Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/8b5dbf-458d-4326-9302-5aaac2cb0df1/1/t4SM0jk8F4NlegV3erMV45jrsj8.mft
File: t4SM0jk8F4NlegV3erMV45jrsj8.mft (raw, json)
Hash identifier: Z4QqVD1E9qBzTVKY2B+vqvijyKPYbu/21oYygOfcKdw=
Subject key identifier: 6F:11:15:D0:87:5F:9B:19:A7:66:31:5F:F7:2A:FE:46:13:19:BA:75
Authority key identifier: B7:84:8C:D2:39:3C:17:83:65:7A:05:77:7A:B3:15:E3:98:EB:B2:3F
Certificate issuer: /CN=b7848cd2393c1783657a05777ab315e398ebb23f
Certificate serial: 019891B571DC66E9217B738F954B187CA3D2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/t4SM0jk8F4NlegV3erMV45jrsj8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/8b5dbf-458d-4326-9302-5aaac2cb0df1/1/t4SM0jk8F4NlegV3erMV45jrsj8.mft
Manifest number: 0706
Signing time: Sun 10 Aug 2025 02:00:44 +0000
Manifest this update: Sun 10 Aug 2025 02:00:44 +0000
Manifest next update: Mon 11 Aug 2025 02:00:44 +0000
Files and hashes: 1: pTPPFKoFJuWdMRGvxA7E4jX80_c.roa (hash: HeJcd3mD5OFJbnZMPOd7wMALaLnR8ioIMvdpAeeFOz0=)
2: t4SM0jk8F4NlegV3erMV45jrsj8.crl (hash: b+Zupy+42kdlsb7gbjecQYSJwLuJujWtj/E7fPMxji0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/97/8b5dbf-458d-4326-9302-5aaac2cb0df1/1/t4SM0jk8F4NlegV3erMV45jrsj8.crl
rsync://rpki.ripe.net/repository/DEFAULT/97/8b5dbf-458d-4326-9302-5aaac2cb0df1/1/t4SM0jk8F4NlegV3erMV45jrsj8.mft
rsync://rpki.ripe.net/repository/DEFAULT/t4SM0jk8F4NlegV3erMV45jrsj8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 10 Aug 2025 23:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:91:b5:71:dc:66:e9:21:7b:73:8f:95:4b:18:7c:a3:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b7848cd2393c1783657a05777ab315e398ebb23f
Validity
Not Before: Aug 10 02:00:44 2025 GMT
Not After : Aug 11 02:00:44 2025 GMT
Subject: CN=6f1115d0875f9b19a766315ff72afe461319ba75
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:72:98:3b:fe:d0:33:80:a9:20:cb:a1:57:be:
ce:56:b0:ff:b5:81:1e:1f:ec:97:63:79:c0:7f:69:
64:df:24:d7:6d:ed:eb:40:ce:f2:5c:9f:06:e7:64:
72:f8:1d:15:12:b7:af:a9:25:0a:48:2f:e1:30:2c:
45:2b:d1:42:ef:d3:e2:ae:cc:90:b2:8c:29:6b:a4:
97:12:08:68:3f:20:1e:4a:61:7e:b8:b7:70:9d:cb:
e5:f3:1b:06:92:44:2b:07:4f:dc:09:de:41:36:95:
9d:c9:cd:49:66:b0:61:a6:ef:83:a8:93:9b:74:f0:
9f:96:a4:6c:ef:da:45:95:e1:ac:fe:64:35:9c:bf:
f5:97:16:e6:8a:e8:40:8c:e1:07:47:ef:6a:de:6f:
81:65:ff:a3:be:6f:93:60:11:52:ac:13:90:62:15:
25:3b:be:d6:4b:6d:e8:70:de:a2:23:b2:12:64:5a:
8d:18:a5:cb:fd:23:8c:f2:c3:87:ff:25:4c:77:65:
c6:6c:79:47:7d:bd:55:19:29:59:1c:9c:c7:05:46:
d0:fb:4f:7b:df:4a:46:e0:09:6b:d8:dc:e4:0a:c2:
8c:9a:42:cb:a7:6f:66:b2:9e:39:ca:fc:2b:35:48:
3f:aa:a8:6b:b4:e1:6b:ad:b7:6d:5e:a1:34:7f:7d:
d0:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:11:15:D0:87:5F:9B:19:A7:66:31:5F:F7:2A:FE:46:13:19:BA:75
X509v3 Authority Key Identifier:
keyid:B7:84:8C:D2:39:3C:17:83:65:7A:05:77:7A:B3:15:E3:98:EB:B2:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t4SM0jk8F4NlegV3erMV45jrsj8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/8b5dbf-458d-4326-9302-5aaac2cb0df1/1/t4SM0jk8F4NlegV3erMV45jrsj8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/97/8b5dbf-458d-4326-9302-5aaac2cb0df1/1/t4SM0jk8F4NlegV3erMV45jrsj8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d2:95:01:92:df:af:ed:6c:ae:fa:47:55:6a:80:fb:40:5c:18:
2d:9a:92:01:6b:94:ce:eb:d1:1d:47:51:0c:3e:18:d3:30:97:
f4:c7:05:13:55:32:fa:e3:81:fc:b3:0b:e8:19:e5:c6:f1:34:
1d:d3:3d:49:1b:16:5d:79:40:87:e5:8d:23:1e:44:6a:05:53:
85:24:b0:d3:19:79:cf:18:bd:f9:c5:a4:2d:72:ec:70:50:02:
3c:df:15:dd:a1:9f:da:16:f5:72:78:59:d4:0d:b4:46:f3:ac:
62:04:4f:4a:eb:82:41:c4:ac:d5:8b:b4:b2:8a:06:f6:0d:93:
0b:c4:7a:bc:45:33:b4:fc:27:de:0b:33:a0:33:29:71:35:12:
22:09:b3:42:34:dd:1f:24:21:6b:b3:3f:aa:26:90:67:43:d6:
d7:0e:9b:26:94:bc:68:a1:7d:03:1b:5d:9d:39:9c:47:bf:6d:
64:c0:af:93:b3:79:77:75:61:08:6f:87:54:e8:2c:cc:f6:06:
0c:67:98:d8:20:46:88:1c:44:0a:74:2e:77:0c:a4:c0:f6:e5:
9e:8e:d8:ef:a2:b9:dc:66:b1:31:6c:f5:9b:36:ce:7b:26:12:
4e:39:2d:c6:84:9a:c1:d6:42:28:fd:a0:47:21:5c:0c:f9:08:
37:3b:f8:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 05:36:25 2025 by rpki-client