Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/76cd03-eaa2-4965-94ef-98dbb6402cdd/1/f4shg1iYOn16JTip2puh80lNcas.mft
File: f4shg1iYOn16JTip2puh80lNcas.mft (raw, json)
Hash identifier: Qz9XHSflvuXGzVElq3SsNETSFdejbyrJYTvVoBiCW9Q=
Subject key identifier: 63:39:B7:46:CA:DF:AE:B2:E6:2D:2A:BD:07:BA:42:BE:EC:42:DA:8D
Authority key identifier: 7F:8B:21:83:58:98:3A:7D:7A:25:38:A9:DA:9B:A1:F3:49:4D:71:AB
Certificate issuer: /CN=7f8b218358983a7d7a2538a9da9ba1f3494d71ab
Certificate serial: 019882B05A4C9C90B5BE942980665EEE35DD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/f4shg1iYOn16JTip2puh80lNcas.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/76cd03-eaa2-4965-94ef-98dbb6402cdd/1/f4shg1iYOn16JTip2puh80lNcas.mft
Manifest number: 44
Signing time: Thu 07 Aug 2025 04:00:52 +0000
Manifest this update: Thu 07 Aug 2025 04:00:52 +0000
Manifest next update: Fri 08 Aug 2025 04:00:52 +0000
Files and hashes: 1: f4shg1iYOn16JTip2puh80lNcas.crl (hash: 6gg2E7Xofpe1wREB/o3L5eEeGX8tVcitklnLOojcmlM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/76cd03-eaa2-4965-94ef-98dbb6402cdd/1/f4shg1iYOn16JTip2puh80lNcas.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/76cd03-eaa2-4965-94ef-98dbb6402cdd/1/f4shg1iYOn16JTip2puh80lNcas.mft
rsync://rpki.ripe.net/repository/DEFAULT/f4shg1iYOn16JTip2puh80lNcas.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 08 Aug 2025 04:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:82:b0:5a:4c:9c:90:b5:be:94:29:80:66:5e:ee:35:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7f8b218358983a7d7a2538a9da9ba1f3494d71ab
Validity
Not Before: Aug 7 04:00:52 2025 GMT
Not After : Aug 8 04:00:52 2025 GMT
Subject: CN=6339b746cadfaeb2e62d2abd07ba42beec42da8d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:c1:8c:ad:c8:b5:97:d8:77:bd:e1:17:72:6b:
dd:3b:64:e2:bd:49:d5:15:ec:d7:c5:5f:e0:a4:d4:
e0:d6:1f:89:fc:10:01:a8:e7:6b:69:73:75:3a:3f:
f1:5d:39:96:22:b1:ff:f3:6f:ae:a0:1a:ec:31:2a:
be:c7:13:30:68:ba:6e:c4:8c:18:ea:48:5b:50:80:
fe:4d:22:dd:b2:ea:c8:0f:73:87:84:dc:4e:6b:35:
89:03:08:2e:6d:72:01:7d:a4:af:28:fc:0d:84:ae:
c6:84:34:f6:32:af:36:b8:45:9c:44:dd:43:55:2e:
8f:f8:3f:dd:ea:47:14:49:b2:17:bf:78:e9:90:3d:
26:02:ea:4c:f7:51:71:c4:95:46:1e:9c:c8:66:26:
29:33:5d:40:9a:e2:12:0e:03:fb:89:ff:28:b7:70:
14:2b:f6:e5:8b:b0:86:e6:a3:05:1f:5b:72:d4:cd:
b5:53:f4:e5:40:fd:cb:ba:82:94:2e:0c:21:73:f0:
52:f8:15:c8:04:16:65:4d:6e:ba:97:66:7e:51:8e:
9f:a5:1c:97:44:c1:0d:14:b2:fb:2d:9d:31:d6:be:
65:7c:5c:f1:c3:24:5e:e6:df:c5:53:3b:b5:68:db:
a1:af:5f:df:cb:11:0a:81:d3:38:99:33:8a:cb:fb:
93:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:39:B7:46:CA:DF:AE:B2:E6:2D:2A:BD:07:BA:42:BE:EC:42:DA:8D
X509v3 Authority Key Identifier:
keyid:7F:8B:21:83:58:98:3A:7D:7A:25:38:A9:DA:9B:A1:F3:49:4D:71:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4shg1iYOn16JTip2puh80lNcas.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/76cd03-eaa2-4965-94ef-98dbb6402cdd/1/f4shg1iYOn16JTip2puh80lNcas.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/76cd03-eaa2-4965-94ef-98dbb6402cdd/1/f4shg1iYOn16JTip2puh80lNcas.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:a9:9d:42:61:a9:c3:5c:a1:ae:4c:f0:0e:b4:06:19:60:0f:
a9:66:6d:83:dd:90:c6:92:ea:8c:9d:3a:df:66:56:de:a2:53:
35:65:33:de:67:91:0f:0b:9a:be:05:be:a6:aa:0d:cb:69:19:
e6:4f:84:91:82:49:40:12:c5:af:a0:be:fa:b9:39:31:70:4a:
29:65:f5:99:65:b6:1f:51:53:f2:1d:39:a2:cd:dd:8f:98:bb:
82:15:62:4c:b6:c5:bc:78:a5:cf:a0:27:28:a4:98:d3:0a:bc:
65:56:bc:b3:4e:35:1b:38:2b:b9:85:ee:16:23:bb:81:7f:84:
12:54:d7:76:18:fb:27:a3:7a:f3:50:7f:e7:3b:39:ad:a0:f8:
c0:ff:4c:b6:6e:e4:cf:78:b7:ab:f0:12:de:16:41:6c:71:99:
02:a3:62:93:72:c3:dd:26:91:25:e5:b7:07:90:f4:4d:69:35:
1c:5e:a8:4c:b3:b5:8a:36:93:b2:15:57:a6:a4:21:66:3d:a9:
3e:70:6c:35:e8:2e:3e:b8:19:d4:96:39:ff:d8:60:aa:91:3e:
4e:5f:89:84:51:e6:55:6a:c4:de:5c:c2:a8:16:21:47:87:44:
17:48:bb:99:d9:ab:16:80:9c:ee:ee:12:5a:b3:a3:23:76:58:
26:01:57:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 14:41:00 2025 by rpki-client