Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/73/fc763b-83e6-4bd1-b93a-f8785a58106c/1/C4-x3rCeckJbMJoUFJF9r4k771k.mft
File: C4-x3rCeckJbMJoUFJF9r4k771k.mft (raw, json)
Hash identifier: vuFFSDz8aBZOQWkZZeSXIjQjYIGug3t2XtjHWWOjISo=
Subject key identifier: BE:3B:08:48:5B:9D:25:4D:4F:AE:72:CB:C5:C9:D0:28:17:C9:57:16
Authority key identifier: 0B:8F:B1:DE:B0:9E:72:42:5B:30:9A:14:14:91:7D:AF:89:3B:EF:59
Certificate issuer: /CN=0b8fb1deb09e72425b309a1414917daf893bef59
Certificate serial: 0198D84FB14541EAD7F9C8B6F854EB397C42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C4-x3rCeckJbMJoUFJF9r4k771k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/73/fc763b-83e6-4bd1-b93a-f8785a58106c/1/C4-x3rCeckJbMJoUFJF9r4k771k.mft
Manifest number: 164C
Signing time: Sat 23 Aug 2025 19:02:38 +0000
Manifest this update: Sat 23 Aug 2025 19:02:38 +0000
Manifest next update: Sun 24 Aug 2025 19:02:38 +0000
Files and hashes: 1: C4-x3rCeckJbMJoUFJF9r4k771k.crl (hash: OIgkmvy7uW1/MnxEyVGPVrl4OxeSvU1jHpEu3caZnzY=)
2: xbK0xWiY34_RomWctzp72CJLeyA.roa (hash: uGlhM5SP1wH5GgbXheJ7ZYAOlhLuCV1Bj19dNLN10ho=)
3: ztCPKk8w1aeaQKuLHJz_e0TSo9Y.roa (hash: eX6lgcMXGHHyxYwjBqAxjQIWBeaf2J3CyUG15tvpJ0o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/73/fc763b-83e6-4bd1-b93a-f8785a58106c/1/C4-x3rCeckJbMJoUFJF9r4k771k.crl
rsync://rpki.ripe.net/repository/DEFAULT/73/fc763b-83e6-4bd1-b93a-f8785a58106c/1/C4-x3rCeckJbMJoUFJF9r4k771k.mft
rsync://rpki.ripe.net/repository/DEFAULT/C4-x3rCeckJbMJoUFJF9r4k771k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 19:02:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d8:4f:b1:45:41:ea:d7:f9:c8:b6:f8:54:eb:39:7c:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0b8fb1deb09e72425b309a1414917daf893bef59
Validity
Not Before: Aug 23 19:02:38 2025 GMT
Not After : Aug 24 19:02:38 2025 GMT
Subject: CN=be3b08485b9d254d4fae72cbc5c9d02817c95716
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:6c:70:05:eb:d4:5b:f5:5f:ec:03:0f:6d:04:
e1:d0:d7:39:11:e2:69:04:4b:7f:26:ac:a6:26:cb:
71:bf:70:45:99:be:ee:5f:98:03:25:07:13:48:75:
c4:1e:88:fe:a4:23:a2:26:ad:14:f8:82:92:96:20:
d7:d2:38:2d:a0:cb:1a:28:a1:e5:80:e5:c7:f0:49:
09:4f:86:f4:ef:26:9a:a9:de:7a:e9:e3:83:6d:80:
40:41:7e:4f:f7:22:31:aa:0b:c8:04:89:d4:2b:1f:
30:70:84:78:6b:0d:e5:43:2a:5c:5c:72:a9:0e:2e:
a6:2c:fa:ff:03:52:a4:15:cf:61:ca:37:5c:02:25:
ca:ac:4a:62:11:e1:25:21:df:c1:70:3f:f2:35:4a:
57:00:73:96:08:e9:f0:9f:10:da:46:33:c1:8f:54:
98:09:7c:c7:77:e7:59:0d:a2:db:19:e5:92:35:19:
3b:c9:df:20:3d:d7:69:28:1c:73:ef:82:0d:69:45:
94:e3:c4:ec:02:49:34:e4:ce:d6:8b:f9:37:f0:f9:
75:7a:7f:3e:38:95:dc:ac:fd:f6:6a:16:13:b5:06:
4f:3f:91:ef:93:48:5a:e3:87:49:c8:d6:9f:fd:19:
27:a5:0c:73:45:46:a1:f8:2f:d1:40:a3:4e:97:8a:
54:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:3B:08:48:5B:9D:25:4D:4F:AE:72:CB:C5:C9:D0:28:17:C9:57:16
X509v3 Authority Key Identifier:
keyid:0B:8F:B1:DE:B0:9E:72:42:5B:30:9A:14:14:91:7D:AF:89:3B:EF:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C4-x3rCeckJbMJoUFJF9r4k771k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/fc763b-83e6-4bd1-b93a-f8785a58106c/1/C4-x3rCeckJbMJoUFJF9r4k771k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/73/fc763b-83e6-4bd1-b93a-f8785a58106c/1/C4-x3rCeckJbMJoUFJF9r4k771k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:39:b4:12:dc:f5:4b:ad:ff:66:c0:29:2a:9f:8c:cc:40:b5:
dd:c4:9a:06:66:76:82:52:fe:a4:89:62:79:a0:9e:66:f3:11:
27:cf:9e:39:4d:27:6c:ba:5e:4e:35:1d:cb:48:70:7b:c5:bd:
d2:68:8e:04:bc:9c:a2:b5:4b:35:6a:1c:2a:a5:79:d1:db:7d:
a2:cf:60:d3:65:4d:b6:e8:60:59:0b:3d:86:64:cf:a4:3d:c1:
84:3f:24:a0:ae:5c:9e:01:d8:6a:40:ec:85:42:a0:0d:63:b6:
6d:a0:79:e6:cb:0c:09:ab:9e:86:e7:45:0d:b1:07:ac:0d:d2:
c5:2a:14:6b:3c:33:e0:ff:d6:31:49:87:60:a2:8b:bc:2e:7d:
3f:7b:f8:8f:bd:04:04:29:8f:bb:4e:0e:e8:97:31:ca:f3:f4:
3c:34:bf:a2:3c:1c:cd:da:f3:40:65:3e:27:c8:6b:63:78:98:
a9:80:ab:c8:b6:ca:43:4a:ec:01:6c:44:4a:6f:43:ea:76:df:
01:13:d7:dc:b6:d7:dd:e3:af:c6:f7:31:33:59:33:52:4a:2a:
a7:6d:29:3b:30:9d:e3:e8:36:13:39:df:3f:2e:49:d5:f9:2b:
2d:c8:f5:b9:de:10:9b:65:0b:8a:ec:41:98:9c:71:3b:ab:23:
a1:1c:50:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 04:43:53 2025 by rpki-client