Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/5f3e21-6b41-4964-bfda-cbbfda92419d/1/4VuQ_9-gqyhUheeERrhxmYsk3MA.mft
File: 4VuQ_9-gqyhUheeERrhxmYsk3MA.mft (raw, json)
Hash identifier: Oh9s+dHTB1pt/9HLPEbx1hT5ARfiQp9pr8uiWxY+eY8=
Subject key identifier: 20:46:6D:EE:90:76:C3:8E:D7:E2:2B:6D:89:5E:50:D8:A5:70:CB:5F
Authority key identifier: E1:5B:90:FF:DF:A0:AB:28:54:85:E7:84:46:B8:71:99:8B:24:DC:C0
Certificate issuer: /CN=e15b90ffdfa0ab285485e78446b871998b24dcc0
Certificate serial: 0198D65FFA59A76234A97A88CA5BA6CBE752
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4VuQ_9-gqyhUheeERrhxmYsk3MA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/5f3e21-6b41-4964-bfda-cbbfda92419d/1/4VuQ_9-gqyhUheeERrhxmYsk3MA.mft
Manifest number: 021F
Signing time: Sat 23 Aug 2025 10:01:10 +0000
Manifest this update: Sat 23 Aug 2025 10:01:10 +0000
Manifest next update: Sun 24 Aug 2025 10:01:10 +0000
Files and hashes: 1: 2wr3VnHPGzlL2arFNUC9_MLTdaY.roa (hash: riabhN7uUC9dX01WplUZkRt4qxUdWnv+rCQJ9LvkhhE=)
2: 4VuQ_9-gqyhUheeERrhxmYsk3MA.crl (hash: 6QhDAMGN7WagodOYWLPo5F871xMnliKerPcfWJlOIwQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/5f3e21-6b41-4964-bfda-cbbfda92419d/1/4VuQ_9-gqyhUheeERrhxmYsk3MA.crl
rsync://rpki.ripe.net/repository/DEFAULT/4e/5f3e21-6b41-4964-bfda-cbbfda92419d/1/4VuQ_9-gqyhUheeERrhxmYsk3MA.mft
rsync://rpki.ripe.net/repository/DEFAULT/4VuQ_9-gqyhUheeERrhxmYsk3MA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 10:01:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:5f:fa:59:a7:62:34:a9:7a:88:ca:5b:a6:cb:e7:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e15b90ffdfa0ab285485e78446b871998b24dcc0
Validity
Not Before: Aug 23 10:01:10 2025 GMT
Not After : Aug 24 10:01:10 2025 GMT
Subject: CN=20466dee9076c38ed7e22b6d895e50d8a570cb5f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:d7:be:3c:bf:59:b1:cf:db:33:a4:b4:41:78:
68:d5:74:a8:70:d5:a9:ee:82:e2:bb:c0:56:15:91:
a5:fc:3a:a8:ea:9c:2d:fd:fb:4e:73:9b:0b:7e:f3:
81:10:cc:90:c4:fe:1d:e2:f3:f6:4e:b8:46:e0:00:
94:2d:74:ad:03:cb:e1:db:7b:97:21:79:7a:f2:66:
fb:0c:bf:93:6e:cf:2b:eb:d0:64:61:81:ea:8b:fb:
eb:18:6a:cc:ce:fa:f2:e3:9a:69:32:e0:6d:cf:74:
4a:bd:9a:e4:92:43:20:14:fc:18:c0:7b:9d:0d:5d:
88:54:14:31:70:51:d1:73:98:e4:ca:1b:02:09:36:
82:9a:38:94:2a:8a:98:62:81:d8:cb:28:92:4d:4a:
96:8a:14:b8:7b:b5:b0:05:a4:16:16:1e:06:e8:4b:
52:68:5e:93:69:e5:82:96:32:98:49:e8:44:cd:be:
5d:d3:7b:f7:e7:d4:f6:49:2c:04:4e:92:1f:2a:60:
09:e3:9f:2d:7f:fc:e3:df:5b:41:e8:1b:6f:9e:11:
95:0a:f0:e2:53:50:ed:b0:e9:24:85:9c:4d:b9:3c:
44:fa:2f:2e:59:84:9a:fc:07:50:29:a0:d5:05:21:
a9:a5:1d:09:ca:cf:03:b5:b5:7e:b1:0c:71:86:32:
69:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:46:6D:EE:90:76:C3:8E:D7:E2:2B:6D:89:5E:50:D8:A5:70:CB:5F
X509v3 Authority Key Identifier:
keyid:E1:5B:90:FF:DF:A0:AB:28:54:85:E7:84:46:B8:71:99:8B:24:DC:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4VuQ_9-gqyhUheeERrhxmYsk3MA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/5f3e21-6b41-4964-bfda-cbbfda92419d/1/4VuQ_9-gqyhUheeERrhxmYsk3MA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/5f3e21-6b41-4964-bfda-cbbfda92419d/1/4VuQ_9-gqyhUheeERrhxmYsk3MA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b3:11:b3:86:5f:d2:b6:34:40:33:24:92:0f:d3:01:98:bf:8d:
84:56:e1:66:69:ee:59:d4:fc:5c:4a:d3:af:c7:5f:6c:a8:58:
ea:d4:b3:af:6c:c9:97:c4:5d:c1:b3:ed:ce:7b:77:dc:7e:3c:
d7:70:bf:6e:a4:07:91:bb:1f:da:59:94:3d:ba:30:28:7f:7a:
39:0f:b3:e1:3f:2f:ac:24:65:a6:ba:bf:4f:31:22:eb:ef:fc:
5b:d0:39:fc:a1:ca:0f:d2:b2:91:90:8f:2a:b1:d0:94:b3:4c:
f4:d9:fa:49:9b:81:f6:f5:13:5c:5e:3c:ad:46:3d:7e:0a:68:
9f:76:35:96:74:3a:cd:9e:4a:8b:32:92:35:28:a4:e8:70:2d:
71:57:65:f1:73:98:ab:27:a2:c7:24:db:73:50:50:39:97:4e:
58:29:67:71:28:0e:d3:81:00:1d:96:04:47:92:c1:67:5c:ea:
4c:63:c2:0a:cd:a4:1c:aa:6a:32:08:95:cd:8a:10:15:84:4a:
e6:7c:fe:c4:c8:84:6d:5a:1a:bd:2d:52:25:e7:5b:a5:ec:be:
ac:16:35:18:f5:ff:5e:46:b0:bf:21:ba:b1:00:11:29:16:19:
62:ea:37:7d:13:83:26:45:ca:32:22:85:0e:b8:01:af:da:60:
2f:bd:65:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 16:24:23 2025 by rpki-client