Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/6aeda8-b75c-4bbb-8e7d-8feaafac7e89/1/c4P6Q4pvrmKzX5CRh2xE3tucDaM.mft
File: c4P6Q4pvrmKzX5CRh2xE3tucDaM.mft (raw, json)
Hash identifier: LIMdWg3azSAtSj6zUfgGhd4vtIdqhXyevY9uyPdbX4Q=
Subject key identifier: 7D:37:EA:6F:72:42:C0:BF:17:7C:4D:4F:2D:42:8E:72:03:35:AD:E4
Authority key identifier: 73:83:FA:43:8A:6F:AE:62:B3:5F:90:91:87:6C:44:DE:DB:9C:0D:A3
Certificate issuer: /CN=7383fa438a6fae62b35f9091876c44dedb9c0da3
Certificate serial: 01987A890D58B66F79D1C80C6FD36E637EEA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/c4P6Q4pvrmKzX5CRh2xE3tucDaM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/6aeda8-b75c-4bbb-8e7d-8feaafac7e89/1/c4P6Q4pvrmKzX5CRh2xE3tucDaM.mft
Manifest number: 0ABF
Signing time: Tue 05 Aug 2025 14:00:58 +0000
Manifest this update: Tue 05 Aug 2025 14:00:58 +0000
Manifest next update: Wed 06 Aug 2025 14:00:58 +0000
Files and hashes: 1: c4P6Q4pvrmKzX5CRh2xE3tucDaM.crl (hash: 4OgGHNaiH8CVr2RfUu1rCPdmyeiFde90dhGUS9X8sAo=)
2: cJOETGpzF01z2PB9BHQ2YdHB3Oo.roa (hash: ddSAvoAgeQ9Rf29fTQhbhEaJlnO0oFB6dwFmZVNzK/g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/6aeda8-b75c-4bbb-8e7d-8feaafac7e89/1/c4P6Q4pvrmKzX5CRh2xE3tucDaM.crl
rsync://rpki.ripe.net/repository/DEFAULT/58/6aeda8-b75c-4bbb-8e7d-8feaafac7e89/1/c4P6Q4pvrmKzX5CRh2xE3tucDaM.mft
rsync://rpki.ripe.net/repository/DEFAULT/c4P6Q4pvrmKzX5CRh2xE3tucDaM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 Aug 2025 14:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7a:89:0d:58:b6:6f:79:d1:c8:0c:6f:d3:6e:63:7e:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7383fa438a6fae62b35f9091876c44dedb9c0da3
Validity
Not Before: Aug 5 14:00:58 2025 GMT
Not After : Aug 6 14:00:58 2025 GMT
Subject: CN=7d37ea6f7242c0bf177c4d4f2d428e720335ade4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:c7:7d:e9:50:5f:ae:3d:25:7d:e5:24:3e:77:
38:d9:9f:55:43:5c:52:8e:95:54:73:96:bd:1a:85:
99:b3:c1:66:b6:73:e0:a1:3c:0d:d2:28:3a:e6:ef:
8c:18:8a:b4:64:6d:a1:4c:74:bf:de:12:7e:76:ec:
0e:4b:3b:f6:fe:ef:f7:32:06:4a:ee:7f:33:d6:4c:
24:a5:4c:09:f8:88:82:83:67:c2:41:57:00:cd:02:
4e:a4:fb:e5:7c:30:2d:b2:02:34:8a:2e:08:d9:47:
e1:90:2b:21:e1:a3:e0:24:a5:d1:30:96:bb:99:60:
83:84:f2:dc:38:72:43:50:4e:0d:ad:a7:33:90:b0:
f2:b2:72:a4:82:9e:63:c6:99:65:9a:98:2b:0c:aa:
d0:f1:a5:08:c4:42:0a:22:bf:e8:4b:17:71:de:38:
c9:1c:1c:d6:03:7c:49:c1:7d:57:d4:6b:a0:17:73:
a6:d6:73:6e:18:87:6e:61:b5:47:0a:4b:71:37:7d:
36:fb:3b:4f:2f:49:37:47:7c:83:af:18:90:33:85:
fe:23:05:97:27:13:9a:63:c4:8a:58:6f:80:c6:d6:
ce:fc:6d:fc:ec:13:35:54:3b:0a:a8:17:14:a9:28:
fd:2a:2e:c7:c2:64:ba:8e:70:c7:88:05:c5:e2:58:
b8:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:37:EA:6F:72:42:C0:BF:17:7C:4D:4F:2D:42:8E:72:03:35:AD:E4
X509v3 Authority Key Identifier:
keyid:73:83:FA:43:8A:6F:AE:62:B3:5F:90:91:87:6C:44:DE:DB:9C:0D:A3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4P6Q4pvrmKzX5CRh2xE3tucDaM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/6aeda8-b75c-4bbb-8e7d-8feaafac7e89/1/c4P6Q4pvrmKzX5CRh2xE3tucDaM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/6aeda8-b75c-4bbb-8e7d-8feaafac7e89/1/c4P6Q4pvrmKzX5CRh2xE3tucDaM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:7f:5c:bf:77:b1:dc:0c:f9:f6:4e:e4:42:eb:f7:13:8b:e2:
3c:36:00:fd:fa:8d:fc:98:cd:8b:e0:78:6d:17:5d:13:99:e3:
9b:8a:8e:fc:b6:46:9f:0d:cc:92:8e:52:c7:b1:52:2c:e7:38:
46:c9:ff:32:12:49:9b:f7:de:bd:1f:c9:65:c3:87:e3:66:54:
a0:e3:14:4b:02:54:d6:7d:e8:50:a4:3b:67:69:03:b9:59:31:
e9:6c:dd:29:84:4e:db:45:14:49:61:4a:75:3e:bb:70:14:89:
83:7a:7a:26:17:8a:20:9b:0d:06:18:80:7c:b5:06:4d:2e:e6:
7f:39:df:be:d7:7a:30:1a:fe:d7:bb:30:8d:c9:9c:60:33:7c:
aa:8d:0b:23:15:ca:b7:08:6d:c4:65:37:da:58:28:1b:ce:90:
4f:0a:d6:5a:71:be:6d:1a:6e:b7:cd:66:60:c8:b1:39:46:84:
64:c3:32:9e:1c:c2:78:b1:12:e1:f9:ca:2f:a0:d8:e4:a5:99:
a3:72:07:a2:53:ae:63:0e:79:51:b9:d0:55:e4:c9:a8:c9:4d:
b2:ff:6f:d2:46:0d:f1:3d:cb:de:f8:c0:9e:08:01:83:a9:1f:
4e:bd:fe:cd:9f:7f:fb:43:e7:a2:1a:30:b5:35:d6:6f:cd:cd:
64:23:91:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 5 17:08:38 2025 by rpki-client