Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/02fdfd-7ac8-4321-b930-8fa551e6ae75/1/tR4_a-vNBSkdxSZeCLHNbEAbnP0.mft
File: tR4_a-vNBSkdxSZeCLHNbEAbnP0.mft (raw, json)
Hash identifier: g/3yQXZ8i5iIoPW+pZQJU71dZLnLxVN/Es4VQRtnYbk=
Subject key identifier: 6A:6D:16:9D:B4:6C:0B:DB:F0:98:85:CE:65:84:18:B9:AD:3B:8B:54
Authority key identifier: B5:1E:3F:6B:EB:CD:05:29:1D:C5:26:5E:08:B1:CD:6C:40:1B:9C:FD
Certificate issuer: /CN=b51e3f6bebcd05291dc5265e08b1cd6c401b9cfd
Certificate serial: 01987418B8149C1622A2B9FBC4DA88444DD2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tR4_a-vNBSkdxSZeCLHNbEAbnP0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/02fdfd-7ac8-4321-b930-8fa551e6ae75/1/tR4_a-vNBSkdxSZeCLHNbEAbnP0.mft
Manifest number: 161B
Signing time: Mon 04 Aug 2025 08:00:33 +0000
Manifest this update: Mon 04 Aug 2025 08:00:33 +0000
Manifest next update: Tue 05 Aug 2025 08:00:33 +0000
Files and hashes: 1: XhX8A-oz684Iwe53pFqloQYS-kU.roa (hash: Mq5uGJtvZYMl6nllrQZDhX8D38boD4gAAjpBeZPZFnU=)
2: tR4_a-vNBSkdxSZeCLHNbEAbnP0.crl (hash: 3oEhRnG2ghdrOD4xvaHouPsgz8bdOgjjcNxn83eATr0=)
3: xq7eF4vg8c3V2xQvveah7LJZv-A.roa (hash: atQkAxpvj5iGJRjdwa/1uBWThI8y8UsCB5Ad2gGNyxg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/02fdfd-7ac8-4321-b930-8fa551e6ae75/1/tR4_a-vNBSkdxSZeCLHNbEAbnP0.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/02fdfd-7ac8-4321-b930-8fa551e6ae75/1/tR4_a-vNBSkdxSZeCLHNbEAbnP0.mft
rsync://rpki.ripe.net/repository/DEFAULT/tR4_a-vNBSkdxSZeCLHNbEAbnP0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 08:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:74:18:b8:14:9c:16:22:a2:b9:fb:c4:da:88:44:4d:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b51e3f6bebcd05291dc5265e08b1cd6c401b9cfd
Validity
Not Before: Aug 4 08:00:33 2025 GMT
Not After : Aug 5 08:00:33 2025 GMT
Subject: CN=6a6d169db46c0bdbf09885ce658418b9ad3b8b54
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:e0:cd:bc:4b:3e:d1:f9:e9:c5:82:f5:7d:49:
e2:62:5e:0f:a8:3b:49:02:3d:53:83:78:b8:71:1b:
23:a1:88:74:d0:c6:5c:e6:e1:10:43:1a:5b:95:1e:
2f:b2:a5:97:0f:21:f3:c2:7d:8d:a3:ac:7f:df:fd:
ac:5f:f0:5a:2d:78:45:8f:e4:bf:9d:75:35:49:c5:
c7:7e:ab:38:32:8d:ed:72:ee:8c:b7:94:1c:38:b6:
c3:a8:72:a2:fb:1f:95:cb:fc:c1:02:a2:55:35:18:
04:fd:e1:76:8c:49:ba:2d:12:d3:11:63:ea:01:e5:
df:70:ad:76:66:e9:35:dd:e5:d4:c0:5f:ed:9f:cc:
55:b8:71:50:e2:09:c7:49:a9:cf:38:51:b3:ab:35:
50:7e:b1:42:93:5d:63:b3:1d:65:3c:a8:f1:a4:7d:
75:1e:74:86:0f:c7:c5:c6:d9:6b:dc:01:77:95:bd:
6f:8a:dc:4d:d3:f7:cf:a9:a5:cf:33:af:b5:f9:54:
9b:ea:b2:1b:81:ab:2e:74:50:24:9e:ea:20:d3:1a:
d2:05:a8:c9:ae:88:af:ba:20:71:fb:0c:f7:97:79:
24:22:60:65:90:1e:83:70:72:04:34:84:06:3b:48:
19:bd:70:8b:c0:c1:b3:20:fc:40:49:11:1f:09:5a:
63:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:6D:16:9D:B4:6C:0B:DB:F0:98:85:CE:65:84:18:B9:AD:3B:8B:54
X509v3 Authority Key Identifier:
keyid:B5:1E:3F:6B:EB:CD:05:29:1D:C5:26:5E:08:B1:CD:6C:40:1B:9C:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tR4_a-vNBSkdxSZeCLHNbEAbnP0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/02fdfd-7ac8-4321-b930-8fa551e6ae75/1/tR4_a-vNBSkdxSZeCLHNbEAbnP0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/02fdfd-7ac8-4321-b930-8fa551e6ae75/1/tR4_a-vNBSkdxSZeCLHNbEAbnP0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:44:0c:5e:9d:20:0f:26:fb:9f:de:5e:8a:a0:dc:55:85:f9:
5f:2d:cc:b6:5c:08:0a:15:a2:1a:72:54:fa:ab:fd:6c:cc:e3:
f2:25:fb:7c:b9:cc:20:fb:b9:d0:1b:24:a9:cf:b3:50:77:6c:
07:bc:30:71:d3:a7:f6:80:c5:71:65:c6:35:f9:aa:46:9b:00:
9e:ce:c7:a1:66:d8:06:79:d3:13:46:80:b7:6c:67:99:a8:5b:
3d:f6:67:8a:bf:63:8d:21:1f:ba:95:37:1b:f6:b2:f9:2e:d3:
15:ab:9f:11:b9:15:08:43:f3:a7:14:cb:60:60:d2:3d:0f:d4:
dd:c9:67:ce:58:b9:e9:43:66:fe:d8:ed:bd:a3:9a:34:c1:40:
0b:ca:bf:c2:1e:94:4b:73:74:f1:91:cc:ff:f0:16:b2:aa:d4:
28:35:3a:2f:0b:49:a4:25:90:98:58:d0:b4:ad:18:57:2a:5f:
5f:51:83:89:99:04:4a:2c:a8:b0:3e:0f:bf:83:5c:3a:da:0a:
47:69:94:79:5a:b0:7e:03:0f:ac:95:1a:12:fa:3d:16:49:cc:
34:3e:e4:89:27:50:6d:13:9a:2e:ca:a7:0c:21:04:d4:44:4f:
e7:cf:ba:5a:0a:0a:45:ac:fc:f9:5f:21:6f:d6:1a:3e:b9:06:
84:cb:ee:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 14:54:30 2025 by rpki-client