Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/bad1c1-365d-41de-ad7c-ce8fc93adb21/1/R0qIvG6eELuvFQ8Bm7-KYVorA8I.mft
File: R0qIvG6eELuvFQ8Bm7-KYVorA8I.mft (raw, json)
Hash identifier: oB1ZhsxINTQcEzgfRx/0U33eusvvg+3UQJzCnSeSd9Q=
Subject key identifier: C7:3F:E4:A3:CC:B7:62:F2:56:D3:3C:11:81:36:BE:3B:92:B0:69:4B
Authority key identifier: 47:4A:88:BC:6E:9E:10:BB:AF:15:0F:01:9B:BF:8A:61:5A:2B:03:C2
Certificate issuer: /CN=474a88bc6e9e10bbaf150f019bbf8a615a2b03c2
Certificate serial: 0198D65FD6B185707E953D7F5F2E68F8CA8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/R0qIvG6eELuvFQ8Bm7-KYVorA8I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/bad1c1-365d-41de-ad7c-ce8fc93adb21/1/R0qIvG6eELuvFQ8Bm7-KYVorA8I.mft
Manifest number: 164A
Signing time: Sat 23 Aug 2025 10:01:01 +0000
Manifest this update: Sat 23 Aug 2025 10:01:01 +0000
Manifest next update: Sun 24 Aug 2025 10:01:01 +0000
Files and hashes: 1: M_ZucCsuJb1Fkv6phLwqAkn6J0Q.roa (hash: f0NnZS14FEEVK+otZH9sTWdHvzqdq6zBgg0/lm/taxs=)
2: R0qIvG6eELuvFQ8Bm7-KYVorA8I.crl (hash: cs0uUKJxutucrs4vqpsb7cG9Ki5O4iAWmNLzzcStphg=)
3: kNpqx0tZlqJV-cV06kVoinEAEvE.roa (hash: yXJYbGR5++qBsVQrRHL4bHSCZiui648QCWfzX8PBFak=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/67/bad1c1-365d-41de-ad7c-ce8fc93adb21/1/R0qIvG6eELuvFQ8Bm7-KYVorA8I.crl
rsync://rpki.ripe.net/repository/DEFAULT/67/bad1c1-365d-41de-ad7c-ce8fc93adb21/1/R0qIvG6eELuvFQ8Bm7-KYVorA8I.mft
rsync://rpki.ripe.net/repository/DEFAULT/R0qIvG6eELuvFQ8Bm7-KYVorA8I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:5f:d6:b1:85:70:7e:95:3d:7f:5f:2e:68:f8:ca:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=474a88bc6e9e10bbaf150f019bbf8a615a2b03c2
Validity
Not Before: Aug 23 10:01:01 2025 GMT
Not After : Aug 24 10:01:01 2025 GMT
Subject: CN=c73fe4a3ccb762f256d33c118136be3b92b0694b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:24:ad:77:f8:53:97:8c:8c:21:19:db:3e:7c:
df:10:16:58:c1:1f:53:c0:64:5d:6e:ba:8a:94:6c:
fd:63:c8:9f:05:68:7d:8f:3b:26:f6:b3:56:0d:60:
7a:22:32:44:77:c6:05:2b:43:55:a9:7e:f6:ed:57:
40:f2:d7:73:dc:e7:58:ad:a9:03:2c:ab:4c:c4:d8:
7b:fa:54:74:0c:95:df:35:ce:8f:9e:f0:db:3c:3d:
28:f7:68:9b:b2:bf:f2:c6:a5:cb:33:14:a4:df:ac:
ba:02:34:9a:5b:41:f6:72:20:55:de:28:c6:25:4a:
c1:85:8d:e6:4b:2c:47:49:0b:d9:d2:bd:a0:05:e0:
9e:f1:5f:f9:c9:5b:f9:f0:39:20:11:a9:de:f9:b8:
07:3f:72:54:a0:42:44:e4:51:cd:5b:5e:aa:13:c0:
6c:c2:3e:99:2f:e7:6b:12:9c:40:54:6b:16:81:f4:
59:fa:71:37:04:40:0d:05:2e:f2:9e:e8:76:5d:01:
7e:85:f3:0c:ee:8f:63:de:55:6d:82:96:b9:14:e5:
32:32:d3:64:6e:b7:e2:f1:2e:d5:5b:a3:ce:38:18:
de:62:7a:71:2c:c1:c3:8c:ca:fb:fe:16:6d:08:fa:
ad:94:6b:17:e5:98:10:54:ef:ff:a9:53:07:87:4a:
96:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:3F:E4:A3:CC:B7:62:F2:56:D3:3C:11:81:36:BE:3B:92:B0:69:4B
X509v3 Authority Key Identifier:
keyid:47:4A:88:BC:6E:9E:10:BB:AF:15:0F:01:9B:BF:8A:61:5A:2B:03:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/R0qIvG6eELuvFQ8Bm7-KYVorA8I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/bad1c1-365d-41de-ad7c-ce8fc93adb21/1/R0qIvG6eELuvFQ8Bm7-KYVorA8I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/67/bad1c1-365d-41de-ad7c-ce8fc93adb21/1/R0qIvG6eELuvFQ8Bm7-KYVorA8I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b9:06:71:b5:f4:b0:b4:db:a2:44:8c:30:5d:d5:f0:29:0d:e6:
78:24:f5:8a:94:ce:e0:36:9d:0c:16:2e:6d:3b:ab:bc:e1:a0:
aa:96:81:28:3c:3a:f5:f1:f0:e4:9c:b4:3c:bc:40:ab:03:68:
09:22:63:30:d9:5a:f7:0c:b7:9c:8a:c6:75:59:54:fa:0e:d3:
71:53:5b:74:e1:81:80:2a:27:4f:ea:d8:25:cc:b4:70:68:61:
8f:30:38:8c:ff:6f:27:af:63:7d:d9:11:19:06:53:df:21:93:
c5:e0:87:b1:71:c2:d2:17:66:fa:fd:a7:73:a7:c0:90:ab:33:
bd:a0:19:b2:ca:f8:e0:60:c0:40:86:7b:c7:32:39:50:50:b4:
24:af:f7:a2:7b:f7:7b:ec:46:ca:e5:01:f6:d8:b2:ed:91:07:
7e:9d:71:22:32:fc:5e:6b:6b:98:4e:29:03:a5:9c:67:32:cc:
bb:1b:7d:b5:9f:fd:1f:ad:62:1a:3f:c9:38:bd:69:d9:c8:96:
8e:e5:0d:e5:e8:71:83:9b:9f:68:6e:8b:e1:32:7e:9c:cb:3f:
65:5e:89:42:be:74:b4:fe:2d:00:57:a7:b4:e5:c8:7e:b6:9b:
d0:55:9c:4b:2c:9f:50:79:01:6d:42:f5:6c:6c:fa:dc:ce:34:
53:71:a2:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 15:27:14 2025 by rpki-client