Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/0789aa-9e73-45ee-91b6-143ff60d9991/1/RA6IwxN_ipFffaG1wDQcoYwsI0w.mft
File: RA6IwxN_ipFffaG1wDQcoYwsI0w.mft (raw, json)
Hash identifier: dW1s5E58X1dN1hJSjEG2863cso9alR4//XmaAbetG2g=
Subject key identifier: C7:64:B4:AF:1F:20:32:62:16:EA:99:1C:02:FA:23:60:7C:A2:D9:A6
Authority key identifier: 44:0E:88:C3:13:7F:8A:91:5F:7D:A1:B5:C0:34:1C:A1:8C:2C:23:4C
Certificate issuer: /CN=440e88c3137f8a915f7da1b5c0341ca18c2c234c
Certificate serial: 01987E65D14792623123BE584017338AC009
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RA6IwxN_ipFffaG1wDQcoYwsI0w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/0789aa-9e73-45ee-91b6-143ff60d9991/1/RA6IwxN_ipFffaG1wDQcoYwsI0w.mft
Manifest number: 0140
Signing time: Wed 06 Aug 2025 08:00:58 +0000
Manifest this update: Wed 06 Aug 2025 08:00:58 +0000
Manifest next update: Thu 07 Aug 2025 08:00:58 +0000
Files and hashes: 1: ERKKjb9maK6l2D8S98DiUvq_sHY.roa (hash: K5h5Qq2Di55EgzF5bOxkfD2fsAbyW8q02xX4iijsUmk=)
2: RA6IwxN_ipFffaG1wDQcoYwsI0w.crl (hash: AwxkqA/4PRGiNQ+m4GTqy0M9S2SUILQn7mfe5iLY4QY=)
3: uC4_l-E2xjwrvlqz30Q-HpJhGxI.roa (hash: eCi9fijMSbE+YJ8x/iuJrnNqx//o/hxhFT+nJZyvJ+A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4b/0789aa-9e73-45ee-91b6-143ff60d9991/1/RA6IwxN_ipFffaG1wDQcoYwsI0w.crl
rsync://rpki.ripe.net/repository/DEFAULT/4b/0789aa-9e73-45ee-91b6-143ff60d9991/1/RA6IwxN_ipFffaG1wDQcoYwsI0w.mft
rsync://rpki.ripe.net/repository/DEFAULT/RA6IwxN_ipFffaG1wDQcoYwsI0w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 08:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7e:65:d1:47:92:62:31:23:be:58:40:17:33:8a:c0:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=440e88c3137f8a915f7da1b5c0341ca18c2c234c
Validity
Not Before: Aug 6 08:00:58 2025 GMT
Not After : Aug 7 08:00:58 2025 GMT
Subject: CN=c764b4af1f20326216ea991c02fa23607ca2d9a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:bf:ad:5b:94:7a:e0:5f:98:d2:83:ad:df:3f:
aa:82:76:eb:2b:4b:22:36:bb:fb:97:74:3c:5c:d0:
9a:3b:35:ec:03:e5:d9:19:25:97:64:56:1a:00:a5:
a8:15:1f:59:0d:40:a5:b6:37:c0:65:53:da:7d:ff:
a4:0b:60:42:d6:cf:1e:2e:e7:6b:46:31:8f:b7:04:
d7:07:84:52:53:83:5a:35:47:39:f2:47:c5:ae:5f:
84:55:95:43:2d:e5:d2:67:43:ee:67:dc:2d:45:3c:
e8:b3:af:e8:42:b6:1f:79:b4:63:98:b5:ad:a0:f5:
54:5e:a8:81:7a:2f:cd:81:7d:a2:13:20:1d:7d:b6:
ac:02:5a:0d:1e:a3:1d:20:4e:a8:41:3c:35:98:92:
e2:34:b8:24:44:d2:99:73:c6:2d:3f:e3:39:67:46:
ca:75:9c:57:12:ab:62:11:6a:0a:63:c5:d2:9d:db:
4c:83:ed:82:94:6f:04:b2:52:48:9b:f5:c6:73:83:
be:c3:30:4e:82:c1:ec:da:5f:ce:20:3b:59:fe:a7:
c7:9b:fe:52:1d:fc:12:d7:af:ae:1e:71:b0:3c:51:
0a:a7:4e:60:8b:a6:5e:e4:a0:ca:d6:3a:f1:86:6e:
56:be:eb:53:ba:fe:6b:8d:9f:ab:32:16:9e:ae:60:
a7:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:64:B4:AF:1F:20:32:62:16:EA:99:1C:02:FA:23:60:7C:A2:D9:A6
X509v3 Authority Key Identifier:
keyid:44:0E:88:C3:13:7F:8A:91:5F:7D:A1:B5:C0:34:1C:A1:8C:2C:23:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RA6IwxN_ipFffaG1wDQcoYwsI0w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/0789aa-9e73-45ee-91b6-143ff60d9991/1/RA6IwxN_ipFffaG1wDQcoYwsI0w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/0789aa-9e73-45ee-91b6-143ff60d9991/1/RA6IwxN_ipFffaG1wDQcoYwsI0w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
92:2b:ff:2b:fc:51:68:2d:a9:a4:72:82:2d:26:48:8d:5e:2f:
e8:5c:c1:61:0c:5b:92:c3:ac:4f:fe:21:b8:a8:ec:16:60:bf:
d8:71:6f:20:65:b7:86:2a:1d:55:6c:00:45:69:d8:7e:5e:10:
fd:e8:53:25:8d:65:a4:e4:84:dc:8f:2f:32:a2:0e:04:63:5c:
52:c5:f5:db:ca:41:24:54:7b:18:34:82:8b:76:fe:54:15:cd:
d1:f6:97:5f:14:71:a7:a1:50:3c:77:9f:c1:c9:88:09:22:fb:
2b:bb:0c:3d:b5:77:66:c4:d0:16:f6:17:bd:92:cf:27:49:f4:
fd:e0:dd:a0:26:a6:27:54:19:64:78:9a:c4:80:2f:ba:40:fe:
33:ea:d9:2c:fc:89:39:08:7f:86:0f:0d:af:3e:ae:ec:82:94:
0a:8e:fd:8c:e0:90:92:2e:7c:92:10:7b:05:19:bd:45:92:8f:
5e:8e:91:fe:f6:28:89:5a:56:00:78:84:40:e4:a5:be:4e:79:
55:db:76:77:ec:78:39:d8:cf:88:17:eb:15:78:97:23:90:33:
7b:79:9b:10:7b:08:db:3d:98:82:b5:07:e1:78:5d:20:b9:c5:
6f:3f:87:be:5f:6f:6c:a0:20:06:ae:6e:a4:0f:99:5f:fa:0f:
a4:74:3c:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 16:19:40 2025 by rpki-client