Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/0789aa-9e73-45ee-91b6-143ff60d9991/1/RA6IwxN_ipFffaG1wDQcoYwsI0w.mft
File: RA6IwxN_ipFffaG1wDQcoYwsI0w.mft (raw, json)
Hash identifier: gdkpJB2q9aTe5MKaMd0AOm80dUq2CibF6GLbDnzUc0A=
Subject key identifier: 7A:FA:9C:8C:9B:C8:FF:D4:7A:EC:FB:E0:15:EB:CC:0B:3E:0A:C8:B7
Authority key identifier: 44:0E:88:C3:13:7F:8A:91:5F:7D:A1:B5:C0:34:1C:A1:8C:2C:23:4C
Certificate issuer: /CN=440e88c3137f8a915f7da1b5c0341ca18c2c234c
Certificate serial: 0198D54E1DA7F67521888363B5A96600381E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RA6IwxN_ipFffaG1wDQcoYwsI0w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/0789aa-9e73-45ee-91b6-143ff60d9991/1/RA6IwxN_ipFffaG1wDQcoYwsI0w.mft
Manifest number: 016D
Signing time: Sat 23 Aug 2025 05:02:02 +0000
Manifest this update: Sat 23 Aug 2025 05:02:02 +0000
Manifest next update: Sun 24 Aug 2025 05:02:02 +0000
Files and hashes: 1: ERKKjb9maK6l2D8S98DiUvq_sHY.roa (hash: K5h5Qq2Di55EgzF5bOxkfD2fsAbyW8q02xX4iijsUmk=)
2: RA6IwxN_ipFffaG1wDQcoYwsI0w.crl (hash: O6U2K3bVTs8/35zcsXzQ1XJgy+82ChE9WEX9lPG/C30=)
3: uC4_l-E2xjwrvlqz30Q-HpJhGxI.roa (hash: eCi9fijMSbE+YJ8x/iuJrnNqx//o/hxhFT+nJZyvJ+A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4b/0789aa-9e73-45ee-91b6-143ff60d9991/1/RA6IwxN_ipFffaG1wDQcoYwsI0w.crl
rsync://rpki.ripe.net/repository/DEFAULT/4b/0789aa-9e73-45ee-91b6-143ff60d9991/1/RA6IwxN_ipFffaG1wDQcoYwsI0w.mft
rsync://rpki.ripe.net/repository/DEFAULT/RA6IwxN_ipFffaG1wDQcoYwsI0w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:4e:1d:a7:f6:75:21:88:83:63:b5:a9:66:00:38:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=440e88c3137f8a915f7da1b5c0341ca18c2c234c
Validity
Not Before: Aug 23 05:02:02 2025 GMT
Not After : Aug 24 05:02:02 2025 GMT
Subject: CN=7afa9c8c9bc8ffd47aecfbe015ebcc0b3e0ac8b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:b4:5d:42:78:11:3e:e5:ae:12:61:a1:db:5a:
d2:c2:1f:85:4c:76:a9:e8:96:9f:e4:8d:85:b5:5a:
74:c9:42:5d:52:2a:79:c3:66:0a:94:c4:16:5d:80:
23:c5:eb:7a:d3:3a:a8:d2:68:d2:db:90:7b:0e:38:
b5:8d:fa:96:a1:ef:99:ec:d1:22:b9:c0:c1:fc:6d:
44:9d:52:a5:4c:8c:28:3b:4d:6b:96:8f:71:b8:d7:
ba:a4:82:bd:4b:86:48:b4:84:f2:42:dc:ac:66:06:
3c:2b:5f:f6:d4:d0:1e:45:ec:b0:24:f1:78:c3:9e:
66:91:b8:dc:15:73:b7:66:b8:c2:4a:a2:90:01:b0:
72:9e:9b:7d:84:4d:f8:f4:cf:88:eb:57:d4:c4:d3:
72:33:75:dd:31:7e:b4:42:db:19:07:6d:7c:f9:c8:
27:b7:a8:0a:8f:30:02:dc:0c:74:4e:01:2b:bd:7d:
cf:1a:f0:8c:d7:99:8f:19:74:16:d8:43:37:d7:a5:
e7:8c:21:5f:c0:0e:a6:03:90:b9:99:42:0e:d2:4c:
de:b9:fb:85:0d:23:79:23:4f:ff:ea:db:57:21:4b:
f2:d2:73:43:0a:d9:be:4e:17:f9:1b:0f:a7:77:e0:
3f:8c:45:d3:b0:1a:d6:48:fe:99:81:04:ec:d6:28:
00:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:FA:9C:8C:9B:C8:FF:D4:7A:EC:FB:E0:15:EB:CC:0B:3E:0A:C8:B7
X509v3 Authority Key Identifier:
keyid:44:0E:88:C3:13:7F:8A:91:5F:7D:A1:B5:C0:34:1C:A1:8C:2C:23:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RA6IwxN_ipFffaG1wDQcoYwsI0w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/0789aa-9e73-45ee-91b6-143ff60d9991/1/RA6IwxN_ipFffaG1wDQcoYwsI0w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/0789aa-9e73-45ee-91b6-143ff60d9991/1/RA6IwxN_ipFffaG1wDQcoYwsI0w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:83:38:59:7e:81:f8:6e:48:68:ff:36:32:7b:a1:f7:36:b8:
be:ce:76:4f:58:9f:e6:25:62:38:f3:79:2a:0c:08:00:ed:f8:
34:87:f7:19:6e:f6:d4:06:5e:13:1d:38:1f:23:3c:59:68:b3:
96:70:b0:c9:b4:12:18:78:cf:ac:e9:e9:88:3c:8f:ad:60:fc:
fa:0c:6e:28:67:1d:f3:7f:65:b7:de:85:13:ec:ed:bf:61:ed:
10:ba:1c:bc:fd:10:c0:4d:f5:bd:32:70:2d:99:88:a4:81:6c:
fb:02:3a:3f:8f:0f:20:42:e9:70:a8:ed:94:a2:b1:84:7f:3d:
2c:29:70:f6:2f:eb:4a:27:92:b2:01:e2:ef:2f:65:c9:b4:ac:
f1:9a:4a:e4:18:bb:4b:54:ec:c1:6d:41:a4:eb:59:ed:cb:93:
e0:a3:31:92:8e:2f:a7:cd:7e:1f:a9:90:11:e0:79:69:59:9c:
96:57:49:a0:ef:a7:02:d5:5e:96:ce:60:8d:e4:eb:32:ca:83:
c6:13:82:c3:3f:33:92:d2:07:a9:82:c4:fd:12:e8:01:a8:d0:
9a:0f:ef:7d:47:04:77:0f:7e:f9:99:7f:06:68:8a:2e:9a:3d:
15:b8:7c:04:4f:43:04:27:f4:3a:96:59:0c:06:75:2d:bd:8f:
4c:54:c6:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 14:08:27 2025 by rpki-client