Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/0fc7e5-b1f6-474e-99a7-eda23f2f17e9/1/4YdKiHqiiNq3LGWOk2lO1dr9ICY.mft
File: 4YdKiHqiiNq3LGWOk2lO1dr9ICY.mft (raw, json)
Hash identifier: wwqciBr1pdOEGBJ67idVZkCTNkqJYLJEUXrP9+GAu5c=
Subject key identifier: 0A:42:33:A3:0E:77:49:88:FB:3E:7B:86:E7:4D:F2:FC:E8:6F:1A:14
Authority key identifier: E1:87:4A:88:7A:A2:88:DA:B7:2C:65:8E:93:69:4E:D5:DA:FD:20:26
Certificate issuer: /CN=e1874a887aa288dab72c658e93694ed5dafd2026
Certificate serial: 0198D660DB6619B3C1CDF99034B191376E5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4YdKiHqiiNq3LGWOk2lO1dr9ICY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/0fc7e5-b1f6-474e-99a7-eda23f2f17e9/1/4YdKiHqiiNq3LGWOk2lO1dr9ICY.mft
Manifest number: 11A5
Signing time: Sat 23 Aug 2025 10:02:08 +0000
Manifest this update: Sat 23 Aug 2025 10:02:08 +0000
Manifest next update: Sun 24 Aug 2025 10:02:08 +0000
Files and hashes: 1: 4YdKiHqiiNq3LGWOk2lO1dr9ICY.crl (hash: Fj9m5eObSX8f+Hjmt+C6rwwxF2FqGdhFf4FL30UJ+T8=)
2: jnxiRSp6LL1UuZSH55PRoBU9Uug.roa (hash: EzydjgFzmvXFQDadZtYOhUDG1+kFGRWU2sNIMDhFrQ0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/0fc7e5-b1f6-474e-99a7-eda23f2f17e9/1/4YdKiHqiiNq3LGWOk2lO1dr9ICY.crl
rsync://rpki.ripe.net/repository/DEFAULT/24/0fc7e5-b1f6-474e-99a7-eda23f2f17e9/1/4YdKiHqiiNq3LGWOk2lO1dr9ICY.mft
rsync://rpki.ripe.net/repository/DEFAULT/4YdKiHqiiNq3LGWOk2lO1dr9ICY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:60:db:66:19:b3:c1:cd:f9:90:34:b1:91:37:6e:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e1874a887aa288dab72c658e93694ed5dafd2026
Validity
Not Before: Aug 23 10:02:08 2025 GMT
Not After : Aug 24 10:02:08 2025 GMT
Subject: CN=0a4233a30e774988fb3e7b86e74df2fce86f1a14
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:c2:e5:46:6f:6b:39:64:6c:55:0d:7a:44:20:
53:00:d9:9a:4c:d3:49:ba:4b:84:5c:fe:02:d9:e9:
69:ee:a5:65:a7:9c:75:72:d8:d6:4f:00:88:25:1b:
2e:aa:6f:9c:2c:3c:2c:54:45:0c:d9:58:6b:f4:7e:
62:e3:d7:2a:f7:87:77:33:97:9e:29:58:74:84:ad:
22:c6:78:9a:b1:2b:ba:35:27:d5:2f:0a:f2:69:57:
55:57:48:ee:2b:40:9b:c1:84:56:45:a7:ad:be:fe:
82:3d:6d:cb:26:5d:5d:fb:35:b1:d8:76:75:2e:0a:
2d:60:c3:88:96:30:8b:42:4c:17:3d:36:25:cb:4c:
dc:4a:3b:b6:16:97:d3:a4:07:02:be:09:f4:b3:f5:
bb:05:0a:7e:d7:d5:87:11:b6:c1:19:5b:22:a5:e5:
22:2b:84:8d:b3:4f:c7:b8:e8:e3:c9:e0:2b:73:ad:
e6:3b:60:88:a1:66:3d:20:0c:cb:a0:39:e4:a4:5c:
ab:e1:1f:bd:f4:32:d1:07:4c:20:ee:10:cf:13:a6:
d3:9c:c9:b7:aa:94:87:5b:a9:e0:36:7e:13:04:de:
24:d3:74:0c:ea:9e:dd:06:d1:35:cf:ac:39:e3:3b:
2a:2c:d0:d2:6e:ae:a7:12:8b:f1:0c:b6:8f:e6:3b:
44:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:42:33:A3:0E:77:49:88:FB:3E:7B:86:E7:4D:F2:FC:E8:6F:1A:14
X509v3 Authority Key Identifier:
keyid:E1:87:4A:88:7A:A2:88:DA:B7:2C:65:8E:93:69:4E:D5:DA:FD:20:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4YdKiHqiiNq3LGWOk2lO1dr9ICY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/0fc7e5-b1f6-474e-99a7-eda23f2f17e9/1/4YdKiHqiiNq3LGWOk2lO1dr9ICY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/0fc7e5-b1f6-474e-99a7-eda23f2f17e9/1/4YdKiHqiiNq3LGWOk2lO1dr9ICY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:09:bb:c9:d0:aa:ca:d3:4e:64:99:48:6b:c8:73:7b:02:04:
b8:94:43:49:90:04:35:a6:2c:83:ea:03:1f:4a:9e:c3:72:11:
ff:74:de:26:7d:7c:b3:d9:00:6a:36:f2:7c:28:5d:b1:9b:75:
70:a7:c3:d2:c6:67:9f:64:81:8b:94:88:54:91:b5:94:df:44:
69:8a:d2:7b:0d:3b:f0:57:09:a2:61:63:33:e1:db:ee:1f:0a:
46:3c:9a:98:62:d8:2f:12:4f:27:40:6c:85:65:82:e1:40:8f:
38:fe:f5:49:cf:30:c0:a9:16:26:63:23:a4:e0:97:50:e9:05:
77:12:da:cc:49:b7:8f:bf:d9:b9:8d:f7:0d:8b:89:49:8d:fe:
e5:2f:10:b6:96:72:75:13:2f:01:02:4a:15:6e:fb:0d:c9:f8:
10:ec:3d:46:1f:98:d6:21:4f:c1:d7:0c:36:8a:84:58:45:fc:
c0:2d:80:b7:86:63:09:89:79:39:d1:de:b6:d6:52:a3:cf:0e:
99:9e:de:16:90:eb:d2:cf:ea:84:a5:39:d2:85:41:69:24:f9:
3d:28:a1:5c:65:03:5b:53:d2:16:23:88:1a:7c:a2:03:30:46:
0f:fc:bc:5b:a1:fb:3a:d0:74:eb:1a:28:ed:03:23:4b:95:c5:
ae:af:fa:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 14:04:03 2025 by rpki-client