Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/e0cd69-deff-4c21-a809-6999a99dcf1e/1/a_D4R-GiFudUPHUqY1DGviPHxtU.mft
File: a_D4R-GiFudUPHUqY1DGviPHxtU.mft (raw, json)
Hash identifier: RBhCYdRclaxaundXL8wL1KVZEJbxW2RgHl+f4jQE2Ko=
Subject key identifier: 55:A4:75:83:C6:4E:F1:9B:2E:13:E9:CA:B8:49:42:B9:3A:E5:AE:EF
Authority key identifier: 6B:F0:F8:47:E1:A2:16:E7:54:3C:75:2A:63:50:C6:BE:23:C7:C6:D5
Certificate issuer: /CN=6bf0f847e1a216e7543c752a6350c6be23c7c6d5
Certificate serial: 0198741955445CA2D215C7D1CA065DFC1474
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a_D4R-GiFudUPHUqY1DGviPHxtU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/e0cd69-deff-4c21-a809-6999a99dcf1e/1/a_D4R-GiFudUPHUqY1DGviPHxtU.mft
Manifest number: 1617
Signing time: Mon 04 Aug 2025 08:01:13 +0000
Manifest this update: Mon 04 Aug 2025 08:01:13 +0000
Manifest next update: Tue 05 Aug 2025 08:01:13 +0000
Files and hashes: 1: LG_wxHDNoS1Eb0OfbO3bSh_WSPg.roa (hash: ijCon2p1g8yWQ5glLczywg0vICoOxaxCrjmV9KKJaoI=)
2: a_D4R-GiFudUPHUqY1DGviPHxtU.crl (hash: c8fOopdIKfypcFsomX97wiRbPWJeQb1H77exslx9oCA=)
3: bIOP6zTckgfazEJud8vxPBhx8yU.roa (hash: MrtqoOHLEt4NYdTsarUu/kPlSqMrs79epMZuKq+/qAs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/e0cd69-deff-4c21-a809-6999a99dcf1e/1/a_D4R-GiFudUPHUqY1DGviPHxtU.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/e0cd69-deff-4c21-a809-6999a99dcf1e/1/a_D4R-GiFudUPHUqY1DGviPHxtU.mft
rsync://rpki.ripe.net/repository/DEFAULT/a_D4R-GiFudUPHUqY1DGviPHxtU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:74:19:55:44:5c:a2:d2:15:c7:d1:ca:06:5d:fc:14:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6bf0f847e1a216e7543c752a6350c6be23c7c6d5
Validity
Not Before: Aug 4 08:01:13 2025 GMT
Not After : Aug 5 08:01:13 2025 GMT
Subject: CN=55a47583c64ef19b2e13e9cab84942b93ae5aeef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:3f:e2:49:00:5c:9e:67:4a:9d:bb:d4:03:2e:
b7:01:f4:b0:19:57:29:db:72:14:bd:ef:3f:33:bb:
2c:1c:c3:75:72:33:c4:bd:ae:7f:6c:91:dc:78:92:
b7:30:07:b4:77:7b:95:ce:ed:28:4f:2c:c0:de:56:
25:0c:c0:b7:ec:46:82:bb:2d:ff:ab:99:56:83:12:
60:bd:69:cc:94:50:0a:a7:91:2e:39:fb:32:37:60:
ab:32:f0:0d:4b:05:47:bc:85:3f:04:e6:78:c2:87:
61:29:8f:06:68:08:de:1d:74:68:df:8a:99:c9:8d:
80:6c:6f:03:45:c7:61:18:08:e5:e6:32:07:e1:52:
9c:5f:b4:93:11:cb:2d:79:7d:b5:12:98:88:ba:d5:
89:55:70:06:ea:ad:cb:00:c1:22:f0:51:5b:0e:02:
46:1a:a9:7a:24:84:91:cc:3a:ce:b8:08:ec:ed:26:
56:eb:50:7b:a5:bc:db:2c:2d:49:ec:bf:e9:dc:a2:
fe:5a:2a:15:d5:2a:dd:47:3c:63:9a:c7:a0:e6:18:
94:f6:5d:cf:ef:f1:2b:ca:09:ee:cc:a3:bb:af:92:
88:fd:35:5e:7c:4f:ef:ee:53:d1:f8:3c:a9:8f:9f:
0b:34:f7:c7:54:7c:a6:15:1f:31:6b:ad:ef:bb:e9:
6f:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:A4:75:83:C6:4E:F1:9B:2E:13:E9:CA:B8:49:42:B9:3A:E5:AE:EF
X509v3 Authority Key Identifier:
keyid:6B:F0:F8:47:E1:A2:16:E7:54:3C:75:2A:63:50:C6:BE:23:C7:C6:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a_D4R-GiFudUPHUqY1DGviPHxtU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/e0cd69-deff-4c21-a809-6999a99dcf1e/1/a_D4R-GiFudUPHUqY1DGviPHxtU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/e0cd69-deff-4c21-a809-6999a99dcf1e/1/a_D4R-GiFudUPHUqY1DGviPHxtU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:8e:4b:a8:59:97:43:41:e2:16:d2:da:ef:25:ef:71:5c:4a:
dc:08:66:98:f0:99:4b:c1:28:0f:8d:1d:77:81:1d:ed:58:bf:
dc:9e:ee:bc:02:93:be:2c:21:cb:dc:cb:a6:af:4c:8d:ef:12:
52:fc:07:25:20:3b:39:73:5b:9f:bd:51:78:b8:1a:a6:c9:68:
70:f7:e2:84:af:70:0a:f7:84:f2:7e:32:35:7c:53:e2:eb:1b:
63:7d:7a:6a:ac:20:4e:65:9f:ea:88:2a:15:25:af:a1:01:f2:
71:b3:24:7a:c8:23:50:3d:a8:46:6c:fc:e9:39:0b:a8:5d:38:
6c:95:66:7a:42:f0:c9:76:49:ea:ce:e9:a3:cc:5c:b2:61:d9:
86:2c:75:d8:5c:d9:9d:05:40:63:54:2b:24:09:79:42:f7:5c:
8b:eb:9a:73:bc:0a:14:5c:1e:57:72:07:3b:1f:5e:56:e5:48:
34:1a:b3:36:93:0d:4c:08:5e:80:40:4d:a7:51:a2:0a:ff:ee:
bf:9b:44:7c:cb:f5:45:23:3b:73:21:95:ce:74:89:44:3b:dd:
6a:20:78:e0:26:9b:7a:84:b1:01:92:2f:51:cc:55:56:8b:d2:
c8:03:1d:45:56:7c:10:51:07:a4:9c:2f:2b:ad:86:92:d7:27:
5e:f5:2d:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:09:29 2025 by rpki-client