Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/b6468d-10ed-4d48-803c-ea97665c13df/1/4oNEKXdeZVXldCSSKGJUsdqfGQM.mft
File: 4oNEKXdeZVXldCSSKGJUsdqfGQM.mft (raw, json)
Hash identifier: E5kX+48PwYda2Cu/ITVaXQbMq0JNm7xXIlWp9ClG5+0=
Subject key identifier: 00:EB:AC:B8:51:37:2F:EE:F6:3F:B7:9D:50:3C:03:DF:6C:ED:82:9A
Authority key identifier: E2:83:44:29:77:5E:65:55:E5:74:24:92:28:62:54:B1:DA:9F:19:03
Certificate issuer: /CN=e2834429775e6555e5742492286254b1da9f1903
Certificate serial: 0198D5BC609E2D399B8CBE0172E382B8BED7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4oNEKXdeZVXldCSSKGJUsdqfGQM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/b6468d-10ed-4d48-803c-ea97665c13df/1/4oNEKXdeZVXldCSSKGJUsdqfGQM.mft
Manifest number: 0F04
Signing time: Sat 23 Aug 2025 07:02:29 +0000
Manifest this update: Sat 23 Aug 2025 07:02:29 +0000
Manifest next update: Sun 24 Aug 2025 07:02:29 +0000
Files and hashes: 1: 4oNEKXdeZVXldCSSKGJUsdqfGQM.crl (hash: ys+jfFFjhsEFHIxdngg+/7NX7JKG/BCNUcNd4Cfyg0A=)
2: ZTmydTpXIXh_aFM6lIMP1nPGi4M.roa (hash: R6dO91YPQTwtwZipE8GfozYF7WvWuk+GMp9DghrSYmY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/21/b6468d-10ed-4d48-803c-ea97665c13df/1/4oNEKXdeZVXldCSSKGJUsdqfGQM.crl
rsync://rpki.ripe.net/repository/DEFAULT/21/b6468d-10ed-4d48-803c-ea97665c13df/1/4oNEKXdeZVXldCSSKGJUsdqfGQM.mft
rsync://rpki.ripe.net/repository/DEFAULT/4oNEKXdeZVXldCSSKGJUsdqfGQM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:bc:60:9e:2d:39:9b:8c:be:01:72:e3:82:b8:be:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e2834429775e6555e5742492286254b1da9f1903
Validity
Not Before: Aug 23 07:02:29 2025 GMT
Not After : Aug 24 07:02:29 2025 GMT
Subject: CN=00ebacb851372feef63fb79d503c03df6ced829a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:a3:8b:17:20:c0:c1:5c:88:f9:17:cc:bf:00:
2a:bc:42:30:27:8d:59:8c:61:45:ae:f2:7c:7e:e2:
e7:96:3f:c2:2b:5f:57:14:d7:63:72:b2:03:57:69:
b9:87:9e:da:e0:3e:6e:27:e7:65:74:88:69:ec:ac:
ad:82:4e:f5:1b:8a:79:07:76:15:54:8a:84:ec:02:
d5:3e:17:8c:b0:f2:1f:18:7a:17:5c:41:8e:fc:d5:
6b:57:ce:21:e4:24:e6:4c:e2:e0:e9:09:43:fc:b7:
58:90:28:60:e2:b6:fe:6a:90:23:66:22:62:25:4a:
6f:5e:ac:a1:21:1c:b5:17:3b:0b:f9:a5:e4:66:4e:
7a:bb:90:3d:47:07:7a:28:ba:5f:fc:d3:d0:02:5b:
f0:0d:95:ca:de:ef:fb:95:55:3d:63:24:41:9a:c3:
7e:6c:41:34:e8:fa:49:61:36:3c:38:8c:3d:6b:4f:
90:9b:09:87:d1:49:c7:09:60:d4:f7:0e:0e:ac:bf:
76:c3:17:80:e1:e9:72:b2:8e:ed:16:86:ed:b2:1b:
29:f8:74:7b:31:49:6b:e0:46:ac:02:ba:b2:16:bf:
61:81:ab:9e:70:a1:be:e2:68:84:b4:b4:8b:7d:27:
85:11:fa:d5:66:fb:e4:e6:02:10:2b:9d:c9:b5:9a:
7a:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:EB:AC:B8:51:37:2F:EE:F6:3F:B7:9D:50:3C:03:DF:6C:ED:82:9A
X509v3 Authority Key Identifier:
keyid:E2:83:44:29:77:5E:65:55:E5:74:24:92:28:62:54:B1:DA:9F:19:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4oNEKXdeZVXldCSSKGJUsdqfGQM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/b6468d-10ed-4d48-803c-ea97665c13df/1/4oNEKXdeZVXldCSSKGJUsdqfGQM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/21/b6468d-10ed-4d48-803c-ea97665c13df/1/4oNEKXdeZVXldCSSKGJUsdqfGQM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:3a:77:c9:74:0e:8e:e5:8a:c3:d6:9d:88:f3:84:db:c5:6f:
51:f0:72:1b:0a:a9:bd:a0:b6:4e:64:ad:00:95:aa:1d:9f:9c:
da:92:7e:e8:9f:9a:f4:f3:27:96:3b:ff:65:78:99:fd:1d:c0:
26:04:22:6a:21:12:4f:e3:1a:6d:49:5e:a7:ad:78:23:b9:4c:
72:16:12:b3:cc:00:44:5b:e3:60:af:7b:94:09:b1:c1:4b:56:
c2:fd:36:8c:68:d9:d7:c3:bf:8a:d2:f6:e9:06:e6:38:a0:80:
60:06:fb:3b:97:e7:da:a7:7a:a0:6a:04:f5:c7:c5:65:3b:97:
42:47:4e:9f:fe:10:fd:ac:0d:ea:e2:93:1e:38:de:42:24:c7:
b0:df:4d:58:03:80:e8:5f:4a:ad:02:e4:0b:7c:16:ca:22:21:
76:ce:2b:dc:78:79:5b:10:4d:b8:39:27:1d:a8:29:94:11:27:
5f:b5:96:c2:36:b8:58:99:c5:43:02:81:40:72:63:db:a2:9d:
04:ca:e4:04:83:19:8b:ec:4a:57:38:99:da:c9:04:4d:8b:ef:
d8:0c:5c:98:22:75:45:3d:2d:72:3d:d8:52:04:a3:de:c5:68:
86:14:f0:3a:57:87:5f:19:a3:7c:ee:91:36:76:e3:20:30:79:
e1:da:b9:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 13:32:04 2025 by rpki-client