Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/02fdfd-7ac8-4321-b930-8fa551e6ae75/1/tR4_a-vNBSkdxSZeCLHNbEAbnP0.mft
File: tR4_a-vNBSkdxSZeCLHNbEAbnP0.mft (raw, json)
Hash identifier: n1kXTKoykKuvaK58ZTqPkUjIEx21A/y0n+u9TihZfY0=
Subject key identifier: C0:F2:D4:E0:BD:EF:73:F4:BD:96:21:83:D1:14:80:21:A6:A2:2B:2E
Authority key identifier: B5:1E:3F:6B:EB:CD:05:29:1D:C5:26:5E:08:B1:CD:6C:40:1B:9C:FD
Certificate issuer: /CN=b51e3f6bebcd05291dc5265e08b1cd6c401b9cfd
Certificate serial: 0198D4A7AB7BBDCAC13E4AD9A6E7029C9F06
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tR4_a-vNBSkdxSZeCLHNbEAbnP0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/02fdfd-7ac8-4321-b930-8fa551e6ae75/1/tR4_a-vNBSkdxSZeCLHNbEAbnP0.mft
Manifest number: 164D
Signing time: Sat 23 Aug 2025 02:00:14 +0000
Manifest this update: Sat 23 Aug 2025 02:00:14 +0000
Manifest next update: Sun 24 Aug 2025 02:00:14 +0000
Files and hashes: 1: XhX8A-oz684Iwe53pFqloQYS-kU.roa (hash: Mq5uGJtvZYMl6nllrQZDhX8D38boD4gAAjpBeZPZFnU=)
2: tR4_a-vNBSkdxSZeCLHNbEAbnP0.crl (hash: 4/uoSqZKToBSdpiHJJkiQ6HeUxaj5JZ3tzoLtaNB8vk=)
3: xq7eF4vg8c3V2xQvveah7LJZv-A.roa (hash: atQkAxpvj5iGJRjdwa/1uBWThI8y8UsCB5Ad2gGNyxg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/02fdfd-7ac8-4321-b930-8fa551e6ae75/1/tR4_a-vNBSkdxSZeCLHNbEAbnP0.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/02fdfd-7ac8-4321-b930-8fa551e6ae75/1/tR4_a-vNBSkdxSZeCLHNbEAbnP0.mft
rsync://rpki.ripe.net/repository/DEFAULT/tR4_a-vNBSkdxSZeCLHNbEAbnP0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 02:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:a7:ab:7b:bd:ca:c1:3e:4a:d9:a6:e7:02:9c:9f:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b51e3f6bebcd05291dc5265e08b1cd6c401b9cfd
Validity
Not Before: Aug 23 02:00:14 2025 GMT
Not After : Aug 24 02:00:14 2025 GMT
Subject: CN=c0f2d4e0bdef73f4bd962183d1148021a6a22b2e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:f5:18:4f:d7:94:64:3e:48:0d:36:5a:86:41:
88:0a:e2:36:a6:81:75:f3:c4:78:ca:ca:2c:1b:54:
85:7e:4b:69:5c:19:23:18:6d:d3:32:c6:72:a7:8e:
41:8a:65:32:4c:29:a4:a2:46:34:ae:7a:28:82:01:
9f:b3:58:35:6b:81:a5:ba:d3:5d:d2:44:4b:78:09:
3b:b5:c0:16:a2:9b:ed:81:5c:b7:8b:2a:a2:ac:0d:
c5:d4:bc:6a:a1:18:4e:bc:e8:ef:0b:19:19:96:57:
17:3b:2f:7a:8f:2e:a0:00:40:73:bf:ef:9a:b9:82:
32:29:67:d5:e3:27:3f:13:55:a8:92:b2:60:fd:6a:
fa:7a:37:3f:26:e1:c0:b0:a6:96:7d:39:95:ac:cf:
db:7c:80:ff:d4:9a:16:af:f8:92:27:99:32:3e:94:
4d:91:71:18:1b:08:b6:f9:26:cb:ab:bd:d4:8a:12:
76:2e:e0:58:2d:e3:10:6f:6a:74:8b:65:56:23:19:
8f:66:45:44:1d:ee:5a:70:52:51:69:12:3b:6f:cb:
a5:65:b3:fa:21:ba:ce:c6:9c:4b:bc:33:b1:b3:0f:
af:35:df:8f:40:49:a2:30:54:87:89:de:34:22:b7:
bb:76:2a:7c:13:8f:ae:8e:00:ec:0e:08:94:2b:b5:
9a:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:F2:D4:E0:BD:EF:73:F4:BD:96:21:83:D1:14:80:21:A6:A2:2B:2E
X509v3 Authority Key Identifier:
keyid:B5:1E:3F:6B:EB:CD:05:29:1D:C5:26:5E:08:B1:CD:6C:40:1B:9C:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tR4_a-vNBSkdxSZeCLHNbEAbnP0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/02fdfd-7ac8-4321-b930-8fa551e6ae75/1/tR4_a-vNBSkdxSZeCLHNbEAbnP0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/02fdfd-7ac8-4321-b930-8fa551e6ae75/1/tR4_a-vNBSkdxSZeCLHNbEAbnP0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:bb:87:31:e6:14:72:9d:ea:8b:12:17:7b:94:a6:dc:89:81:
d8:0c:f4:28:05:34:63:b6:e9:f8:8e:bb:a0:9c:98:ba:8f:7f:
9c:88:d8:fe:91:89:72:45:b0:08:09:e4:f8:8c:d9:fe:f4:6c:
b2:72:d1:c6:1c:24:a6:ba:e1:a6:29:a0:28:61:9b:48:ee:27:
cd:40:70:4d:2b:ec:4d:04:11:06:91:ce:5e:71:cf:87:81:70:
a4:07:ac:ba:e2:f5:92:d5:8e:6c:da:16:c8:5b:4f:dc:87:b7:
b0:a3:7e:fe:c7:fc:cd:d5:e4:b7:56:78:4a:c3:a1:3b:1b:ce:
0c:6b:7a:3b:38:82:6d:97:74:4a:07:c8:e7:32:27:f4:4a:2d:
94:ce:f0:45:e1:32:bc:63:6a:e0:64:18:ea:61:08:1c:4e:c1:
2a:bb:9a:a3:76:06:ef:d6:57:12:51:dd:8a:e8:f2:c7:96:8a:
e6:e3:12:50:fc:16:38:fb:30:c3:6f:46:b6:19:db:85:be:d3:
ac:65:e2:77:4d:89:c5:1e:2c:ee:af:60:f1:0c:ce:61:37:16:
3a:d6:bf:85:f3:11:54:77:05:93:56:b7:eb:4b:7c:1d:e6:ab:
60:fd:5a:17:6e:26:5f:cd:b3:05:5c:89:34:15:8a:f6:a3:9c:
a6:50:54:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:52:04 2025 by rpki-client