Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/908070-fd94-4a75-9872-31c733197073/1/4fR8EaOjyuBqGShgqWxQU-wEtdw.mft
File: 4fR8EaOjyuBqGShgqWxQU-wEtdw.mft (raw, json)
Hash identifier: z6IX6pZJT9BSbnFzAvyIWmzQ0Pqec9VACVAxpCBy84Q=
Subject key identifier: 0B:CB:A3:DC:41:98:58:68:17:9E:43:45:CC:2E:5F:19:A1:B0:D7:EA
Authority key identifier: E1:F4:7C:11:A3:A3:CA:E0:6A:19:28:60:A9:6C:50:53:EC:04:B5:DC
Certificate issuer: /CN=e1f47c11a3a3cae06a192860a96c5053ec04b5dc
Certificate serial: 0198D5F1983E716C9E1B0350147692CBF004
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4fR8EaOjyuBqGShgqWxQU-wEtdw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/908070-fd94-4a75-9872-31c733197073/1/4fR8EaOjyuBqGShgqWxQU-wEtdw.mft
Manifest number: 135A
Signing time: Sat 23 Aug 2025 08:00:36 +0000
Manifest this update: Sat 23 Aug 2025 08:00:36 +0000
Manifest next update: Sun 24 Aug 2025 08:00:36 +0000
Files and hashes: 1: 1-HjAvExmkGaxksSqn85_Dy6VvJM.roa (hash: 8D5kTAs24JEFoR1NyKeFUo+R/Y6CsZUzK26/NpwtHaw=)
2: 4fR8EaOjyuBqGShgqWxQU-wEtdw.crl (hash: xoMo+X2p7MHDG7vrgscEY7ktEKzV68+9sDUr6MUsu5M=)
3: UBam_LF0XAef-2xohQdZlRl7HBg.roa (hash: 7WO0S2f70pIralvylysZjQGv/GwrHdv9TmJ840KoDXo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/908070-fd94-4a75-9872-31c733197073/1/4fR8EaOjyuBqGShgqWxQU-wEtdw.crl
rsync://rpki.ripe.net/repository/DEFAULT/14/908070-fd94-4a75-9872-31c733197073/1/4fR8EaOjyuBqGShgqWxQU-wEtdw.mft
rsync://rpki.ripe.net/repository/DEFAULT/4fR8EaOjyuBqGShgqWxQU-wEtdw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:f1:98:3e:71:6c:9e:1b:03:50:14:76:92:cb:f0:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e1f47c11a3a3cae06a192860a96c5053ec04b5dc
Validity
Not Before: Aug 23 08:00:36 2025 GMT
Not After : Aug 24 08:00:36 2025 GMT
Subject: CN=0bcba3dc41985868179e4345cc2e5f19a1b0d7ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:ed:80:c5:cb:ce:ed:0e:3b:da:2e:ca:e6:de:
83:2b:b8:4d:82:ba:61:b8:a2:4e:82:fa:69:31:65:
c8:e0:06:d2:b0:da:cc:a4:b3:f7:c1:fa:1f:10:17:
7a:39:82:b6:a6:27:aa:56:28:ed:eb:72:97:64:33:
d9:5f:8e:65:fb:e9:f9:6b:0f:23:3e:09:f1:80:da:
92:eb:dc:59:57:ab:fd:50:ce:25:31:41:ea:90:d3:
82:37:53:89:f7:06:6f:bf:56:20:15:82:0d:f9:48:
22:2b:4d:68:7a:cd:ac:71:0f:5f:a7:83:77:87:0a:
d1:ce:21:a0:24:74:29:c9:20:6f:c8:05:ec:ef:c0:
ec:87:33:0b:fa:aa:30:1b:95:6c:0e:39:ed:a4:bf:
a7:1c:2c:39:15:9e:2f:b4:03:36:9a:70:74:e9:c6:
93:6c:fa:5c:7c:d4:c1:a3:10:25:bd:65:e8:42:c1:
27:bf:4c:20:54:17:7c:5f:98:a2:5c:58:02:5a:08:
d8:38:7c:c0:85:c3:5c:be:27:11:c0:68:ed:40:58:
d2:84:bc:59:54:44:8f:d5:0a:5f:d0:8e:20:16:06:
f1:c2:76:b2:6a:dc:2b:48:ee:93:2f:bd:96:e1:18:
4c:d0:0f:c6:8e:f6:db:9e:2d:3c:67:7c:b5:45:83:
e2:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:CB:A3:DC:41:98:58:68:17:9E:43:45:CC:2E:5F:19:A1:B0:D7:EA
X509v3 Authority Key Identifier:
keyid:E1:F4:7C:11:A3:A3:CA:E0:6A:19:28:60:A9:6C:50:53:EC:04:B5:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4fR8EaOjyuBqGShgqWxQU-wEtdw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/908070-fd94-4a75-9872-31c733197073/1/4fR8EaOjyuBqGShgqWxQU-wEtdw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/908070-fd94-4a75-9872-31c733197073/1/4fR8EaOjyuBqGShgqWxQU-wEtdw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:dc:0d:8f:16:ba:8b:20:85:dd:7e:24:50:94:2c:b5:7d:ee:
86:f6:fe:13:a3:95:46:15:7f:b6:a5:f5:95:7b:b8:8a:93:b2:
dd:13:e6:f0:4c:08:ae:3b:d4:ac:5b:11:ab:63:4d:39:35:be:
ca:32:e4:d4:fc:8e:f7:d2:13:28:9b:77:68:b9:98:e0:72:1e:
f9:50:11:5b:56:79:f4:4f:32:c5:9d:9f:ab:a4:1f:9b:d9:3a:
3e:97:21:0e:93:ef:66:c9:83:1a:f2:6f:6d:4f:ab:51:dd:48:
48:76:ed:f6:c8:d3:b8:59:f6:51:4b:d6:71:c4:36:a8:e5:59:
d2:0e:e9:61:7f:19:a9:5f:46:e8:51:0a:84:10:5c:17:e6:81:
c7:85:72:ea:65:0c:7a:73:63:58:7d:b6:b8:7d:86:85:8f:c3:
28:f5:34:89:6a:01:bf:48:ed:d9:fa:3d:bc:b5:35:d3:08:9f:
eb:d9:9f:39:5e:fd:b7:bc:38:c2:fb:8f:26:91:4c:c1:ba:ef:
34:f9:79:fa:e1:66:76:3e:66:3b:b3:01:77:52:52:65:c3:62:
5a:39:f3:08:a5:8f:7a:35:ec:64:2b:1a:c7:3e:b3:e2:a2:f7:
70:92:a3:22:63:47:4a:ca:2a:51:85:40:00:11:af:6e:b5:a1:
05:f6:88:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:55:21 2025 by rpki-client