Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/df719a-492f-47cb-9212-644bd0fc7f80/1/r_b4Wq0QHEVsGsmgGnGS_FeI6Sw.mft
File: r_b4Wq0QHEVsGsmgGnGS_FeI6Sw.mft (raw, json)
Hash identifier: NOywuHoQKtz6lxROdGpz/6S3rjgaQqF5/PWBYZsb/TU=
Subject key identifier: 72:A9:2F:8C:70:66:F5:AA:17:EC:B5:4A:79:EE:EE:F9:0A:FD:D7:E5
Authority key identifier: AF:F6:F8:5A:AD:10:1C:45:6C:1A:C9:A0:1A:71:92:FC:57:88:E9:2C
Certificate issuer: /CN=aff6f85aad101c456c1ac9a01a7192fc5788e92c
Certificate serial: 0198D4746E76CA1B7234B16CEDD7788FAFF0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r_b4Wq0QHEVsGsmgGnGS_FeI6Sw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/df719a-492f-47cb-9212-644bd0fc7f80/1/r_b4Wq0QHEVsGsmgGnGS_FeI6Sw.mft
Manifest number: 1024
Signing time: Sat 23 Aug 2025 01:04:16 +0000
Manifest this update: Sat 23 Aug 2025 01:04:16 +0000
Manifest next update: Sun 24 Aug 2025 01:04:16 +0000
Files and hashes: 1: 4fpK3rH7dDsLZcwC8fv__9MCBNk.roa (hash: H+mNwrXZUXB3OGGb/VrqoSQBBpWlzYIXILfgLQd6xuU=)
2: 5XUzA9Cm_VS0l_J-BI180iVrsSQ.roa (hash: dTmUbt8r9KTK4oCfqPnmc0NkXc8ljy+XbX2k8rf1LxQ=)
3: DWF9Jo3FImxKenqMCCuMh99Ds_I.roa (hash: VPrgFeIcUkZV1CVnwsWbonO9j9PHcQRDHPIETmI4o3E=)
4: UNKbAcEAJHWJC-HG72D-vYqbVfQ.roa (hash: m35AjrcjrDzhORVJU0fjE54zFfVUjrq+cuZi9udA0+8=)
5: cLFAPtOqlcUfpbbbNNENVqdfu8I.roa (hash: fE/OxbEqrhzEaEBEiWo6VY8shfzEaI5zfx5000I8b5Q=)
6: hgq-3QFFzN187B-65tYpaJQwwz8.roa (hash: l85+PXj1Myvhf7HIXT0WO1F3ljNUQ844ImZJ7Pq6XL8=)
7: j2nuPHdcoqVfb_g5CQdLLA6Qmq8.roa (hash: bJ01HQANAS/OiptPUmVVckwNOFEFT58VNH/38hKXIpc=)
8: r_b4Wq0QHEVsGsmgGnGS_FeI6Sw.crl (hash: JZF1592d8Li4liV4/xZu9ymAPHaHDD/NYxog/nKK5ro=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9f/df719a-492f-47cb-9212-644bd0fc7f80/1/r_b4Wq0QHEVsGsmgGnGS_FeI6Sw.crl
rsync://rpki.ripe.net/repository/DEFAULT/9f/df719a-492f-47cb-9212-644bd0fc7f80/1/r_b4Wq0QHEVsGsmgGnGS_FeI6Sw.mft
rsync://rpki.ripe.net/repository/DEFAULT/r_b4Wq0QHEVsGsmgGnGS_FeI6Sw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 01:04:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:74:6e:76:ca:1b:72:34:b1:6c:ed:d7:78:8f:af:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aff6f85aad101c456c1ac9a01a7192fc5788e92c
Validity
Not Before: Aug 23 01:04:16 2025 GMT
Not After : Aug 24 01:04:16 2025 GMT
