Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/2fc167-b357-4394-b4e8-c825be2813bc/1/C4TqVJ-IIRBYs0v8qwZAwwMDk8M.mft
File: C4TqVJ-IIRBYs0v8qwZAwwMDk8M.mft (raw, json)
Hash identifier: CLOqwoBwKlXJPq/I8gfdrvkjGkojnY5yMZ0hACGfB9k=
Subject key identifier: D3:F8:E1:D8:F2:8F:8E:1D:B7:B0:79:FD:91:BD:94:83:FC:94:1E:C0
Authority key identifier: 0B:84:EA:54:9F:88:21:10:58:B3:4B:FC:AB:06:40:C3:03:03:93:C3
Certificate issuer: /CN=0b84ea549f88211058b34bfcab0640c3030393c3
Certificate serial: 0198D660CC82FB927C0A3E7DA910370B2E1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C4TqVJ-IIRBYs0v8qwZAwwMDk8M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/2fc167-b357-4394-b4e8-c825be2813bc/1/C4TqVJ-IIRBYs0v8qwZAwwMDk8M.mft
Manifest number: 164A
Signing time: Sat 23 Aug 2025 10:02:04 +0000
Manifest this update: Sat 23 Aug 2025 10:02:04 +0000
Manifest next update: Sun 24 Aug 2025 10:02:04 +0000
Files and hashes: 1: C4TqVJ-IIRBYs0v8qwZAwwMDk8M.crl (hash: b9XnCZMaDLgPDQFmCG3JZaTIEV1j8dhsWt9znn8F7SU=)
2: P-Dx0ihfKx4UBeNlSrnWTMyyfvY.roa (hash: viXxvbgM6fcm3+uNTvobtmlKGENasOgtCzi4bFmu9u0=)
3: VjB61y70CykGJrI1joYA_LZs7BQ.roa (hash: 0fdGzWqdSh6FPKMh+lErtdFv9hP3dlRfbAfCokMP6HQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/2fc167-b357-4394-b4e8-c825be2813bc/1/C4TqVJ-IIRBYs0v8qwZAwwMDk8M.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/2fc167-b357-4394-b4e8-c825be2813bc/1/C4TqVJ-IIRBYs0v8qwZAwwMDk8M.mft
rsync://rpki.ripe.net/repository/DEFAULT/C4TqVJ-IIRBYs0v8qwZAwwMDk8M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:60:cc:82:fb:92:7c:0a:3e:7d:a9:10:37:0b:2e:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0b84ea549f88211058b34bfcab0640c3030393c3
Validity
Not Before: Aug 23 10:02:04 2025 GMT
Not After : Aug 24 10:02:04 2025 GMT
Subject: CN=d3f8e1d8f28f8e1db7b079fd91bd9483fc941ec0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:d2:4a:a7:22:b6:3a:bf:dc:97:15:3b:0c:d7:
29:8e:1a:db:d2:ba:a5:62:a9:c9:62:a5:1f:c1:da:
c0:07:17:e3:ff:b4:4f:dd:f3:8d:21:e8:73:28:41:
4c:24:cb:b3:9a:cc:cd:d7:4c:c0:a3:14:53:c7:e8:
69:53:52:aa:b6:fe:be:12:86:cb:5b:6e:69:58:4c:
b9:a2:7d:52:28:38:18:fa:d1:df:76:52:47:d3:90:
5b:5b:25:5e:18:a4:71:8c:e2:9c:39:0d:3c:5f:59:
16:10:fb:20:3c:c6:fd:d0:f4:39:a1:28:dc:12:14:
5a:8c:ee:51:8b:7f:2a:de:11:99:61:5d:66:c4:1e:
9e:ab:26:4d:d4:97:cd:35:15:85:33:aa:0d:8a:20:
79:b9:ab:b1:ac:d4:ff:2a:9b:47:c8:33:b6:21:c2:
d8:a2:41:e8:98:a4:bf:d0:00:74:17:dd:fa:0c:b6:
24:9a:2a:70:aa:83:98:80:91:1b:f5:df:0b:f4:11:
c3:64:bb:9e:38:2c:a3:07:98:6e:4d:7a:45:94:fa:
18:10:62:ea:04:2a:af:51:c0:7b:5a:e3:d6:52:45:
59:21:ac:1b:15:d6:45:51:75:c5:d4:21:53:c5:4f:
80:86:69:97:3d:ce:45:8d:9d:c1:a3:db:f5:70:93:
23:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:F8:E1:D8:F2:8F:8E:1D:B7:B0:79:FD:91:BD:94:83:FC:94:1E:C0
X509v3 Authority Key Identifier:
keyid:0B:84:EA:54:9F:88:21:10:58:B3:4B:FC:AB:06:40:C3:03:03:93:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C4TqVJ-IIRBYs0v8qwZAwwMDk8M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/2fc167-b357-4394-b4e8-c825be2813bc/1/C4TqVJ-IIRBYs0v8qwZAwwMDk8M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/2fc167-b357-4394-b4e8-c825be2813bc/1/C4TqVJ-IIRBYs0v8qwZAwwMDk8M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:37:45:06:9f:3b:c6:6b:c4:f8:45:be:51:b9:08:23:cc:9d:
64:52:e8:ec:5d:92:bd:8b:0e:75:c7:d6:ba:fb:52:e1:db:28:
f8:5e:c8:8a:e7:f4:a6:81:cd:ed:16:86:6b:0e:bd:69:85:23:
74:e3:87:a5:d0:c7:b2:07:52:d2:59:00:63:8a:be:5c:66:6a:
b2:24:ef:44:8d:44:1c:ef:a3:78:18:fe:b6:2f:fa:c2:c4:3a:
3e:cd:c9:1d:83:4c:d9:e5:88:e6:76:e6:ff:de:24:67:b6:2b:
fe:ef:c3:ca:25:3f:9a:46:34:f0:be:44:19:5b:bf:42:9d:6c:
53:40:73:6a:d3:6f:3d:f4:91:0d:29:19:93:4d:8f:a3:84:fc:
d0:d3:91:12:d8:18:d9:2c:bf:e1:6a:90:10:6b:bc:21:39:50:
55:48:9a:0f:22:7f:69:7d:aa:f7:20:e6:af:74:9b:c8:59:04:
88:71:d0:9d:81:68:5d:79:8f:8a:64:9d:b4:d2:04:47:c5:9c:
31:94:7c:d6:44:f6:5a:08:ce:bc:dd:dd:a0:31:92:6c:05:ec:
3b:0a:f2:bf:4b:07:cd:ca:db:57:94:cc:e2:9c:f9:c2:83:65:
1b:a7:46:ea:6a:e4:ab:b0:4c:e3:07:04:a9:06:c4:84:5a:81:
72:32:cd:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 15:31:19 2025 by rpki-client