Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/a0735a-511c-48c9-a61a-0c2ff7937e6f/1/INW4SDsXErcCNUEFbnMIU2bSk0Y.mft
File: INW4SDsXErcCNUEFbnMIU2bSk0Y.mft (raw, json)
Hash identifier: An6LBtHfk3nWiaQRTYvkbK/xQLcucIIiAxOsCGyqU2c=
Subject key identifier: 62:A8:BB:CB:CB:5D:AF:34:A6:37:5B:4D:AC:BF:EA:F9:6C:75:3F:22
Authority key identifier: 20:D5:B8:48:3B:17:12:B7:02:35:41:05:6E:73:08:53:66:D2:93:46
Certificate issuer: /CN=20d5b8483b1712b7023541056e73085366d29346
Certificate serial: 01988242C7089D3FA7D210E92CD10F3BFE97
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/INW4SDsXErcCNUEFbnMIU2bSk0Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/a0735a-511c-48c9-a61a-0c2ff7937e6f/1/INW4SDsXErcCNUEFbnMIU2bSk0Y.mft
Manifest number: 0B65
Signing time: Thu 07 Aug 2025 02:01:11 +0000
Manifest this update: Thu 07 Aug 2025 02:01:11 +0000
Manifest next update: Fri 08 Aug 2025 02:01:11 +0000
Files and hashes: 1: INW4SDsXErcCNUEFbnMIU2bSk0Y.crl (hash: KW70yYdlaZEAe+pn4l5IEWZbkzJrprgCgVRdfdvh4XE=)
2: ttJJaBUZDaYcQDBtp6etg0tHOcw.roa (hash: eyDaETbBTLM6QaTgVh4ZT2/g+b+CTdUyos3+nCYyg/Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/a0735a-511c-48c9-a61a-0c2ff7937e6f/1/INW4SDsXErcCNUEFbnMIU2bSk0Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/a0735a-511c-48c9-a61a-0c2ff7937e6f/1/INW4SDsXErcCNUEFbnMIU2bSk0Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/INW4SDsXErcCNUEFbnMIU2bSk0Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 23:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:82:42:c7:08:9d:3f:a7:d2:10:e9:2c:d1:0f:3b:fe:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=20d5b8483b1712b7023541056e73085366d29346
Validity
Not Before: Aug 7 02:01:11 2025 GMT
Not After : Aug 8 02:01:11 2025 GMT
Subject: CN=62a8bbcbcb5daf34a6375b4dacbfeaf96c753f22
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:5f:9c:f3:b4:89:d7:6b:3b:4d:f4:00:e1:0c:
c8:8a:08:69:56:7f:71:2f:bf:ca:8c:80:ba:9a:4f:
de:1c:d4:18:c8:c8:92:bb:da:22:14:74:4a:37:8f:
12:af:cc:77:3d:4b:1e:7e:46:89:ae:67:3b:dd:a9:
d7:95:58:a4:49:bd:1a:b7:8e:79:56:c1:db:ce:ec:
ae:b3:aa:1b:5e:54:a9:94:81:2b:6d:30:83:80:43:
15:1c:03:d8:ff:9a:34:16:f7:1d:4e:8b:56:ec:ec:
e6:55:0f:aa:a8:ab:5c:87:ea:7d:40:dd:41:e8:bb:
e8:15:b9:2c:c2:d7:a7:00:74:87:0c:ee:5b:8b:de:
ed:47:0f:f3:04:52:8f:8d:c1:d1:86:87:5e:6a:05:
d0:79:28:8b:e1:68:60:96:28:42:e3:ba:47:89:d8:
ea:35:f3:65:18:4d:e0:9e:f8:64:d0:0d:c6:62:53:
16:1e:fa:ca:bb:45:30:a4:48:62:01:a5:ad:ef:40:
a7:d5:4d:28:94:7c:fc:ab:c1:c7:5e:28:c2:dc:5f:
47:9b:57:09:06:95:05:92:c1:46:c5:11:01:10:80:
14:1f:82:ed:6f:40:20:14:28:a8:cf:99:3e:b5:0a:
84:7d:dc:82:53:a3:0d:44:cb:27:95:e9:df:cf:01:
79:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:A8:BB:CB:CB:5D:AF:34:A6:37:5B:4D:AC:BF:EA:F9:6C:75:3F:22
X509v3 Authority Key Identifier:
keyid:20:D5:B8:48:3B:17:12:B7:02:35:41:05:6E:73:08:53:66:D2:93:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/INW4SDsXErcCNUEFbnMIU2bSk0Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/a0735a-511c-48c9-a61a-0c2ff7937e6f/1/INW4SDsXErcCNUEFbnMIU2bSk0Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/a0735a-511c-48c9-a61a-0c2ff7937e6f/1/INW4SDsXErcCNUEFbnMIU2bSk0Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:83:ac:3b:5d:79:04:bd:61:db:db:a0:c2:c8:66:3f:92:3b:
d0:60:bb:15:bc:58:1a:68:31:ec:15:c1:75:1a:d6:2f:1d:7f:
20:10:e6:04:1e:03:85:1b:e8:11:d1:1b:4b:43:d1:4c:9f:19:
66:45:62:4c:54:1e:9c:6d:49:77:e6:a9:29:3f:da:ea:08:f1:
25:19:a8:dd:58:a3:91:98:cd:c3:5b:45:9c:bf:fe:46:59:dc:
f1:0c:73:ec:ba:2a:c8:e2:bc:0a:a3:8c:75:48:fd:7c:24:22:
94:49:a4:80:aa:79:de:56:f5:8a:73:e0:b7:21:ef:b7:f0:15:
2c:67:c6:0d:f3:dd:b9:b3:0e:4f:e3:d1:6a:04:bd:c3:56:d0:
64:cc:e3:41:05:cd:34:f5:d8:9f:40:9d:5b:95:f1:37:36:fe:
49:e4:ca:7b:40:b9:06:c8:25:f3:50:33:02:3b:7c:11:27:df:
37:4e:f6:64:80:e0:97:0f:8a:14:a2:e5:71:3f:6a:3c:be:42:
d2:33:d1:84:bf:42:31:c5:39:c8:9b:56:79:31:18:2b:1a:2d:
cd:d5:c7:ad:08:d0:4a:4d:82:25:c5:ad:7c:c2:78:16:f5:50:
48:06:91:54:45:59:09:76:db:b5:83:a8:f4:a3:c6:2c:cc:d0:
1e:5e:02:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 07:17:37 2025 by rpki-client