Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/2fc167-b357-4394-b4e8-c825be2813bc/1/C4TqVJ-IIRBYs0v8qwZAwwMDk8M.mft
File: C4TqVJ-IIRBYs0v8qwZAwwMDk8M.mft (raw, json)
Hash identifier: Cq3+kab1lWnBEbK3o5papT6LYVCnyjZPBFeke7d2cFw=
Subject key identifier: 0F:60:C5:6D:BB:0E:BA:4E:03:37:EE:E8:85:E9:CC:B9:62:12:1B:8B
Authority key identifier: 0B:84:EA:54:9F:88:21:10:58:B3:4B:FC:AB:06:40:C3:03:03:93:C3
Certificate issuer: /CN=0b84ea549f88211058b34bfcab0640c3030393c3
Certificate serial: 019873E1D4889688692DE1A3A05D41CA6CCA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C4TqVJ-IIRBYs0v8qwZAwwMDk8M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/2fc167-b357-4394-b4e8-c825be2813bc/1/C4TqVJ-IIRBYs0v8qwZAwwMDk8M.mft
Manifest number: 1617
Signing time: Mon 04 Aug 2025 07:00:36 +0000
Manifest this update: Mon 04 Aug 2025 07:00:36 +0000
Manifest next update: Tue 05 Aug 2025 07:00:36 +0000
Files and hashes: 1: C4TqVJ-IIRBYs0v8qwZAwwMDk8M.crl (hash: OP9q1vbuKZvHvdH1voXvgQZOx3zEp98F1OfkuRDyJAE=)
2: P-Dx0ihfKx4UBeNlSrnWTMyyfvY.roa (hash: viXxvbgM6fcm3+uNTvobtmlKGENasOgtCzi4bFmu9u0=)
3: VjB61y70CykGJrI1joYA_LZs7BQ.roa (hash: 0fdGzWqdSh6FPKMh+lErtdFv9hP3dlRfbAfCokMP6HQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/2fc167-b357-4394-b4e8-c825be2813bc/1/C4TqVJ-IIRBYs0v8qwZAwwMDk8M.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/2fc167-b357-4394-b4e8-c825be2813bc/1/C4TqVJ-IIRBYs0v8qwZAwwMDk8M.mft
rsync://rpki.ripe.net/repository/DEFAULT/C4TqVJ-IIRBYs0v8qwZAwwMDk8M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:73:e1:d4:88:96:88:69:2d:e1:a3:a0:5d:41:ca:6c:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0b84ea549f88211058b34bfcab0640c3030393c3
Validity
Not Before: Aug 4 07:00:36 2025 GMT
Not After : Aug 5 07:00:36 2025 GMT
Subject: CN=0f60c56dbb0eba4e0337eee885e9ccb962121b8b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:5e:e1:ce:70:35:e4:a4:f6:be:bf:3b:59:17:
8d:8c:2a:f7:3d:38:2b:c6:b1:40:2b:48:4c:17:93:
29:df:96:8e:10:7c:c3:04:b6:fa:61:99:1a:6a:af:
5a:89:c5:d7:88:f5:38:99:0a:25:5e:a3:2f:7b:e8:
19:47:f5:f4:43:a9:d5:fb:00:d7:58:37:83:b6:b3:
b2:4a:69:66:60:df:7d:c0:39:51:3b:05:d1:39:42:
23:80:c9:15:03:70:96:cf:82:03:47:dc:f3:a6:bb:
a5:74:37:49:86:86:3a:96:d8:86:39:c8:2e:a1:6e:
d1:48:21:b1:98:db:f0:27:e4:dc:fe:8e:3b:77:5b:
58:f9:72:8d:84:b8:5e:41:da:23:9f:d3:df:31:52:
a7:dc:a4:80:7a:33:87:8d:21:0e:2d:21:53:bf:95:
72:0f:60:90:c2:3e:96:ad:52:29:2f:15:11:13:27:
82:37:6a:a6:96:d1:e2:96:3a:eb:ff:d0:b8:1f:45:
1d:9f:c2:64:4c:3b:ad:e5:b9:19:c4:57:38:18:40:
87:5a:a3:2c:b7:d0:9c:d6:a9:05:06:23:a3:b9:6b:
02:2e:de:37:49:c3:1c:f6:52:40:33:5b:6f:ed:76:
d4:67:e1:8c:f3:b7:f6:bd:22:83:ef:8e:de:20:7b:
ea:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:60:C5:6D:BB:0E:BA:4E:03:37:EE:E8:85:E9:CC:B9:62:12:1B:8B
X509v3 Authority Key Identifier:
keyid:0B:84:EA:54:9F:88:21:10:58:B3:4B:FC:AB:06:40:C3:03:03:93:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C4TqVJ-IIRBYs0v8qwZAwwMDk8M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/2fc167-b357-4394-b4e8-c825be2813bc/1/C4TqVJ-IIRBYs0v8qwZAwwMDk8M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/2fc167-b357-4394-b4e8-c825be2813bc/1/C4TqVJ-IIRBYs0v8qwZAwwMDk8M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9a:75:a2:37:6f:06:7c:77:08:2a:a7:c5:8c:fb:fa:08:4c:b4:
3c:7f:5d:67:54:f1:18:8c:fa:70:2a:e2:e7:cc:e7:3d:e8:75:
f5:5f:de:21:4a:08:fd:36:3b:80:ff:ee:de:35:c1:fd:a8:21:
5e:be:b6:6f:7a:2b:a8:ad:3b:f6:e6:6d:7f:c5:2d:1c:ca:38:
b4:f5:92:b5:f0:7a:b3:46:cd:82:c6:f4:db:88:f9:c1:c8:bb:
1b:bc:d3:29:f0:56:43:cb:e0:76:d1:ae:f7:02:03:e9:f0:18:
28:63:89:d7:e8:f9:de:47:da:ca:7a:e3:6e:4c:18:67:9b:57:
07:c5:ae:01:66:9a:14:6b:a2:a7:e4:a1:ff:8c:07:3a:68:83:
f8:12:ee:02:ab:81:36:dc:77:8d:67:20:32:b0:4f:d3:c2:3e:
08:76:c4:58:62:85:0a:70:60:77:7a:74:5d:d4:1e:02:6a:00:
de:8e:85:ca:e9:1e:e8:b2:58:ae:44:b5:48:d9:1b:7c:61:7f:
b0:34:f0:af:34:50:3b:19:32:c8:82:bc:9a:ba:a0:a0:a2:73:
8b:29:55:88:6d:3a:8c:45:34:bf:a0:ec:98:d3:6c:79:63:6f:
9b:fc:15:8d:b2:94:b5:6e:1f:c1:8c:e7:40:7a:7e:ed:15:0f:
74:95:36:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:09:49 2025 by rpki-client