Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/5b0342-5e52-4c56-81b3-dc0dc5d5141f/1/b4bJ980XO7zR22Hg8bTr4FwbnKE.mft
File: b4bJ980XO7zR22Hg8bTr4FwbnKE.mft (raw, json)
Hash identifier: EZz3rhTnpioiBLp5I5NcI8mxEmyaQKHd3Uyrg2xCjdA=
Subject key identifier: C9:9E:72:9C:CF:2D:90:0C:87:8D:2A:BA:9A:05:AD:ED:AE:88:75:17
Authority key identifier: 6F:86:C9:F7:CD:17:3B:BC:D1:DB:61:E0:F1:B4:EB:E0:5C:1B:9C:A1
Certificate issuer: /CN=6f86c9f7cd173bbcd1db61e0f1b4ebe05c1b9ca1
Certificate serial: 0198D5BBFF8949256DE2ECFD515CD35F68FB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b4bJ980XO7zR22Hg8bTr4FwbnKE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/5b0342-5e52-4c56-81b3-dc0dc5d5141f/1/b4bJ980XO7zR22Hg8bTr4FwbnKE.mft
Manifest number: 105A
Signing time: Sat 23 Aug 2025 07:02:04 +0000
Manifest this update: Sat 23 Aug 2025 07:02:04 +0000
Manifest next update: Sun 24 Aug 2025 07:02:04 +0000
Files and hashes: 1: 7BXDP2MXXtjiuKfCj7kGQbobaJg.roa (hash: dX4O/Ud+qTWtCLczeQoZeg+HV0IvLYclumW7g97KhD4=)
2: b4bJ980XO7zR22Hg8bTr4FwbnKE.crl (hash: UGgeAaYDcDZKdq59lRiVkeIz2IMAwPXd0/IsGqnSBGM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/5b0342-5e52-4c56-81b3-dc0dc5d5141f/1/b4bJ980XO7zR22Hg8bTr4FwbnKE.crl
rsync://rpki.ripe.net/repository/DEFAULT/48/5b0342-5e52-4c56-81b3-dc0dc5d5141f/1/b4bJ980XO7zR22Hg8bTr4FwbnKE.mft
rsync://rpki.ripe.net/repository/DEFAULT/b4bJ980XO7zR22Hg8bTr4FwbnKE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 07:02:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:bb:ff:89:49:25:6d:e2:ec:fd:51:5c:d3:5f:68:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f86c9f7cd173bbcd1db61e0f1b4ebe05c1b9ca1
Validity
Not Before: Aug 23 07:02:04 2025 GMT
Not After : Aug 24 07:02:04 2025 GMT
Subject: CN=c99e729ccf2d900c878d2aba9a05adedae887517
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:63:28:b2:c8:b5:88:69:72:b3:0a:b8:47:b3:
c9:65:c1:b1:84:45:5b:10:58:01:8d:97:b0:26:ba:
5d:9a:6b:cf:1f:4b:81:4c:03:cb:3c:10:48:c6:73:
a6:18:2d:4c:2e:dc:b9:7f:a5:6c:fd:e2:a1:24:d3:
22:70:5c:fb:d4:03:a4:7c:79:41:02:ef:33:3d:72:
dd:d3:6c:23:f1:d9:c0:10:4f:35:09:e3:62:0d:e4:
2c:26:ce:5b:59:e0:bb:4c:ce:08:2a:45:d9:de:18:
70:aa:73:e3:93:da:72:f3:70:bf:5b:14:bc:57:07:
17:55:04:99:5c:41:4a:84:15:e9:65:7b:59:be:53:
ae:52:49:78:78:bd:b8:bb:f0:f8:15:24:ad:fc:5a:
03:b5:05:fe:ea:f0:7f:2c:a4:a2:d7:92:20:ec:02:
a0:ff:f7:89:ef:57:23:88:48:f2:52:f6:85:1b:0c:
7b:9e:78:46:c6:ba:e5:c9:48:6b:e6:97:4e:dd:71:
aa:8e:12:3d:1d:36:ee:ed:ae:75:79:11:88:82:1f:
c7:f1:a6:cf:fa:04:8a:76:55:31:9c:fa:fe:bb:0d:
5d:93:a8:da:77:20:8d:27:8d:f4:b3:a5:ab:93:3a:
d6:49:f4:ee:9d:71:3b:81:11:58:b4:79:ba:95:c6:
d2:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:9E:72:9C:CF:2D:90:0C:87:8D:2A:BA:9A:05:AD:ED:AE:88:75:17
X509v3 Authority Key Identifier:
keyid:6F:86:C9:F7:CD:17:3B:BC:D1:DB:61:E0:F1:B4:EB:E0:5C:1B:9C:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4bJ980XO7zR22Hg8bTr4FwbnKE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/5b0342-5e52-4c56-81b3-dc0dc5d5141f/1/b4bJ980XO7zR22Hg8bTr4FwbnKE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/48/5b0342-5e52-4c56-81b3-dc0dc5d5141f/1/b4bJ980XO7zR22Hg8bTr4FwbnKE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:8a:9d:0c:b9:35:78:d7:ac:ab:7e:9c:83:b0:46:7b:d2:ac:
ef:28:5a:18:c2:5b:6f:44:ce:e1:8d:fd:6e:5c:19:c9:7c:4e:
f9:61:0f:b9:c1:cd:53:d1:31:63:6e:b7:86:27:c9:e1:78:ab:
50:d6:14:c1:a8:e7:ae:80:6a:ca:b8:2f:36:63:1b:b3:14:f0:
c6:1b:62:10:04:75:c4:67:87:78:0b:6e:bc:93:76:ee:da:09:
6c:46:42:8c:b5:80:d7:40:3a:f5:af:01:52:99:6e:f6:97:25:
17:2a:2a:67:14:6c:27:68:6a:c3:2c:8b:2f:6d:29:25:39:89:
c9:4b:40:61:62:44:6d:75:d3:46:49:ad:0d:c5:cc:d2:7d:12:
5d:69:68:d3:35:8a:34:68:83:b7:e3:42:64:7d:95:2b:18:e2:
93:12:60:b0:e7:bd:c6:ad:a5:95:16:8a:bc:39:fe:3d:d5:d5:
71:f2:0f:b3:61:eb:43:75:fc:74:00:8c:83:dd:7f:f5:78:35:
6c:15:a6:f2:31:76:13:46:16:9b:b5:0d:fd:9e:04:dc:c7:43:
00:93:11:dc:49:78:b0:dd:66:ee:01:b6:2b:d7:8d:2c:b2:e3:
9b:30:bc:e9:25:21:0e:91:7e:f2:83:76:b8:b6:98:22:a9:64:
d9:88:b8:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 16:33:28 2025 by rpki-client