Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/39604e-9748-4c7d-ad5d-563d47a7ab61/1/4-dxd2XkvMcZGyXRpOZtOIycU9k.mft
File: 4-dxd2XkvMcZGyXRpOZtOIycU9k.mft (raw, json)
Hash identifier: tQuIidC7EkroArlVwjGlKqpVFwXzKG2PHiZvYq1qqLE=
Subject key identifier: C3:7E:F9:46:D6:52:2E:CB:67:9C:4A:B8:AA:75:62:2E:0A:10:47:B8
Authority key identifier: E3:E7:71:77:65:E4:BC:C7:19:1B:25:D1:A4:E6:6D:38:8C:9C:53:D9
Certificate issuer: /CN=e3e7717765e4bcc7191b25d1a4e66d388c9c53d9
Certificate serial: 0198D4DFDE6E790EE29289EC2D4B8B288E15
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4-dxd2XkvMcZGyXRpOZtOIycU9k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/39604e-9748-4c7d-ad5d-563d47a7ab61/1/4-dxd2XkvMcZGyXRpOZtOIycU9k.mft
Manifest number: 07CE
Signing time: Sat 23 Aug 2025 03:01:37 +0000
Manifest this update: Sat 23 Aug 2025 03:01:37 +0000
Manifest next update: Sun 24 Aug 2025 03:01:37 +0000
Files and hashes: 1: 4-dxd2XkvMcZGyXRpOZtOIycU9k.crl (hash: j6dDoKDf+AkfsANLFuCnox2h2IkX9Lp9ImsHiKNQwxM=)
2: NNXpk59D8TzuvrFY-C-H2t3-Azg.roa (hash: blHgWyvU6BLEqGgFxNZ3azxZxMbkiPWVvdBh5N+A+CQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/39604e-9748-4c7d-ad5d-563d47a7ab61/1/4-dxd2XkvMcZGyXRpOZtOIycU9k.crl
rsync://rpki.ripe.net/repository/DEFAULT/30/39604e-9748-4c7d-ad5d-563d47a7ab61/1/4-dxd2XkvMcZGyXRpOZtOIycU9k.mft
rsync://rpki.ripe.net/repository/DEFAULT/4-dxd2XkvMcZGyXRpOZtOIycU9k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 03:01:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:df:de:6e:79:0e:e2:92:89:ec:2d:4b:8b:28:8e:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e3e7717765e4bcc7191b25d1a4e66d388c9c53d9
Validity
Not Before: Aug 23 03:01:37 2025 GMT
Not After : Aug 24 03:01:37 2025 GMT
Subject: CN=c37ef946d6522ecb679c4ab8aa75622e0a1047b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:ba:63:0e:f4:b2:30:ef:8b:3b:0f:eb:94:22:
ca:64:b8:ae:3d:a0:31:6c:5d:35:cc:ba:b2:1b:ae:
bd:54:bd:8d:7e:96:95:1d:e4:6f:a9:43:0f:97:c9:
36:42:cf:c6:b1:f9:e2:96:c1:f3:bb:3e:5b:0f:a4:
b5:30:17:0d:5c:bb:f5:de:53:65:5e:ed:48:a5:49:
07:21:96:d4:96:71:57:f2:69:76:9f:1f:ab:36:ca:
3f:27:c3:bc:c2:ea:db:b4:f8:cc:2b:cd:1e:42:fc:
5c:46:5d:ab:ed:93:01:3f:60:62:6c:c9:de:74:67:
ae:97:bf:b0:a8:6d:6a:63:b9:dd:ec:47:73:37:61:
1d:26:e2:7f:82:42:ac:dd:58:fe:bc:35:58:9d:4d:
b7:21:b8:68:c9:ec:6a:3f:6a:8d:54:42:01:f2:8f:
c7:cf:6b:22:0a:19:81:e4:98:ef:63:fc:b1:b6:7a:
84:0b:e8:52:da:30:be:6c:96:9d:61:0d:d3:b4:5c:
36:41:d4:8e:9b:e7:c4:07:d6:75:83:4d:3d:c6:4d:
75:0b:dd:e7:43:bd:7a:32:5b:07:0c:55:06:53:47:
82:66:32:74:5a:2d:80:d3:1d:04:1e:82:87:5b:f1:
94:20:9e:c3:23:cb:cf:d0:ae:81:4a:6b:af:e7:32:
41:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:7E:F9:46:D6:52:2E:CB:67:9C:4A:B8:AA:75:62:2E:0A:10:47:B8
X509v3 Authority Key Identifier:
keyid:E3:E7:71:77:65:E4:BC:C7:19:1B:25:D1:A4:E6:6D:38:8C:9C:53:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4-dxd2XkvMcZGyXRpOZtOIycU9k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/39604e-9748-4c7d-ad5d-563d47a7ab61/1/4-dxd2XkvMcZGyXRpOZtOIycU9k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/39604e-9748-4c7d-ad5d-563d47a7ab61/1/4-dxd2XkvMcZGyXRpOZtOIycU9k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:9c:bc:9f:7e:6c:9e:f3:84:05:0e:7d:aa:50:bb:21:1d:2a:
14:fb:74:9d:ae:7f:4c:91:95:68:38:92:e1:be:5b:55:50:48:
33:49:22:f7:1a:64:c4:25:bf:03:23:e6:16:75:8a:ee:fe:ca:
18:ae:34:e5:3f:0c:66:f5:7e:70:97:df:cf:00:a3:70:04:78:
87:a7:6e:73:85:f5:37:8c:33:a6:a9:44:8f:be:4c:35:62:3a:
0d:a0:7a:42:7a:37:dc:f8:0f:02:7a:27:73:48:74:58:1b:b0:
79:5a:8b:36:c2:5b:3b:aa:e0:3b:7f:2d:09:bc:1a:4e:2a:ce:
1f:6c:60:f7:77:10:af:62:0f:d1:7c:4a:5f:67:57:dc:1c:97:
02:e8:a0:f0:ec:d7:3b:56:58:89:d6:8d:fc:8a:7a:c9:00:2a:
c1:ee:12:72:78:e1:c2:57:bd:77:ba:9c:8b:ed:a5:9c:d3:8d:
6d:23:56:69:0d:ad:0c:4e:3a:86:59:3c:73:b1:25:24:80:05:
83:87:1e:e3:23:f9:2c:8e:e0:86:1f:1f:71:01:e0:51:c5:ff:
48:55:c1:6a:6e:b6:6e:41:c2:66:58:c5:d7:be:84:6b:ac:4b:
34:d0:56:50:b3:50:02:de:51:0d:20:0d:69:ba:5f:b2:ae:5d:
78:ea:43:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 14:17:06 2025 by rpki-client