Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/e5cf00-55b8-4359-ac1e-aa0c4dc03222/1/4tc__D83xP7EvTWtHFlc0Fa67P0.mft
File: 4tc__D83xP7EvTWtHFlc0Fa67P0.mft (raw, json)
Hash identifier: CTSO9HnQ/kB59sXf1DbS09r/VRumTewVkVOLW7NJsDU=
Subject key identifier: AA:28:AD:56:09:8D:14:39:6B:31:EE:3D:04:F9:83:F0:E8:71:2E:74
Authority key identifier: E2:D7:3F:FC:3F:37:C4:FE:C4:BD:35:AD:1C:59:5C:D0:56:BA:EC:FD
Certificate issuer: /CN=e2d73ffc3f37c4fec4bd35ad1c595cd056baecfd
Certificate serial: 0198D5836898FD0B6215D2B4ED003E7D9457
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4tc__D83xP7EvTWtHFlc0Fa67P0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/e5cf00-55b8-4359-ac1e-aa0c4dc03222/1/4tc__D83xP7EvTWtHFlc0Fa67P0.mft
Manifest number: 07A2
Signing time: Sat 23 Aug 2025 06:00:15 +0000
Manifest this update: Sat 23 Aug 2025 06:00:15 +0000
Manifest next update: Sun 24 Aug 2025 06:00:15 +0000
Files and hashes: 1: 15xabzkapAsSjIKERak6-4m1So0.roa (hash: FylhIFKLzVcHOQsVvyYerlKh6o6ajQeSyBB7cVFNmPU=)
2: 4tc__D83xP7EvTWtHFlc0Fa67P0.crl (hash: +CVNPjDVHMQ+1rHEMAiCqDbJMCkygu0efFGHLIj6ZrM=)
3: 833FmQyz-5vw3V1ZpD3pqMArHGw.roa (hash: eyX1KEkROJtBb4g504oMdjM6lbQ+P16xnRGxTkb5zHU=)
4: SSLLWRxY0V4J6I9l65vEUaKwK4Q.roa (hash: llqnu+z/IAMUkrZ/zCpWswAVAWND5pihVLoy0VRdDyQ=)
5: fnBkrIGhazl4u19mtv8qgvxymog.roa (hash: K+4n5TOvIimoLjl9pQIARfKh0OC3efu1YiLeyARuuyU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/e5cf00-55b8-4359-ac1e-aa0c4dc03222/1/4tc__D83xP7EvTWtHFlc0Fa67P0.crl
rsync://rpki.ripe.net/repository/DEFAULT/15/e5cf00-55b8-4359-ac1e-aa0c4dc03222/1/4tc__D83xP7EvTWtHFlc0Fa67P0.mft
rsync://rpki.ripe.net/repository/DEFAULT/4tc__D83xP7EvTWtHFlc0Fa67P0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:83:68:98:fd:0b:62:15:d2:b4:ed:00:3e:7d:94:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e2d73ffc3f37c4fec4bd35ad1c595cd056baecfd
Validity
Not Before: Aug 23 06:00:15 2025 GMT
Not After : Aug 24 06:00:15 2025 GMT
Subject: CN=aa28ad56098d14396b31ee3d04f983f0e8712e74
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:95:f7:ce:07:5c:4e:6e:a7:3f:3b:a3:22:aa:
7d:98:32:79:7f:23:82:7a:32:27:31:8e:6b:8d:a8:
9e:ed:04:38:f2:9a:2b:c6:a8:d6:00:2f:e4:2a:4e:
71:14:53:1d:25:63:8c:35:59:6c:8e:83:69:61:a4:
3d:bc:1c:a7:75:c6:e0:cc:d9:12:72:4c:b8:a4:1d:
a3:5b:4a:7e:2b:57:1a:7c:8a:f9:cf:b6:67:3b:2c:
64:7c:bb:2e:e2:3d:01:7b:9a:46:7c:5e:f6:44:2e:
0b:dd:0b:72:b0:1d:76:77:7e:59:15:14:f5:36:e5:
3f:18:4a:bd:e4:86:70:a0:73:09:bd:a3:f4:06:90:
6a:df:48:ea:34:6a:e8:b8:f7:a9:0e:af:f5:ce:e6:
48:50:30:84:d8:7d:b3:60:9e:05:79:0f:f8:6e:88:
5e:33:28:94:c8:86:8f:e3:c6:26:bf:82:e7:79:5d:
a3:bd:c3:22:e2:87:f9:b5:9e:82:09:f8:0c:1a:5a:
91:8c:08:9d:42:30:be:6d:69:91:2e:4e:07:78:d2:
21:75:27:fc:0a:28:b3:07:d6:57:66:72:30:43:e5:
e4:00:8e:1b:0e:79:7e:60:b1:c5:a6:36:b0:f6:1d:
05:af:6c:40:05:a3:5b:94:2b:d4:32:c6:cc:cc:f2:
c3:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:28:AD:56:09:8D:14:39:6B:31:EE:3D:04:F9:83:F0:E8:71:2E:74
X509v3 Authority Key Identifier:
keyid:E2:D7:3F:FC:3F:37:C4:FE:C4:BD:35:AD:1C:59:5C:D0:56:BA:EC:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4tc__D83xP7EvTWtHFlc0Fa67P0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/e5cf00-55b8-4359-ac1e-aa0c4dc03222/1/4tc__D83xP7EvTWtHFlc0Fa67P0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/e5cf00-55b8-4359-ac1e-aa0c4dc03222/1/4tc__D83xP7EvTWtHFlc0Fa67P0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:8c:61:71:61:18:25:2f:1e:cf:a8:2d:df:e0:38:7b:0b:cb:
cb:bd:e0:b4:8d:d4:49:df:3d:01:62:bd:78:24:03:9f:a0:8d:
9e:8b:20:9c:f2:ac:b6:7b:59:6b:cc:bd:f4:b9:f1:a2:5b:d6:
03:5a:bf:75:c2:eb:7c:f0:a1:82:03:b8:b6:55:d6:c8:45:26:
f2:f8:e0:12:1d:ce:8b:43:b1:38:14:85:c4:3f:9d:16:ec:a0:
c2:c7:a4:c5:c0:b7:2f:25:85:e7:70:03:1b:0f:c8:40:0b:2b:
25:96:aa:32:5f:95:db:19:7c:7b:0c:2e:99:99:eb:b2:cf:2c:
de:3c:a3:0a:67:fd:32:cf:4d:ff:26:c9:3b:a7:d2:ea:62:9d:
96:3f:11:96:e6:16:67:be:a8:2f:55:73:ff:cc:49:6f:de:d5:
8d:74:ca:d6:cf:8a:ca:83:35:aa:d1:12:9b:7c:a0:7d:48:69:
3f:cc:82:e9:c3:40:b1:03:5d:10:d1:86:85:c4:30:3e:cd:aa:
6b:d7:48:ee:d8:f3:2d:a0:4f:0d:a3:51:44:61:c8:1d:5d:15:
61:cf:0b:6e:4f:07:b2:77:73:f6:7b:0c:e2:ba:29:c2:a9:d2:
07:f5:ad:af:37:98:4d:2f:79:e1:51:66:8e:dd:03:dd:89:d7:
56:c1:dd:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:18:46 2025 by rpki-client