Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/f77c5b-19b2-4bc1-8faa-10b0211d96fc/1/4KE7ki7n67muzeGacNDiW3d1DQI.mft
File: 4KE7ki7n67muzeGacNDiW3d1DQI.mft (raw, json)
Hash identifier: z18Sx4QMbbt2LTc4X8hWc+eHro12/YO+y5xh46yHeJk=
Subject key identifier: D0:6E:0C:30:F7:68:DC:E5:BD:2D:0B:74:B7:05:60:08:42:EA:03:47
Authority key identifier: E0:A1:3B:92:2E:E7:EB:B9:AE:CD:E1:9A:70:D0:E2:5B:77:75:0D:02
Certificate issuer: /CN=e0a13b922ee7ebb9aecde19a70d0e25b77750d02
Certificate serial: 0198D5F1D3D0A5C7E5B3C6A1B7359CD90560
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4KE7ki7n67muzeGacNDiW3d1DQI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/f77c5b-19b2-4bc1-8faa-10b0211d96fc/1/4KE7ki7n67muzeGacNDiW3d1DQI.mft
Manifest number: 0C3D
Signing time: Sat 23 Aug 2025 08:00:52 +0000
Manifest this update: Sat 23 Aug 2025 08:00:52 +0000
Manifest next update: Sun 24 Aug 2025 08:00:52 +0000
Files and hashes: 1: 4KE7ki7n67muzeGacNDiW3d1DQI.crl (hash: HJqMWtao6ZPrYG4Piq/0kLEy4C1Rr90SdDP78Qdvpsc=)
2: Y8AXUYDP-qGUFi9hzn6P0gBawaM.roa (hash: PbgeAgI/Sj2ZS05Cb4sm9ySYZjOm8LnX+ij5E01wZBw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/f77c5b-19b2-4bc1-8faa-10b0211d96fc/1/4KE7ki7n67muzeGacNDiW3d1DQI.crl
rsync://rpki.ripe.net/repository/DEFAULT/31/f77c5b-19b2-4bc1-8faa-10b0211d96fc/1/4KE7ki7n67muzeGacNDiW3d1DQI.mft
rsync://rpki.ripe.net/repository/DEFAULT/4KE7ki7n67muzeGacNDiW3d1DQI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:f1:d3:d0:a5:c7:e5:b3:c6:a1:b7:35:9c:d9:05:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e0a13b922ee7ebb9aecde19a70d0e25b77750d02
Validity
Not Before: Aug 23 08:00:52 2025 GMT
Not After : Aug 24 08:00:52 2025 GMT
Subject: CN=d06e0c30f768dce5bd2d0b74b705600842ea0347
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:8b:3a:45:11:cc:0d:d3:6c:38:3e:76:61:06:
7b:94:76:d6:3e:d7:b1:cc:41:10:32:5c:c4:86:64:
4b:02:99:7b:32:48:ca:d5:88:bd:f4:30:a6:07:7d:
78:87:6a:26:32:45:b7:5e:68:67:6c:07:59:42:da:
a6:61:e6:eb:e2:54:77:5a:2a:d2:c5:f5:6e:e7:41:
04:dd:a3:6b:08:e4:5a:76:da:2f:80:42:96:23:77:
87:70:40:39:00:05:f7:ba:7e:12:bf:3f:ba:c6:ef:
80:b2:c6:0c:3e:2f:66:da:7c:e6:5e:44:f3:43:69:
14:09:8f:ed:10:a5:ac:3b:e3:56:4b:c6:8b:7f:0b:
2b:de:aa:80:81:68:e6:a9:ab:ae:b3:21:6a:5c:60:
1c:a1:9e:f6:1a:03:b1:41:7e:75:f4:6e:9b:1b:19:
a3:cc:ba:1c:d5:9f:f9:41:bb:41:ba:b9:1c:a2:2f:
41:37:70:96:2a:55:9c:24:fd:83:03:c4:89:25:78:
52:89:b9:cf:d6:7a:52:51:1c:f6:ba:42:c2:91:f1:
15:36:ce:35:87:4a:e0:6c:c9:49:b0:f0:67:c0:c8:
8b:8c:11:06:23:72:63:68:aa:50:49:a6:26:f1:0f:
4e:a5:c2:17:9d:fb:64:e9:6c:a4:78:af:d1:b0:32:
f7:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:6E:0C:30:F7:68:DC:E5:BD:2D:0B:74:B7:05:60:08:42:EA:03:47
X509v3 Authority Key Identifier:
keyid:E0:A1:3B:92:2E:E7:EB:B9:AE:CD:E1:9A:70:D0:E2:5B:77:75:0D:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4KE7ki7n67muzeGacNDiW3d1DQI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/f77c5b-19b2-4bc1-8faa-10b0211d96fc/1/4KE7ki7n67muzeGacNDiW3d1DQI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/f77c5b-19b2-4bc1-8faa-10b0211d96fc/1/4KE7ki7n67muzeGacNDiW3d1DQI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
98:d2:55:74:b4:9b:7a:65:f4:e1:ab:26:e8:ad:7e:9b:95:f2:
3d:29:4c:40:b6:64:66:63:ca:19:86:26:5f:2b:84:4c:3f:67:
7e:14:de:6b:d2:76:5b:01:53:2c:a3:1e:51:58:42:39:0d:84:
37:70:9b:e5:ed:97:e5:f9:74:a1:57:c9:bd:d5:84:e0:fb:3c:
0e:cb:da:a4:9f:a5:fb:3a:5b:55:bc:4d:10:73:9b:87:57:46:
f6:f6:4c:0b:59:3c:ac:72:5b:39:fe:99:8e:7f:2b:b9:ce:47:
be:42:1e:23:b1:1e:0f:ac:61:f2:84:45:61:9d:cf:0e:b1:11:
82:02:b1:2f:f2:48:dc:17:b5:4a:86:21:b3:d8:5c:75:38:ed:
c5:31:c8:88:67:02:28:31:b5:96:07:66:57:84:1b:59:cc:bb:
67:43:b1:96:88:3f:9c:20:df:99:d0:e0:95:19:0f:bb:d0:fe:
91:b8:29:a1:4c:69:24:66:68:56:6d:d8:5c:5b:e5:b8:d6:0e:
87:d6:74:78:cf:d9:2c:df:eb:b5:61:cc:4c:7b:a3:b2:12:6e:
e2:78:f6:15:86:14:e1:40:ad:90:ac:dc:61:cd:55:24:8c:7e:
2b:b9:24:28:aa:53:90:c2:40:cd:7f:9a:0b:d6:79:eb:6c:e5:
29:be:5e:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 13:18:56 2025 by rpki-client