Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/a14020-1bfb-4133-afce-d5e45f2ca879/1/4I4Xp4G2QRmjpjVwACVPW3lbDag.mft
File: 4I4Xp4G2QRmjpjVwACVPW3lbDag.mft (raw, json)
Hash identifier: 4n6iQCUYuzuty+y0qbL3TxO7GMunUMAZfhdS/frzG0k=
Subject key identifier: 8F:71:0C:EE:21:1F:9D:17:A9:B3:50:1A:74:51:CC:89:5B:A7:E4:DF
Authority key identifier: E0:8E:17:A7:81:B6:41:19:A3:A6:35:70:00:25:4F:5B:79:5B:0D:A8
Certificate issuer: /CN=e08e17a781b64119a3a6357000254f5b795b0da8
Certificate serial: 0198D54E66F1733CF19CB9A30BE804F5D709
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4I4Xp4G2QRmjpjVwACVPW3lbDag.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/a14020-1bfb-4133-afce-d5e45f2ca879/1/4I4Xp4G2QRmjpjVwACVPW3lbDag.mft
Manifest number: 1648
Signing time: Sat 23 Aug 2025 05:02:21 +0000
Manifest this update: Sat 23 Aug 2025 05:02:21 +0000
Manifest next update: Sun 24 Aug 2025 05:02:21 +0000
Files and hashes: 1: 4I4Xp4G2QRmjpjVwACVPW3lbDag.crl (hash: nO2Jrg8aN2JWli1JPZd1yByn6WKMvbpXRCBdlwQlbds=)
2: pJOGzrT_mgxPYsaglIaSM0kIw4Y.roa (hash: Ut0Tk0l/Yu9pyhP6CIl9TJN11JVJBhwd7Wz1zOCHBnA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/a14020-1bfb-4133-afce-d5e45f2ca879/1/4I4Xp4G2QRmjpjVwACVPW3lbDag.crl
rsync://rpki.ripe.net/repository/DEFAULT/55/a14020-1bfb-4133-afce-d5e45f2ca879/1/4I4Xp4G2QRmjpjVwACVPW3lbDag.mft
rsync://rpki.ripe.net/repository/DEFAULT/4I4Xp4G2QRmjpjVwACVPW3lbDag.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:4e:66:f1:73:3c:f1:9c:b9:a3:0b:e8:04:f5:d7:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e08e17a781b64119a3a6357000254f5b795b0da8
Validity
Not Before: Aug 23 05:02:21 2025 GMT
Not After : Aug 24 05:02:21 2025 GMT
Subject: CN=8f710cee211f9d17a9b3501a7451cc895ba7e4df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:e4:cb:a5:25:04:0d:be:23:d9:ab:2a:59:7f:
15:bf:2b:32:b2:4b:12:46:0f:3a:2f:79:d7:4f:b8:
e8:59:fc:e6:db:94:de:b5:0f:2b:0c:a1:8a:e3:a7:
b8:a8:a1:95:fe:b1:1e:59:4c:21:69:3b:93:c1:24:
33:16:19:db:30:e8:8f:8e:f7:59:99:05:dd:bb:02:
65:37:01:7c:d2:a7:dc:af:be:6f:f7:dc:bb:f6:e1:
12:d4:81:7d:a8:33:f2:91:d7:a2:47:aa:5b:9c:33:
d3:24:db:a9:4b:87:52:8b:70:9c:3b:ed:b6:d9:53:
77:05:92:89:52:50:18:57:24:18:ec:04:ba:5d:5e:
41:03:03:a5:ad:91:7a:68:9d:37:8d:0b:ee:f1:77:
a7:33:8f:7c:2e:83:0f:94:a4:c1:6d:e7:64:1a:78:
7f:73:a8:75:a9:e4:8b:5b:5e:97:35:e6:1f:04:dd:
f2:72:6a:bd:d5:13:3a:62:94:52:c2:49:2d:de:ed:
01:04:c1:24:54:8b:ff:9e:6d:5e:17:50:e2:46:fd:
52:06:81:db:23:2c:cf:94:ef:c4:6d:83:99:0e:3e:
76:56:74:ce:f1:95:ae:72:a4:f7:22:0b:20:5b:a4:
52:2f:83:c8:de:47:04:fe:76:54:77:7a:2f:52:d6:
16:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:71:0C:EE:21:1F:9D:17:A9:B3:50:1A:74:51:CC:89:5B:A7:E4:DF
X509v3 Authority Key Identifier:
keyid:E0:8E:17:A7:81:B6:41:19:A3:A6:35:70:00:25:4F:5B:79:5B:0D:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4I4Xp4G2QRmjpjVwACVPW3lbDag.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/a14020-1bfb-4133-afce-d5e45f2ca879/1/4I4Xp4G2QRmjpjVwACVPW3lbDag.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/a14020-1bfb-4133-afce-d5e45f2ca879/1/4I4Xp4G2QRmjpjVwACVPW3lbDag.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:89:46:09:ae:e3:8b:00:f0:e1:e9:c7:e1:6f:4d:69:6b:b6:
a3:60:22:ec:56:0c:22:eb:84:b7:04:ba:2e:52:08:f7:88:8b:
6c:04:e2:b2:56:88:5b:db:a4:5b:8c:92:5e:04:7e:b9:37:0e:
b5:7d:92:9e:4a:c3:71:99:56:b0:30:b6:cc:e5:07:94:8e:16:
e1:71:a9:00:b5:c1:ec:43:ea:0d:cf:44:37:a6:b1:1b:29:6c:
50:6e:94:87:ce:08:2f:5b:17:28:c0:05:1f:5a:f3:cb:50:7c:
1f:cc:2a:08:a2:2e:56:10:0b:db:0a:7e:2f:71:ba:85:57:62:
8c:71:56:08:88:77:47:b7:22:b0:95:fc:3c:e1:f3:8c:13:0c:
68:76:cb:0d:d3:f0:cd:80:02:9f:bb:d1:d5:cf:dc:cb:11:bd:
49:dd:04:98:57:c4:52:1a:6d:aa:78:a3:33:8c:fb:85:4b:a1:
2a:37:c4:4b:b3:f0:6b:32:34:db:bd:ab:43:fd:c4:28:a9:51:
40:18:a7:f8:56:0a:8c:f8:b9:c4:a5:9f:7d:df:e1:3e:08:7f:
92:fe:03:3a:95:fe:17:f6:0f:09:94:d8:c5:b9:28:3b:4a:7b:
f8:d4:0c:2a:26:2d:10:ed:a8:a2:08:55:92:89:5d:cb:f5:15:
61:b7:02:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:51:45 2025 by rpki-client