Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/830b5c-b6c8-4979-a53e-494e26491796/1/4QBqBtxJCZf_j8OkLs84m-090Xg.mft
File: 4QBqBtxJCZf_j8OkLs84m-090Xg.mft (raw, json)
Hash identifier: vAJkH/E7Pe/Ez8OQDiQru2ZFwOp+WJgTW8leGCfnLik=
Subject key identifier: E1:0A:DA:E6:4F:0C:E6:BD:8A:9C:43:4C:B0:C0:20:C8:35:48:76:53
Authority key identifier: E1:00:6A:06:DC:49:09:97:FF:8F:C3:A4:2E:CF:38:9B:ED:3D:D1:78
Certificate issuer: /CN=e1006a06dc490997ff8fc3a42ecf389bed3dd178
Certificate serial: 01987DF79FBE607D83D4839EA9B6E530C4D3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4QBqBtxJCZf_j8OkLs84m-090Xg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/830b5c-b6c8-4979-a53e-494e26491796/1/4QBqBtxJCZf_j8OkLs84m-090Xg.mft
Manifest number: 161C
Signing time: Wed 06 Aug 2025 06:00:36 +0000
Manifest this update: Wed 06 Aug 2025 06:00:36 +0000
Manifest next update: Thu 07 Aug 2025 06:00:36 +0000
Files and hashes: 1: 4QBqBtxJCZf_j8OkLs84m-090Xg.crl (hash: QHfr5ZvdWoD2EeCqdZ61AtQqgdCcd99qZFWi+o3l+F4=)
2: LnqHoulK3VATGmKEAn72iWxo7SM.roa (hash: yf2dP1AEzVPcio054NYKJ4SAhZkRjptLQTGykKC3qEs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/830b5c-b6c8-4979-a53e-494e26491796/1/4QBqBtxJCZf_j8OkLs84m-090Xg.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/830b5c-b6c8-4979-a53e-494e26491796/1/4QBqBtxJCZf_j8OkLs84m-090Xg.mft
rsync://rpki.ripe.net/repository/DEFAULT/4QBqBtxJCZf_j8OkLs84m-090Xg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 06:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7d:f7:9f:be:60:7d:83:d4:83:9e:a9:b6:e5:30:c4:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e1006a06dc490997ff8fc3a42ecf389bed3dd178
Validity
Not Before: Aug 6 06:00:36 2025 GMT
Not After : Aug 7 06:00:36 2025 GMT
Subject: CN=e10adae64f0ce6bd8a9c434cb0c020c835487653
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:d1:84:a8:b2:d6:9f:ef:9b:87:3a:b0:af:40:
df:f6:16:34:76:08:b0:10:1c:d7:f8:fa:4d:8f:e4:
c3:38:42:6b:7b:ba:72:02:eb:43:78:de:aa:65:f3:
bc:b7:cd:02:63:a6:56:85:44:3f:b0:3e:0a:32:ac:
00:cd:ac:fd:4e:5e:de:4f:3e:dd:89:39:2b:b4:16:
0a:0f:05:05:60:0c:3d:7d:4b:7e:db:69:d4:60:14:
9e:71:20:13:ac:61:79:7d:70:f9:21:7b:d1:3a:b6:
ba:8b:74:27:3f:b2:53:a3:bb:6d:f8:ab:34:1f:59:
9d:e0:ed:c4:08:9d:23:ac:93:dc:19:2f:79:df:b6:
9e:25:6b:e1:d9:9e:18:8d:cb:74:79:ee:54:67:d9:
55:78:75:31:88:27:c5:b5:9e:96:d9:fd:0f:a9:61:
be:7a:ba:fd:06:72:5a:c9:9f:aa:f5:8a:a0:67:4a:
7a:1b:da:08:81:97:96:54:8d:7a:a7:15:92:49:04:
71:05:a3:c7:3e:51:8c:3e:42:ff:e0:ed:11:0c:9f:
87:27:55:17:9f:00:0e:3c:04:14:2f:4f:0d:21:18:
e1:59:b7:97:96:42:e2:59:5e:78:ff:49:f5:e1:d9:
bf:bc:7c:e2:db:a1:fe:f4:d2:06:50:92:fe:25:cc:
33:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:0A:DA:E6:4F:0C:E6:BD:8A:9C:43:4C:B0:C0:20:C8:35:48:76:53
X509v3 Authority Key Identifier:
keyid:E1:00:6A:06:DC:49:09:97:FF:8F:C3:A4:2E:CF:38:9B:ED:3D:D1:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4QBqBtxJCZf_j8OkLs84m-090Xg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/830b5c-b6c8-4979-a53e-494e26491796/1/4QBqBtxJCZf_j8OkLs84m-090Xg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/830b5c-b6c8-4979-a53e-494e26491796/1/4QBqBtxJCZf_j8OkLs84m-090Xg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:52:02:46:ea:65:f3:bb:b3:e5:2c:ea:26:d5:76:a6:53:ba:
d1:1a:39:cc:f5:b7:24:ad:2b:ca:78:3e:bc:ed:25:65:4e:21:
81:b1:f9:91:c3:2a:41:20:61:e1:cf:fc:68:39:4d:11:2b:19:
ef:73:ed:8a:1c:f7:de:10:ba:20:ac:e0:f6:82:25:d5:d4:c6:
43:d7:99:d3:e6:ea:b9:fb:45:c4:75:73:cb:26:c6:1e:5d:f3:
5e:d4:56:c5:3d:a7:99:37:42:a8:58:43:75:d3:74:55:87:e7:
34:f6:47:6c:13:99:ec:a6:18:9a:2c:d8:62:85:e7:10:72:eb:
76:30:21:7c:4b:9e:d0:37:58:b7:2b:30:b1:e7:7e:23:32:85:
a3:40:e1:2b:25:ce:45:17:eb:6a:74:b0:63:8d:70:7e:eb:c6:
05:62:ba:f8:e3:c6:23:0e:5f:ac:28:a1:ed:dd:31:5d:aa:5e:
85:eb:ea:54:0e:cd:a0:cf:73:47:f0:a1:8e:d1:9e:af:ac:95:
58:77:83:d2:62:49:e6:59:10:ea:dd:f0:57:ba:04:7a:ea:b9:
1b:3b:f6:05:5a:21:49:23:37:a8:2d:29:9e:3f:36:6c:17:51:
8a:cb:00:62:49:f0:90:fa:3e:85:77:3c:c9:f0:ce:8a:46:ce:
47:61:a3:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 12:25:27 2025 by rpki-client