Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/b7818d-3298-4069-8290-c6e1cfd60661/1/pW4itGIL0EL3OiqWIfDJJH1RJIo.mft
File: pW4itGIL0EL3OiqWIfDJJH1RJIo.mft (raw, json)
Hash identifier: N/nV9YZwkG28ilrBUvJmlat02YNlBecHYHNOerJQfJs=
Subject key identifier: 55:B7:BE:C8:D1:F0:51:99:AF:6B:C6:FF:11:F0:D9:4D:2A:9C:FC:F7
Authority key identifier: A5:6E:22:B4:62:0B:D0:42:F7:3A:2A:96:21:F0:C9:24:7D:51:24:8A
Certificate issuer: /CN=a56e22b4620bd042f73a2a9621f0c9247d51248a
Certificate serial: 0198D4740B2FF060E90382FC4F18343CFEAF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pW4itGIL0EL3OiqWIfDJJH1RJIo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/b7818d-3298-4069-8290-c6e1cfd60661/1/pW4itGIL0EL3OiqWIfDJJH1RJIo.mft
Manifest number: 6C
Signing time: Sat 23 Aug 2025 01:03:51 +0000
Manifest this update: Sat 23 Aug 2025 01:03:51 +0000
Manifest next update: Sun 24 Aug 2025 01:03:51 +0000
Files and hashes: 1: nzgTTwbAHjDz2-zsShiAXUCqJOU.roa (hash: GBnP7tc+zXd9JtLmcvpJOSz2ArIIJJ/9cimz8hGmRDA=)
2: pW4itGIL0EL3OiqWIfDJJH1RJIo.crl (hash: kQKcu+1BkK1hl2tHwed5XloR7QdcgbisWPOM4kLSTtQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/b7818d-3298-4069-8290-c6e1cfd60661/1/pW4itGIL0EL3OiqWIfDJJH1RJIo.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/b7818d-3298-4069-8290-c6e1cfd60661/1/pW4itGIL0EL3OiqWIfDJJH1RJIo.mft
rsync://rpki.ripe.net/repository/DEFAULT/pW4itGIL0EL3OiqWIfDJJH1RJIo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:74:0b:2f:f0:60:e9:03:82:fc:4f:18:34:3c:fe:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a56e22b4620bd042f73a2a9621f0c9247d51248a
Validity
Not Before: Aug 23 01:03:51 2025 GMT
Not After : Aug 24 01:03:51 2025 GMT
Subject: CN=55b7bec8d1f05199af6bc6ff11f0d94d2a9cfcf7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:4b:e2:47:d3:d1:4d:87:80:0a:4c:d2:1d:51:
58:5c:28:41:80:e5:76:9c:d5:a5:8c:b7:e5:f3:fa:
51:5e:eb:1c:2b:41:72:ff:6f:e5:a7:93:a4:46:c1:
8e:aa:cb:a5:21:6d:c0:19:72:15:63:a8:1a:0f:21:
6c:1b:9b:fc:3d:13:9e:69:28:19:9d:99:68:5f:c3:
25:e3:df:15:ad:66:5f:79:96:f6:a1:76:5e:f8:14:
26:12:cc:e8:5c:96:7b:15:39:b2:50:3f:6f:1d:02:
86:87:83:55:a7:05:87:44:b6:d2:03:86:00:f6:45:
a7:96:d8:3c:72:05:ee:41:16:05:c8:8b:5f:66:26:
d8:50:af:de:e8:47:7b:9d:c9:6b:ac:af:3c:ed:be:
4f:ed:b8:41:36:3a:29:3d:8e:dd:ea:28:75:93:1d:
7f:1d:f3:ec:33:14:b2:f6:db:a1:82:c3:bf:65:84:
fa:39:da:f9:54:17:11:03:9e:56:b9:ef:3d:d9:41:
de:85:b3:0f:0e:b7:b9:55:67:1c:18:b3:05:2c:eb:
fd:89:2a:63:23:0d:de:73:d3:da:be:bf:ea:f7:c7:
b8:bd:3b:56:33:54:b2:66:1a:59:97:0e:3f:db:dd:
72:d3:82:77:fc:09:5d:f8:b3:4e:62:21:8b:61:56:
eb:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:B7:BE:C8:D1:F0:51:99:AF:6B:C6:FF:11:F0:D9:4D:2A:9C:FC:F7
X509v3 Authority Key Identifier:
keyid:A5:6E:22:B4:62:0B:D0:42:F7:3A:2A:96:21:F0:C9:24:7D:51:24:8A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pW4itGIL0EL3OiqWIfDJJH1RJIo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/b7818d-3298-4069-8290-c6e1cfd60661/1/pW4itGIL0EL3OiqWIfDJJH1RJIo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/b7818d-3298-4069-8290-c6e1cfd60661/1/pW4itGIL0EL3OiqWIfDJJH1RJIo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:e1:73:f7:e3:15:93:2f:7b:42:61:58:d4:41:70:79:2a:a8:
f1:14:1a:d9:61:d6:53:22:71:99:d5:ae:b7:c1:32:57:09:db:
27:04:a3:df:d5:37:30:cf:7f:b3:a0:6c:8e:bf:6f:74:b3:c6:
ad:7e:42:8e:1c:3e:91:6a:fe:33:2d:64:44:ca:c6:71:6e:8a:
93:c5:3f:ed:8a:fb:9f:40:a7:13:07:65:b2:3a:62:3e:a7:74:
10:56:0d:61:79:86:c8:95:7d:3c:4a:fc:cf:ed:32:3a:ac:9e:
9d:4e:c0:71:35:b4:4d:95:4f:9a:d9:c4:50:a7:2c:62:5f:e3:
35:0c:3b:18:c0:ca:cc:df:5b:a6:16:c6:75:a3:74:66:e3:e4:
7c:80:fc:d1:de:90:ab:33:fd:4a:d1:26:e8:06:a8:49:c2:41:
c4:82:1a:ed:7c:c3:4b:1d:fe:d0:88:f8:b9:7f:b9:cd:e4:73:
4e:ff:e8:91:f0:c9:cc:ac:be:4b:d8:5d:89:e3:2e:a8:8f:32:
58:a3:cc:42:1b:9b:62:85:c7:f9:42:ee:5c:6d:8c:7a:4d:c2:
1e:99:7d:04:e9:46:02:5f:d7:7c:06:cf:3e:a0:7b:54:2a:a7:
69:3e:f0:89:2e:28:a4:99:5c:3c:b4:56:7c:e6:99:49:c2:0d:
26:63:92:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:25:58 2025 by rpki-client