Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/3a8e4c-9217-4b1f-b6fd-842437d27279/1/84Yn42pOFr3DnwtVDXT9ceRC0sI.mft
File: 84Yn42pOFr3DnwtVDXT9ceRC0sI.mft (raw, json)
Hash identifier: lQQkGiHuOSEOCu6p4q7XZ2jD7kTR8N0mEj0l6S5sKXk=
Subject key identifier: DE:AC:D5:4A:58:4A:D4:39:78:DA:EC:6F:72:7F:4F:38:EB:D6:F2:1A
Authority key identifier: F3:86:27:E3:6A:4E:16:BD:C3:9F:0B:55:0D:74:FD:71:E4:42:D2:C2
Certificate issuer: /CN=f38627e36a4e16bdc39f0b550d74fd71e442d2c2
Certificate serial: 019873E2DEA5D52B1B4B9993C98997FD4914
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/84Yn42pOFr3DnwtVDXT9ceRC0sI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/3a8e4c-9217-4b1f-b6fd-842437d27279/1/84Yn42pOFr3DnwtVDXT9ceRC0sI.mft
Manifest number: 1616
Signing time: Mon 04 Aug 2025 07:01:44 +0000
Manifest this update: Mon 04 Aug 2025 07:01:44 +0000
Manifest next update: Tue 05 Aug 2025 07:01:44 +0000
Files and hashes: 1: 84Yn42pOFr3DnwtVDXT9ceRC0sI.crl (hash: pX6pkkNwmBZevdlwSGCDgvd6q0sqOwWZ3GEk3cbgTwY=)
2: lIHvPze8MhW65ATICPZrXtfvWLg.roa (hash: bg+JonT/EML15sUdW/ANznJHTOv/3C3HqVEO6q5ovAs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8d/3a8e4c-9217-4b1f-b6fd-842437d27279/1/84Yn42pOFr3DnwtVDXT9ceRC0sI.crl
rsync://rpki.ripe.net/repository/DEFAULT/8d/3a8e4c-9217-4b1f-b6fd-842437d27279/1/84Yn42pOFr3DnwtVDXT9ceRC0sI.mft
rsync://rpki.ripe.net/repository/DEFAULT/84Yn42pOFr3DnwtVDXT9ceRC0sI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:73:e2:de:a5:d5:2b:1b:4b:99:93:c9:89:97:fd:49:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f38627e36a4e16bdc39f0b550d74fd71e442d2c2
Validity
Not Before: Aug 4 07:01:44 2025 GMT
Not After : Aug 5 07:01:44 2025 GMT
Subject: CN=deacd54a584ad43978daec6f727f4f38ebd6f21a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:02:49:29:d0:6f:0a:34:0f:69:8c:b8:17:37:
06:f1:e2:43:4a:41:73:85:ae:51:3a:a0:8c:8d:2c:
1e:fa:a9:ec:a6:59:45:5b:6f:c6:e2:ea:7c:ab:bd:
a8:9a:ca:fe:83:e2:93:9a:5e:4e:14:ca:f2:80:64:
87:8a:80:15:20:04:08:e4:64:e3:ff:20:cf:57:72:
3e:70:63:0a:68:fe:54:49:24:0c:36:8d:dc:04:c4:
f1:f4:b6:db:93:4b:50:87:3b:df:bb:5c:f0:5b:6f:
89:f0:92:00:33:6a:6f:8f:31:6b:90:a2:cf:38:a5:
41:36:da:44:e7:61:38:0f:2e:14:41:e2:d0:fc:a7:
5f:e1:7c:06:ce:38:06:71:e3:0d:8d:8a:5e:a8:ca:
f9:f8:3b:64:c5:c6:33:60:e1:82:90:41:85:8f:32:
c2:02:44:15:05:72:c4:e2:67:be:13:74:d7:72:7c:
ee:e5:32:04:ef:a7:30:69:2b:08:4e:6e:e8:04:f7:
a8:f0:9b:71:75:bc:40:c9:4e:8c:6f:e5:cf:50:48:
f8:6a:ea:f6:d4:33:ea:e0:41:d1:22:e4:87:49:a1:
8f:d8:91:47:a0:7d:6a:76:b7:0a:9e:71:2f:e7:13:
36:3e:dc:fb:29:71:c8:46:3b:e7:41:f8:9d:44:65:
49:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:AC:D5:4A:58:4A:D4:39:78:DA:EC:6F:72:7F:4F:38:EB:D6:F2:1A
X509v3 Authority Key Identifier:
keyid:F3:86:27:E3:6A:4E:16:BD:C3:9F:0B:55:0D:74:FD:71:E4:42:D2:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/84Yn42pOFr3DnwtVDXT9ceRC0sI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/3a8e4c-9217-4b1f-b6fd-842437d27279/1/84Yn42pOFr3DnwtVDXT9ceRC0sI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/3a8e4c-9217-4b1f-b6fd-842437d27279/1/84Yn42pOFr3DnwtVDXT9ceRC0sI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:c6:6f:b5:d8:1b:e3:ac:86:00:58:da:2c:55:5f:ea:98:88:
57:7f:9b:fd:56:0f:5c:35:4c:d8:29:b0:5b:5f:c0:37:ea:a6:
9f:57:f2:be:0b:3d:90:c7:88:d0:9b:b6:a9:1a:ae:be:94:04:
cb:ee:79:83:5f:d9:8a:89:3b:8c:9f:21:3e:c9:94:3e:a1:c4:
69:67:5b:99:c4:5a:f8:b3:26:df:f1:d9:44:23:6c:db:b1:6a:
23:14:71:62:2b:a7:36:8d:77:10:7a:f5:a5:e8:a8:58:ac:e4:
33:50:f4:59:fe:56:60:19:60:6f:aa:ce:c0:4e:17:4a:a1:2a:
3f:f0:39:59:1d:ed:5f:77:8c:2d:fd:74:db:0d:c9:10:4b:ea:
00:e6:c1:02:14:3b:73:8e:29:d1:7e:d4:aa:29:30:99:22:db:
6b:cb:46:fc:c1:ab:aa:d2:19:c1:38:d5:62:2e:ce:8b:11:54:
2f:af:c0:ea:df:a1:af:98:47:2f:fe:8c:73:e2:24:ef:88:7e:
72:a3:87:4e:09:c9:d5:60:b4:98:5e:10:8b:e4:0c:0f:64:b6:
38:71:70:b2:ab:fa:e1:93:42:e2:90:7f:40:45:d6:66:63:4a:
a4:86:84:37:14:cc:8d:98:3d:34:e0:ce:81:c3:45:9b:ed:e5:
55:e1:77:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:10:27 2025 by rpki-client