Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/7e38b2-bec1-4464-a0ca-7d258b620169/1/p_lKuTUFS4bctdatutLf21ZLUkg.mft
File: p_lKuTUFS4bctdatutLf21ZLUkg.mft (raw, json)
Hash identifier: TVYAxkyyvPjO6ZwdHQDYgDIE4PUjGQPyHJCG26AROaQ=
Subject key identifier: 1F:DA:ED:57:37:57:DE:AA:77:DC:B7:14:96:93:FD:D7:D1:98:96:48
Authority key identifier: A7:F9:4A:B9:35:05:4B:86:DC:B5:D6:AD:BA:D2:DF:DB:56:4B:52:48
Certificate issuer: /CN=a7f94ab935054b86dcb5d6adbad2dfdb564b5248
Certificate serial: 019872CF66E716A08F5C4EA2A81614D7AC5C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/p_lKuTUFS4bctdatutLf21ZLUkg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/7e38b2-bec1-4464-a0ca-7d258b620169/1/p_lKuTUFS4bctdatutLf21ZLUkg.mft
Manifest number: 1619
Signing time: Mon 04 Aug 2025 02:00:51 +0000
Manifest this update: Mon 04 Aug 2025 02:00:51 +0000
Manifest next update: Tue 05 Aug 2025 02:00:51 +0000
Files and hashes: 1: 64bxF7wA4GbyNp68j4QvJJrXvcY.roa (hash: /BZbUI4tcOvcN8G1/WOb5wicEcPAOnUGplNlfdXvoLw=)
2: 6i00LPl42nHb8qbMKvKVhPUPT4A.roa (hash: 2YZA57Jg0ln+zFDDEt7ePeu3FeU4ieQ7XTEhkxEpCwM=)
3: O0E_dnFN5zi96CvgLLN6eJoyMkM.roa (hash: Ns1LJilR3FhqXle0WRn94Ds/xQRz0HxzYlILaBi7ZCU=)
4: p_lKuTUFS4bctdatutLf21ZLUkg.crl (hash: yOboGNKo2EzWeIncsuyMiMLx206L6+p/YD0F2sxg7d8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/7e38b2-bec1-4464-a0ca-7d258b620169/1/p_lKuTUFS4bctdatutLf21ZLUkg.crl
rsync://rpki.ripe.net/repository/DEFAULT/3c/7e38b2-bec1-4464-a0ca-7d258b620169/1/p_lKuTUFS4bctdatutLf21ZLUkg.mft
rsync://rpki.ripe.net/repository/DEFAULT/p_lKuTUFS4bctdatutLf21ZLUkg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 02:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:72:cf:66:e7:16:a0:8f:5c:4e:a2:a8:16:14:d7:ac:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a7f94ab935054b86dcb5d6adbad2dfdb564b5248
Validity
Not Before: Aug 4 02:00:51 2025 GMT
Not After : Aug 5 02:00:51 2025 GMT
Subject: CN=1fdaed573757deaa77dcb7149693fdd7d1989648
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:fc:aa:50:3c:55:33:6e:a9:51:d8:e2:6c:a7:
0c:f4:80:5f:87:e7:4b:a7:45:83:49:08:49:ec:98:
7a:3d:2f:c4:90:49:8d:03:cb:ba:29:68:a8:1f:eb:
eb:09:1d:ae:d3:58:3e:84:86:54:76:7a:da:b6:8f:
b9:5f:1d:c9:f8:bb:de:18:5c:d7:24:3a:e6:d1:cd:
98:aa:ee:52:2c:e6:5e:df:2d:7e:ad:bc:2f:8c:45:
26:2c:01:d3:64:0b:1a:78:5c:db:6a:dd:37:51:eb:
93:28:b0:51:df:57:32:ae:cb:12:8b:aa:02:97:23:
83:cd:87:cd:ab:34:da:4d:96:ee:2a:ba:d1:39:9c:
88:64:98:4a:5c:c0:74:ba:05:92:54:65:68:4a:a7:
ec:6c:47:cd:87:1b:5d:5d:1c:05:94:88:8f:3c:1f:
aa:75:8b:5b:43:85:54:05:e6:73:e4:e5:9a:e9:7b:
81:41:c2:f9:92:4c:88:f8:d4:d5:8e:2f:80:3f:eb:
de:9f:97:5f:97:b2:67:40:7d:5c:0b:c6:1c:41:e3:
47:a1:c8:2a:36:bc:3f:58:52:e6:00:32:a6:bd:ad:
50:dd:d6:14:47:bf:0d:e4:7b:1a:55:89:66:ef:60:
03:40:dd:63:96:51:d5:9a:6b:80:4d:23:19:4c:01:
68:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:DA:ED:57:37:57:DE:AA:77:DC:B7:14:96:93:FD:D7:D1:98:96:48
X509v3 Authority Key Identifier:
keyid:A7:F9:4A:B9:35:05:4B:86:DC:B5:D6:AD:BA:D2:DF:DB:56:4B:52:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p_lKuTUFS4bctdatutLf21ZLUkg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/7e38b2-bec1-4464-a0ca-7d258b620169/1/p_lKuTUFS4bctdatutLf21ZLUkg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/7e38b2-bec1-4464-a0ca-7d258b620169/1/p_lKuTUFS4bctdatutLf21ZLUkg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:50:03:3c:a5:b7:dd:05:4f:ef:d6:1e:71:aa:f4:02:ff:77:
73:18:2f:9b:0c:fc:0a:33:e1:14:09:ed:87:6b:5b:9c:79:bb:
24:e8:e4:07:5d:f0:18:5e:97:43:bf:b8:0c:a9:a3:0c:1d:74:
36:2a:9c:16:34:05:48:f4:0c:d3:ed:93:c6:97:ba:fc:fc:1c:
34:2f:96:28:44:1d:50:d2:cd:6e:ba:4d:81:86:7a:1b:16:1f:
84:58:a0:f1:36:a3:87:48:94:72:01:ba:c6:f7:ab:d9:77:3a:
84:ba:f6:4f:47:56:58:b8:43:2a:8d:57:92:02:c1:1d:48:94:
f3:c8:64:45:01:53:57:ae:95:fd:0d:68:87:b8:d2:88:63:85:
6b:1b:ad:2c:02:03:45:17:88:39:95:e4:e5:85:9e:76:5a:96:
37:80:0e:97:37:aa:dd:dc:0b:8e:26:f9:b8:6b:37:2f:fc:13:
2a:24:3c:16:8e:52:2c:d6:db:21:43:a1:61:bb:41:cc:07:b0:
e7:a4:05:33:68:94:f6:d3:6e:03:05:aa:0a:d5:c0:97:49:37:
38:72:ea:6e:61:ef:85:47:a9:39:a6:30:01:13:23:12:b3:24:
d3:26:1a:f4:be:3d:48:98:87:95:82:23:32:8b:61:34:3f:6f:
11:70:c2:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:17:20 2025 by rpki-client