
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/1b3749-9673-412d-b348-50fc4d557d08/1/_1bYN_4lT6kuHzwvhhqh5IVSF0Y.mft
File: _1bYN_4lT6kuHzwvhhqh5IVSF0Y.mft (raw, json)
Hash identifier: IP8SmN+a+5nZ4o+Qq/4Gs88Hsov8vZ21clAoe/hBNcQ=
Subject key identifier: C4:F0:CD:10:B1:0F:37:A0:4E:A8:AE:1C:DA:A6:96:92:0B:4E:4C:46
Authority key identifier: FF:56:D8:37:FE:25:4F:A9:2E:1F:3C:2F:86:1A:A1:E4:85:52:17:46
Certificate issuer: /CN=ff56d837fe254fa92e1f3c2f861aa1e485521746
Certificate serial: 01988AA10F4821CDF1B84F437F0B5CB174D4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_1bYN_4lT6kuHzwvhhqh5IVSF0Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/1b3749-9673-412d-b348-50fc4d557d08/1/_1bYN_4lT6kuHzwvhhqh5IVSF0Y.mft
Manifest number: 1624
Signing time: Fri 08 Aug 2025 17:01:07 +0000
Manifest this update: Fri 08 Aug 2025 17:01:07 +0000
Manifest next update: Sat 09 Aug 2025 17:01:07 +0000
Files and hashes: 1: IwZ3Z1oDg1FS827JU1tSlj8eb74.roa (hash: yIwUb6bD8Yu/MZmIZhvd3q5td4NtibwxlrC7RDOCuHM=)
2: SMQ9QVGYhC0I8pIMSi7pgpsFW1c.roa (hash: P/Liu3FMs1RtZp34UhptoqasRnmxQc/4vGzdeX20sw8=)
3: _1bYN_4lT6kuHzwvhhqh5IVSF0Y.crl (hash: ntUZiDOWwPC7Z+kV02EdilWzmjuTd+/hMsK0ekCsPQE=)
4: hyDMWUWDOwPLRhTXHqAvo0HE2Eg.roa (hash: qhk5EHJ02rRG0lhE9onju5bJfrP0rsBjK4tlKrdzuZc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a4/1b3749-9673-412d-b348-50fc4d557d08/1/_1bYN_4lT6kuHzwvhhqh5IVSF0Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/a4/1b3749-9673-412d-b348-50fc4d557d08/1/_1bYN_4lT6kuHzwvhhqh5IVSF0Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/_1bYN_4lT6kuHzwvhhqh5IVSF0Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 09 Aug 2025 17:01:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8a:a1:0f:48:21:cd:f1:b8:4f:43:7f:0b:5c:b1:74:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ff56d837fe254fa92e1f3c2f861aa1e485521746
Validity
Not Before: Aug 8 17:01:07 2025 GMT
Not After : Aug 9 17:01:07 2025 GMT
Subject: CN=c4f0cd10b10f37a04ea8ae1cdaa696920b4e4c46
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:be:44:9d:25:e9:3a:99:0b:8a:86:1b:70:04:
d6:94:56:d1:94:93:8e:60:81:da:1e:f2:22:df:f7:
5f:05:89:29:c0:8f:c4:b2:31:32:8e:ee:32:bc:c4:
8a:49:34:72:02:25:79:73:5d:d4:02:98:b0:86:e6:
e4:c4:01:4d:b5:a7:b4:66:df:66:f6:6a:f2:8f:91:
a8:91:c4:26:93:0c:df:53:34:1a:75:c2:e0:e7:56:
17:bf:5d:c5:de:53:51:3a:23:07:bb:e9:28:58:09:
99:33:11:f6:85:b9:59:a7:53:74:c3:9a:20:27:5b:
96:0e:08:1c:30:df:91:7d:17:f5:08:2f:a7:9c:88:
80:65:3a:a9:fc:80:ef:a7:4e:69:81:cc:b8:a8:7c:
97:88:38:2e:b4:10:38:7b:7d:b4:35:05:76:a5:af:
26:1e:aa:b4:e8:66:1e:ab:ef:6c:57:64:c1:2c:d9:
49:fa:a9:3f:26:c4:89:cf:bc:bf:be:8a:4f:ca:f8:
4a:67:2a:5c:42:ad:90:a4:48:af:16:bf:55:59:85:
ee:b3:1c:b4:74:ed:e3:d0:37:87:cc:8e:55:e5:be:
05:82:0a:6b:22:cd:26:89:05:43:ef:66:b3:48:9b:
78:82:66:17:dc:cf:2d:93:af:fb:9b:ee:0d:c0:7b:
f3:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:F0:CD:10:B1:0F:37:A0:4E:A8:AE:1C:DA:A6:96:92:0B:4E:4C:46
X509v3 Authority Key Identifier:
keyid:FF:56:D8:37:FE:25:4F:A9:2E:1F:3C:2F:86:1A:A1:E4:85:52:17:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_1bYN_4lT6kuHzwvhhqh5IVSF0Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/1b3749-9673-412d-b348-50fc4d557d08/1/_1bYN_4lT6kuHzwvhhqh5IVSF0Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/1b3749-9673-412d-b348-50fc4d557d08/1/_1bYN_4lT6kuHzwvhhqh5IVSF0Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b9:ea:7a:80:49:c0:35:39:3a:56:17:19:ed:59:c9:36:d3:a6:
51:0d:0b:4b:52:70:d1:26:cb:70:38:6f:65:d8:ea:57:09:a4:
a1:e0:aa:49:71:c7:2e:f8:03:71:02:8e:1b:b8:fe:f5:03:c4:
23:de:57:3e:20:57:a1:c9:bf:4d:98:62:c3:99:96:79:5b:16:
90:20:c8:a7:d7:c7:70:41:59:6c:0e:37:3b:29:ed:f0:27:10:
ed:ec:cd:be:4a:69:e2:65:64:51:aa:f7:e3:b1:7d:48:ea:62:
34:77:fb:d4:67:56:e8:61:06:4d:63:6f:ef:3e:96:58:06:56:
64:ea:89:42:aa:ac:39:15:c2:8a:30:86:41:47:a6:06:93:bd:
c9:35:87:e6:05:8a:9e:88:1f:0e:65:7c:34:74:2c:8e:4a:91:
e5:fc:b5:4b:48:91:78:7a:18:75:66:10:b1:5c:5e:bc:3c:bd:
d2:83:3b:4d:7e:3c:8f:e5:74:cd:8d:fa:5f:25:2b:b3:4a:d6:
eb:ce:18:16:d3:d7:ab:8d:12:18:ac:ec:9b:90:69:4b:f5:41:
bc:0b:7f:39:ee:4d:61:33:99:00:0c:07:c3:33:3f:79:20:07:
f5:93:7d:da:5b:35:9c:62:9b:dd:67:08:cb:14:f6:86:20:78:
c3:3f:da:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 01:08:21 2025 by rpki-client