb:52:59:ef:33:71:92:
ec:23:e5:ac:a6:8d:ad:58:3c:95:7f:5a:8a:29:9a:51:fa:4d:
a1:0e:86:48:27:49:19:3d:bd:8d:aa:6d:d2:60:40:f2:9e:e6:
cb:25:cb:ab:64:9b:19:da:86:61:fa:c3:f0:ed:11:83:42:ea:
b6:89:ec:b5:ae:78:b9:de:33:f9:39:9c:71:65:05:a2:f2:c7:
a0:71:63:ed:70:3c:e9:aa:86:7e:e1:c8:70:60:8a:43:ef:15:
61:f2:d6:48:ae:95:d0:63:6a:85:0f:92:85:a2:2f:eb:c5:31:
cd:ab:2d:34:81:ad:23:a6:50:4b:c0:77:92:2a:94:ef:0a:40:
d2:f8:23:1b:c0:4b:8c:1d:87:56:19:66:80:d4:48:e7:71:06:
29:53:e4:b8:45:85:9e:cf:58:bd:68:f5:8d:3e:19:14:b1:e9:
10:22:06:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 11:39:01 2025 by rpki-client