Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/b65e33-f947-4968-a27c-dd99d397e4d6/1/rN4jWPV0OcRPaxZi9VYVoKq2uss.mft
File: rN4jWPV0OcRPaxZi9VYVoKq2uss.mft (raw, json)
Hash identifier: M8rR6BqJoxa3Mw/bFbemay6vtmdEQq7zwuT9LIJj5QA=
Subject key identifier: C3:56:0B:55:E6:BB:36:48:94:DE:9E:92:EA:A5:FF:D8:73:B7:BB:D5
Authority key identifier: AC:DE:23:58:F5:74:39:C4:4F:6B:16:62:F5:56:15:A0:AA:B6:BA:CB
Certificate issuer: /CN=acde2358f57439c44f6b1662f55615a0aab6bacb
Certificate serial: 0198884496726455435C802D52C2B62D1254
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rN4jWPV0OcRPaxZi9VYVoKq2uss.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/76/b65e33-f947-4968-a27c-dd99d397e4d6/1/rN4jWPV0OcRPaxZi9VYVoKq2uss.mft
Manifest number: 1623
Signing time: Fri 08 Aug 2025 06:00:53 +0000
Manifest this update: Fri 08 Aug 2025 06:00:53 +0000
Manifest next update: Sat 09 Aug 2025 06:00:53 +0000
Files and hashes: 1: 1-XA6Oyh0n7DlBmRcqaq5JPobRBQ.roa (hash: 4xRutx43UVc6W0el47UeYIWEsInjaHlLdoMFA8q84mY=)
2: 2IN1Er2MsTzD9JeH28eRdl-c7u0.roa (hash: 02dSVlb8MKuiq6SZlhNvmzUoRJ0PeDVGS4rbsaqtZBI=)
3: rN4jWPV0OcRPaxZi9VYVoKq2uss.crl (hash: RuSapVac3B9z1XkdaaiaJNHFJjwMI0X9TPBfJuHfLyk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/76/b65e33-f947-4968-a27c-dd99d397e4d6/1/rN4jWPV0OcRPaxZi9VYVoKq2uss.crl
rsync://rpki.ripe.net/repository/DEFAULT/76/b65e33-f947-4968-a27c-dd99d397e4d6/1/rN4jWPV0OcRPaxZi9VYVoKq2uss.mft
rsync://rpki.ripe.net/repository/DEFAULT/rN4jWPV0OcRPaxZi9VYVoKq2uss.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 09 Aug 2025 06:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:88:44:96:72:64:55:43:5c:80:2d:52:c2:b6:2d:12:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=acde2358f57439c44f6b1662f55615a0aab6bacb
Validity
Not Before: Aug 8 06:00:53 2025 GMT
Not After : Aug 9 06:00:53 2025 GMT
Subject: CN=c3560b55e6bb364894de9e92eaa5ffd873b7bbd5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:15:01:54:b3:d4:23:8f:38:48:97:1c:b2:b0:
43:5e:4b:8f:85:a9:08:17:b3:c0:77:76:2f:56:e2:
f4:64:df:b9:6d:ae:3e:5d:34:7d:49:e8:d8:3b:b2:
8b:3b:20:71:92:6b:bc:a9:de:8f:44:ef:62:2e:9e:
cb:db:2d:9e:78:f5:23:ec:c6:5e:68:1f:d9:19:77:
ae:33:ca:7e:12:80:ef:0d:2f:3d:2b:c1:a0:76:ff:
b2:be:ef:d7:5b:7f:2c:03:ab:6b:99:56:02:cc:67:
e2:e8:21:c1:3e:a5:94:08:cd:75:fe:a7:93:98:06:
ab:46:5a:02:ac:07:c5:b7:00:73:12:a9:85:71:10:
e7:0b:d5:d3:77:b4:d7:58:18:50:31:d6:71:70:00:
f2:26:ec:ba:8a:1a:3a:ab:03:d9:9c:a0:e6:ac:2c:
63:82:6c:d2:a4:4d:95:88:08:89:8f:db:8b:5d:7b:
3b:8c:c5:9e:88:1b:19:32:d0:9b:90:68:a1:7d:da:
4b:ba:1e:8b:3d:26:ca:3c:da:55:1d:f2:26:05:cd:
00:f5:8d:1f:c3:3f:bd:e8:c7:d4:cb:00:dd:9e:09:
30:d8:ba:d9:f3:a2:03:5b:2d:9e:d5:35:ce:50:c7:
43:bf:49:6a:e0:6c:da:6c:3c:28:95:34:0b:e5:fc:
f3:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:56:0B:55:E6:BB:36:48:94:DE:9E:92:EA:A5:FF:D8:73:B7:BB:D5
X509v3 Authority Key Identifier:
keyid:AC:DE:23:58:F5:74:39:C4:4F:6B:16:62:F5:56:15:A0:AA:B6:BA:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rN4jWPV0OcRPaxZi9VYVoKq2uss.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/b65e33-f947-4968-a27c-dd99d397e4d6/1/rN4jWPV0OcRPaxZi9VYVoKq2uss.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/76/b65e33-f947-4968-a27c-dd99d397e4d6/1/rN4jWPV0OcRPaxZi9VYVoKq2uss.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:de:b2:d1:f6:66:34:f6:46:55:62:96:09:9b:a9:c9:f8:e8:
a4:4f:4c:4f:b0:5b:8f:b2:9d:00:21:89:7e:5c:60:ef:f2:58:
fe:a2:5c:6b:8a:ee:9e:2d:5c:0c:b6:45:52:81:4e:e2:67:e8:
3e:35:f7:05:57:59:47:b5:3d:52:0f:f6:34:ab:b4:00:ad:4c:
6c:7d:90:07:67:d0:a3:97:94:9b:d8:9f:ae:f9:2a:70:9d:ac:
b2:fa:5c:a9:c7:3e:28:81:b6:01:5b:69:82:2a:5c:bc:45:1e:
96:0f:c7:c9:98:fe:47:d4:40:f8:7e:f5:44:50:be:52:ce:a2:
9f:a2:86:4b:8f:b8:90:64:b0:5c:08:f4:a0:2a:8e:d0:2e:34:
00:84:ef:20:91:5c:0f:69:df:56:d8:c8:0f:09:9d:f7:d7:75:
e6:21:27:2e:6b:cf:70:70:ba:a8:76:e1:83:bc:ec:bb:aa:e1:
a1:65:67:0d:f4:3e:2d:5e:ce:ab:50:75:e9:db:23:90:f2:26:
f0:b6:83:6b:ad:f3:95:12:d3:cd:70:74:26:eb:11:fc:33:78:
86:72:92:33:2e:b9:39:c7:02:2e:b8:42:c1:7a:00:d4:42:2f:
cb:2c:5e:ed:23:5c:9d:2a:c5:4c:df:af:d0:d4:4b:0b:86:04:
e2:26:93:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 8 12:48:35 2025 by rpki-client