Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/5b0342-5e52-4c56-81b3-dc0dc5d5141f/1/b4bJ980XO7zR22Hg8bTr4FwbnKE.mft
File: b4bJ980XO7zR22Hg8bTr4FwbnKE.mft (raw, json)
Hash identifier: rt0wSg1BLNzceuVy2mZ+/YEz2z76vG17nJve7R6lK54=
Subject key identifier: CA:8A:1F:F8:59:0F:13:64:EC:97:5C:BD:BC:18:3D:FE:90:EF:A1:6B
Authority key identifier: 6F:86:C9:F7:CD:17:3B:BC:D1:DB:61:E0:F1:B4:EB:E0:5C:1B:9C:A1
Certificate issuer: /CN=6f86c9f7cd173bbcd1db61e0f1b4ebe05c1b9ca1
Certificate serial: 0198868D43C6BBDFC6517A96B1527E85FDD3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b4bJ980XO7zR22Hg8bTr4FwbnKE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/5b0342-5e52-4c56-81b3-dc0dc5d5141f/1/b4bJ980XO7zR22Hg8bTr4FwbnKE.mft
Manifest number: 1031
Signing time: Thu 07 Aug 2025 22:01:01 +0000
Manifest this update: Thu 07 Aug 2025 22:01:01 +0000
Manifest next update: Fri 08 Aug 2025 22:01:01 +0000
Files and hashes: 1: 7BXDP2MXXtjiuKfCj7kGQbobaJg.roa (hash: dX4O/Ud+qTWtCLczeQoZeg+HV0IvLYclumW7g97KhD4=)
2: b4bJ980XO7zR22Hg8bTr4FwbnKE.crl (hash: AguuoWR1QDyVgCNI7ERhWxXdLdv2rfOOG9jtJMNZQgk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/5b0342-5e52-4c56-81b3-dc0dc5d5141f/1/b4bJ980XO7zR22Hg8bTr4FwbnKE.crl
rsync://rpki.ripe.net/repository/DEFAULT/48/5b0342-5e52-4c56-81b3-dc0dc5d5141f/1/b4bJ980XO7zR22Hg8bTr4FwbnKE.mft
rsync://rpki.ripe.net/repository/DEFAULT/b4bJ980XO7zR22Hg8bTr4FwbnKE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 08 Aug 2025 17:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:86:8d:43:c6:bb:df:c6:51:7a:96:b1:52:7e:85:fd:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f86c9f7cd173bbcd1db61e0f1b4ebe05c1b9ca1
Validity
Not Before: Aug 7 22:01:01 2025 GMT
Not After : Aug 8 22:01:01 2025 GMT
Subject: CN=ca8a1ff8590f1364ec975cbdbc183dfe90efa16b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:75:20:96:06:5a:c3:0f:35:9f:d6:12:49:40:
e1:45:b7:b1:ef:b4:5b:d0:c1:9d:eb:91:53:15:d5:
bc:3a:8e:9f:f6:da:2e:28:e0:ad:51:07:9e:f0:5d:
5f:b8:0b:99:7c:18:f0:45:2b:68:49:a2:16:cf:0f:
ab:15:db:4d:4a:e7:cf:cd:37:eb:67:1b:98:21:b0:
d6:b9:59:5e:cf:70:b8:06:be:c0:77:fe:35:27:fb:
9f:93:48:7f:c8:09:c5:78:34:63:fe:36:62:ab:b5:
76:d2:29:fa:2c:8a:35:4c:d5:c9:f0:de:db:8d:8a:
d1:02:89:8b:70:20:02:28:65:d0:85:be:36:26:6f:
28:7d:ce:e2:ad:6b:89:2d:9b:9a:b6:6c:34:51:40:
87:45:86:bd:33:61:07:05:8b:7a:2b:d1:06:de:6c:
03:8d:fe:e5:5a:58:f2:19:0e:b5:2f:b9:b4:6e:49:
e1:f7:81:f0:c8:ab:fc:95:93:23:fe:ae:21:a3:aa:
04:26:04:9b:67:64:e2:e6:bc:2e:a1:96:81:4e:38:
8e:87:d5:08:04:ef:b6:c4:26:2d:2f:e5:d6:e3:2a:
1e:a2:aa:b4:fc:13:00:8b:2e:7d:71:c9:78:50:7d:
a8:f0:38:5d:6e:3f:de:99:56:6b:c2:af:87:b3:4a:
3c:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:8A:1F:F8:59:0F:13:64:EC:97:5C:BD:BC:18:3D:FE:90:EF:A1:6B
X509v3 Authority Key Identifier:
keyid:6F:86:C9:F7:CD:17:3B:BC:D1:DB:61:E0:F1:B4:EB:E0:5C:1B:9C:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4bJ980XO7zR22Hg8bTr4FwbnKE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/5b0342-5e52-4c56-81b3-dc0dc5d5141f/1/b4bJ980XO7zR22Hg8bTr4FwbnKE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/48/5b0342-5e52-4c56-81b3-dc0dc5d5141f/1/b4bJ980XO7zR22Hg8bTr4FwbnKE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:5a:2f:4d:51:4f:f6:a2:42:b4:55:07:21:ca:61:70:0b:87:
3b:e1:f9:cb:dc:52:df:56:8a:61:74:da:ae:65:d6:f8:5b:06:
93:ff:fa:80:4f:74:24:97:0c:f4:91:37:de:07:c0:b9:f1:19:
54:87:20:11:d7:c4:cd:88:68:82:48:c8:48:4b:4c:a6:90:35:
ff:42:11:a6:07:0c:ad:46:f7:40:33:08:ca:52:42:50:e6:f6:
35:97:63:16:82:4a:1a:bb:7f:79:63:91:0e:c7:06:bf:a6:0b:
2d:53:de:5c:02:9c:36:b8:9a:ee:2c:fa:a3:8b:dc:83:f0:9e:
dc:90:db:5f:75:22:73:ec:5b:4c:09:84:39:ea:5e:97:b8:45:
0d:5d:bd:db:0d:0b:b9:29:9b:92:01:bb:34:e0:6a:58:b2:43:
b4:8d:d8:59:a7:15:ac:c7:e3:df:46:9f:3c:d2:43:22:9c:e0:
4e:d9:70:c8:b7:18:ed:86:10:31:fc:cf:4f:fa:7c:57:33:a0:
2c:43:aa:5d:30:54:f1:b7:63:b1:89:dc:1d:20:28:1a:f1:d3:
91:81:a8:c8:34:84:bd:65:6f:b3:0c:1d:86:09:92:44:8e:65:
a5:6f:72:1d:a7:0a:27:d4:c1:d4:8d:d5:18:d5:10:5d:78:16:
04:f8:d5:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 8 00:49:41 2025 by rpki-client