Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/a41794-d619-4c74-824d-31d7010a7256/1/rPsCQyaIZ0JgxtASpZfXC81RScQ.mft
File: rPsCQyaIZ0JgxtASpZfXC81RScQ.mft (raw, json)
Hash identifier: ZAqpyZ2Jgax00DCTgkuhAEiYfFOL0sfPcPp7dLW9XxM=
Subject key identifier: 63:F0:EF:43:90:B6:1D:D6:D7:70:F5:FC:88:6F:BB:01:E6:66:68:6B
Authority key identifier: AC:FB:02:43:26:88:67:42:60:C6:D0:12:A5:97:D7:0B:CD:51:49:C4
Certificate issuer: /CN=acfb02432688674260c6d012a597d70bcd5149c4
Certificate serial: 01988844BB88A1D8499AF209C3C10F73BD97
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rPsCQyaIZ0JgxtASpZfXC81RScQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/a41794-d619-4c74-824d-31d7010a7256/1/rPsCQyaIZ0JgxtASpZfXC81RScQ.mft
Manifest number: 1624
Signing time: Fri 08 Aug 2025 06:01:02 +0000
Manifest this update: Fri 08 Aug 2025 06:01:02 +0000
Manifest next update: Sat 09 Aug 2025 06:01:02 +0000
Files and hashes: 1: A88LbPdx-8cfYkVb8yLzaoaOIc8.roa (hash: vbrcMRJHvTfymU9cXgb/J1eu18qmF5+dFVWeyuuyCEU=)
2: rPsCQyaIZ0JgxtASpZfXC81RScQ.crl (hash: P0vV5fD02t1RfNsNUBtU6sU8uTl4+iIGpea0DlYfHa8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/a41794-d619-4c74-824d-31d7010a7256/1/rPsCQyaIZ0JgxtASpZfXC81RScQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/a41794-d619-4c74-824d-31d7010a7256/1/rPsCQyaIZ0JgxtASpZfXC81RScQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/rPsCQyaIZ0JgxtASpZfXC81RScQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 09 Aug 2025 02:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:88:44:bb:88:a1:d8:49:9a:f2:09:c3:c1:0f:73:bd:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=acfb02432688674260c6d012a597d70bcd5149c4
Validity
Not Before: Aug 8 06:01:02 2025 GMT
Not After : Aug 9 06:01:02 2025 GMT
Subject: CN=63f0ef4390b61dd6d770f5fc886fbb01e666686b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:16:10:71:3e:ed:ca:0d:53:eb:30:ac:94:53:
da:3a:3f:01:a7:8f:54:f2:fc:b2:af:d0:ca:59:80:
69:9d:9f:be:bf:7e:86:73:b6:91:cb:70:34:99:7c:
a2:15:62:79:2e:97:10:df:59:f0:f6:b7:0a:c1:a1:
20:ed:eb:a7:0b:f6:7a:69:33:61:05:fc:f2:1a:f6:
b1:dd:87:6a:ac:ef:99:d7:45:54:fe:55:74:6f:24:
7c:94:2a:eb:98:fc:d8:95:c9:c5:0f:39:ce:e5:d7:
51:8f:78:01:e4:d0:0b:e0:c5:37:b2:bd:f9:e4:7d:
d2:02:5a:6c:ad:36:25:db:16:71:dc:f3:d8:72:1f:
90:9a:37:a1:cc:ca:36:63:1e:1d:f3:09:87:2a:0d:
b2:f8:72:2a:b1:8b:0c:1d:ed:f4:0b:11:25:1f:6a:
4f:f1:95:1e:48:3e:53:84:53:e2:d5:0a:3c:c5:3d:
10:62:57:9e:cf:68:2c:80:2e:f8:af:0d:56:cb:46:
bc:46:d6:21:ad:34:53:89:a7:c0:ea:08:12:48:b6:
93:d6:05:4b:60:9c:96:c1:51:20:ef:4e:b1:23:4b:
49:09:31:65:58:5f:df:31:dd:8b:28:53:9f:d9:cb:
26:2a:46:c6:77:5b:08:24:62:75:5a:d1:6c:ce:aa:
d2:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:F0:EF:43:90:B6:1D:D6:D7:70:F5:FC:88:6F:BB:01:E6:66:68:6B
X509v3 Authority Key Identifier:
keyid:AC:FB:02:43:26:88:67:42:60:C6:D0:12:A5:97:D7:0B:CD:51:49:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rPsCQyaIZ0JgxtASpZfXC81RScQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/a41794-d619-4c74-824d-31d7010a7256/1/rPsCQyaIZ0JgxtASpZfXC81RScQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/a41794-d619-4c74-824d-31d7010a7256/1/rPsCQyaIZ0JgxtASpZfXC81RScQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a5:cb:05:71:a9:95:ca:72:28:5c:8e:51:4a:31:7f:da:50:f2:
82:b3:ec:97:7b:52:e8:9a:2e:5a:7f:50:e4:65:cf:f0:28:84:
4a:80:b3:01:63:dd:97:84:39:3a:ad:96:c4:08:0e:dc:c2:45:
b0:d1:c0:98:fe:c7:7f:48:98:b3:a2:f7:5e:1b:e0:e2:51:16:
e9:7c:fb:b9:e8:a1:29:7d:f9:bb:59:65:53:2b:2f:d0:8f:1c:
0f:42:86:e2:3e:3c:52:c3:56:5a:f8:fe:62:81:be:ea:8a:98:
ea:87:9c:13:9b:9c:de:3e:3b:8e:2b:5d:f2:83:fd:e7:5d:9e:
b8:d7:b6:f3:3e:67:10:29:e5:fa:4f:f5:cc:99:a8:05:22:60:
ab:53:42:b1:a1:15:19:6f:19:77:e1:c5:9c:1f:61:67:5d:02:
fa:c4:66:e3:b9:c7:8b:14:00:b0:f4:60:de:bc:be:97:fd:22:
ab:1f:2f:20:33:1d:ab:f1:66:be:8b:45:7e:15:99:51:38:27:
75:79:a9:ea:89:8c:07:f4:a5:11:74:99:d9:c4:a3:8c:c9:ea:
73:b7:9d:07:e1:0f:ac:64:85:9a:d3:7a:9c:ca:90:f3:fc:c2:
be:40:e5:c7:1b:a4:f7:fc:80:5d:e0:85:5b:78:df:96:8d:de:
ad:18:c5:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 8 10:26:31 2025 by rpki-client