Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/ad1216-b71d-4557-a086-efea63d06f80/1/4Zy7iNKxqJZlhQZ3hmLnXHMqZ-c.mft
File: 4Zy7iNKxqJZlhQZ3hmLnXHMqZ-c.mft (raw, json)
Hash identifier: 9rm8L2NsW3dROTKIVs/7l18idSxs/pH4EPm4ZMx/U3c=
Subject key identifier: 9C:BA:A3:E7:B2:EE:7B:77:8C:9F:8F:42:59:32:DE:16:37:3B:16:DC
Authority key identifier: E1:9C:BB:88:D2:B1:A8:96:65:85:06:77:86:62:E7:5C:73:2A:67:E7
Certificate issuer: /CN=e19cbb88d2b1a896658506778662e75c732a67e7
Certificate serial: 0198D5BBD5817A7CCC1C8537E6EDA5D8583F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4Zy7iNKxqJZlhQZ3hmLnXHMqZ-c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/ad1216-b71d-4557-a086-efea63d06f80/1/4Zy7iNKxqJZlhQZ3hmLnXHMqZ-c.mft
Manifest number: 164A
Signing time: Sat 23 Aug 2025 07:01:53 +0000
Manifest this update: Sat 23 Aug 2025 07:01:53 +0000
Manifest next update: Sun 24 Aug 2025 07:01:53 +0000
Files and hashes: 1: 4Zy7iNKxqJZlhQZ3hmLnXHMqZ-c.crl (hash: rwJ6nbGwA3qk29OoFhDiNYSBXBVnpJI4mAywevr04SE=)
2: E3bOWVadiTMoov1haUFyRTwduJA.roa (hash: sxYsSioAFV3M4+urFT6FLkeq4ts+IfaNfTA80Mu3sng=)
3: Z9n5DV0w7GnExRRm5adMC5c1O74.roa (hash: 61N91t8/tHrGPHbqd/Q8TWwC/7eUsMLcp5Fv9vIC6tI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/ad1216-b71d-4557-a086-efea63d06f80/1/4Zy7iNKxqJZlhQZ3hmLnXHMqZ-c.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/ad1216-b71d-4557-a086-efea63d06f80/1/4Zy7iNKxqJZlhQZ3hmLnXHMqZ-c.mft
rsync://rpki.ripe.net/repository/DEFAULT/4Zy7iNKxqJZlhQZ3hmLnXHMqZ-c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:bb:d5:81:7a:7c:cc:1c:85:37:e6:ed:a5:d8:58:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e19cbb88d2b1a896658506778662e75c732a67e7
Validity
Not Before: Aug 23 07:01:53 2025 GMT
Not After : Aug 24 07:01:53 2025 GMT
Subject: CN=9cbaa3e7b2ee7b778c9f8f425932de16373b16dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:0e:9f:58:64:cd:87:61:6d:9c:f8:bd:7b:ce:
5e:e9:40:72:9e:c0:03:d1:9a:3f:73:9f:47:63:ef:
c5:6e:bf:3d:ab:69:77:fe:1e:de:1d:44:fa:f2:3a:
b2:95:49:3e:78:74:c3:bf:7e:82:b8:05:fe:8f:08:
f6:41:fd:3c:21:66:17:7f:e0:ed:7e:16:57:c2:ca:
c1:3e:d1:c2:68:34:7b:7a:01:ec:b8:e3:f8:57:b6:
23:60:d1:dd:95:6e:11:72:00:e8:07:16:04:e6:da:
6f:5f:c3:81:95:5c:cc:89:74:eb:ac:f1:e1:06:5c:
69:b0:d6:1d:f0:20:7b:37:8c:d0:79:2e:9e:6f:e8:
53:25:3f:d6:3e:df:4e:06:d2:e8:31:cd:d1:95:cb:
57:48:13:23:0c:9f:96:a7:12:cd:c2:51:1f:6a:11:
02:6f:73:6b:81:1d:d7:82:d7:00:42:7b:d3:c5:28:
a0:60:39:fd:34:28:5b:66:8e:91:e2:4f:8f:a8:f0:
b4:b3:6a:ea:b6:11:e2:fd:e5:95:fc:51:54:e7:98:
12:d2:8b:c7:2b:af:fd:a3:f4:d2:37:a9:60:2d:ce:
b0:9a:4f:1e:fc:0c:7f:c8:78:d8:18:5d:ec:7c:3a:
c7:46:ab:e0:a8:b9:a3:ad:ad:6b:f9:65:dd:20:ea:
43:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:BA:A3:E7:B2:EE:7B:77:8C:9F:8F:42:59:32:DE:16:37:3B:16:DC
X509v3 Authority Key Identifier:
keyid:E1:9C:BB:88:D2:B1:A8:96:65:85:06:77:86:62:E7:5C:73:2A:67:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4Zy7iNKxqJZlhQZ3hmLnXHMqZ-c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/ad1216-b71d-4557-a086-efea63d06f80/1/4Zy7iNKxqJZlhQZ3hmLnXHMqZ-c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/ad1216-b71d-4557-a086-efea63d06f80/1/4Zy7iNKxqJZlhQZ3hmLnXHMqZ-c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:bd:8f:18:19:50:ed:ff:ec:c7:9a:66:6b:51:b7:36:6a:3d:
3d:7b:51:e7:ff:1f:70:ff:2f:f1:ea:ab:7a:e9:41:2c:6e:51:
ec:12:04:dd:98:b4:4c:87:72:17:b1:93:f7:cb:5a:12:0c:45:
5f:0b:5a:b0:8b:32:4c:fd:b2:fe:11:be:6c:14:f2:07:e4:47:
90:17:ce:fd:bb:16:23:5b:4f:b9:ac:c1:ce:98:09:b2:87:38:
40:b8:c1:f4:ac:c9:91:e2:32:03:1b:ef:61:85:eb:35:f6:42:
96:50:bf:19:04:3d:b4:cc:14:3c:36:63:38:9e:e4:de:65:5c:
70:e5:94:a3:10:dd:e6:c6:ae:cc:bd:b8:1e:85:c4:d2:9b:02:
8e:4b:5e:ce:31:2b:e1:ff:57:44:2e:7d:40:a0:10:0e:72:d1:
ca:6c:48:7c:cd:18:38:0a:0b:d2:5e:13:90:cc:08:ac:8d:81:
95:04:38:54:6e:84:d3:8d:19:99:00:ea:9e:56:14:6f:61:7a:
ec:2e:98:79:99:ee:ed:47:3f:83:a8:8d:a3:77:50:64:e6:11:
64:97:2e:47:f5:a9:05:96:bb:6f:22:7d:db:98:31:c7:04:69:
2d:7d:79:40:9b:c7:59:f0:3c:f5:62:74:d2:c7:c5:7a:9e:62:
b5:19:92:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 14:06:49 2025 by rpki-client