
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/ccf444-a22c-4fcd-bf1a-0f937ccf02e0/1/RRi4nH3OK17cBVgVFs_BnXoxdOg.mft
File: RRi4nH3OK17cBVgVFs_BnXoxdOg.mft (raw, json)
Hash identifier: tjesLBtuqN1owrfj+XbpiszwBkpuBvH2UxIoLcVNlS4=
Subject key identifier: B4:9A:72:76:9B:61:5F:23:53:94:CD:51:D0:07:6A:F0:62:B1:66:3D
Authority key identifier: 45:18:B8:9C:7D:CE:2B:5E:DC:05:58:15:16:CF:C1:9D:7A:31:74:E8
Certificate issuer: /CN=4518b89c7dce2b5edc05581516cfc19d7a3174e8
Certificate serial: 019895C90D7A49F5EA75FF79080FB68DF91F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RRi4nH3OK17cBVgVFs_BnXoxdOg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/ccf444-a22c-4fcd-bf1a-0f937ccf02e0/1/RRi4nH3OK17cBVgVFs_BnXoxdOg.mft
Manifest number: 144D
Signing time: Sun 10 Aug 2025 21:00:37 +0000
Manifest this update: Sun 10 Aug 2025 21:00:37 +0000
Manifest next update: Mon 11 Aug 2025 21:00:37 +0000
Files and hashes: 1: RRi4nH3OK17cBVgVFs_BnXoxdOg.crl (hash: HoSQlpzwNacbun7lLRvwnscWXdx4SMXuMCxz7w7Tekg=)
2: qkuP3INuoQUlkGzQXsg6hNdv2PE.roa (hash: nbTS8K6lNcxMgwiUyLADYWPREZ9Nv1ZzLCUppLN19Wk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/ccf444-a22c-4fcd-bf1a-0f937ccf02e0/1/RRi4nH3OK17cBVgVFs_BnXoxdOg.crl
rsync://rpki.ripe.net/repository/DEFAULT/df/ccf444-a22c-4fcd-bf1a-0f937ccf02e0/1/RRi4nH3OK17cBVgVFs_BnXoxdOg.mft
rsync://rpki.ripe.net/repository/DEFAULT/RRi4nH3OK17cBVgVFs_BnXoxdOg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 11 Aug 2025 17:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:95:c9:0d:7a:49:f5:ea:75:ff:79:08:0f:b6:8d:f9:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4518b89c7dce2b5edc05581516cfc19d7a3174e8
Validity
Not Before: Aug 10 21:00:37 2025 GMT
Not After : Aug 11 21:00:37 2025 GMT
Subject: CN=b49a72769b615f235394cd51d0076af062b1663d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:e9:13:a3:dd:71:cf:3d:a9:f2:d5:57:4b:c0:
c8:a4:fe:ed:ca:fd:e7:c3:05:e7:fa:76:a7:52:86:
9a:f7:5a:81:63:cc:54:1e:fa:a2:e0:ac:75:80:af:
d5:ea:9f:7d:7d:2e:81:b0:9a:ed:c5:9c:ff:ef:a6:
03:2a:1e:b5:6a:56:03:c8:81:a9:50:28:46:b3:2a:
2b:35:ae:bd:d5:0d:34:be:41:f9:d6:1d:a3:56:33:
76:ee:5f:9a:0d:3a:93:f9:75:0d:c7:d9:1b:b9:a9:
7c:0e:cb:67:c7:92:10:a8:18:51:30:e7:7d:d7:dd:
45:25:bc:07:1b:b1:db:78:9e:98:6e:79:1b:c3:30:
7f:d3:37:de:74:92:33:03:5b:cf:d6:5f:27:3e:20:
8e:28:4a:66:e5:14:32:18:08:07:db:3c:dc:7d:94:
0a:d3:06:ac:11:e1:0b:8a:5d:5d:b9:b2:d9:0d:ef:
fb:06:0d:7e:94:79:04:24:13:ea:53:d0:ad:74:ad:
5f:87:6b:60:4b:4e:fd:b2:d0:46:32:98:9c:d6:79:
d5:89:f7:93:d6:c7:64:3f:e5:f4:70:b9:9e:b0:79:
da:da:f5:c5:b3:b9:35:05:22:fd:bf:e1:33:b2:70:
5d:ff:19:2d:2b:79:86:f8:af:7f:2f:73:8d:68:5d:
c0:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:9A:72:76:9B:61:5F:23:53:94:CD:51:D0:07:6A:F0:62:B1:66:3D
X509v3 Authority Key Identifier:
keyid:45:18:B8:9C:7D:CE:2B:5E:DC:05:58:15:16:CF:C1:9D:7A:31:74:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RRi4nH3OK17cBVgVFs_BnXoxdOg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/ccf444-a22c-4fcd-bf1a-0f937ccf02e0/1/RRi4nH3OK17cBVgVFs_BnXoxdOg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/ccf444-a22c-4fcd-bf1a-0f937ccf02e0/1/RRi4nH3OK17cBVgVFs_BnXoxdOg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:ec:15:c5:bd:3f:d3:d7:a3:a0:54:b5:d1:92:ff:4f:1b:21:
e6:57:c7:2a:b5:93:90:ff:53:c1:a0:6f:46:c5:72:d1:71:62:
bc:64:a3:ec:e1:d9:c0:3f:1f:b9:0e:3a:3f:9a:0d:38:e9:67:
0c:ae:3d:4b:c4:d2:f5:7b:50:cd:ff:e6:8b:79:c3:d5:a7:ce:
8d:85:86:8f:e2:35:50:33:f8:76:f6:d2:d6:5a:26:71:2b:db:
a9:4d:d8:a2:9c:b6:46:a5:3d:8f:84:d7:0b:07:e2:e0:e9:66:
b0:09:36:1e:56:7d:c9:ea:39:26:0e:70:ed:f4:77:a6:f7:8c:
39:24:57:a0:b7:d9:87:cc:b9:55:03:1e:5e:e7:55:ce:aa:cc:
af:11:ff:f8:41:53:8e:9d:0b:37:a4:04:63:85:0c:17:81:6b:
03:72:5b:f0:8d:47:59:5d:33:86:c4:c0:c8:5a:59:f0:66:0e:
a2:01:fb:f3:cd:2f:44:82:e4:d0:d1:10:35:24:a1:f4:19:64:
2c:84:24:0a:0f:3a:96:00:be:52:e3:bc:03:b5:da:c5:1e:8d:
73:9e:09:df:2d:ac:19:bb:0b:31:f5:13:da:e7:6f:9d:72:c0:
c7:7a:4a:2a:bc:61:24:fb:cf:d9:9c:ab:b3:5e:83:33:f6:c9:
f3:7a:b2:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 11 01:46:49 2025 by rpki-client