Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/01000b-aa96-4bc6-8cc1-af07a9e87fc0/1/4FotrPXdTpv6LS2bLTw_lnh0WEE.mft
File: 4FotrPXdTpv6LS2bLTw_lnh0WEE.mft (raw, json)
Hash identifier: cLp6Pp7hKkWas2nxfYOZSWT/yYgm+scJbzS+KZjn+WY=
Subject key identifier: B9:D9:EE:14:FF:A8:39:54:03:0F:CA:ED:20:35:FA:C1:F5:45:9F:10
Authority key identifier: E0:5A:2D:AC:F5:DD:4E:9B:FA:2D:2D:9B:2D:3C:3F:96:78:74:58:41
Certificate issuer: /CN=e05a2dacf5dd4e9bfa2d2d9b2d3c3f9678745841
Certificate serial: 0198D5F166B7E6488C86B09CE1D860CF3437
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4FotrPXdTpv6LS2bLTw_lnh0WEE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/01000b-aa96-4bc6-8cc1-af07a9e87fc0/1/4FotrPXdTpv6LS2bLTw_lnh0WEE.mft
Manifest number: 164C
Signing time: Sat 23 Aug 2025 08:00:23 +0000
Manifest this update: Sat 23 Aug 2025 08:00:23 +0000
Manifest next update: Sun 24 Aug 2025 08:00:23 +0000
Files and hashes: 1: 4FotrPXdTpv6LS2bLTw_lnh0WEE.crl (hash: u/Q6a6ri2kkJol7xFahDAEOpyHxPBFm2y3lptMDnKks=)
2: BS790JJGQ7DZlNZUL_em5Su64B4.roa (hash: VVqWBTRMk3+7j4zbJrp8La5lSHjcZGiKvxZueV8Sl7A=)
3: UJGm2ryO8HuvxtqrnMckm6HvQuw.roa (hash: LmIHTI0l7Czq42uu144MFysAfpmWgQRM3SWHkhVtvVI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/01000b-aa96-4bc6-8cc1-af07a9e87fc0/1/4FotrPXdTpv6LS2bLTw_lnh0WEE.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/01000b-aa96-4bc6-8cc1-af07a9e87fc0/1/4FotrPXdTpv6LS2bLTw_lnh0WEE.mft
rsync://rpki.ripe.net/repository/DEFAULT/4FotrPXdTpv6LS2bLTw_lnh0WEE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:f1:66:b7:e6:48:8c:86:b0:9c:e1:d8:60:cf:34:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e05a2dacf5dd4e9bfa2d2d9b2d3c3f9678745841
Validity
Not Before: Aug 23 08:00:23 2025 GMT
Not After : Aug 24 08:00:23 2025 GMT
Subject: CN=b9d9ee14ffa83954030fcaed2035fac1f5459f10
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:8a:3c:9d:3e:6f:20:b5:b8:7d:a3:e9:d2:a8:
f7:bb:33:45:a0:9c:ff:c5:41:d7:93:5a:b5:d5:02:
f0:92:5f:fd:f5:fa:fa:14:68:6b:3c:6e:14:af:00:
0d:5e:18:12:c1:6e:e9:51:70:89:a6:bf:8a:ed:85:
d8:37:69:b7:6a:5d:81:fc:5f:45:1e:a2:b2:c7:bb:
2d:71:fc:e3:43:99:3d:ae:c8:8f:d9:cb:dd:59:a5:
48:c8:f1:da:a4:7c:3e:32:5b:c7:2b:e2:6e:65:ae:
a5:78:dd:bf:fd:57:1f:a9:c0:69:f8:e5:d9:d3:7f:
d2:60:72:c3:30:6a:25:15:3e:23:52:d4:6e:b0:5e:
ff:4f:59:bc:0f:60:79:82:98:a9:ac:9a:bb:af:7c:
4d:80:1c:67:a3:76:b6:a4:49:04:11:9b:68:82:3c:
26:e5:06:ad:7a:8c:a1:5e:bd:6b:74:22:34:62:7c:
93:b8:f1:34:d6:43:f9:b0:1a:87:7e:87:1b:44:c6:
bd:43:ae:27:24:9c:3d:51:51:2a:ce:8b:f5:a7:03:
0e:a5:96:30:79:57:e6:ce:35:15:4a:8a:34:de:79:
a7:aa:70:91:1a:95:34:1e:d3:6a:d1:34:7c:3a:f5:
1e:4d:1b:3f:b7:e7:79:1d:ec:9b:2f:b3:09:02:b4:
55:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:D9:EE:14:FF:A8:39:54:03:0F:CA:ED:20:35:FA:C1:F5:45:9F:10
X509v3 Authority Key Identifier:
keyid:E0:5A:2D:AC:F5:DD:4E:9B:FA:2D:2D:9B:2D:3C:3F:96:78:74:58:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4FotrPXdTpv6LS2bLTw_lnh0WEE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/01000b-aa96-4bc6-8cc1-af07a9e87fc0/1/4FotrPXdTpv6LS2bLTw_lnh0WEE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/01000b-aa96-4bc6-8cc1-af07a9e87fc0/1/4FotrPXdTpv6LS2bLTw_lnh0WEE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:3c:9a:7b:4a:6a:00:60:bd:ce:35:99:83:70:1e:a3:99:dc:
d6:79:0c:35:01:92:55:3b:c1:ec:42:05:67:cb:de:24:22:d6:
56:8a:03:c4:c6:ac:66:5a:14:fc:a6:95:ce:1b:62:eb:10:31:
4a:fb:21:ab:15:5a:a0:13:bb:eb:a5:b9:80:1d:9a:65:42:00:
c0:9a:f3:a1:34:94:f5:d2:37:1d:cd:5b:04:e6:8e:80:9f:0c:
a1:c5:63:6f:8a:e8:8b:76:dd:5b:fa:91:bb:97:4d:d9:87:d6:
90:35:09:6f:1d:58:eb:b2:a8:68:34:e7:23:94:0f:72:15:bb:
bb:9f:a1:fb:de:e9:52:15:fd:bb:51:6e:fb:60:6a:6c:51:4f:
0c:a4:26:45:51:58:2f:64:69:c1:af:18:47:a9:05:ed:89:1d:
f2:96:06:5b:e6:c9:f7:08:a6:cb:05:8f:fd:4e:69:bf:68:a9:
a4:34:4f:af:21:1d:fd:de:43:0b:52:51:5d:5c:9b:c1:71:54:
aa:89:08:3c:93:b5:47:bb:3c:46:0c:87:41:61:99:ef:f3:ac:
0e:3b:23:5c:e5:02:b4:46:f6:60:c8:3a:4a:4c:df:af:ea:7c:
dd:4b:f1:53:81:78:8a:fa:f7:57:76:39:df:4f:f0:fd:fd:97:
6c:36:59:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:48:45 2025 by rpki-client