Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/86e40c-1563-40ea-8f4e-a178332533e0/1/p1f4f4bpOyXvTAQzZku-ctqY-_4.mft
File: p1f4f4bpOyXvTAQzZku-ctqY-_4.mft (raw, json)
Hash identifier: et+sMY3kGzPAxxxiwrij2l7AsvG9F9tWkWHTTYYYKIU=
Subject key identifier: 0A:8D:28:44:2B:1A:17:82:10:98:ED:11:60:3A:B0:36:14:A1:2C:81
Authority key identifier: A7:57:F8:7F:86:E9:3B:25:EF:4C:04:33:66:4B:BE:72:DA:98:FB:FE
Certificate issuer: /CN=a757f87f86e93b25ef4c0433664bbe72da98fbfe
Certificate serial: 0198D4724F5DF4BB16F5C1A6BBD1EE4BEAFD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/p1f4f4bpOyXvTAQzZku-ctqY-_4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/86e40c-1563-40ea-8f4e-a178332533e0/1/p1f4f4bpOyXvTAQzZku-ctqY-_4.mft
Manifest number: 0460
Signing time: Sat 23 Aug 2025 01:01:57 +0000
Manifest this update: Sat 23 Aug 2025 01:01:57 +0000
Manifest next update: Sun 24 Aug 2025 01:01:57 +0000
Files and hashes: 1: IZ6vDZjMHwfmvRBOdfcy5i9E3QM.roa (hash: uS025afpY/Jz9tEZKMABnGMw3AujzF5/XTw1sc/dgNo=)
2: p1f4f4bpOyXvTAQzZku-ctqY-_4.crl (hash: JROrmSMBIqQoGfGXHX5ZKxfnvB/4XCdU/QYGByl6Xr8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/86e40c-1563-40ea-8f4e-a178332533e0/1/p1f4f4bpOyXvTAQzZku-ctqY-_4.crl
rsync://rpki.ripe.net/repository/DEFAULT/5c/86e40c-1563-40ea-8f4e-a178332533e0/1/p1f4f4bpOyXvTAQzZku-ctqY-_4.mft
rsync://rpki.ripe.net/repository/DEFAULT/p1f4f4bpOyXvTAQzZku-ctqY-_4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:72:4f:5d:f4:bb:16:f5:c1:a6:bb:d1:ee:4b:ea:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a757f87f86e93b25ef4c0433664bbe72da98fbfe
Validity
Not Before: Aug 23 01:01:57 2025 GMT
Not After : Aug 24 01:01:57 2025 GMT
Subject: CN=0a8d28442b1a17821098ed11603ab03614a12c81
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:6b:9a:28:7c:88:3b:28:a1:54:02:69:7f:75:
da:66:9c:0e:0b:02:e7:52:2e:88:6b:b4:63:e4:62:
09:56:0f:71:52:cc:af:5b:a1:d7:9c:76:31:47:52:
19:87:cf:98:27:80:6f:d6:80:42:13:9d:6e:6d:43:
2b:23:25:a5:02:7f:24:f5:52:9c:1d:94:19:f2:78:
82:1e:d3:6c:ac:e4:2f:21:19:bf:5d:63:9a:b7:17:
c8:8c:18:f8:73:bb:27:a0:74:50:a6:aa:2e:bb:99:
c3:67:32:9e:6e:dc:c0:dd:51:f4:c4:71:8d:44:01:
33:f1:e7:72:c0:4c:c5:d5:57:e6:c5:22:56:ee:c8:
fe:6b:ac:78:88:8f:a4:0b:51:cf:2c:a5:32:88:35:
7e:01:6f:ef:74:fb:ce:47:e1:38:f7:b0:f1:43:d3:
f6:c1:ce:6e:72:dd:85:63:1f:6a:57:d4:ad:eb:3a:
a9:7d:e0:fa:fa:ab:fc:67:e8:db:02:1f:47:6f:24:
cf:1e:4b:f2:ad:be:35:b5:43:47:80:12:2b:2f:56:
64:18:b3:51:25:2f:b5:17:e8:e2:dd:2d:f2:f0:ff:
c6:ba:e1:de:0c:69:3e:a5:a0:b5:47:3a:11:21:78:
8d:e8:f6:6f:48:bf:bd:36:23:40:65:45:45:99:25:
66:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:8D:28:44:2B:1A:17:82:10:98:ED:11:60:3A:B0:36:14:A1:2C:81
X509v3 Authority Key Identifier:
keyid:A7:57:F8:7F:86:E9:3B:25:EF:4C:04:33:66:4B:BE:72:DA:98:FB:FE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p1f4f4bpOyXvTAQzZku-ctqY-_4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/86e40c-1563-40ea-8f4e-a178332533e0/1/p1f4f4bpOyXvTAQzZku-ctqY-_4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/86e40c-1563-40ea-8f4e-a178332533e0/1/p1f4f4bpOyXvTAQzZku-ctqY-_4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:11:f3:25:d0:83:82:61:84:9f:b6:d4:06:b1:cc:7b:8d:12:
37:e4:57:78:8d:05:68:6a:b7:b9:fe:de:b3:36:e3:01:20:20:
ca:ca:c9:d7:09:07:16:90:e6:16:97:22:54:05:c8:e3:55:ef:
72:1f:04:36:a7:a7:70:e1:c2:63:85:e3:0a:9d:11:59:30:33:
94:cd:6a:84:54:38:48:cf:16:ec:b1:40:12:f3:df:68:cb:cc:
17:84:b5:db:fc:7d:e7:12:6d:8a:b5:53:e6:c9:4a:b8:a8:06:
3f:91:52:2a:2e:1d:46:46:4f:bf:83:78:d6:29:52:c8:43:cf:
e6:6c:06:0f:32:31:3c:98:cc:2d:44:55:54:6f:48:8d:38:b8:
36:b3:82:b2:aa:9d:67:a7:13:99:06:8d:6e:f7:58:c7:b3:ef:
e2:28:8d:04:7a:44:1b:bb:c1:d8:f2:bb:96:b1:bf:e0:d9:6b:
e9:88:0a:5f:17:1e:73:8e:e6:07:76:eb:e3:26:72:58:bb:47:
fa:e1:73:52:b4:1f:b0:df:2e:3b:dd:40:de:5b:69:b0:ea:ed:
10:27:65:cb:32:b6:46:26:18:59:f7:b5:1d:80:9b:bc:7c:58:
52:5a:bd:68:1f:ce:49:4a:66:64:dc:f9:76:8c:af:89:8d:4b:
41:5d:1e:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:18:21 2025 by rpki-client