Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/8f90a5-c878-4dd4-b2db-4e5861187c4f/1/4f9iX0oY0E1ZCludc7JVGkNbcXI.mft
File: 4f9iX0oY0E1ZCludc7JVGkNbcXI.mft (raw, json)
Hash identifier: gYD8RkE4+hLv87CmVuNEk9Lk0638PcNGSZ/Dd+VeqKM=
Subject key identifier: 7C:55:46:D5:49:3A:57:43:60:0D:28:3E:E2:F9:17:42:F7:BF:50:E7
Authority key identifier: E1:FF:62:5F:4A:18:D0:4D:59:0A:5B:9D:73:B2:55:1A:43:5B:71:72
Certificate issuer: /CN=e1ff625f4a18d04d590a5b9d73b2551a435b7172
Certificate serial: 0198D4E0412FEF1BE6D94E742ADAEB86C222
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4f9iX0oY0E1ZCludc7JVGkNbcXI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/8f90a5-c878-4dd4-b2db-4e5861187c4f/1/4f9iX0oY0E1ZCludc7JVGkNbcXI.mft
Manifest number: 1007
Signing time: Sat 23 Aug 2025 03:02:03 +0000
Manifest this update: Sat 23 Aug 2025 03:02:03 +0000
Manifest next update: Sun 24 Aug 2025 03:02:03 +0000
Files and hashes: 1: 4f9iX0oY0E1ZCludc7JVGkNbcXI.crl (hash: qQ7jefr5pEscIlHaPHV3WdYojZDlkCKj6I0Om3EDIkE=)
2: v-UIauQZjW8hDMdx3w3tSE6IDRc.roa (hash: uCYTkmd7Ahc37aZdyBrq8T1Px2W2MX7+A97XE/19qf0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/8f90a5-c878-4dd4-b2db-4e5861187c4f/1/4f9iX0oY0E1ZCludc7JVGkNbcXI.crl
rsync://rpki.ripe.net/repository/DEFAULT/54/8f90a5-c878-4dd4-b2db-4e5861187c4f/1/4f9iX0oY0E1ZCludc7JVGkNbcXI.mft
rsync://rpki.ripe.net/repository/DEFAULT/4f9iX0oY0E1ZCludc7JVGkNbcXI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:e0:41:2f:ef:1b:e6:d9:4e:74:2a:da:eb:86:c2:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e1ff625f4a18d04d590a5b9d73b2551a435b7172
Validity
Not Before: Aug 23 03:02:03 2025 GMT
Not After : Aug 24 03:02:03 2025 GMT
Subject: CN=7c5546d5493a5743600d283ee2f91742f7bf50e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:8b:b4:01:fc:21:0c:d3:35:13:cb:b3:91:8f:
ab:e3:95:2a:06:18:c4:8b:ac:95:a8:a1:f3:de:16:
f4:6f:4f:d3:45:1c:ce:a0:9a:a9:4f:33:8e:d3:78:
81:f9:da:70:4a:63:c4:06:62:3a:c6:02:4a:b7:95:
fe:f1:4a:0d:15:82:67:ec:68:8a:bf:6e:b6:5f:b4:
36:fa:d5:2a:1e:bc:7c:da:a3:12:ee:65:ff:39:d9:
7c:9a:6f:29:dc:77:f1:aa:28:db:d6:31:c3:9c:24:
43:41:af:d1:f5:50:28:0a:f0:de:31:06:dd:0e:98:
5a:f9:73:48:01:14:6d:f0:a4:19:71:37:34:42:32:
ee:a4:67:f6:26:5d:f3:f7:ac:97:d5:ec:2b:63:f4:
4b:47:ad:60:c4:24:ce:3a:39:79:33:84:94:c2:7a:
fc:65:d2:5d:73:be:8e:7d:be:42:b7:44:ae:0e:29:
0e:74:a2:8e:74:66:d1:a7:a1:53:d3:15:7e:7d:ae:
b1:ef:96:7a:f4:5e:3e:d4:d7:ed:72:4a:1b:3a:d6:
93:e6:55:fc:a2:69:8b:e9:18:14:26:2c:40:67:51:
8d:4a:89:96:4e:12:04:60:a7:75:b5:f0:ef:86:b2:
1f:75:d2:18:4b:1b:7a:70:fe:d7:32:b8:87:04:d2:
be:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:55:46:D5:49:3A:57:43:60:0D:28:3E:E2:F9:17:42:F7:BF:50:E7
X509v3 Authority Key Identifier:
keyid:E1:FF:62:5F:4A:18:D0:4D:59:0A:5B:9D:73:B2:55:1A:43:5B:71:72
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f9iX0oY0E1ZCludc7JVGkNbcXI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/8f90a5-c878-4dd4-b2db-4e5861187c4f/1/4f9iX0oY0E1ZCludc7JVGkNbcXI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/8f90a5-c878-4dd4-b2db-4e5861187c4f/1/4f9iX0oY0E1ZCludc7JVGkNbcXI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:cf:31:ff:12:0a:36:d7:19:86:b9:2a:8d:29:d3:db:46:5d:
ee:fd:47:72:35:01:c0:aa:45:ec:0c:ce:6c:10:16:17:80:8e:
fd:72:ca:5e:62:d6:26:bf:0e:2e:ab:51:da:6a:d2:ad:2d:28:
36:c5:ba:ac:a9:68:e9:8d:b6:fd:ea:04:a8:12:0f:36:11:4a:
c2:0a:0e:f0:24:2b:a3:90:5b:12:cb:2e:72:b2:2d:d0:21:c4:
95:46:7d:60:2c:b1:22:75:2f:62:87:9d:27:16:02:1a:fc:8f:
07:aa:45:73:a4:3b:1d:88:3c:fe:25:30:43:34:64:a6:b1:be:
55:a1:3e:8d:2f:41:37:a8:75:85:c7:2a:3d:10:4f:26:3e:8c:
a1:28:31:67:11:ee:33:41:7f:57:b2:90:36:fd:00:22:1d:2a:
fa:d3:7e:e3:12:9d:32:db:5c:24:9f:e5:66:3b:f3:af:af:6c:
8f:89:24:5d:90:18:90:8c:c5:8d:64:98:a7:97:eb:bc:c4:ab:
65:0f:1e:a9:0c:a2:08:90:02:c2:5a:8a:f9:6d:07:1d:d7:6b:
7e:4b:03:28:6e:ba:fd:46:85:d7:b0:8b:9a:0c:04:33:05:ab:
ac:72:79:1f:ef:ce:60:9f:6b:ac:aa:7f:7e:d1:4c:89:d9:dd:
4d:10:6f:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:09:07 2025 by rpki-client