Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/02aa3b-e3a8-4c69-82ce-d957264653e2/1/a16LBwHjXWapeHbYBVASqJaC_cM.mft
File: a16LBwHjXWapeHbYBVASqJaC_cM.mft (raw, json)
Hash identifier: sA1odUVkLzPb/gaQm9bb+ycww3OYNRkAnIiup2GzBaE=
Subject key identifier: 38:A4:3E:A4:35:4C:A7:59:3F:F7:54:CD:61:24:C8:7B:CB:4C:E3:A3
Authority key identifier: 6B:5E:8B:07:01:E3:5D:66:A9:78:76:D8:05:50:12:A8:96:82:FD:C3
Certificate issuer: /CN=6b5e8b0701e35d66a97876d8055012a89682fdc3
Certificate serial: 01987FE6E0AB0A0057A92224ECDCD20589F9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a16LBwHjXWapeHbYBVASqJaC_cM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/02aa3b-e3a8-4c69-82ce-d957264653e2/1/a16LBwHjXWapeHbYBVASqJaC_cM.mft
Manifest number: 14F1
Signing time: Wed 06 Aug 2025 15:01:33 +0000
Manifest this update: Wed 06 Aug 2025 15:01:33 +0000
Manifest next update: Thu 07 Aug 2025 15:01:33 +0000
Files and hashes: 1: a16LBwHjXWapeHbYBVASqJaC_cM.crl (hash: ftfffwgzr9gqdEKtDy1Nx6w/JmzJSaCknuxrjj/aMcc=)
2: aFCOTElnBLsNf9Ly_hbmm8JGZvk.roa (hash: MGWHqg1x0uZrRis7Xazn4JBDX59gH8eSl4RHJngdXlI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/02aa3b-e3a8-4c69-82ce-d957264653e2/1/a16LBwHjXWapeHbYBVASqJaC_cM.crl
rsync://rpki.ripe.net/repository/DEFAULT/4a/02aa3b-e3a8-4c69-82ce-d957264653e2/1/a16LBwHjXWapeHbYBVASqJaC_cM.mft
rsync://rpki.ripe.net/repository/DEFAULT/a16LBwHjXWapeHbYBVASqJaC_cM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 15:01:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7f:e6:e0:ab:0a:00:57:a9:22:24:ec:dc:d2:05:89:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6b5e8b0701e35d66a97876d8055012a89682fdc3
Validity
Not Before: Aug 6 15:01:33 2025 GMT
Not After : Aug 7 15:01:33 2025 GMT
Subject: CN=38a43ea4354ca7593ff754cd6124c87bcb4ce3a3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:8a:5d:90:72:a7:ae:d8:f0:46:dd:de:14:fb:
a4:6d:4c:3b:2c:8a:e4:9c:e4:1d:5d:ff:7a:fd:66:
c7:75:a6:bc:c3:20:14:7b:55:b1:26:f6:58:1c:de:
ac:4a:c4:fb:f7:8f:fe:90:56:12:50:a4:25:b3:ff:
c5:76:3a:c5:5c:54:47:ce:96:36:4b:ad:be:cd:02:
31:d4:28:58:5f:90:6d:52:09:9f:d1:3e:a8:c3:df:
9e:77:62:e4:e3:62:63:72:46:66:14:f2:b7:57:2c:
38:33:ba:73:b0:8c:cb:9a:4d:9e:a8:13:5c:15:e9:
1d:b3:18:de:64:a0:0d:2f:4e:48:99:b5:c6:82:e9:
36:bf:2f:fd:7a:06:53:ba:2a:6b:71:c7:e3:60:dc:
31:43:b4:3b:0d:a2:4e:cb:2d:46:a9:53:88:78:d2:
4b:a9:b7:b3:ef:81:02:7b:62:be:43:6e:91:26:35:
d7:78:f1:27:87:86:a1:e1:5a:a7:99:c0:88:f2:08:
58:84:9a:33:89:03:b9:23:0e:37:09:88:5b:2c:9f:
83:54:d3:e8:c9:07:34:98:b3:14:35:0a:32:26:a3:
3a:30:08:e7:81:11:e9:d3:12:f8:17:e8:94:bb:41:
d7:87:11:75:4c:81:d2:19:6a:65:48:6c:e3:2d:37:
45:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:A4:3E:A4:35:4C:A7:59:3F:F7:54:CD:61:24:C8:7B:CB:4C:E3:A3
X509v3 Authority Key Identifier:
keyid:6B:5E:8B:07:01:E3:5D:66:A9:78:76:D8:05:50:12:A8:96:82:FD:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a16LBwHjXWapeHbYBVASqJaC_cM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/02aa3b-e3a8-4c69-82ce-d957264653e2/1/a16LBwHjXWapeHbYBVASqJaC_cM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/02aa3b-e3a8-4c69-82ce-d957264653e2/1/a16LBwHjXWapeHbYBVASqJaC_cM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:98:9a:4f:6c:0f:1f:9c:bd:e3:13:a7:d0:68:87:e0:2d:5d:
80:b6:b6:e2:f6:f8:53:37:98:1e:4f:87:46:3e:e5:8d:e8:75:
86:f8:e0:a7:d2:1d:af:72:ab:98:26:1b:95:27:bf:1d:51:dd:
5e:52:54:2e:d9:86:c5:27:22:f2:8a:1c:f6:10:f8:88:83:b8:
14:ac:25:a8:ca:f0:61:81:a0:9c:d3:4a:b7:01:2c:77:f0:9b:
99:06:b0:1e:40:52:dd:f5:7d:77:4b:04:07:b4:c3:b6:e9:6c:
45:55:71:85:35:35:c9:dd:fe:29:66:e8:b5:44:08:2c:f9:89:
cb:94:e2:7a:56:68:c7:31:6b:aa:06:87:c8:2b:16:32:01:9e:
ff:b8:dd:7c:6c:cc:fa:d5:50:7b:b9:e0:61:1c:84:f6:af:c7:
3b:d4:29:d3:4f:48:3a:0a:84:c2:6e:c6:5a:42:44:83:cd:d1:
4f:29:04:f4:ff:65:7a:c4:be:ff:5a:95:a1:1c:ca:0e:7d:63:
2d:49:7c:8d:1f:f6:c3:12:4d:b3:ff:9e:85:a2:87:ac:be:a4:
6a:d5:f1:97:f6:c9:99:67:61:07:af:3d:20:7c:e8:18:4a:2a:
d1:ef:70:63:1c:13:ad:44:c1:10:45:b5:d9:23:1c:c6:86:18:
f2:58:02:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 00:26:12 2025 by rpki-client