Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/b7f5cc-53ab-45a8-aad6-f5116bc11067/1/Rcy76zs3q8oa-qTnkXdme1zY56Y.mft
File: Rcy76zs3q8oa-qTnkXdme1zY56Y.mft (raw, json)
Hash identifier: 2YL+aEIuKuJMpsjbMG9OSNyOFyksN48mAl6IimnAfok=
Subject key identifier: E1:A0:B1:1C:EE:8F:61:6B:4E:11:3D:4F:20:8B:BF:55:5B:FD:86:99
Authority key identifier: 45:CC:BB:EB:3B:37:AB:CA:1A:FA:A4:E7:91:77:66:7B:5C:D8:E7:A6
Certificate issuer: /CN=45ccbbeb3b37abca1afaa4e79177667b5cd8e7a6
Certificate serial: 0198D5F16D7BE8E6A060B6E29215A4BB494A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Rcy76zs3q8oa-qTnkXdme1zY56Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/b7f5cc-53ab-45a8-aad6-f5116bc11067/1/Rcy76zs3q8oa-qTnkXdme1zY56Y.mft
Manifest number: A4
Signing time: Sat 23 Aug 2025 08:00:25 +0000
Manifest this update: Sat 23 Aug 2025 08:00:25 +0000
Manifest next update: Sun 24 Aug 2025 08:00:25 +0000
Files and hashes: 1: Rcy76zs3q8oa-qTnkXdme1zY56Y.crl (hash: 8sAnlME8QBIpDbqNcXPPOvGhdrygf/4TIG4DHHB/1gk=)
2: S8TepbiQXeRCqnwRb_Kf4gbokA4.roa (hash: Z/Vh03WpNWn3U5M6zjyjL69BpjSHNYWSMdO+UDP54Q8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/b7f5cc-53ab-45a8-aad6-f5116bc11067/1/Rcy76zs3q8oa-qTnkXdme1zY56Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/b7f5cc-53ab-45a8-aad6-f5116bc11067/1/Rcy76zs3q8oa-qTnkXdme1zY56Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/Rcy76zs3q8oa-qTnkXdme1zY56Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:f1:6d:7b:e8:e6:a0:60:b6:e2:92:15:a4:bb:49:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=45ccbbeb3b37abca1afaa4e79177667b5cd8e7a6
Validity
Not Before: Aug 23 08:00:25 2025 GMT
Not After : Aug 24 08:00:25 2025 GMT
Subject: CN=e1a0b11cee8f616b4e113d4f208bbf555bfd8699
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:22:5d:d5:eb:30:dc:a4:e1:1a:b9:3b:0b:dc:
fd:52:80:5b:d5:96:53:c3:51:80:ca:a1:08:b2:2a:
33:82:28:f3:f8:b1:5d:73:09:b5:20:c9:52:ca:2f:
06:7e:46:dd:53:aa:1e:1f:1e:d0:21:80:7c:be:bc:
1c:18:11:2e:3a:0f:c0:ee:c2:79:0b:a1:6a:08:8b:
52:fc:96:5d:a1:67:d7:43:5f:ef:3f:f3:bd:a9:28:
6a:63:39:29:fe:41:8e:2f:3e:2c:a3:d8:48:a0:44:
6b:ca:8b:b6:69:1e:1c:c9:57:74:35:87:71:61:f8:
70:29:e4:da:16:e1:f6:74:ce:15:96:93:c7:0e:cb:
dd:4a:4e:c3:8c:56:2e:a8:7f:33:1b:52:d0:b1:9f:
b2:37:21:24:2d:f2:6c:97:bf:39:58:af:4d:c8:d9:
ad:f7:46:ac:ed:0e:5f:71:06:15:4c:4d:0f:37:5d:
68:f5:b3:93:42:38:fe:b3:61:89:2e:fe:c8:38:46:
94:40:23:43:df:86:7a:8a:c4:de:6f:1f:62:6b:76:
5d:ea:6e:a8:01:6f:6b:79:de:96:73:a2:1f:0d:4c:
18:79:aa:9f:b0:96:d4:63:c1:e4:70:72:e9:14:b6:
7c:e0:fc:04:7b:0c:29:c5:31:98:02:6d:9d:d9:61:
e4:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:A0:B1:1C:EE:8F:61:6B:4E:11:3D:4F:20:8B:BF:55:5B:FD:86:99
X509v3 Authority Key Identifier:
keyid:45:CC:BB:EB:3B:37:AB:CA:1A:FA:A4:E7:91:77:66:7B:5C:D8:E7:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Rcy76zs3q8oa-qTnkXdme1zY56Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/b7f5cc-53ab-45a8-aad6-f5116bc11067/1/Rcy76zs3q8oa-qTnkXdme1zY56Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/b7f5cc-53ab-45a8-aad6-f5116bc11067/1/Rcy76zs3q8oa-qTnkXdme1zY56Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:bc:9a:51:f7:3a:9a:87:65:b1:bd:9f:d5:10:da:20:ee:5f:
d0:10:11:e6:bb:2c:86:3a:d1:b7:ce:1e:02:50:35:e8:39:68:
ce:a7:0c:a8:38:7f:b8:91:f2:25:88:19:a4:08:52:b5:14:a2:
2c:8a:f9:72:90:59:8c:37:98:56:12:f2:84:d5:ae:19:25:34:
38:e8:23:ea:52:c2:f0:c4:3b:e6:d2:a6:92:97:77:ec:61:a7:
a5:5e:89:7b:32:5e:ff:70:ee:49:74:63:ce:19:88:f8:33:e2:
f5:06:7e:57:c3:9d:d6:87:d3:d8:e6:60:38:57:dc:4a:aa:67:
91:0c:b6:46:90:1c:4a:62:2e:8b:97:44:32:4a:b0:4c:bd:b1:
95:c2:03:8e:17:a6:dd:85:f3:62:d5:bc:26:56:49:1f:eb:46:
16:47:aa:a7:00:b2:df:01:9b:28:6f:fb:e0:dc:9e:9a:38:c8:
e9:98:77:d8:0e:e0:c1:f9:f5:ef:11:07:45:e6:97:b3:ff:94:
7d:6a:1c:3c:34:9d:8f:3e:42:c8:fa:4c:61:74:4e:83:f9:66:
20:5f:37:8a:1f:b4:f0:88:77:a8:07:dd:29:7f:56:a8:6f:45:
60:a5:55:ad:5c:b1:ca:16:8e:05:b9:0d:e6:c6:fb:d3:fd:2a:
1a:df:d1:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:26:52 2025 by rpki-client