Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/cdc995-9a91-4ec1-aede-f6e0f7d17440/1/1-RA4k_wx6dlNJlq6kMx91XvCN2c.mft
File: 1-RA4k_wx6dlNJlq6kMx91XvCN2c.mft (raw, json)
Hash identifier: 6ftWCJJQmPzzz7Lm0M9lE2bb7WthNNyvtyecM/zKaaw=
Subject key identifier: CB:74:8C:A6:59:33:3C:58:4E:7B:D5:F8:67:9B:DC:28:4A:4C:09:DB
Authority key identifier: F9:10:38:93:FC:31:E9:D9:4D:26:5A:BA:90:CC:7D:D5:7B:C2:37:67
Certificate issuer: /CN=f9103893fc31e9d94d265aba90cc7dd57bc23767
Certificate serial: 0198906C43B5FC1248A715F62EEA9BDAA221
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-RA4k_wx6dlNJlq6kMx91XvCN2c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/cdc995-9a91-4ec1-aede-f6e0f7d17440/1/1-RA4k_wx6dlNJlq6kMx91XvCN2c.mft
Manifest number: 0FE5
Signing time: Sat 09 Aug 2025 20:01:10 +0000
Manifest this update: Sat 09 Aug 2025 20:01:10 +0000
Manifest next update: Sun 10 Aug 2025 20:01:10 +0000
Files and hashes: 1: 1-RA4k_wx6dlNJlq6kMx91XvCN2c.crl (hash: hhb+k8ZZtbvi2hzW/nsy18QejGQ6t+Rx2Z+6nl9WpSQ=)
2: avTxB4xZJ7VdV5I2AVFP0VDdbT4.roa (hash: bTeIBIORZ+OkOR+FlYPPZ72JZn7A9KzpF9twp78JJjo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/cdc995-9a91-4ec1-aede-f6e0f7d17440/1/1-RA4k_wx6dlNJlq6kMx91XvCN2c.crl
rsync://rpki.ripe.net/repository/DEFAULT/98/cdc995-9a91-4ec1-aede-f6e0f7d17440/1/1-RA4k_wx6dlNJlq6kMx91XvCN2c.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-RA4k_wx6dlNJlq6kMx91XvCN2c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 10 Aug 2025 18:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:90:6c:43:b5:fc:12:48:a7:15:f6:2e:ea:9b:da:a2:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f9103893fc31e9d94d265aba90cc7dd57bc23767
Validity
Not Before: Aug 9 20:01:10 2025 GMT
Not After : Aug 10 20:01:10 2025 GMT
Subject: CN=cb748ca659333c584e7bd5f8679bdc284a4c09db
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:5d:ff:fb:5f:51:40:06:7b:e4:68:af:b0:1e:
ba:8d:cd:ea:ee:ac:19:9d:eb:9d:46:aa:11:84:f1:
c7:af:88:06:34:59:ba:94:ec:04:3c:5d:03:5d:80:
4c:14:ea:32:60:35:fa:06:ef:8c:42:32:4a:50:49:
6f:42:73:d2:bf:87:8c:34:ab:d6:7b:f3:b2:4d:99:
05:94:ce:2b:c3:9d:bf:1d:d6:15:16:7e:df:b8:da:
cc:5e:aa:09:df:fb:36:e9:5a:48:52:68:07:78:14:
8f:9b:2b:9b:82:80:90:aa:8d:38:81:5e:f3:19:d3:
3d:2c:1f:29:e1:8b:fb:9d:b2:bd:eb:c4:72:8e:2a:
30:5f:a8:bf:99:57:cf:7b:95:0f:c2:fd:1a:56:4b:
46:b5:c4:5b:f0:47:b2:8c:b6:24:31:42:c2:0c:d7:
15:b4:55:56:1d:97:2c:03:d5:ba:97:7d:bf:f4:ab:
fa:64:8d:9d:0d:b9:45:61:b2:cd:87:cc:f1:4c:bf:
8e:d5:0b:65:90:cd:0b:2f:96:c5:21:aa:54:56:6d:
7d:04:cc:11:1e:f2:c9:c4:c2:4e:c7:6d:a9:f9:c2:
b4:4f:e8:70:a2:53:50:c5:9c:58:43:aa:7f:7c:26:
af:58:2b:04:48:e7:01:53:24:af:12:fe:37:6c:20:
a3:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:74:8C:A6:59:33:3C:58:4E:7B:D5:F8:67:9B:DC:28:4A:4C:09:DB
X509v3 Authority Key Identifier:
keyid:F9:10:38:93:FC:31:E9:D9:4D:26:5A:BA:90:CC:7D:D5:7B:C2:37:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-RA4k_wx6dlNJlq6kMx91XvCN2c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/cdc995-9a91-4ec1-aede-f6e0f7d17440/1/1-RA4k_wx6dlNJlq6kMx91XvCN2c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/cdc995-9a91-4ec1-aede-f6e0f7d17440/1/1-RA4k_wx6dlNJlq6kMx91XvCN2c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:f8:e6:25:3b:30:f7:77:29:5a:dc:3a:4e:a7:b7:31:b8:f8:
e7:10:f2:f8:c8:84:12:cb:c0:cc:78:2b:fa:ba:0a:9c:04:c7:
97:ce:99:a0:3a:8a:5d:01:80:ca:b8:0f:5f:9d:a8:b2:ce:04:
78:8a:0f:fc:2f:79:b2:ef:80:cd:2b:54:f3:48:28:68:f8:e6:
be:cd:ef:ed:30:91:2f:03:38:01:08:1e:a0:19:91:0b:18:bc:
45:1f:d6:74:59:19:ff:75:25:6c:d6:a1:4d:b3:f5:95:2a:91:
fa:f5:55:56:dd:1c:e1:68:ea:23:44:85:2b:b5:81:b9:4d:81:
60:3e:24:e5:d1:6f:27:5e:8b:6a:3c:cb:34:e8:91:99:09:ce:
3f:76:fe:03:15:27:8e:f2:3c:59:86:02:00:d1:e7:43:73:77:
ab:f3:39:f8:d3:33:14:45:68:f3:b3:85:e7:a1:9c:eb:49:3d:
e1:69:ed:f2:68:97:92:8d:b4:6a:d1:b1:52:26:29:fa:41:ae:
39:41:fa:e7:65:da:64:01:48:1f:be:d7:22:b7:a3:b5:9c:25:
ea:24:16:c0:2a:fa:fa:fa:82:1d:3e:c6:35:a2:37:3a:74:96:
78:df:14:34:18:42:6c:35:10:37:5a:bd:74:0e:b8:65:e5:34:
79:23:62:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 04:49:49 2025 by rpki-client