Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/584691-a971-4587-a7a5-8cbb6e7822d2/1/b88Z734vchyq9pz4LUynxLVBU2Q.mft
File: b88Z734vchyq9pz4LUynxLVBU2Q.mft (raw, json)
Hash identifier: 9JhCFU7sm1qoszG4lkrguSiYw3o+5dtvxQ+hSkVZik4=
Subject key identifier: 1C:DD:EC:B8:B5:E9:61:42:A1:F1:60:68:CA:56:89:F0:AE:68:7A:A8
Authority key identifier: 6F:CF:19:EF:7E:2F:72:1C:AA:F6:9C:F8:2D:4C:A7:C4:B5:41:53:64
Certificate issuer: /CN=6fcf19ef7e2f721caaf69cf82d4ca7c4b5415364
Certificate serial: 0198854474486C98D64BCC72882213BC0577
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b88Z734vchyq9pz4LUynxLVBU2Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/584691-a971-4587-a7a5-8cbb6e7822d2/1/b88Z734vchyq9pz4LUynxLVBU2Q.mft
Manifest number: 1620
Signing time: Thu 07 Aug 2025 16:01:52 +0000
Manifest this update: Thu 07 Aug 2025 16:01:52 +0000
Manifest next update: Fri 08 Aug 2025 16:01:52 +0000
Files and hashes: 1: WzJBeEEQzWYcl7q5TX6p0F9jB_8.roa (hash: fTX9dCvlUyS92mU9zMfvVFn7IN42FVvudIXSZvqnY2s=)
2: b88Z734vchyq9pz4LUynxLVBU2Q.crl (hash: rZanEn0ZvfA8xnz2zyk4oqORsgVcANzvftd+HoUoFK4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/584691-a971-4587-a7a5-8cbb6e7822d2/1/b88Z734vchyq9pz4LUynxLVBU2Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/584691-a971-4587-a7a5-8cbb6e7822d2/1/b88Z734vchyq9pz4LUynxLVBU2Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/b88Z734vchyq9pz4LUynxLVBU2Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 08 Aug 2025 16:01:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:85:44:74:48:6c:98:d6:4b:cc:72:88:22:13:bc:05:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6fcf19ef7e2f721caaf69cf82d4ca7c4b5415364
Validity
Not Before: Aug 7 16:01:52 2025 GMT
Not After : Aug 8 16:01:52 2025 GMT
Subject: CN=1cddecb8b5e96142a1f16068ca5689f0ae687aa8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:26:dd:b3:8c:91:61:f5:3a:2d:e7:11:b8:15:
37:84:b3:87:c3:fb:e4:09:05:fc:d3:d6:49:6e:a4:
78:ea:55:a8:12:82:85:20:d3:3a:01:da:22:53:e1:
33:ed:61:76:e2:ee:07:a0:3e:b8:88:8b:04:a2:5a:
d7:ef:cd:f5:5f:93:5f:63:e2:11:60:da:3b:f4:5f:
a6:f1:30:d2:8b:65:b3:57:e8:1a:19:c3:fd:42:fd:
cd:63:5f:31:47:51:ca:eb:ea:1b:ac:00:70:18:fa:
00:42:77:cc:2e:4b:3c:8b:04:e3:9a:68:69:41:68:
7a:55:a5:c2:05:12:01:65:67:fa:00:23:ac:7d:6b:
f7:54:30:92:b3:34:ae:5a:a0:e6:3c:04:52:f5:99:
a1:9f:50:21:00:1c:15:84:00:bf:92:ea:e7:6d:92:
0a:66:92:0b:e9:e1:51:51:f8:e9:a8:84:8d:71:8a:
71:85:8b:46:37:30:1a:13:13:64:c2:8d:a5:3f:ce:
47:eb:09:fc:8d:c6:80:e2:4d:2f:dc:a4:69:22:36:
49:79:ab:2b:d2:71:1e:9f:b1:12:27:e5:fa:b2:e8:
4c:9a:c8:11:bb:1f:07:ac:b6:90:bc:87:45:76:71:
49:3b:a6:34:e0:73:af:98:97:08:2b:fe:6c:db:7d:
e4:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:DD:EC:B8:B5:E9:61:42:A1:F1:60:68:CA:56:89:F0:AE:68:7A:A8
X509v3 Authority Key Identifier:
keyid:6F:CF:19:EF:7E:2F:72:1C:AA:F6:9C:F8:2D:4C:A7:C4:B5:41:53:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b88Z734vchyq9pz4LUynxLVBU2Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/584691-a971-4587-a7a5-8cbb6e7822d2/1/b88Z734vchyq9pz4LUynxLVBU2Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/584691-a971-4587-a7a5-8cbb6e7822d2/1/b88Z734vchyq9pz4LUynxLVBU2Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:21:17:80:3a:d3:ac:e0:97:70:80:4a:54:e6:e3:f9:c4:aa:
80:f4:1c:69:31:30:6f:5e:e1:3f:61:20:77:94:86:8a:f8:1f:
04:de:57:93:10:18:5f:d8:81:eb:46:5d:f7:7a:57:d3:f3:ae:
95:2c:6b:b5:b8:1c:31:58:d0:ab:0a:c3:ff:39:5e:27:f9:65:
65:d3:cd:69:be:d1:94:56:ea:ad:1d:3c:ab:85:96:80:1f:83:
2e:61:a1:ba:4f:0f:2e:9b:b3:0a:c4:ba:30:38:df:37:42:f2:
4c:e8:b7:e6:05:57:60:f0:10:58:4f:19:4d:e2:46:7d:db:40:
df:a7:72:49:4d:f8:fa:1a:96:04:a2:cf:82:10:00:5d:63:7d:
67:f7:0e:db:46:e6:d3:64:a5:91:4b:08:06:12:0c:2b:bf:2e:
8f:9e:d5:40:94:e3:65:b2:47:bb:00:e0:b9:b8:43:28:12:f6:
59:a3:52:8a:07:49:f0:a8:fe:f1:9f:aa:1c:b1:43:cf:13:3e:
69:97:ff:9a:73:b0:8c:6a:ea:08:de:06:db:2a:99:49:4b:3b:
21:54:e5:68:62:2b:c7:33:d6:a0:af:6d:04:91:35:27:9d:61:
e1:9f:9f:64:cf:e5:61:48:34:e5:c2:ff:d3:d8:af:06:d8:68:
0c:75:72:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 8 00:10:45 2025 by rpki-client