Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/deedb4-2620-441b-8616-28f4dad378fc/1/84BJvoAaE244erwUSY5IYETZYng.mft
File: 84BJvoAaE244erwUSY5IYETZYng.mft (raw, json)
Hash identifier: 8BAxLXF2xWALmlLiCKSUFFaB4XM4v6naWtD7K+lf3ig=
Subject key identifier: BB:43:45:AC:D4:F3:C8:53:AD:50:02:D8:A5:35:FB:82:D6:36:3A:CB
Authority key identifier: F3:80:49:BE:80:1A:13:6E:38:7A:BC:14:49:8E:48:60:44:D9:62:78
Certificate issuer: /CN=f38049be801a136e387abc14498e486044d96278
Certificate serial: 0198D5BB810FF62EA1F7D932341DDEC15C7B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/84BJvoAaE244erwUSY5IYETZYng.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/deedb4-2620-441b-8616-28f4dad378fc/1/84BJvoAaE244erwUSY5IYETZYng.mft
Manifest number: 0395
Signing time: Sat 23 Aug 2025 07:01:31 +0000
Manifest this update: Sat 23 Aug 2025 07:01:31 +0000
Manifest next update: Sun 24 Aug 2025 07:01:31 +0000
Files and hashes: 1: 84BJvoAaE244erwUSY5IYETZYng.crl (hash: 6ydaJ0Nv+OEJDofVALb+8Fem12p11f6s5QeoUmglgDE=)
2: Iu2chtpqWcHWj5ICMYSAAIfiajQ.roa (hash: V17YrAyWPucLnXshp6FV+qrXZ0uT+XGK95n0G3fUe08=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/83/deedb4-2620-441b-8616-28f4dad378fc/1/84BJvoAaE244erwUSY5IYETZYng.crl
rsync://rpki.ripe.net/repository/DEFAULT/83/deedb4-2620-441b-8616-28f4dad378fc/1/84BJvoAaE244erwUSY5IYETZYng.mft
rsync://rpki.ripe.net/repository/DEFAULT/84BJvoAaE244erwUSY5IYETZYng.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:bb:81:0f:f6:2e:a1:f7:d9:32:34:1d:de:c1:5c:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f38049be801a136e387abc14498e486044d96278
Validity
Not Before: Aug 23 07:01:31 2025 GMT
Not After : Aug 24 07:01:31 2025 GMT
Subject: CN=bb4345acd4f3c853ad5002d8a535fb82d6363acb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:3b:74:39:a6:65:47:35:29:e3:e3:53:f2:b8:
bc:7a:8a:32:19:65:a3:11:00:0e:37:3a:c0:3c:cf:
01:e1:14:9a:df:e8:95:d9:b1:c2:a5:08:d1:e0:30:
eb:51:60:6b:54:9d:e5:96:da:10:31:7e:23:fc:5b:
b6:72:53:39:61:55:db:ff:54:0a:e1:23:5a:e6:29:
c9:2c:50:59:e6:a7:34:fd:2a:5e:f7:5d:56:9b:87:
89:71:e1:ca:ab:40:b6:fe:9b:31:8b:e8:69:90:25:
ef:83:cd:fb:e8:57:2a:c6:da:72:7a:4b:6e:a1:48:
6e:23:5d:29:e6:96:f0:24:ff:5b:08:d3:72:2f:23:
df:cb:05:7a:44:b1:5a:b4:1c:cc:b4:6e:69:f6:cf:
9d:bc:50:fd:1e:e0:e5:47:70:d2:fa:d4:d7:30:07:
cf:a1:2c:94:b5:db:ca:59:bc:21:20:20:16:51:e2:
72:12:b3:00:74:cb:1d:61:fc:67:02:38:9c:4b:a1:
42:a7:e1:df:ba:2b:67:75:ac:e3:c1:39:d5:76:87:
5b:53:33:2d:b7:56:2f:8c:14:b1:72:a0:ca:13:8e:
f5:04:7e:44:e9:d6:f4:7f:31:a3:01:08:a9:9b:2c:
23:0e:e2:5d:8d:24:cd:00:b2:c9:7c:2c:ab:59:f9:
74:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:43:45:AC:D4:F3:C8:53:AD:50:02:D8:A5:35:FB:82:D6:36:3A:CB
X509v3 Authority Key Identifier:
keyid:F3:80:49:BE:80:1A:13:6E:38:7A:BC:14:49:8E:48:60:44:D9:62:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/84BJvoAaE244erwUSY5IYETZYng.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/deedb4-2620-441b-8616-28f4dad378fc/1/84BJvoAaE244erwUSY5IYETZYng.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/83/deedb4-2620-441b-8616-28f4dad378fc/1/84BJvoAaE244erwUSY5IYETZYng.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:7c:d9:c7:be:a2:ab:98:6e:67:5a:97:35:4d:f7:b2:d0:fa:
67:d0:3c:5f:be:f6:56:29:17:b6:05:18:da:95:37:6b:1c:be:
47:8d:14:34:a2:3c:1e:07:26:52:23:4e:1f:cb:8c:60:01:22:
8b:f3:f0:1a:ec:fb:65:a3:2e:e2:9d:28:44:81:1f:ec:9b:69:
a0:e5:0b:80:f0:75:b3:e8:79:d1:b6:d1:55:42:fd:e3:0f:c4:
0b:cd:75:1f:81:03:b7:18:3b:6a:cc:6b:26:d4:c3:a8:c8:70:
5d:4a:b3:1a:bc:7f:e4:e2:03:56:cd:e5:a2:c5:0e:cf:21:34:
af:62:e9:17:d7:85:c7:20:04:e4:53:b7:3c:88:ff:38:04:0f:
b3:64:2c:76:b0:d4:dc:1c:bd:9a:59:a8:85:4f:13:20:e2:2f:
67:7c:0c:2a:92:37:de:a0:04:bb:dd:0b:21:ad:73:74:98:77:
7e:81:2f:56:c4:21:cf:69:ce:0a:12:6b:5e:dd:d2:ba:76:b6:
3e:69:dd:c6:f8:50:76:be:3f:a0:f5:fa:ef:31:f9:0d:95:18:
05:3f:31:02:0c:0c:98:7e:02:d8:2e:16:12:bb:51:32:3e:6f:
63:f5:f7:04:7e:bc:a1:ca:2e:b9:4b:1c:fd:5c:d4:70:34:d8:
3b:42:f6:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 09:42:41 2025 by rpki-client