Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/9e615e-3610-4520-9484-7a8baeef5ee4/1/a4QIvvwC39bmGQhUh4WgCKS3TWc.mft
File: a4QIvvwC39bmGQhUh4WgCKS3TWc.mft (raw, json)
Hash identifier: pP/MfSMbySlShdp+S+o7a57Vd8TJ8PjHGoOeWdA6tL4=
Subject key identifier: 73:3A:7B:35:A9:2E:DA:4A:E6:93:E1:24:9B:A1:27:A4:0F:73:EA:DE
Authority key identifier: 6B:84:08:BE:FC:02:DF:D6:E6:19:08:54:87:85:A0:08:A4:B7:4D:67
Certificate issuer: /CN=6b8408befc02dfd6e61908548785a008a4b74d67
Certificate serial: 0198D515990610971BA2396CE3C29E41B998
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a4QIvvwC39bmGQhUh4WgCKS3TWc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/9e615e-3610-4520-9484-7a8baeef5ee4/1/a4QIvvwC39bmGQhUh4WgCKS3TWc.mft
Manifest number: 0A9C
Signing time: Sat 23 Aug 2025 04:00:18 +0000
Manifest this update: Sat 23 Aug 2025 04:00:18 +0000
Manifest next update: Sun 24 Aug 2025 04:00:18 +0000
Files and hashes: 1: XG_GoCIjsfzx85ZAfU48cGk_g2A.roa (hash: O4zvtPOigYM3HdyO+PNnJwZMHPFxCAa0+qt7cBa9RoM=)
2: a4QIvvwC39bmGQhUh4WgCKS3TWc.crl (hash: OPt6K2/CCEbwH00mN4VpJfjdve5iD7zGpolEs8J1vuQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9e/9e615e-3610-4520-9484-7a8baeef5ee4/1/a4QIvvwC39bmGQhUh4WgCKS3TWc.crl
rsync://rpki.ripe.net/repository/DEFAULT/9e/9e615e-3610-4520-9484-7a8baeef5ee4/1/a4QIvvwC39bmGQhUh4WgCKS3TWc.mft
rsync://rpki.ripe.net/repository/DEFAULT/a4QIvvwC39bmGQhUh4WgCKS3TWc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:15:99:06:10:97:1b:a2:39:6c:e3:c2:9e:41:b9:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6b8408befc02dfd6e61908548785a008a4b74d67
Validity
Not Before: Aug 23 04:00:18 2025 GMT
Not After : Aug 24 04:00:18 2025 GMT
Subject: CN=733a7b35a92eda4ae693e1249ba127a40f73eade
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:67:01:09:b5:d4:1b:3f:ff:f3:e3:a5:0d:e7:
d3:ee:be:5e:ed:55:f4:c4:00:49:8e:e2:76:b6:09:
80:d3:dc:74:7a:99:88:8f:37:40:29:34:ed:1b:19:
92:a0:ca:18:1c:18:2d:91:f2:ed:98:a3:0f:8d:5a:
41:3b:07:46:20:fc:d2:30:e0:73:5f:1c:1f:f2:23:
0e:6b:77:53:7c:33:65:f2:5f:f6:c3:32:51:be:4e:
51:be:70:f7:49:b6:b7:e3:d0:8e:3e:3c:a4:96:75:
fa:3c:b6:7c:73:b0:63:71:f2:85:87:55:fb:a8:55:
22:0c:50:17:35:eb:6e:51:a0:55:c5:53:34:7f:a3:
82:d0:24:b7:01:ec:84:43:7b:f9:ad:58:07:b6:aa:
71:f5:21:a8:e0:fd:f7:03:07:14:73:38:e3:ac:0c:
5b:cb:e7:52:fd:b2:7c:9d:5e:17:0e:48:6e:31:85:
c4:5b:31:c5:ba:04:9c:d6:dc:bc:19:22:85:0f:7d:
2e:7d:7c:4a:dc:61:23:6e:b3:2c:50:95:50:17:22:
04:c0:ae:66:f4:21:ec:ff:f3:9a:4d:05:44:56:5f:
1e:09:14:88:6a:79:5f:e0:ef:3a:6f:98:e3:cf:f8:
cc:ee:76:c4:71:f9:24:0f:70:25:6d:e6:96:a2:b1:
54:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:3A:7B:35:A9:2E:DA:4A:E6:93:E1:24:9B:A1:27:A4:0F:73:EA:DE
X509v3 Authority Key Identifier:
keyid:6B:84:08:BE:FC:02:DF:D6:E6:19:08:54:87:85:A0:08:A4:B7:4D:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4QIvvwC39bmGQhUh4WgCKS3TWc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/9e615e-3610-4520-9484-7a8baeef5ee4/1/a4QIvvwC39bmGQhUh4WgCKS3TWc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/9e615e-3610-4520-9484-7a8baeef5ee4/1/a4QIvvwC39bmGQhUh4WgCKS3TWc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:66:a2:20:83:ad:78:06:d1:85:42:fe:6e:0d:94:f3:28:7e:
da:a9:6f:da:3d:ef:da:42:e2:bc:04:85:85:a0:14:f4:7f:fa:
86:ad:5d:40:38:69:e1:22:70:6f:e4:fb:8b:e0:5c:a8:48:d9:
65:48:43:66:d8:22:48:48:c0:bc:97:49:7e:48:8c:a0:48:55:
82:80:c0:3b:e0:8d:4d:a5:c8:20:2b:67:32:00:49:b0:d7:eb:
51:b3:98:92:b5:22:61:b8:77:fa:55:e0:cc:d6:e9:da:46:43:
28:f2:8e:8b:4a:87:13:ad:a1:d0:7f:4d:62:5d:18:db:68:1d:
18:62:d7:17:23:1f:a0:a9:85:06:fc:59:41:46:ec:44:73:8b:
e1:f2:f3:52:28:18:45:11:62:0d:9a:19:d9:46:3d:89:98:09:
a1:27:e6:7f:14:bc:01:07:d8:34:6f:7a:45:bd:90:be:90:d0:
db:65:6a:75:69:17:3c:4f:a8:73:b2:fd:2a:9a:f3:96:f4:d1:
ff:cd:fb:27:8c:7e:bf:e9:bd:c2:da:c3:1e:af:b1:b6:f3:4d:
1f:69:ba:4b:c6:97:4c:97:1f:44:3b:db:88:b4:60:5a:26:e8:
55:f9:36:06:51:70:74:52:7c:1c:cf:e9:ce:45:9a:2f:1f:50:
d1:9d:58:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:27:27 2025 by rpki-client