Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/f8a0a5-b185-49a5-85ad-133eff78442b/1/_4C3cQsTmEQnXJ3pyOdk62QuGMM.mft
File: _4C3cQsTmEQnXJ3pyOdk62QuGMM.mft (raw, json)
Hash identifier: A09BgUuZucggD/+cA/0kgM77IgkH+lzFRQjrKDCqnBU=
Subject key identifier: 59:5B:A5:1E:5C:3F:78:60:93:66:5C:CC:94:F2:78:7D:48:A2:5E:59
Authority key identifier: FF:80:B7:71:0B:13:98:44:27:5C:9D:E9:C8:E7:64:EB:64:2E:18:C3
Certificate issuer: /CN=ff80b7710b139844275c9de9c8e764eb642e18c3
Certificate serial: 01987E669DB38E319F508BD399986F7E7308
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_4C3cQsTmEQnXJ3pyOdk62QuGMM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/f8a0a5-b185-49a5-85ad-133eff78442b/1/_4C3cQsTmEQnXJ3pyOdk62QuGMM.mft
Manifest number: 1203
Signing time: Wed 06 Aug 2025 08:01:50 +0000
Manifest this update: Wed 06 Aug 2025 08:01:50 +0000
Manifest next update: Thu 07 Aug 2025 08:01:50 +0000
Files and hashes: 1: Dx1gAqycGcxk0c3DOzDhmsNycjk.roa (hash: DxcHYS8M2M1yYvT8l/4w2YI9cemThALPivyuAHPlg0M=)
2: _4C3cQsTmEQnXJ3pyOdk62QuGMM.crl (hash: RQ3MqYnsnJv2Ojg5GcutGHef43DIu3xHGyz3OYEVlIE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/f8a0a5-b185-49a5-85ad-133eff78442b/1/_4C3cQsTmEQnXJ3pyOdk62QuGMM.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/f8a0a5-b185-49a5-85ad-133eff78442b/1/_4C3cQsTmEQnXJ3pyOdk62QuGMM.mft
rsync://rpki.ripe.net/repository/DEFAULT/_4C3cQsTmEQnXJ3pyOdk62QuGMM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 08:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7e:66:9d:b3:8e:31:9f:50:8b:d3:99:98:6f:7e:73:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ff80b7710b139844275c9de9c8e764eb642e18c3
Validity
Not Before: Aug 6 08:01:50 2025 GMT
Not After : Aug 7 08:01:50 2025 GMT
Subject: CN=595ba51e5c3f786093665ccc94f2787d48a25e59
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:cc:e7:54:39:36:22:30:20:bc:bd:0b:b1:d6:
e9:b4:6b:cc:dc:e9:e6:7d:ec:3c:09:e7:8b:ea:9a:
ec:ad:70:88:84:ed:05:ab:7d:fa:c8:e9:75:7f:60:
40:dc:ec:d5:06:7d:06:13:e4:40:1b:c6:ff:15:5a:
0b:dd:52:e1:3b:ad:7c:05:a9:89:eb:36:90:2a:cf:
8e:42:b5:46:61:42:88:8a:45:f1:82:d2:02:7e:92:
f1:0b:64:90:2a:11:9c:4e:d3:82:b0:83:7a:ca:78:
b9:be:fb:23:22:ec:c8:10:f0:64:a2:84:29:ec:42:
f2:50:a9:5f:18:7c:c5:fb:ea:bf:f7:0b:a2:55:84:
92:f7:d5:e8:7a:89:55:88:b3:cf:1b:3f:b1:65:71:
cc:71:13:74:05:0f:68:5a:d7:f2:2b:77:cc:cf:a8:
d5:2e:dc:ff:4a:0c:4f:e4:07:93:e5:e2:b1:b4:cc:
29:39:24:7d:6c:31:81:cc:69:cc:13:7b:53:e8:c6:
a6:4c:2e:41:fa:10:7c:5b:40:d8:2b:6b:f8:eb:4a:
93:00:06:8d:29:c2:1f:7c:e0:49:8f:da:a6:cf:6a:
b8:a5:49:aa:62:02:2b:c2:95:da:fc:74:b8:d4:43:
11:e1:47:66:fd:6a:17:41:08:dc:62:18:43:3e:fb:
41:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:5B:A5:1E:5C:3F:78:60:93:66:5C:CC:94:F2:78:7D:48:A2:5E:59
X509v3 Authority Key Identifier:
keyid:FF:80:B7:71:0B:13:98:44:27:5C:9D:E9:C8:E7:64:EB:64:2E:18:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_4C3cQsTmEQnXJ3pyOdk62QuGMM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/f8a0a5-b185-49a5-85ad-133eff78442b/1/_4C3cQsTmEQnXJ3pyOdk62QuGMM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/f8a0a5-b185-49a5-85ad-133eff78442b/1/_4C3cQsTmEQnXJ3pyOdk62QuGMM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:bf:78:83:33:06:f7:b7:c2:d0:cf:ea:b1:2b:e5:1c:7b:59:
67:0e:27:f2:ab:6c:9c:1c:c3:ee:76:5f:b9:fd:d2:da:d9:38:
fa:67:85:ce:35:e8:5e:a1:d7:02:5b:ea:9d:41:bf:18:2b:11:
e5:6b:49:10:58:78:c5:6b:73:53:11:45:2d:e1:32:a0:c8:58:
08:69:21:a7:14:11:ad:8a:d7:83:89:30:2e:fa:ee:32:19:1b:
5b:57:c1:92:45:1a:a3:ef:c5:73:57:14:87:9c:ed:e2:97:c6:
7f:c1:53:32:6d:eb:b7:7d:8f:23:d8:27:52:e1:2a:80:1d:76:
4a:48:8e:40:2d:24:45:03:88:ed:9a:c0:06:fc:f0:fe:91:ce:
d2:fe:89:55:c2:06:1d:51:f1:30:84:38:81:c8:7b:2e:8f:e0:
b2:dc:55:0a:fb:89:c7:10:80:16:54:e5:85:26:fd:d4:79:3a:
45:f3:19:cb:6a:5a:f0:e8:6c:4a:8e:3a:f4:d3:3e:f1:8e:a1:
1c:16:aa:72:20:63:2b:a2:3c:41:b3:a1:bc:53:a9:0a:a7:fe:
98:45:6a:16:6a:ba:7f:0b:fb:34:3e:4b:21:12:b3:1b:86:62:
1d:cb:8e:49:91:dc:01:fd:6c:23:16:3f:a3:42:6a:27:9a:b6:
77:54:46:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 11:01:39 2025 by rpki-client