Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/33816b-145b-47f8-85fa-76a5385c515a/1/T9ZkbJPCl0eJ7O97REZW7mQWFyk.mft
File: T9ZkbJPCl0eJ7O97REZW7mQWFyk.mft (raw, json)
Hash identifier: taN5UYLcAzi+VfVDPfcSR5sOa+/8vW+/eNP2g1XqKjw=
Subject key identifier: 1A:F7:A3:36:AA:14:EA:33:74:5E:0D:37:34:8D:DC:CF:B7:3D:08:C3
Authority key identifier: 4F:D6:64:6C:93:C2:97:47:89:EC:EF:7B:44:46:56:EE:64:16:17:29
Certificate issuer: /CN=4fd6646c93c2974789ecef7b444656ee64161729
Certificate serial: 019867A6C33DEBB030CC2C8D44F680505249
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T9ZkbJPCl0eJ7O97REZW7mQWFyk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/33816b-145b-47f8-85fa-76a5385c515a/1/T9ZkbJPCl0eJ7O97REZW7mQWFyk.mft
Manifest number: 1610
Signing time: Fri 01 Aug 2025 22:00:38 +0000
Manifest this update: Fri 01 Aug 2025 22:00:38 +0000
Manifest next update: Sat 02 Aug 2025 22:00:38 +0000
Files and hashes: 1: HSxOpF8LeaRif88_oEZ4y7MBldM.roa (hash: n8DGCpnE1FwgPJK7R+0dK8cIDb4XdG2XSYHd7OuwJKU=)
2: T9ZkbJPCl0eJ7O97REZW7mQWFyk.crl (hash: ymfioPxSpxtjOJ+qudGNoqSK0p4GPnaQSZ54elTTDyM=)
3: W44szkVz920V6-JywE9vsVlLyvY.roa (hash: CydWhda8ET4rgRmemVZtuScSzfI/qh7Sm6ASW7UNUoE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c6/33816b-145b-47f8-85fa-76a5385c515a/1/T9ZkbJPCl0eJ7O97REZW7mQWFyk.crl
rsync://rpki.ripe.net/repository/DEFAULT/c6/33816b-145b-47f8-85fa-76a5385c515a/1/T9ZkbJPCl0eJ7O97REZW7mQWFyk.mft
rsync://rpki.ripe.net/repository/DEFAULT/T9ZkbJPCl0eJ7O97REZW7mQWFyk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 02 Aug 2025 19:51:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:67:a6:c3:3d:eb:b0:30:cc:2c:8d:44:f6:80:50:52:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fd6646c93c2974789ecef7b444656ee64161729
Validity
Not Before: Aug 1 22:00:38 2025 GMT
Not After : Aug 2 22:00:38 2025 GMT
Subject: CN=1af7a336aa14ea33745e0d37348ddccfb73d08c3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:17:9a:4b:bb:05:c4:33:b8:55:dd:ed:7e:a2:
7d:33:81:78:61:22:fd:4a:cc:9a:e5:8e:a0:23:d3:
f8:f8:c4:23:ff:bf:d1:f9:c0:28:a1:e4:5a:3e:2f:
90:ea:1a:a6:5d:ee:df:62:6a:14:61:bf:35:cb:34:
cf:06:ee:0f:bc:86:26:5b:34:e9:1b:bb:53:b4:22:
13:7a:c2:e1:3e:bf:8d:d1:d3:5c:7d:20:8c:30:ce:
8e:d0:30:fd:ea:16:08:55:bf:3c:71:9a:79:a4:25:
8b:fd:c8:68:5e:82:14:e9:39:85:d2:bc:d7:41:88:
61:ba:b3:bd:cc:5d:b7:de:5c:d0:25:36:d8:6d:04:
65:2e:f2:97:94:5e:5f:df:de:d8:15:15:5f:6f:2c:
65:2d:41:1e:67:94:81:e1:7a:1c:56:30:60:ca:eb:
55:89:79:13:27:df:c8:da:eb:49:cb:b0:c4:88:c0:
71:74:55:53:d0:21:2a:57:6b:a5:b7:e6:86:02:9e:
f0:9b:97:c5:d2:dc:ef:a7:04:ca:24:0c:ac:6d:9d:
f2:6b:f1:e6:b7:4f:0d:50:ea:fa:d4:b8:3c:c1:30:
68:d2:e9:3f:81:71:43:7c:94:82:19:73:9d:71:29:
4a:82:0e:7d:2a:94:2c:47:eb:58:ca:83:63:7a:52:
cf:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:F7:A3:36:AA:14:EA:33:74:5E:0D:37:34:8D:DC:CF:B7:3D:08:C3
X509v3 Authority Key Identifier:
keyid:4F:D6:64:6C:93:C2:97:47:89:EC:EF:7B:44:46:56:EE:64:16:17:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T9ZkbJPCl0eJ7O97REZW7mQWFyk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/33816b-145b-47f8-85fa-76a5385c515a/1/T9ZkbJPCl0eJ7O97REZW7mQWFyk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/33816b-145b-47f8-85fa-76a5385c515a/1/T9ZkbJPCl0eJ7O97REZW7mQWFyk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:a4:fd:38:40:f2:ab:e2:4d:c6:f4:27:78:3b:0c:ef:e6:57:
d2:db:64:e8:a4:bd:49:ff:df:39:7f:45:f1:f1:87:f7:58:ff:
f3:7b:4c:2d:b1:a1:55:58:ab:21:ca:7e:7d:25:56:be:1f:e2:
20:fd:94:05:8c:cf:c1:e3:b8:c8:6d:86:b5:0c:13:bd:9c:7b:
4d:52:3e:15:eb:bd:10:85:95:a9:ac:38:b7:25:ec:5f:07:7e:
21:8d:ea:b5:33:80:07:bb:56:c8:d5:ee:d0:0a:f4:e8:de:2b:
ea:7d:56:a3:37:9f:fd:d7:d0:cd:ec:5e:d0:a5:e0:38:e3:c3:
02:45:24:aa:97:62:ae:81:ee:0a:43:41:b4:6f:c4:92:d6:5a:
85:39:9b:29:b6:6d:65:4d:0f:4f:e6:ea:3c:7e:42:4e:86:92:
e0:0e:cc:d3:42:e5:19:ac:d3:92:ae:26:72:de:f3:cf:01:5a:
66:2d:bd:41:35:5d:a1:5e:3c:fd:b5:db:16:d9:68:b5:e0:87:
07:94:a8:ea:44:7e:23:ea:39:1c:8a:3b:92:15:9f:d8:7c:53:
31:0c:f4:29:8d:70:47:01:0a:a1:25:a3:d7:9c:fe:a7:c0:44:
04:b4:63:c5:d4:17:14:13:53:47:50:55:75:9c:9e:9f:bb:c8:
39:8b:74:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 1 23:32:37 2025 by rpki-client