Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/0db5e6-867c-4c3c-bb4e-22740bf2d5ea/1/4jSU4MwSx1rtHQHesVvk4mYrSFo.mft
File: 4jSU4MwSx1rtHQHesVvk4mYrSFo.mft (raw, json)
Hash identifier: I+M4Jlwi7TchYsoM5wIpVbGEC/tLyKEoWrLG5oZ8q3Q=
Subject key identifier: CB:72:8D:A7:61:59:64:FF:ED:8C:9A:26:87:36:CF:BC:9C:2D:49:2E
Authority key identifier: E2:34:94:E0:CC:12:C7:5A:ED:1D:01:DE:B1:5B:E4:E2:66:2B:48:5A
Certificate issuer: /CN=e23494e0cc12c75aed1d01deb15be4e2662b485a
Certificate serial: 0198D54DC7CFD4489E44A0A54EF94372F94C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4jSU4MwSx1rtHQHesVvk4mYrSFo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/0db5e6-867c-4c3c-bb4e-22740bf2d5ea/1/4jSU4MwSx1rtHQHesVvk4mYrSFo.mft
Manifest number: 08FF
Signing time: Sat 23 Aug 2025 05:01:41 +0000
Manifest this update: Sat 23 Aug 2025 05:01:41 +0000
Manifest next update: Sun 24 Aug 2025 05:01:41 +0000
Files and hashes: 1: 4jSU4MwSx1rtHQHesVvk4mYrSFo.crl (hash: EmXulsGACO3JZc2CzaIQxCNEFuysYNJ7iWia3Gfb5vs=)
2: LASSugvVGOxlTSqLMMa1Fpo5qcI.roa (hash: 7gLhtiJHn2UN7WnAAMzittKwA7y319dAzNsYcYCU/0U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/0db5e6-867c-4c3c-bb4e-22740bf2d5ea/1/4jSU4MwSx1rtHQHesVvk4mYrSFo.crl
rsync://rpki.ripe.net/repository/DEFAULT/48/0db5e6-867c-4c3c-bb4e-22740bf2d5ea/1/4jSU4MwSx1rtHQHesVvk4mYrSFo.mft
rsync://rpki.ripe.net/repository/DEFAULT/4jSU4MwSx1rtHQHesVvk4mYrSFo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:4d:c7:cf:d4:48:9e:44:a0:a5:4e:f9:43:72:f9:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e23494e0cc12c75aed1d01deb15be4e2662b485a
Validity
Not Before: Aug 23 05:01:41 2025 GMT
Not After : Aug 24 05:01:41 2025 GMT
Subject: CN=cb728da7615964ffed8c9a268736cfbc9c2d492e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:7f:24:1b:f6:3e:4e:19:3f:1b:9a:0f:eb:36:
d7:40:bc:0b:b9:27:b7:4c:4e:63:15:62:37:39:3f:
f3:61:2f:82:60:47:34:43:3e:ef:06:cb:a1:51:2d:
fd:0b:13:92:af:2f:66:12:31:95:f5:a6:19:60:3b:
59:94:2e:cb:81:96:6c:4c:d3:41:34:a0:da:d4:10:
de:43:cb:d7:35:8c:e3:a5:62:b3:3a:0f:9f:b3:e9:
02:02:28:db:78:64:b2:2d:71:20:89:dd:89:ad:c6:
95:b6:b9:e6:c5:8f:f1:21:0d:f2:82:41:c1:d9:7c:
c6:20:ff:45:7b:d0:68:2f:1d:db:09:38:67:c9:1b:
09:21:54:76:be:9d:56:0a:69:56:ec:d7:7c:e7:17:
bb:8b:f8:06:b1:7f:c9:ec:4d:11:2b:19:08:d6:49:
31:f5:9f:ac:88:e1:e1:f0:04:bc:60:c7:5f:df:14:
58:3f:c0:36:b1:df:3b:6d:8b:01:36:fd:f5:15:67:
0a:82:48:b5:5d:d6:41:cf:04:20:5d:52:81:47:72:
5c:b8:f3:e0:de:26:74:bd:ad:30:69:0d:0d:af:79:
b3:ae:f2:40:75:f7:c9:62:17:79:78:ab:1c:8f:58:
7d:86:d7:74:9f:71:7a:b4:a6:16:e9:d6:46:4e:0d:
fd:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:72:8D:A7:61:59:64:FF:ED:8C:9A:26:87:36:CF:BC:9C:2D:49:2E
X509v3 Authority Key Identifier:
keyid:E2:34:94:E0:CC:12:C7:5A:ED:1D:01:DE:B1:5B:E4:E2:66:2B:48:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4jSU4MwSx1rtHQHesVvk4mYrSFo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/0db5e6-867c-4c3c-bb4e-22740bf2d5ea/1/4jSU4MwSx1rtHQHesVvk4mYrSFo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/48/0db5e6-867c-4c3c-bb4e-22740bf2d5ea/1/4jSU4MwSx1rtHQHesVvk4mYrSFo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:08:14:fc:37:44:df:69:fb:ec:78:39:92:b8:05:34:1b:3a:
25:ba:74:d9:4f:5a:55:10:4f:12:f5:c5:f4:f7:d0:0b:83:ac:
b7:05:03:89:22:e6:35:e6:24:df:c3:20:99:a6:a3:f4:89:2e:
c0:68:c7:9e:35:31:e0:0b:9a:52:b1:c2:29:a4:47:e9:2f:28:
33:e9:4c:29:6c:4e:cd:a0:71:78:c8:d0:00:a8:5d:81:ac:b2:
5a:da:0e:9c:5c:fd:05:1b:9d:c4:6a:25:07:45:a2:36:10:01:
50:d3:36:9f:a9:ed:ab:dd:38:62:06:c4:48:b0:36:17:3a:4e:
65:61:b6:40:46:de:7e:0c:47:5b:71:c7:b6:6a:8e:1c:18:e3:
56:fc:71:49:d5:aa:8a:b2:77:fe:60:6c:ad:1e:b1:79:02:42:
4a:00:a5:bd:98:6a:0e:4e:ed:8a:df:e2:51:59:2e:5b:8e:86:
44:8d:e1:69:35:2c:d2:25:d1:88:59:df:71:57:20:e9:40:c6:
45:29:df:b8:3b:2f:23:f9:28:3c:8e:81:ad:b1:eb:d6:38:07:
bf:06:d5:b8:e8:e3:9a:a4:6d:17:f8:72:f5:bb:48:84:b6:c8:
64:fc:ba:47:c3:67:a1:b9:d8:c4:5a:49:e2:d0:1c:9d:30:62:
7f:fe:8e:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 14:07:14 2025 by rpki-client