Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/fd596a-3f54-4e06-8620-6e0d213f484a/1/r4j95vrbtrLB22_kH4KdHyAVvgs.mft
File: r4j95vrbtrLB22_kH4KdHyAVvgs.mft (raw, json)
Hash identifier: obeqSXLUAWnsPoYHRIgcBDXU1iBvw4ZHC9rEiPbEWLg=
Subject key identifier: BB:C5:C6:30:69:4C:9D:44:38:8B:F4:4E:D6:B1:6A:D1:BC:FA:CD:C2
Authority key identifier: AF:88:FD:E6:FA:DB:B6:B2:C1:DB:6F:E4:1F:82:9D:1F:20:15:BE:0B
Certificate issuer: /CN=af88fde6fadbb6b2c1db6fe41f829d1f2015be0b
Certificate serial: 01987C773488A86AB0BE86A9E0F19F1D217E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r4j95vrbtrLB22_kH4KdHyAVvgs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/fd596a-3f54-4e06-8620-6e0d213f484a/1/r4j95vrbtrLB22_kH4KdHyAVvgs.mft
Manifest number: 0CB5
Signing time: Tue 05 Aug 2025 23:00:43 +0000
Manifest this update: Tue 05 Aug 2025 23:00:43 +0000
Manifest next update: Wed 06 Aug 2025 23:00:43 +0000
Files and hashes: 1: RHreYh0WmNugHNPOVP5GHBEiSQE.roa (hash: lDEy9crc1E/w31v0jSsa/vEhnHdpcWtnPtxtDbNUjjc=)
2: r4j95vrbtrLB22_kH4KdHyAVvgs.crl (hash: 4LFPL7twJbDn+QHn1cofknTtFib3Ict3Myj0PjL7cCc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/fd596a-3f54-4e06-8620-6e0d213f484a/1/r4j95vrbtrLB22_kH4KdHyAVvgs.crl
rsync://rpki.ripe.net/repository/DEFAULT/64/fd596a-3f54-4e06-8620-6e0d213f484a/1/r4j95vrbtrLB22_kH4KdHyAVvgs.mft
rsync://rpki.ripe.net/repository/DEFAULT/r4j95vrbtrLB22_kH4KdHyAVvgs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 Aug 2025 23:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7c:77:34:88:a8:6a:b0:be:86:a9:e0:f1:9f:1d:21:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=af88fde6fadbb6b2c1db6fe41f829d1f2015be0b
Validity
Not Before: Aug 5 23:00:43 2025 GMT
Not After : Aug 6 23:00:43 2025 GMT
Subject: CN=bbc5c630694c9d44388bf44ed6b16ad1bcfacdc2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:13:bb:c6:e9:e1:03:06:bb:25:9a:b5:84:7a:
e0:17:29:04:56:d8:e4:d2:22:70:c8:be:b0:d1:c1:
73:fa:48:83:9f:c7:a6:d2:29:46:bd:d4:39:3b:d3:
72:4e:2a:68:a7:cb:49:51:9d:9a:c0:15:ca:57:a2:
71:33:67:8a:36:ec:ea:e9:5e:f5:b7:dc:63:89:58:
1b:3a:8a:3e:e2:df:8e:44:59:d8:54:79:b8:01:1e:
52:12:e3:5e:80:c5:c3:ff:a7:e1:70:13:c5:e3:65:
de:6e:24:85:86:88:7c:b1:7f:22:0d:cc:c1:e2:cd:
3c:43:d8:e9:fb:65:f3:7e:2a:7f:e0:6a:27:90:e4:
b9:2a:14:5c:68:97:cb:3f:88:13:73:c7:64:c2:3b:
d4:4a:57:7d:ea:74:b3:4c:52:a9:15:48:78:3d:66:
b1:58:7f:a4:f5:77:c3:6b:25:cd:54:7a:c5:77:31:
84:da:bd:52:59:39:9e:eb:33:8e:0f:37:bd:9d:f2:
2c:1a:66:bb:d6:18:f4:e3:b8:44:f5:0e:4d:ce:a1:
f0:dc:2d:e8:84:09:c5:49:21:f1:82:ea:b1:db:ae:
5a:71:62:67:63:89:a1:ac:f3:f2:c4:6c:f9:29:9f:
9e:a8:61:28:56:97:06:6a:ad:13:48:7b:48:1c:cc:
7b:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:C5:C6:30:69:4C:9D:44:38:8B:F4:4E:D6:B1:6A:D1:BC:FA:CD:C2
X509v3 Authority Key Identifier:
keyid:AF:88:FD:E6:FA:DB:B6:B2:C1:DB:6F:E4:1F:82:9D:1F:20:15:BE:0B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r4j95vrbtrLB22_kH4KdHyAVvgs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/fd596a-3f54-4e06-8620-6e0d213f484a/1/r4j95vrbtrLB22_kH4KdHyAVvgs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/fd596a-3f54-4e06-8620-6e0d213f484a/1/r4j95vrbtrLB22_kH4KdHyAVvgs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
98:e2:4d:b3:48:fc:04:38:28:d6:9b:70:dc:20:7a:65:09:38:
48:69:23:f1:64:8b:37:20:94:73:42:55:10:0c:23:5f:ee:78:
74:41:c9:aa:b8:d2:57:c8:46:7b:54:96:92:af:b6:c7:b6:79:
c7:0b:6e:51:31:1a:c6:8d:66:36:4d:1f:d5:1d:6f:53:1f:1f:
86:35:4f:b5:76:a3:70:0a:3b:13:f0:74:e4:63:a6:e3:7f:a0:
c7:7c:35:a3:5a:63:af:6a:67:f0:24:f3:c5:d0:84:7c:c6:d2:
e2:82:58:c7:80:89:62:b1:79:c8:ab:66:69:44:b1:4a:de:55:
2d:6d:fc:9c:11:ca:0e:0f:18:ff:e0:bc:74:b2:46:0f:44:31:
53:20:7f:36:54:1e:59:13:4b:33:99:d5:87:f8:13:c3:36:6a:
26:54:56:04:8d:55:22:0f:df:49:81:34:ce:2f:c9:14:4c:66:
6d:a9:37:05:a4:5a:4b:6f:e8:03:bc:33:c0:f3:81:3a:ad:1c:
31:a1:19:4d:af:0a:e6:9d:86:69:20:f9:55:93:5b:fa:52:8e:
61:e9:d6:59:f7:4c:93:21:b4:76:89:8e:96:fe:b9:2c:2e:f8:
ea:08:bd:70:6d:b6:7c:7b:30:47:78:e0:df:ea:7e:1d:46:47:
56:d8:47:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 06:07:04 2025 by rpki-client