Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/603c58-1002-4069-8917-7054eb2c4c00/1/04G3AXBRkLnOnRsYRTU4TnHKMWU.mft
File: 04G3AXBRkLnOnRsYRTU4TnHKMWU.mft (raw, json)
Hash identifier: bFGZa3m53FHS2xkU1EHoAoAYR1kigmx5aSGJjb6gq60=
Subject key identifier: B8:A9:14:48:CA:70:DA:0A:14:3E:97:EF:1E:2E:1D:DC:B9:2F:90:6C
Authority key identifier: D3:81:B7:01:70:51:90:B9:CE:9D:1B:18:45:35:38:4E:71:CA:31:65
Certificate issuer: /CN=d381b701705190b9ce9d1b184535384e71ca3165
Certificate serial: 01987D8BC5FD8E7300D1F7948C3CD8F2BB8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/04G3AXBRkLnOnRsYRTU4TnHKMWU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/603c58-1002-4069-8917-7054eb2c4c00/1/04G3AXBRkLnOnRsYRTU4TnHKMWU.mft
Manifest number: 161A
Signing time: Wed 06 Aug 2025 04:02:48 +0000
Manifest this update: Wed 06 Aug 2025 04:02:48 +0000
Manifest next update: Thu 07 Aug 2025 04:02:48 +0000
Files and hashes: 1: 04G3AXBRkLnOnRsYRTU4TnHKMWU.crl (hash: UAlt6hXWrlHvdbXkdp2sxCkbtkTlAlZATaZnx/434dc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0a/603c58-1002-4069-8917-7054eb2c4c00/1/04G3AXBRkLnOnRsYRTU4TnHKMWU.crl
rsync://rpki.ripe.net/repository/DEFAULT/0a/603c58-1002-4069-8917-7054eb2c4c00/1/04G3AXBRkLnOnRsYRTU4TnHKMWU.mft
rsync://rpki.ripe.net/repository/DEFAULT/04G3AXBRkLnOnRsYRTU4TnHKMWU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 Aug 2025 23:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7d:8b:c5:fd:8e:73:00:d1:f7:94:8c:3c:d8:f2:bb:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d381b701705190b9ce9d1b184535384e71ca3165
Validity
Not Before: Aug 6 04:02:48 2025 GMT
Not After : Aug 7 04:02:48 2025 GMT
Subject: CN=b8a91448ca70da0a143e97ef1e2e1ddcb92f906c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:86:6f:28:16:45:41:a8:47:93:24:8b:83:b6:
dd:2e:4d:d6:96:34:6d:50:aa:fa:a6:4d:7a:b0:60:
ff:3c:27:cf:78:a6:44:31:ac:c7:2e:9f:11:39:97:
e6:7d:da:2e:54:07:54:2a:c4:a0:ab:aa:aa:10:21:
9d:2b:85:28:fd:22:60:e1:72:d5:11:bc:ce:36:30:
aa:80:04:ae:e1:d6:b6:5d:fb:a2:79:5c:13:06:f3:
87:7b:5b:cb:b0:49:ba:f8:d6:f9:2e:a2:da:6b:57:
6a:c0:87:2f:80:7a:5f:f8:78:b5:c2:b3:b0:53:f6:
4c:af:e3:57:5f:a2:e9:6e:25:91:9f:a2:af:ff:8f:
8c:c2:88:f8:0d:47:4f:55:dc:41:4c:71:5e:5f:48:
7b:5b:cc:5e:e0:1f:34:a3:01:26:46:e6:c7:24:a1:
b8:74:f2:78:cb:e9:e6:5a:1c:7b:af:21:ff:6a:7a:
34:6b:a3:7a:a6:ca:a2:d3:eb:6f:80:9c:c6:35:d4:
f3:76:a2:e4:e7:b6:e2:9d:64:87:46:95:97:af:a7:
02:a0:ba:b4:e9:57:21:37:cb:7c:0e:7c:44:25:c1:
cb:e0:11:a3:2b:2c:be:7f:7b:54:41:07:b1:a1:3b:
ae:fd:5a:ba:f0:a1:e1:b7:d2:ac:0f:eb:f7:ae:aa:
24:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:A9:14:48:CA:70:DA:0A:14:3E:97:EF:1E:2E:1D:DC:B9:2F:90:6C
X509v3 Authority Key Identifier:
keyid:D3:81:B7:01:70:51:90:B9:CE:9D:1B:18:45:35:38:4E:71:CA:31:65
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/04G3AXBRkLnOnRsYRTU4TnHKMWU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/603c58-1002-4069-8917-7054eb2c4c00/1/04G3AXBRkLnOnRsYRTU4TnHKMWU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/603c58-1002-4069-8917-7054eb2c4c00/1/04G3AXBRkLnOnRsYRTU4TnHKMWU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:ba:58:51:b2:e9:15:96:0a:00:d0:7f:17:4c:34:e1:28:ab:
47:80:27:4c:e9:97:16:80:a3:44:47:7c:be:3f:83:e8:7e:43:
98:55:73:79:94:90:89:2f:c7:ed:00:c3:61:96:01:da:19:13:
e1:97:6f:e1:fc:9b:25:33:44:d8:8d:0e:31:72:83:f5:7c:42:
81:df:74:9a:71:e6:bf:55:d7:48:0c:6f:57:bc:6d:c0:32:32:
f8:fc:ce:e9:10:8c:18:8c:10:99:56:c9:f6:a9:ba:b4:c7:c6:
da:a4:84:6b:e8:a5:31:4a:1b:2b:a6:82:a4:2d:7e:5f:19:11:
f3:f9:f5:7a:0b:f8:d2:54:f8:41:bd:fc:ec:71:52:d4:15:09:
e0:92:f5:19:3d:e2:15:99:14:43:46:55:f2:eb:52:94:58:d0:
54:d2:7e:5e:22:9a:2f:e8:d4:ac:06:e9:32:3d:de:65:79:08:
24:fb:16:f2:d6:12:1f:a5:0d:e5:77:d1:c5:5e:25:f0:42:d0:
1a:e3:01:36:5c:c4:56:da:a2:46:ad:56:73:98:a9:25:97:86:
9b:57:e8:a2:7b:0e:07:7a:15:a0:9b:5b:c9:25:75:d3:4a:d6:
1f:77:08:15:86:8f:12:e9:f1:06:d0:d1:9c:f8:ae:80:5c:15:
bb:96:11:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 09:30:12 2025 by rpki-client