Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/b9178b-c7ba-4d4e-af9e-6acd21d4baf8/1/4iTkUOr-1MJZttwKNOMG8a0oS8Q.mft
File: 4iTkUOr-1MJZttwKNOMG8a0oS8Q.mft (raw, json)
Hash identifier: 7bPg9T5L3eqVPeBcGhlv8NVPaal4I7DEuUcaREJ2hJo=
Subject key identifier: 08:C1:A2:B2:1B:30:58:3C:29:42:F0:E9:58:22:27:28:5E:36:DB:F6
Authority key identifier: E2:24:E4:50:EA:FE:D4:C2:59:B6:DC:0A:34:E3:06:F1:AD:28:4B:C4
Certificate issuer: /CN=e224e450eafed4c259b6dc0a34e306f1ad284bc4
Certificate serial: 01987C097771EE7454B482C1C66AD4056673
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4iTkUOr-1MJZttwKNOMG8a0oS8Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/b9178b-c7ba-4d4e-af9e-6acd21d4baf8/1/4iTkUOr-1MJZttwKNOMG8a0oS8Q.mft
Manifest number: 161F
Signing time: Tue 05 Aug 2025 21:00:51 +0000
Manifest this update: Tue 05 Aug 2025 21:00:51 +0000
Manifest next update: Wed 06 Aug 2025 21:00:51 +0000
Files and hashes: 1: 4iTkUOr-1MJZttwKNOMG8a0oS8Q.crl (hash: d4cNPimLRareFHCyGui/q6+UKjdfh41w8d4fgmHZoIg=)
2: SifsSXB3IxM773oq0Xz9LePnp8I.roa (hash: zgIEbQQ5tBYSjxuoWIlb12GUFr1oCylWnPsgULnZLUs=)
3: pe-h0g6N0Y23HKrAKsDD9huS1mE.roa (hash: ylxKfNsAYg9jbE4bG9j7buLcVQFIUsPKCa1+TwgGN2I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a8/b9178b-c7ba-4d4e-af9e-6acd21d4baf8/1/4iTkUOr-1MJZttwKNOMG8a0oS8Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/a8/b9178b-c7ba-4d4e-af9e-6acd21d4baf8/1/4iTkUOr-1MJZttwKNOMG8a0oS8Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/4iTkUOr-1MJZttwKNOMG8a0oS8Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 Aug 2025 14:37:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7c:09:77:71:ee:74:54:b4:82:c1:c6:6a:d4:05:66:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e224e450eafed4c259b6dc0a34e306f1ad284bc4
Validity
Not Before: Aug 5 21:00:51 2025 GMT
Not After : Aug 6 21:00:51 2025 GMT
Subject: CN=08c1a2b21b30583c2942f0e9582227285e36dbf6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:06:1c:19:78:ff:7c:5e:6e:b2:30:21:8c:93:
3f:e7:e0:a1:f4:f9:6e:d3:b4:35:09:8b:c7:5d:b7:
66:a0:ab:c2:e4:f3:49:5d:95:32:7e:82:79:b3:12:
e0:9b:74:f6:2c:1c:81:e3:93:5b:40:ca:17:33:09:
ed:1b:e1:47:d1:03:64:f5:ea:0d:55:03:50:dc:88:
0a:93:6e:3e:97:fa:90:97:cc:8b:8a:7c:f7:b6:94:
05:c1:e9:1d:00:eb:77:1c:a0:d0:61:04:ff:2c:17:
35:50:bf:66:6a:86:f6:b7:8b:66:80:a0:4f:90:c3:
fb:18:b9:5a:68:25:41:4c:f4:d7:de:29:a9:b7:42:
9d:1d:bc:e0:d3:18:82:f9:da:c0:bb:12:4e:66:34:
e1:43:f3:49:b2:e6:e7:1f:3c:fa:d5:13:64:48:0e:
b3:92:23:51:49:97:c9:4c:6b:29:b9:c6:70:da:b0:
aa:eb:a9:6c:60:cc:ca:9a:f4:a5:c0:8d:d1:99:15:
27:bd:89:66:de:76:75:0e:3b:23:e5:4b:3a:0b:e7:
f5:54:ae:8d:8a:1d:04:d8:45:d7:d3:bb:51:33:33:
83:5a:b5:9a:44:c7:07:16:d0:61:6d:af:f1:46:b1:
ef:81:af:92:b1:93:91:f2:2f:f4:5e:04:ce:a6:de:
53:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:C1:A2:B2:1B:30:58:3C:29:42:F0:E9:58:22:27:28:5E:36:DB:F6
X509v3 Authority Key Identifier:
keyid:E2:24:E4:50:EA:FE:D4:C2:59:B6:DC:0A:34:E3:06:F1:AD:28:4B:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4iTkUOr-1MJZttwKNOMG8a0oS8Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/b9178b-c7ba-4d4e-af9e-6acd21d4baf8/1/4iTkUOr-1MJZttwKNOMG8a0oS8Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/b9178b-c7ba-4d4e-af9e-6acd21d4baf8/1/4iTkUOr-1MJZttwKNOMG8a0oS8Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:78:3b:94:17:23:14:9d:4e:b5:de:bc:9f:f0:e5:03:51:6f:
8a:04:13:8c:32:3e:73:29:a0:7c:84:15:cc:ff:ab:98:e2:87:
2d:97:58:8d:4f:0c:ea:1b:c9:0e:c5:74:55:16:e7:ab:30:73:
e1:d1:40:55:9c:0b:ec:ef:74:27:f7:06:50:f9:b6:4b:2e:6e:
a7:85:4c:81:f4:13:cb:b9:c6:09:98:b1:21:ac:0d:bc:4b:58:
f5:2f:0b:d7:3e:b5:e2:88:d6:aa:88:b8:f9:9a:e8:7e:bb:07:
6c:b0:00:c5:b2:cf:cc:18:e2:01:ab:3c:51:80:03:ec:fb:93:
79:46:e7:17:41:1a:33:7f:dc:12:a4:41:4a:0c:8c:39:0a:f8:
dc:78:12:da:d7:7f:ec:de:30:68:a7:f0:84:c8:a3:d7:ee:10:
e9:8b:f6:db:3c:ff:a7:3c:70:f8:2f:7d:8c:b8:34:d9:7a:c7:
bd:be:33:3d:bc:a7:76:65:6f:01:cd:03:73:5d:14:01:a2:40:
cc:85:ad:84:4c:1f:df:2c:0a:ba:bb:9d:2d:88:1d:0b:90:7d:
96:f9:36:57:4e:6d:ae:04:b1:1b:fb:1f:a8:ff:f3:e6:e4:67:
cb:ad:f9:e0:77:d1:5c:75:c2:fc:4e:93:b7:36:2a:18:ec:8a:
19:f6:4f:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 5 22:57:10 2025 by rpki-client