Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/844fd9-fef1-44d9-a6c9-14fab0244948/1/a4T0opa84U1t7tJRFqpwtgvM5KQ.mft
File: a4T0opa84U1t7tJRFqpwtgvM5KQ.mft (raw, json)
Hash identifier: V3unuhylE4igGPElikv67G3PO7XeFhF5RvFX2w6ZPj0=
Subject key identifier: E4:02:29:3F:7C:09:BF:1A:B5:84:04:25:EF:18:29:5E:8E:F8:98:5B
Authority key identifier: 6B:84:F4:A2:96:BC:E1:4D:6D:EE:D2:51:16:AA:70:B6:0B:CC:E4:A4
Certificate issuer: /CN=6b84f4a296bce14d6deed25116aa70b60bcce4a4
Certificate serial: 0198D4A81CDC0DC860ED6CAFB963B7BD4647
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a4T0opa84U1t7tJRFqpwtgvM5KQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/844fd9-fef1-44d9-a6c9-14fab0244948/1/a4T0opa84U1t7tJRFqpwtgvM5KQ.mft
Manifest number: 164D
Signing time: Sat 23 Aug 2025 02:00:43 +0000
Manifest this update: Sat 23 Aug 2025 02:00:43 +0000
Manifest next update: Sun 24 Aug 2025 02:00:43 +0000
Files and hashes: 1: UoVm8brFC8TtFU0fGuOACP5IJ-8.roa (hash: Z3atFvW5mWSUMqAxQnvjqpFLFTXrIsbjT+DhpXeSnFQ=)
2: a4T0opa84U1t7tJRFqpwtgvM5KQ.crl (hash: dtTSggBUR8NnDmhLDKWqnW0npR7DDPLp/2ns/RQC3pI=)
3: ed0N60OI4_qO1SXPxnCTduptr6Y.roa (hash: cqf2H2hrYDyV/+kGYl658nAwtCZE+AIJOgr0nZrirug=)
4: iRFLKez3p29rhRwfF7FxUSY2xRQ.roa (hash: 8w+pzA8F3pAUuP2pqUwVGTV18rYsoVREmjASX0Uhtjg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/844fd9-fef1-44d9-a6c9-14fab0244948/1/a4T0opa84U1t7tJRFqpwtgvM5KQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/cd/844fd9-fef1-44d9-a6c9-14fab0244948/1/a4T0opa84U1t7tJRFqpwtgvM5KQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/a4T0opa84U1t7tJRFqpwtgvM5KQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 02:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:a8:1c:dc:0d:c8:60:ed:6c:af:b9:63:b7:bd:46:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6b84f4a296bce14d6deed25116aa70b60bcce4a4
Validity
Not Before: Aug 23 02:00:43 2025 GMT
Not After : Aug 24 02:00:43 2025 GMT
Subject: CN=e402293f7c09bf1ab5840425ef18295e8ef8985b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:3e:69:0f:4a:ed:48:49:aa:34:da:85:48:2c:
27:b9:29:f0:6f:58:7f:19:3b:a3:82:64:63:d7:b4:
ef:8f:32:fd:66:b4:fb:3a:31:3f:d1:ac:d7:8c:33:
7e:ff:d7:f8:b1:d9:fc:a8:d6:4e:3c:27:ef:e3:11:
c6:4b:be:11:fc:28:bf:8c:87:13:f2:e0:ec:eb:8d:
bb:8d:c8:da:b7:44:d1:5f:13:41:38:b9:21:aa:03:
9f:08:23:3d:b9:72:27:a5:69:cc:eb:44:2a:45:2f:
f8:1e:f0:73:23:03:12:37:a2:5e:34:87:c1:00:fa:
26:fa:73:8c:2b:a2:df:af:f0:b7:9b:ff:e9:e4:3f:
f1:96:4d:9f:9a:71:e9:c2:49:fb:dc:01:08:d7:fe:
f4:f6:a1:f5:3f:0b:a2:de:94:90:8c:42:27:c1:7d:
a6:7c:d1:c6:c0:58:58:2f:c7:e9:de:92:23:f5:f7:
8c:84:aa:76:ce:72:93:86:fc:da:0b:2b:49:c5:f9:
f5:22:f6:1c:a8:14:b5:8a:8c:ba:a5:13:ed:de:3d:
25:e2:23:4e:29:87:22:a3:22:75:fa:17:ca:ca:df:
ed:20:b3:fa:ee:08:00:01:39:de:8e:06:04:99:11:
4d:8f:ac:35:ac:69:cb:70:d7:69:82:03:8b:7e:a5:
d0:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:02:29:3F:7C:09:BF:1A:B5:84:04:25:EF:18:29:5E:8E:F8:98:5B
X509v3 Authority Key Identifier:
keyid:6B:84:F4:A2:96:BC:E1:4D:6D:EE:D2:51:16:AA:70:B6:0B:CC:E4:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4T0opa84U1t7tJRFqpwtgvM5KQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/844fd9-fef1-44d9-a6c9-14fab0244948/1/a4T0opa84U1t7tJRFqpwtgvM5KQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/844fd9-fef1-44d9-a6c9-14fab0244948/1/a4T0opa84U1t7tJRFqpwtgvM5KQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:b2:72:b1:fc:97:22:4e:61:19:a8:2a:51:49:59:2d:6f:47:
6a:f7:e2:6f:e0:90:b7:0f:72:81:b0:6b:a1:93:c4:fb:e0:af:
c6:56:44:35:90:af:f0:ac:6c:b1:57:72:79:b6:ff:87:ab:43:
3a:10:f3:35:2f:9b:fc:6c:ea:72:d8:35:6e:2a:6e:b8:1b:34:
7d:a0:8f:7f:5a:a6:52:17:43:c7:38:5e:bb:ea:92:86:74:da:
0b:76:90:cd:88:70:b4:77:c8:78:58:8f:98:b6:71:94:2d:5d:
50:72:3e:3a:3b:f6:18:2a:ea:01:fa:2d:75:ac:36:eb:55:a1:
1a:2b:a0:79:cb:d6:11:dc:02:2f:29:f6:67:0d:69:80:f3:89:
f4:b1:4c:d0:51:01:ad:0b:3e:2e:9a:2e:a0:31:d3:6a:68:2d:
99:ec:70:6e:e9:d2:7c:64:c7:f4:34:0f:2d:d7:e4:65:63:ab:
04:19:de:d7:00:a2:9a:0f:f6:02:fe:a5:f0:00:97:9b:6a:c8:
3e:d6:43:e3:c0:e7:9e:66:da:9e:dc:66:56:9a:51:c5:63:56:
d1:a5:46:7d:ff:f1:85:d7:6b:97:9d:af:36:35:e6:f2:a9:ba:
9d:9c:36:19:88:c0:99:4a:8d:b6:45:6e:af:44:a0:8a:ff:24:
63:3a:33:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:41:05 2025 by rpki-client