Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/d45469-0c7b-4410-bb5e-7dc528aa5d4e/1/4NXVYedu8lnEoC3zDzUGTe3t8tc.mft
File: 4NXVYedu8lnEoC3zDzUGTe3t8tc.mft (raw, json)
Hash identifier: vBp6DeMFp+5c2obzp9k4aDV1Y3i7hYghUax1KF//l38=
Subject key identifier: B9:1F:E4:91:5A:B3:5B:D8:47:51:99:35:38:EE:22:76:03:0A:5A:67
Authority key identifier: E0:D5:D5:61:E7:6E:F2:59:C4:A0:2D:F3:0F:35:06:4D:ED:ED:F2:D7
Certificate issuer: /CN=e0d5d561e76ef259c4a02df30f35064dededf2d7
Certificate serial: 0198D516488701A38E516098B84A9A2A6808
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4NXVYedu8lnEoC3zDzUGTe3t8tc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/d45469-0c7b-4410-bb5e-7dc528aa5d4e/1/4NXVYedu8lnEoC3zDzUGTe3t8tc.mft
Manifest number: 0515
Signing time: Sat 23 Aug 2025 04:01:03 +0000
Manifest this update: Sat 23 Aug 2025 04:01:03 +0000
Manifest next update: Sun 24 Aug 2025 04:01:03 +0000
Files and hashes: 1: 4NXVYedu8lnEoC3zDzUGTe3t8tc.crl (hash: wIojxTo48P5t4drUOZgrujazIpe7lkpJBouF+EXJfh0=)
2: 6pWip88KFCQlBaqpP5OAyYyKKL0.roa (hash: 2kxcH3Ha1RRmUiGnKMePTKTFBssB2qkinO67e/D6ssU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/23/d45469-0c7b-4410-bb5e-7dc528aa5d4e/1/4NXVYedu8lnEoC3zDzUGTe3t8tc.crl
rsync://rpki.ripe.net/repository/DEFAULT/23/d45469-0c7b-4410-bb5e-7dc528aa5d4e/1/4NXVYedu8lnEoC3zDzUGTe3t8tc.mft
rsync://rpki.ripe.net/repository/DEFAULT/4NXVYedu8lnEoC3zDzUGTe3t8tc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 04:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:16:48:87:01:a3:8e:51:60:98:b8:4a:9a:2a:68:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e0d5d561e76ef259c4a02df30f35064dededf2d7
Validity
Not Before: Aug 23 04:01:03 2025 GMT
Not After : Aug 24 04:01:03 2025 GMT
Subject: CN=b91fe4915ab35bd84751993538ee2276030a5a67
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:70:77:2c:99:26:55:f7:c0:88:12:c5:ad:f5:
95:1d:4c:12:70:72:b3:4d:9c:45:d4:17:7f:ea:37:
da:d2:3b:b7:68:79:6d:f4:a6:7f:84:0a:30:b1:d6:
51:44:85:8a:7d:40:fc:80:91:37:b6:ea:16:dc:6e:
1c:a9:99:fe:f2:3d:68:83:23:52:7b:0b:64:31:d0:
ce:9c:59:0f:7b:f8:d9:5a:81:49:07:3c:c6:e3:42:
63:39:c5:26:2f:34:29:24:9c:1f:be:cd:90:bf:be:
5c:f4:8c:9e:17:f0:b3:eb:79:bc:c1:18:1a:fa:d8:
fb:63:60:44:dd:9d:38:68:ab:9b:f2:96:e0:86:a2:
ac:0b:84:ae:13:dd:2f:af:ba:e8:f5:86:ff:ec:fd:
67:0f:9f:43:54:fd:b4:b4:c6:a0:be:19:db:a3:c6:
dd:02:4c:14:8d:d2:92:6e:69:f4:88:11:de:9f:13:
cc:c5:f5:86:63:8e:b7:3e:1d:74:09:fd:fa:1c:69:
42:41:04:e4:bf:50:ab:27:40:d6:bb:59:9a:f7:43:
ab:96:9b:19:5e:88:ac:74:c4:30:b8:d6:81:c8:bd:
d8:ea:02:21:c3:01:cd:77:7e:66:30:35:19:38:f2:
bd:de:3c:d9:1c:c3:75:02:ac:fa:69:c5:56:c3:db:
4b:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:1F:E4:91:5A:B3:5B:D8:47:51:99:35:38:EE:22:76:03:0A:5A:67
X509v3 Authority Key Identifier:
keyid:E0:D5:D5:61:E7:6E:F2:59:C4:A0:2D:F3:0F:35:06:4D:ED:ED:F2:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4NXVYedu8lnEoC3zDzUGTe3t8tc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/d45469-0c7b-4410-bb5e-7dc528aa5d4e/1/4NXVYedu8lnEoC3zDzUGTe3t8tc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/23/d45469-0c7b-4410-bb5e-7dc528aa5d4e/1/4NXVYedu8lnEoC3zDzUGTe3t8tc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:97:39:e1:00:1e:9c:66:1e:4a:80:9f:27:e6:76:9c:38:93:
9e:4b:88:b0:36:24:76:32:5a:96:4d:37:6d:0f:60:b0:00:de:
6b:5e:4e:7b:ee:4a:fa:89:57:40:42:c2:aa:8c:21:0c:77:76:
48:6c:30:63:e5:ef:82:0c:b2:56:e7:11:e4:e4:fd:f7:27:38:
6f:26:51:67:76:ec:7c:15:27:d1:a2:e3:7f:39:b8:e2:0a:73:
58:2a:2c:dc:14:e6:14:e8:75:8c:62:89:cf:8e:36:f1:ee:a6:
fa:9e:18:0d:7c:8a:63:0c:66:b3:d4:f4:66:4c:15:a4:c7:82:
49:5f:bf:86:17:83:c4:ba:db:3a:54:af:b8:3c:ba:bc:0e:49:
11:1e:b0:87:f2:b5:17:5a:eb:99:8f:b3:d6:f6:c8:55:8b:01:
a1:37:eb:94:8b:88:a3:7b:d5:78:8e:a0:07:81:5b:41:39:ae:
9e:5d:3b:4c:e3:c4:8e:8f:70:da:96:13:27:11:09:84:ab:94:
0f:43:bd:7c:74:b4:03:5d:0d:e5:68:4f:58:cf:84:5a:98:8e:
2a:65:fa:6e:75:97:7f:ef:99:fe:42:3d:fd:b3:0f:ac:77:ab:
e9:c8:fb:b7:1f:ad:54:11:96:b7:f3:53:36:1b:bb:6c:40:e3:
a2:6f:a6:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 14:13:00 2025 by rpki-client