Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/5687c1-df9f-4ae5-a4cc-ec03ebd19000/1/TIp4hmYiVL456hrdcnKOAA6ywlo.mft
File: TIp4hmYiVL456hrdcnKOAA6ywlo.mft (raw, json)
Hash identifier: ILJD7a2dKttA2PEyhMI6/Q4orvlFtPJQrKjN4NeQb/k=
Subject key identifier: E4:D0:B2:F4:F6:F0:CC:3F:77:8D:D1:43:BF:89:FD:91:57:4F:02:5F
Authority key identifier: 4C:8A:78:86:66:22:54:BE:39:EA:1A:DD:72:72:8E:00:0E:B2:C2:5A
Certificate issuer: /CN=4c8a7886662254be39ea1add72728e000eb2c25a
Certificate serial: 019879ADC9F3D1DCFE78A16B8BA3CBD02C48
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TIp4hmYiVL456hrdcnKOAA6ywlo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/5687c1-df9f-4ae5-a4cc-ec03ebd19000/1/TIp4hmYiVL456hrdcnKOAA6ywlo.mft
Manifest number: 161D
Signing time: Tue 05 Aug 2025 10:01:29 +0000
Manifest this update: Tue 05 Aug 2025 10:01:29 +0000
Manifest next update: Wed 06 Aug 2025 10:01:29 +0000
Files and hashes: 1: JjwEZWBFYdro1bclN7oB-fRyAwA.roa (hash: k4IvqBYPxW6gaMsyO55esYb4IVeV/xHT6lju64eLGfA=)
2: TIp4hmYiVL456hrdcnKOAA6ywlo.crl (hash: gZJGyGpH1wlGGAPPqL/+e2F4wL28pcddUj9v94uStZw=)
3: a9wio39nY7HA5Emvyn8dQazuTJQ.roa (hash: NmO/lOJq3pD1F19fAJROTywj9iP7yhDSrwvmQCnkS38=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/5687c1-df9f-4ae5-a4cc-ec03ebd19000/1/TIp4hmYiVL456hrdcnKOAA6ywlo.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/5687c1-df9f-4ae5-a4cc-ec03ebd19000/1/TIp4hmYiVL456hrdcnKOAA6ywlo.mft
rsync://rpki.ripe.net/repository/DEFAULT/TIp4hmYiVL456hrdcnKOAA6ywlo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 Aug 2025 10:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:79:ad:c9:f3:d1:dc:fe:78:a1:6b:8b:a3:cb:d0:2c:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4c8a7886662254be39ea1add72728e000eb2c25a
Validity
Not Before: Aug 5 10:01:29 2025 GMT
Not After : Aug 6 10:01:29 2025 GMT
Subject: CN=e4d0b2f4f6f0cc3f778dd143bf89fd91574f025f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:15:7d:0e:ab:3b:11:42:07:7e:eb:d9:53:0d:
23:e7:d2:b6:2e:1b:2f:26:e8:d3:c3:5f:52:84:07:
e4:c5:77:04:df:a8:90:89:5b:d2:0a:e8:67:e3:dd:
69:2d:0c:3d:b7:cc:53:ab:e4:0d:cf:4f:b4:51:f2:
e4:e7:63:29:8b:26:17:2a:cf:8c:34:5b:e7:8a:38:
63:e1:b0:4d:45:e1:13:d2:47:73:81:f1:bb:5f:17:
5d:3c:d8:cb:6c:16:a9:9f:fb:f2:74:78:4b:9c:2b:
c0:e2:41:0a:f5:fd:9e:90:f3:87:e2:8e:8d:5b:b3:
fb:56:94:60:99:54:60:3d:c8:a8:dc:32:9e:1a:eb:
31:90:83:93:ed:c5:b2:cf:b4:75:68:10:7c:75:84:
72:22:87:8c:38:f9:44:b7:eb:02:68:b4:b9:df:e0:
84:ee:10:f6:9d:c3:e8:94:84:aa:d8:3d:5c:52:00:
67:61:e1:68:6b:4a:f8:a6:af:be:f9:bf:2f:41:c0:
f3:79:75:5d:3e:c4:65:05:e0:4c:95:58:8a:38:d0:
2f:da:e9:34:55:75:83:71:e0:23:83:51:fb:d5:36:
00:ff:df:35:16:c0:87:4e:64:6c:4d:da:a7:26:1a:
12:c5:6f:6e:40:ba:78:5b:6c:41:c3:f9:b6:b7:35:
df:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:D0:B2:F4:F6:F0:CC:3F:77:8D:D1:43:BF:89:FD:91:57:4F:02:5F
X509v3 Authority Key Identifier:
keyid:4C:8A:78:86:66:22:54:BE:39:EA:1A:DD:72:72:8E:00:0E:B2:C2:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TIp4hmYiVL456hrdcnKOAA6ywlo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/5687c1-df9f-4ae5-a4cc-ec03ebd19000/1/TIp4hmYiVL456hrdcnKOAA6ywlo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/5687c1-df9f-4ae5-a4cc-ec03ebd19000/1/TIp4hmYiVL456hrdcnKOAA6ywlo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:79:0e:ea:d8:6b:b7:46:27:50:ca:88:7f:07:d1:a2:a9:ef:
aa:77:ef:f8:fc:70:35:a1:52:d6:44:67:75:d6:14:c0:b5:48:
df:dc:72:59:fd:fe:d5:76:32:ee:6e:c7:f9:d8:4e:83:34:bb:
c0:93:8f:7f:35:03:8e:de:c9:46:89:3b:c0:c7:d5:cb:23:65:
40:6c:1b:ba:4f:8d:04:4b:f3:3e:31:f8:0b:d9:78:11:26:51:
da:ea:34:89:e8:fd:b0:76:c3:52:08:2f:0a:6d:63:af:ae:d8:
94:3b:f7:56:f2:7e:ba:a9:46:69:16:05:88:38:4c:8a:01:a8:
8e:ad:94:c2:f7:c8:cd:0c:40:56:1c:67:0e:94:dd:56:1d:ae:
8c:8b:d8:ac:3c:b5:0f:a9:4e:aa:a2:d0:22:56:77:4e:87:e5:
4b:c1:fd:45:29:29:a6:0c:ef:3a:b9:15:f8:86:cb:98:4c:13:
eb:68:99:7c:a7:07:0a:ea:ab:ed:ba:e7:42:b0:71:b7:e5:65:
64:7a:93:b2:bc:11:b1:0f:3b:4e:4d:84:ef:81:6c:81:9c:13:
7b:1e:a4:a3:60:ca:3c:3c:b1:51:a7:f4:58:50:a7:fa:fd:ca:
a0:a9:29:80:a0:17:3a:8b:f1:d3:09:a2:f2:da:4c:12:3b:ad:
cb:ff:88:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 5 20:04:40 2025 by rpki-client