Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/bef6e8-8873-4529-8e72-238c6d8a4c17/1/pId4Lj9wxc0nsy9SdNDlvGLpXK8.mft
File: pId4Lj9wxc0nsy9SdNDlvGLpXK8.mft (raw, json)
Hash identifier: c6+8tKttoqD82sTp0EVjYoo6mOfKPzBG4cwviLUM7Qk=
Subject key identifier: 24:D7:BE:22:0F:CB:89:F9:B1:3E:22:B8:B1:5F:68:74:A4:9C:51:E4
Authority key identifier: A4:87:78:2E:3F:70:C5:CD:27:B3:2F:52:74:D0:E5:BC:62:E9:5C:AF
Certificate issuer: /CN=a487782e3f70c5cd27b32f5274d0e5bc62e95caf
Certificate serial: 019886566C76B37BEC104BB3DDF3BDFE2189
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pId4Lj9wxc0nsy9SdNDlvGLpXK8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/bef6e8-8873-4529-8e72-238c6d8a4c17/1/pId4Lj9wxc0nsy9SdNDlvGLpXK8.mft
Manifest number: 1010
Signing time: Thu 07 Aug 2025 21:01:07 +0000
Manifest this update: Thu 07 Aug 2025 21:01:07 +0000
Manifest next update: Fri 08 Aug 2025 21:01:07 +0000
Files and hashes: 1: 03LlpQC3OthhaMKAkoHkTsK5DvM.roa (hash: MXfk52dc+50VpTuEktAwLc5jK+27W4bau786/NbUnKQ=)
2: FDaJnwtdKIaCGJVg6QNctNX3wpA.roa (hash: nG1/6+0MejULa30YNNdRkzBTjiM/zpm9raBFToCey7o=)
3: pId4Lj9wxc0nsy9SdNDlvGLpXK8.crl (hash: X4riBYemdKgnSkOWkrEVzPzSJpG/xg/jgb3PMAUZURw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/bef6e8-8873-4529-8e72-238c6d8a4c17/1/pId4Lj9wxc0nsy9SdNDlvGLpXK8.crl
rsync://rpki.ripe.net/repository/DEFAULT/4f/bef6e8-8873-4529-8e72-238c6d8a4c17/1/pId4Lj9wxc0nsy9SdNDlvGLpXK8.mft
rsync://rpki.ripe.net/repository/DEFAULT/pId4Lj9wxc0nsy9SdNDlvGLpXK8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 08 Aug 2025 17:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:86:56:6c:76:b3:7b:ec:10:4b:b3:dd:f3:bd:fe:21:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a487782e3f70c5cd27b32f5274d0e5bc62e95caf
Validity
Not Before: Aug 7 21:01:07 2025 GMT
Not After : Aug 8 21:01:07 2025 GMT
Subject: CN=24d7be220fcb89f9b13e22b8b15f6874a49c51e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:27:38:18:16:b8:ba:78:f2:15:21:ce:f1:77:
ff:27:91:21:a8:13:66:31:1d:83:9e:f0:58:1a:71:
71:53:bf:1b:0a:cf:f1:bc:83:8b:53:96:ed:b5:10:
c4:26:38:c3:5e:0e:df:9d:50:10:ba:db:fa:94:c5:
f2:95:8d:ba:a7:c1:50:cb:96:a5:67:b7:ce:f0:94:
bd:3c:01:46:2e:7e:ab:fc:74:57:b5:d3:31:70:56:
9e:3d:e7:85:16:22:50:42:2c:bf:c1:18:41:4b:3f:
1e:23:bf:94:e4:8e:4d:8c:90:2b:87:ce:7a:a9:bd:
1e:62:61:5f:c3:a5:3e:d6:69:fe:3d:29:a7:04:28:
d7:c8:30:87:f5:51:16:28:94:df:d9:e1:be:13:1e:
06:e0:2c:e0:3a:2c:5d:23:cc:81:19:41:f7:e7:14:
6a:f6:b3:23:25:20:fb:88:6b:8b:95:51:43:b7:64:
da:74:b9:c5:14:88:67:39:4d:85:48:13:32:32:76:
6a:8f:a8:3f:3b:04:93:68:76:d4:1d:8a:d0:19:33:
3f:b0:24:97:07:a1:88:17:c3:b9:15:f4:90:20:dd:
de:be:5c:06:1d:48:20:80:e4:30:39:ad:83:b1:1b:
aa:d4:30:89:df:14:2f:8a:ee:20:e7:a3:ef:2c:58:
ae:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:D7:BE:22:0F:CB:89:F9:B1:3E:22:B8:B1:5F:68:74:A4:9C:51:E4
X509v3 Authority Key Identifier:
keyid:A4:87:78:2E:3F:70:C5:CD:27:B3:2F:52:74:D0:E5:BC:62:E9:5C:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pId4Lj9wxc0nsy9SdNDlvGLpXK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/bef6e8-8873-4529-8e72-238c6d8a4c17/1/pId4Lj9wxc0nsy9SdNDlvGLpXK8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/bef6e8-8873-4529-8e72-238c6d8a4c17/1/pId4Lj9wxc0nsy9SdNDlvGLpXK8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9d:0c:38:7e:2d:e5:df:b2:1f:8d:a9:fb:02:40:1c:8c:22:92:
e5:1f:11:8d:6a:65:dc:b7:da:1b:2f:69:fb:2c:5c:0b:c6:24:
b8:d6:29:0a:d3:fb:dd:85:7f:50:9d:85:d9:82:1b:3c:31:63:
99:60:b6:6a:65:00:a2:f3:42:0f:9f:ee:9d:1a:d8:b3:e6:70:
5d:3f:b2:ff:ca:fa:f0:83:46:87:49:f3:7f:18:ac:fc:56:f0:
44:1b:d2:39:b1:56:bb:16:78:7d:a7:1d:70:ab:86:62:37:f4:
89:4d:ef:02:aa:f2:28:a8:e8:fb:1f:d3:1f:c0:75:24:86:90:
e4:a2:e7:b8:a4:0e:79:22:3a:6e:46:68:5d:31:37:cf:06:30:
f8:1f:4d:69:80:28:c3:79:4b:d6:83:53:1e:d6:e4:78:56:ba:
18:99:c3:b3:01:56:de:c9:e1:a6:01:70:06:13:79:d9:a1:fd:
ae:c3:28:0b:c3:f6:99:8f:f0:e4:64:76:c3:a4:2b:73:11:e6:
df:86:ce:c5:3e:80:c2:af:32:8c:68:32:9f:42:90:f9:29:66:
63:bc:aa:49:f2:9f:fd:0a:30:fa:96:75:e1:b0:28:ab:4c:d9:
0d:ab:4a:ae:77:aa:bf:85:0e:5a:d9:98:6f:d3:10:74:24:18:
4c:35:f0:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 8 00:47:31 2025 by rpki-client