Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/98a8b9-8e99-4db3-b061-e9230e588626/1/rLwtpPrHe7qtKaWYa0EH9THtLj4.mft
File: rLwtpPrHe7qtKaWYa0EH9THtLj4.mft (raw, json)
Hash identifier: kvuj1KRLJmDFcuiEqs6ntT9F7MJIGLfZkQTqUUfpTF4=
Subject key identifier: CD:35:1E:79:8B:5F:47:3C:80:40:20:F7:4D:42:C9:E4:FF:0F:D4:B8
Authority key identifier: AC:BC:2D:A4:FA:C7:7B:BA:AD:29:A5:98:6B:41:07:F5:31:ED:2E:3E
Certificate issuer: /CN=acbc2da4fac77bbaad29a5986b4107f531ed2e3e
Certificate serial: 0197B77C8B610E19793688AAD92CED6FDB32
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rLwtpPrHe7qtKaWYa0EH9THtLj4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/98a8b9-8e99-4db3-b061-e9230e588626/1/rLwtpPrHe7qtKaWYa0EH9THtLj4.mft
Manifest number: 146B
Signing time: Sat 28 Jun 2025 17:01:22 +0000
Manifest this update: Sat 28 Jun 2025 17:01:22 +0000
Manifest next update: Sun 29 Jun 2025 17:01:22 +0000
Files and hashes: 1: idTCOx8-4Tst-Qoz7K6F7H3dYN4.roa (hash: arkT/3jnb38g6YOrTZp9aafP6pWkmdDHWiUSBAjozQo=)
2: rLwtpPrHe7qtKaWYa0EH9THtLj4.crl (hash: 6TmN+JFabdZdvjsVOaj34SRnOOAOfu5qhadbyuwcils=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/98a8b9-8e99-4db3-b061-e9230e588626/1/rLwtpPrHe7qtKaWYa0EH9THtLj4.crl
rsync://rpki.ripe.net/repository/DEFAULT/4a/98a8b9-8e99-4db3-b061-e9230e588626/1/rLwtpPrHe7qtKaWYa0EH9THtLj4.mft
rsync://rpki.ripe.net/repository/DEFAULT/rLwtpPrHe7qtKaWYa0EH9THtLj4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:7c:8b:61:0e:19:79:36:88:aa:d9:2c:ed:6f:db:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=acbc2da4fac77bbaad29a5986b4107f531ed2e3e
Validity
Not Before: Jun 28 17:01:22 2025 GMT
Not After : Jun 29 17:01:22 2025 GMT
Subject: CN=cd351e798b5f473c804020f74d42c9e4ff0fd4b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:f2:16:52:61:59:11:dd:a4:5a:a3:64:31:5e:
de:ab:5a:16:d1:97:a8:85:d5:e0:df:c4:20:d1:7a:
32:81:55:85:85:4d:7f:10:a4:47:00:5f:b4:9a:ee:
b9:68:71:e1:04:0e:18:c4:6b:2f:eb:4d:b4:bf:9f:
3d:a6:af:e9:b0:ad:c3:23:bc:6c:41:78:a0:3e:23:
57:64:4d:35:f4:c4:ec:bc:6b:a3:10:c7:98:4f:49:
2f:d4:6b:60:28:1a:83:c5:4b:7e:10:d8:fe:fd:ab:
ea:bb:68:01:cf:3e:36:31:6e:07:58:76:97:ee:5d:
df:a8:30:2f:2e:88:5b:cf:0a:a7:19:f6:a1:55:a7:
57:85:6e:6a:39:f0:2a:84:e8:ce:db:5d:c0:85:aa:
78:07:1a:23:be:5e:b1:5e:17:8f:39:2f:7a:a2:0d:
8e:49:da:78:ba:c3:a4:8c:9a:07:1a:fb:78:0f:0e:
73:4b:fa:5f:7d:f1:4d:f0:e8:be:d9:6a:7a:82:e8:
8d:9b:5a:71:f2:48:43:57:df:de:2b:e2:a2:0e:a4:
9d:c7:9b:e6:8f:7e:2b:06:d6:5d:b5:b6:ba:29:cd:
cd:17:37:fd:5b:3b:f4:4e:f2:0b:15:15:eb:87:55:
b3:bc:8f:60:fa:c1:30:aa:38:04:ea:1b:92:52:31:
4d:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:35:1E:79:8B:5F:47:3C:80:40:20:F7:4D:42:C9:E4:FF:0F:D4:B8
X509v3 Authority Key Identifier:
keyid:AC:BC:2D:A4:FA:C7:7B:BA:AD:29:A5:98:6B:41:07:F5:31:ED:2E:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rLwtpPrHe7qtKaWYa0EH9THtLj4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/98a8b9-8e99-4db3-b061-e9230e588626/1/rLwtpPrHe7qtKaWYa0EH9THtLj4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/98a8b9-8e99-4db3-b061-e9230e588626/1/rLwtpPrHe7qtKaWYa0EH9THtLj4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a6:ff:d1:1e:1c:46:e0:10:23:d1:f2:09:ee:76:76:23:52:6b:
86:91:dd:b1:13:d2:70:b4:d2:a8:3b:5e:0f:18:ec:aa:c2:40:
3d:b7:2e:76:41:ab:e7:ad:4e:7d:f2:ba:dd:e5:6d:d4:48:20:
70:e2:8b:bb:b0:3e:4f:8b:82:8e:ae:e7:c3:df:d1:10:e9:13:
77:14:e6:ce:e7:34:5e:3e:56:f3:37:a6:02:c0:33:0d:7c:a5:
5d:56:f3:bb:f0:0a:e6:4d:3f:7b:f7:76:ba:5e:f7:03:fa:b2:
1e:6f:bf:f4:10:db:80:95:dd:99:3d:a9:ea:81:c4:9c:40:e9:
46:ed:d0:f4:5c:9f:69:1a:62:a0:df:fb:0d:ea:fe:2c:30:23:
b1:0b:ff:92:5c:6a:cc:00:97:63:e6:7f:50:fe:67:aa:df:fa:
14:44:aa:ca:98:d4:60:5b:1a:30:ab:61:40:92:1a:a6:52:76:
c3:1c:aa:d8:17:f3:ea:f4:2c:80:ae:a7:c4:26:07:b3:a8:52:
a1:98:47:b6:86:59:13:d2:80:b5:d7:b7:ec:0e:5f:84:81:ef:
51:20:6a:de:00:75:14:fa:16:da:4d:cb:7f:9e:02:62:fb:ce:
57:fb:26:ef:8c:08:3d:91:1d:27:82:8f:99:a8:23:26:18:2f:
8e:12:f9:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 22:43:23 2025 by rpki-client