Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/a5f498-6c76-4230-93d1-a39e009627ef/1/4T0_tqhjrA-k0f7v467DntjTiVw.mft
File: 4T0_tqhjrA-k0f7v467DntjTiVw.mft (raw, json)
Hash identifier: JH+U7g3AW8srtHxQnIyXY7Knjw9tjTHVB2ev/Uxcch4=
Subject key identifier: 76:F9:38:BC:B2:02:71:E5:98:A6:85:3F:A4:FB:7C:07:76:3B:9F:9B
Authority key identifier: E1:3D:3F:B6:A8:63:AC:0F:A4:D1:FE:EF:E3:AE:C3:9E:D8:D3:89:5C
Certificate issuer: /CN=e13d3fb6a863ac0fa4d1feefe3aec39ed8d3895c
Certificate serial: 0198D73B65A19D122CBA0348BB40B055684E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4T0_tqhjrA-k0f7v467DntjTiVw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/a5f498-6c76-4230-93d1-a39e009627ef/1/4T0_tqhjrA-k0f7v467DntjTiVw.mft
Manifest number: 159E
Signing time: Sat 23 Aug 2025 14:00:50 +0000
Manifest this update: Sat 23 Aug 2025 14:00:50 +0000
Manifest next update: Sun 24 Aug 2025 14:00:50 +0000
Files and hashes: 1: 4T0_tqhjrA-k0f7v467DntjTiVw.crl (hash: NAqfoYH7n4U1mm1QQOkIMiCepiAGl/xuFxjFLBP4O5g=)
2: C_W5uFOffH81U1XB_VG_eFr8n_A.roa (hash: kM5BT5a8AHJ+VqwyNcuISudnKqdFzEc+qETwFrySAkU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/a5f498-6c76-4230-93d1-a39e009627ef/1/4T0_tqhjrA-k0f7v467DntjTiVw.crl
rsync://rpki.ripe.net/repository/DEFAULT/46/a5f498-6c76-4230-93d1-a39e009627ef/1/4T0_tqhjrA-k0f7v467DntjTiVw.mft
rsync://rpki.ripe.net/repository/DEFAULT/4T0_tqhjrA-k0f7v467DntjTiVw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 12:50:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d7:3b:65:a1:9d:12:2c:ba:03:48:bb:40:b0:55:68:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e13d3fb6a863ac0fa4d1feefe3aec39ed8d3895c
Validity
Not Before: Aug 23 14:00:50 2025 GMT
Not After : Aug 24 14:00:50 2025 GMT
Subject: CN=76f938bcb20271e598a6853fa4fb7c07763b9f9b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:15:90:6e:19:ab:ed:0e:eb:70:c2:38:d7:3c:
92:b2:f7:0e:57:2c:a7:83:42:88:c6:77:ae:42:40:
84:94:16:a7:b2:6d:ca:07:e1:e7:12:e8:4d:50:92:
58:40:eb:fd:d8:7a:6f:d9:ee:aa:bf:e2:68:5b:ec:
70:b6:b7:c8:86:3a:43:e0:b6:9f:34:a1:b3:f9:95:
3b:bf:f8:32:a1:28:2a:99:ee:2d:01:c9:c6:0e:d1:
ca:c5:6c:49:40:f7:7b:23:5e:b2:43:47:2f:e4:35:
c7:9f:cb:2f:bc:03:86:50:52:1d:93:2b:db:13:53:
9b:e6:46:83:98:11:2f:b1:0b:d4:fa:7c:d5:67:5f:
2b:ad:07:3c:49:5c:01:6e:eb:fc:30:d1:7d:5e:2b:
54:45:d4:65:e0:0a:af:5d:18:87:dd:d4:18:e4:3e:
8c:c8:06:1d:ba:30:f2:fe:36:74:7d:44:63:51:7d:
49:f9:af:9b:e6:20:59:9b:55:c3:6d:d6:a1:8c:e2:
4b:68:91:48:91:2e:58:16:75:3d:34:be:13:f3:80:
80:c1:41:26:fa:42:e5:0e:82:3c:06:70:31:ab:a1:
3a:47:e5:10:d1:8b:cb:f8:7c:3f:f1:eb:89:d7:ee:
eb:fe:87:2d:96:46:b6:95:1e:35:fe:95:93:bc:d7:
39:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:F9:38:BC:B2:02:71:E5:98:A6:85:3F:A4:FB:7C:07:76:3B:9F:9B
X509v3 Authority Key Identifier:
keyid:E1:3D:3F:B6:A8:63:AC:0F:A4:D1:FE:EF:E3:AE:C3:9E:D8:D3:89:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4T0_tqhjrA-k0f7v467DntjTiVw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/a5f498-6c76-4230-93d1-a39e009627ef/1/4T0_tqhjrA-k0f7v467DntjTiVw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/a5f498-6c76-4230-93d1-a39e009627ef/1/4T0_tqhjrA-k0f7v467DntjTiVw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
92:16:81:62:4d:bf:1d:f7:08:56:de:e7:30:cb:63:df:1d:21:
02:d4:b9:37:22:9f:1a:9a:58:82:ce:4d:7c:7b:31:9a:3f:a9:
af:29:1b:3a:ad:b2:d1:f6:46:48:50:b6:b6:2c:40:d2:02:0f:
60:1e:29:e2:2d:4f:0e:03:f5:9a:50:51:c1:07:84:b8:e7:c9:
05:5d:35:20:7c:3e:1a:2c:45:d9:30:60:72:d2:0a:52:fa:c5:
97:d4:c2:49:cc:2e:9b:9f:2b:59:dc:1e:56:0d:f9:ed:be:e9:
b9:43:f1:f6:f4:a9:be:f1:d3:7e:de:17:59:6c:ae:d4:33:57:
f0:fb:7b:b4:02:a0:82:fa:af:14:e1:ee:ee:70:87:1d:00:40:
d4:b6:e6:e2:92:49:35:14:15:c9:47:3a:42:ba:00:66:d3:dd:
a1:9e:40:9f:0f:53:28:d1:f0:43:a9:10:2f:16:b4:7b:a0:d7:
16:0e:fb:1b:db:1a:09:37:23:9a:d3:82:be:ad:38:a3:ab:8b:
f3:4a:a1:57:36:be:83:d1:d5:1a:1b:85:c6:6a:71:f4:62:24:
f8:37:c5:ea:bd:fb:d7:41:21:90:75:cf:11:c3:fb:23:c8:f5:
66:9b:65:83:2b:50:5e:c9:17:49:c0:af:ca:b0:c8:a2:4e:50:
ae:e9:1e:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 16:28:35 2025 by rpki-client