
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/4ba973-0e9f-4352-9838-642dc9127680/1/S4nYf45BtQgtOJFgFeBZ5W3QEU4.mft
File: S4nYf45BtQgtOJFgFeBZ5W3QEU4.mft (raw, json)
Hash identifier: f3lwlGTnNBr1Tw2hIJLiQFbNxNV8YOGR8c1n1t3KAnU=
Subject key identifier: 61:C9:F9:22:21:72:DF:1F:88:EE:35:6E:83:BC:3B:DA:35:D7:73:66
Authority key identifier: 4B:89:D8:7F:8E:41:B5:08:2D:38:91:60:15:E0:59:E5:6D:D0:11:4E
Certificate issuer: /CN=4b89d87f8e41b5082d38916015e059e56dd0114e
Certificate serial: 0198D6605F19641E811F716230FFF485897F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S4nYf45BtQgtOJFgFeBZ5W3QEU4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/4ba973-0e9f-4352-9838-642dc9127680/1/S4nYf45BtQgtOJFgFeBZ5W3QEU4.mft
Manifest number: 0EBA
Signing time: Sat 23 Aug 2025 10:01:36 +0000
Manifest this update: Sat 23 Aug 2025 10:01:36 +0000
Manifest next update: Sun 24 Aug 2025 10:01:36 +0000
Files and hashes: 1: S4nYf45BtQgtOJFgFeBZ5W3QEU4.crl (hash: sHfT/lmwnAH+5rKm3g/i6ddeK0GqFjZig5JIMTQP7PI=)
2: crOsrOXIXenqmjjK7E42FO9nzAY.roa (hash: FavBc7FYhPnbTZq/1FuhdovJ2d7YJv+63Ene4V7HX3s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/4ba973-0e9f-4352-9838-642dc9127680/1/S4nYf45BtQgtOJFgFeBZ5W3QEU4.crl
rsync://rpki.ripe.net/repository/DEFAULT/0b/4ba973-0e9f-4352-9838-642dc9127680/1/S4nYf45BtQgtOJFgFeBZ5W3QEU4.mft
rsync://rpki.ripe.net/repository/DEFAULT/S4nYf45BtQgtOJFgFeBZ5W3QEU4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 10:01:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:60:5f:19:64:1e:81:1f:71:62:30:ff:f4:85:89:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b89d87f8e41b5082d38916015e059e56dd0114e
Validity
Not Before: Aug 23 10:01:36 2025 GMT
Not After : Aug 24 10:01:36 2025 GMT
Subject: CN=61c9f9222172df1f88ee356e83bc3bda35d77366
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:05:da:84:9e:8f:06:1f:1a:0d:b6:b1:2b:db:
5f:16:7b:e1:62:0d:d6:d6:21:8b:bb:68:b2:90:1c:
d8:1c:cb:81:12:8d:8b:dd:22:88:4d:fb:65:9c:ab:
ff:bb:eb:f3:55:b5:0e:68:d6:34:9d:74:58:b1:5c:
4a:de:ae:0d:f5:41:f0:e3:d5:16:23:91:31:61:bf:
a9:57:f4:aa:2a:a8:b1:18:e7:e1:ea:46:62:8e:73:
aa:ab:22:54:2c:75:a6:9d:fc:56:92:a0:f7:10:b1:
18:b7:f3:bf:3a:9e:e5:76:80:cd:23:43:44:33:e0:
d2:d7:f3:30:7b:2b:8e:74:ee:81:96:2b:33:29:8e:
fe:ae:49:10:98:53:a8:67:59:a0:ef:2c:5c:87:d4:
3a:5c:bf:f8:df:62:27:b1:fc:14:bc:4b:77:cf:96:
04:48:32:51:43:ed:2a:fd:3b:9b:c2:02:49:9d:93:
5c:bc:06:5b:42:8d:76:d2:8e:ea:b5:e1:d2:30:a8:
5b:4a:88:ac:d7:56:d8:41:d6:75:14:48:ec:55:74:
b9:18:fe:45:e7:99:4a:72:a3:20:e5:64:cc:38:ec:
8e:7b:ac:e8:4b:5c:b4:66:df:44:54:c5:6e:30:ff:
4c:2c:fa:a0:24:99:45:41:f8:9a:ca:97:7a:5f:0e:
22:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:C9:F9:22:21:72:DF:1F:88:EE:35:6E:83:BC:3B:DA:35:D7:73:66
X509v3 Authority Key Identifier:
keyid:4B:89:D8:7F:8E:41:B5:08:2D:38:91:60:15:E0:59:E5:6D:D0:11:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S4nYf45BtQgtOJFgFeBZ5W3QEU4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/4ba973-0e9f-4352-9838-642dc9127680/1/S4nYf45BtQgtOJFgFeBZ5W3QEU4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/4ba973-0e9f-4352-9838-642dc9127680/1/S4nYf45BtQgtOJFgFeBZ5W3QEU4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:50:1b:be:4e:e8:28:85:24:0d:8d:0c:d2:f4:51:82:9b:fe:
e0:ef:a1:07:a1:60:e9:0b:b4:a0:54:6a:1a:46:1e:f1:23:59:
9d:9b:87:03:b6:65:e9:17:ac:96:9c:cd:66:5d:17:32:f8:85:
ef:89:fe:09:c3:90:19:6e:42:2a:0b:d8:54:4f:80:86:f0:ed:
ae:75:e0:2d:04:37:5b:d3:04:24:2e:73:88:72:b6:5e:1e:e6:
a0:61:59:c1:1e:88:b3:7f:ed:db:e5:84:89:b0:75:0d:72:c9:
37:42:bb:01:e2:44:38:8c:c2:8b:ee:ee:b7:c4:10:f5:1a:6c:
8a:c9:53:5e:6e:c7:52:a6:6a:f3:05:57:30:24:c4:69:d1:fd:
95:4c:76:a6:a8:01:31:b0:b9:d0:08:66:66:1a:4f:70:63:88:
a2:5f:01:1d:0b:22:71:65:78:14:2b:37:c4:77:cf:d5:60:9f:
b8:bf:9e:ec:e3:12:45:75:8c:56:32:dc:6e:51:a4:60:1c:02:
3b:ff:ca:c9:d6:0a:cc:98:f0:21:30:65:c4:77:c7:56:d1:06:
27:8e:8e:61:72:a1:d8:3c:76:f1:2a:54:c9:6f:12:8e:ae:e8:
f9:53:d1:b0:e0:c4:0f:24:22:50:9f:ff:a4:e2:3d:2c:5d:a7:
71:1f:7b:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 18:22:03 2025 by rpki-client