Subject: CN=72a92f8c7066f5aa17ecb54a79eeeef90afdd7e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:ba:b1:76:4d:ee:1d:8e:8c:31:62:10:b9:7f:
e0:0a:8f:b4:d7:9c:77:e4:e7:72:b5:dc:1d:c1:c6:
0e:cf:5c:04:9b:0e:a2:fe:15:ac:5f:5c:5c:42:8a:
a8:85:0c:5e:98:0e:92:3a:98:62:51:10:02:a9:9f:
14:46:b4:fe:0b:e7:52:d0:df:53:9c:a8:18:45:c1:
ba:84:1e:a1:fa:eb:8a:d0:74:02:2d:fc:1a:39:38:
97:a6:63:49:80:e4:9e:2c:4a:12:66:eb:19:14:40:
00:56:8e:0a:4a:a4:fb:58:02:65:c3:d0:40:05:65:
eb:15:b2:19:a8:7c:59:5c:8d:3e:6c:3d:c1:9b:75:
12:70:6c:18:5a:fd:d0:8d:d7:f2:d1:55:b0:a3:ba:
d5:0f:fe:60:2a:93:50:c7:1d:ed:5d:97:61:d5:51:
08:27:11:77:1b:fe:ac:6c:7c:33:3a:35:00:ac:93:
6e:30:1c:c2:ec:d4:7e:49:2b:75:1d:70:1c:75:4d:
7c:f9:cf:81:52:ce:b6:27:1b:78:c3:03:dc:f0:05:
13:c4:bf:f5:0b:ae:4d:de:f7:22:fc:a3:89:08:95:
e7:87:a2:bd:72:6f:ef:f8:23:98:0e:a4:04:5e:d3:
00:ef:cc:fb:b7:69:5e:a0:81:1d:8d:26:8c:b3:9a:
99:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:A9:2F:8C:70:66:F5:AA:17:EC:B5:4A:79:EE:EE:F9:0A:FD:D7:E5
X509v3 Authority Key Identifier:
keyid:AF:F6:F8:5A:AD:10:1C:45:6C:1A:C9:A0:1A:71:92:FC:57:88:E9:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r_b4Wq0QHEVsGsmgGnGS_FeI6Sw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/df719a-492f-47cb-9212-644bd0fc7f80/1/r_b4Wq0QHEVsGsmgGnGS_FeI6Sw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/df719a-492f-47cb-9212-644bd0fc7f80/1/r_b4Wq0QHEVsGsmgGnGS_FeI6Sw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:06:9a:e7:1a:56:93:e7:44:4e:60:60:f9:56:eb:c9:25:e8:
71:a9:de:05:1c:fa:ae:6b:ad:17:b9:99:b8:dc:ec:bb:ed:85:
35:b0:06:a9:08:17:be:49:11:96:6d:6b:e6:be:b6:8b:8f:6d:
b6:6e:8b:bd:69:60:0e:b0:e5:f8:65:bb:64:4f:db:a5:25:ed:
0c:8b:f9:a7:dd:ca:16:9d:10:1a:0a:78:b5:a0:27:4c:dc:30:
66:03:ac:49:b3:b6:09:30:e8:58:a6:6c:38:99:cb:1a:93:1c:
de:30:d5:25:70:b2:b2:5c:01:5b:de:d2:bb:83:3d:41:ab:5f:
48:b3:28:94:cc:33:de:98:d3:c9:18:02:ec:86:cb:e2:db:44:
6a:2b:1a:c3:66:86:dc:6a:67:a1:2a:a1:00:1b:c4:48:7b:fe:
e8:1f:a4:74:0a:cd:20:d3:14:14:21:02:29:af:97:b7:ba:7e:
af:69:bc:54:aa:ce:a9:19:20:7a:90:74:07:53:ad:7e:17:1f:
99:29:0d:45:34:f3:97:ea:ba:8f:5f:25:4e:8b:68:3a:69:5a:
87:74:e2:b6:22:ef:c9:45:95:44:7a:66:d9:52:0f:84:0b:10:
19:c8:5a:3c:54:4e:1b:f2:e6:a5:68:68:cf:5d:36:9f:af:e6:
ef:35:f6:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 11:34:54 2025 by rpki-client