Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/d0305f-2b0d-4480-8d92-c0d973ca25d8/1/t4skH3ysfR5SHigxR-xhdjxCKqc.mft
File: t4skH3ysfR5SHigxR-xhdjxCKqc.mft (raw, json)
Hash identifier: CWxi72aFI5o/2ydANuOR5chHkZR2JVzfTN3xfhYnNb8=
Subject key identifier: A7:84:D5:FA:A7:7A:35:E0:FE:20:95:AE:75:8C:F9:F3:1E:0A:52:35
Authority key identifier: B7:8B:24:1F:7C:AC:7D:1E:52:1E:28:31:47:EC:61:76:3C:42:2A:A7
Certificate issuer: /CN=b78b241f7cac7d1e521e283147ec61763c422aa7
Certificate serial: 0198D473968B53BDD3F966FDD820721761CA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/t4skH3ysfR5SHigxR-xhdjxCKqc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/d0305f-2b0d-4480-8d92-c0d973ca25d8/1/t4skH3ysfR5SHigxR-xhdjxCKqc.mft
Manifest number: 06E4
Signing time: Sat 23 Aug 2025 01:03:21 +0000
Manifest this update: Sat 23 Aug 2025 01:03:21 +0000
Manifest next update: Sun 24 Aug 2025 01:03:21 +0000
Files and hashes: 1: JeMCMYiH53cU_3LMDeSKcS3Thhs.roa (hash: q+KDU3te7tpkPWYDo6SVWUaxsvwlZ34vk9tdHz3W+pc=)
2: t4skH3ysfR5SHigxR-xhdjxCKqc.crl (hash: EMQi9urTreXPdx4w7UronPgrdcXtrYHf3xnoeF/v1R8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/d0305f-2b0d-4480-8d92-c0d973ca25d8/1/t4skH3ysfR5SHigxR-xhdjxCKqc.crl
rsync://rpki.ripe.net/repository/DEFAULT/0e/d0305f-2b0d-4480-8d92-c0d973ca25d8/1/t4skH3ysfR5SHigxR-xhdjxCKqc.mft
rsync://rpki.ripe.net/repository/DEFAULT/t4skH3ysfR5SHigxR-xhdjxCKqc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:73:96:8b:53:bd:d3:f9:66:fd:d8:20:72:17:61:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b78b241f7cac7d1e521e283147ec61763c422aa7
Validity
Not Before: Aug 23 01:03:21 2025 GMT
Not After : Aug 24 01:03:21 2025 GMT
Subject: CN=a784d5faa77a35e0fe2095ae758cf9f31e0a5235
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:30:2d:f0:d0:95:89:76:e7:b3:9e:67:aa:87:
84:0a:29:fa:78:84:b9:0d:2f:7c:60:3a:59:b5:80:
62:3c:b7:83:7d:31:02:47:a0:25:f6:b7:18:ac:0d:
7a:3b:1a:0c:f5:02:a4:c5:d3:04:d4:1f:5e:69:31:
68:67:53:61:f0:c2:bc:08:68:11:08:2c:fb:b8:5f:
72:af:0e:ae:78:62:bc:b6:d1:20:8e:35:d8:27:16:
de:37:e9:c7:c4:b9:2a:fa:21:2d:b7:93:f1:b4:a3:
18:fc:5a:58:65:30:81:47:52:ce:0f:b1:ab:d2:7e:
ab:28:f3:5e:9d:99:83:ca:46:01:e4:8e:2e:eb:1d:
0b:0b:ba:55:27:1f:25:3e:ec:28:c1:d6:b0:e0:00:
e4:5d:7a:be:ae:f2:ad:78:95:5d:62:30:d7:1c:e9:
67:83:58:cd:b8:59:95:c8:fa:fc:44:c3:37:fb:c0:
57:2b:d3:e3:00:40:9c:11:ca:95:04:a6:47:a4:67:
e3:df:91:b7:2b:0a:da:ce:e1:4d:d9:cf:a5:62:61:
80:2b:f5:70:10:70:d4:b9:87:22:66:3b:cc:dd:d0:
a5:4d:1f:d9:90:d7:c1:c4:c9:a2:75:93:f1:eb:5a:
43:1f:b9:76:00:f5:9e:84:ed:7b:f6:c3:15:04:e8:
1d:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:84:D5:FA:A7:7A:35:E0:FE:20:95:AE:75:8C:F9:F3:1E:0A:52:35
X509v3 Authority Key Identifier:
keyid:B7:8B:24:1F:7C:AC:7D:1E:52:1E:28:31:47:EC:61:76:3C:42:2A:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t4skH3ysfR5SHigxR-xhdjxCKqc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/d0305f-2b0d-4480-8d92-c0d973ca25d8/1/t4skH3ysfR5SHigxR-xhdjxCKqc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/d0305f-2b0d-4480-8d92-c0d973ca25d8/1/t4skH3ysfR5SHigxR-xhdjxCKqc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:eb:8c:64:83:48:4e:ef:6d:22:3a:a8:ea:2b:3a:06:f4:7f:
53:65:f9:ad:6f:77:6e:54:72:88:ff:3d:35:d4:a5:26:dc:d1:
41:1c:c0:97:24:78:fb:27:40:c7:0e:a4:b6:1c:b5:2b:f8:6d:
a8:98:72:cc:04:68:b9:df:c4:7c:cb:61:e6:88:b8:09:54:28:
94:17:ed:12:c3:60:33:ed:d7:47:f8:f7:4f:d3:11:1c:e8:c1:
2e:a6:e6:98:b6:dd:08:64:bd:1e:d2:0e:3b:e6:2b:b0:d2:39:
ee:98:67:f9:3a:7a:27:95:de:28:cb:52:5c:d6:82:dd:8a:03:
80:ec:ba:9b:c2:ea:a8:df:f2:02:30:a9:9e:4d:fe:d9:c2:0f:
9c:f2:89:e6:b2:90:ff:f1:c4:1c:c4:38:44:80:93:71:a5:96:
2d:a8:c3:b4:d4:b4:d5:22:da:5f:98:46:3e:ee:ec:80:a9:19:
c3:d0:dd:31:18:c0:fa:b8:1e:fb:1d:31:4c:10:ee:c5:50:84:
58:74:84:74:7a:c5:b0:28:32:fb:22:ca:dc:03:dc:28:81:4a:
1f:d0:c9:7d:a8:b5:ad:fd:9a:20:96:34:38:60:b0:30:40:e0:
ef:11:c1:fa:aa:95:51:6e:57:c0:ef:ae:d8:1a:c5:9a:65:8a:
9a:b0:75:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:31:13 2025 by rpki-client