Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/da2276-6dbf-422e-9ebb-561175f04d8e/1/4COOIod_cwOWQAfOPjQG9frZSWI.mft
File: 4COOIod_cwOWQAfOPjQG9frZSWI.mft (raw, json)
Hash identifier: DUwaIxatT66sRjXR0Nb+LesSumRRGAItRHZ4pbss8yM=
Subject key identifier: 55:AD:0A:55:74:99:0F:E8:83:10:C4:F9:DB:3C:3D:1E:BB:A5:FD:56
Authority key identifier: E0:23:8E:22:87:7F:73:03:96:40:07:CE:3E:34:06:F5:FA:D9:49:62
Certificate issuer: /CN=e0238e22877f7303964007ce3e3406f5fad94962
Certificate serial: 0198D660DC625AE7A9163B0C27021F6059E0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4COOIod_cwOWQAfOPjQG9frZSWI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/da2276-6dbf-422e-9ebb-561175f04d8e/1/4COOIod_cwOWQAfOPjQG9frZSWI.mft
Manifest number: 164B
Signing time: Sat 23 Aug 2025 10:02:08 +0000
Manifest this update: Sat 23 Aug 2025 10:02:08 +0000
Manifest next update: Sun 24 Aug 2025 10:02:08 +0000
Files and hashes: 1: 4COOIod_cwOWQAfOPjQG9frZSWI.crl (hash: 59m3AQyXiaoQ9VJj6Z2WyikIBdI+qpVITRz+vnz0ASY=)
2: VBkUSdd8HhC9ylebW4iiyCK4E-Q.roa (hash: /Z8ymu6jIj7elvCMahyZD4nXriuKXl4fYbvc0S8rJdE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/da2276-6dbf-422e-9ebb-561175f04d8e/1/4COOIod_cwOWQAfOPjQG9frZSWI.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/da2276-6dbf-422e-9ebb-561175f04d8e/1/4COOIod_cwOWQAfOPjQG9frZSWI.mft
rsync://rpki.ripe.net/repository/DEFAULT/4COOIod_cwOWQAfOPjQG9frZSWI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 10:02:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:60:dc:62:5a:e7:a9:16:3b:0c:27:02:1f:60:59:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e0238e22877f7303964007ce3e3406f5fad94962
Validity
Not Before: Aug 23 10:02:08 2025 GMT
Not After : Aug 24 10:02:08 2025 GMT
Subject: CN=55ad0a5574990fe88310c4f9db3c3d1ebba5fd56
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:ce:13:56:ec:0b:e6:2f:54:4e:d1:61:a0:b9:
19:0b:77:9c:aa:82:06:8f:43:24:e1:cb:a4:46:03:
29:59:0d:b8:4c:be:c9:cf:c9:54:57:89:cf:0b:6f:
d7:8a:58:cf:6b:ff:59:ec:13:f0:b5:85:bc:02:1a:
20:1b:eb:a9:39:d4:78:98:f8:b3:3c:a3:4d:68:48:
f9:30:4a:97:9d:48:7e:1e:8c:16:ea:28:c6:c5:6d:
c0:67:58:ec:fe:3d:0b:1a:b7:5f:15:91:5b:ce:da:
2e:6f:de:f7:fb:e0:9b:0e:c7:ac:ed:96:17:ae:51:
9c:69:7e:60:bf:1e:d8:aa:14:bc:67:51:53:52:16:
f3:33:f8:e7:4b:f2:5a:e4:c8:86:7a:7f:66:c0:6b:
e1:5a:30:4f:ed:87:d2:4e:44:d9:84:cc:45:b9:cc:
71:bc:7a:e0:16:03:8c:9b:33:aa:7a:3b:2f:03:03:
45:ae:b1:69:e7:9e:85:48:70:9d:26:ca:48:1b:43:
c1:ea:4c:69:5e:e0:9b:57:60:68:c4:01:41:e0:5e:
8a:68:e8:09:da:d8:9b:07:9a:06:7e:51:35:2d:70:
2d:66:d9:06:a0:50:42:67:5b:f1:22:ed:9f:7e:c0:
57:23:bb:eb:0f:00:90:51:64:5b:77:7f:19:6f:3c:
56:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:AD:0A:55:74:99:0F:E8:83:10:C4:F9:DB:3C:3D:1E:BB:A5:FD:56
X509v3 Authority Key Identifier:
keyid:E0:23:8E:22:87:7F:73:03:96:40:07:CE:3E:34:06:F5:FA:D9:49:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4COOIod_cwOWQAfOPjQG9frZSWI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/da2276-6dbf-422e-9ebb-561175f04d8e/1/4COOIod_cwOWQAfOPjQG9frZSWI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/da2276-6dbf-422e-9ebb-561175f04d8e/1/4COOIod_cwOWQAfOPjQG9frZSWI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:d5:55:51:37:cf:d7:2a:e2:36:3e:69:1d:55:98:f0:78:18:
4f:19:7f:5f:9e:97:b3:e3:00:07:f4:26:49:8c:1d:48:54:89:
c7:a9:e6:1c:f0:b1:6e:3b:78:06:c5:b3:be:6a:b7:38:eb:14:
25:9b:b8:71:a2:e1:4e:85:00:2c:38:3e:0a:e2:62:c1:dc:eb:
46:6a:14:73:3d:1d:88:e6:c0:ba:83:63:62:0f:0a:d5:6e:8b:
27:7d:43:c6:89:6e:26:b7:30:f9:88:c1:35:3d:b9:7e:4d:fe:
87:30:46:4f:01:d3:7d:77:9c:36:78:e6:fb:c1:df:03:10:70:
dc:c6:a4:0d:20:aa:76:a8:d7:96:4b:e7:e0:70:b8:4e:94:31:
68:47:50:30:08:18:00:2d:46:76:ba:c0:ec:12:4e:a5:da:6d:
10:c3:0d:6c:c5:b5:5e:88:04:9a:43:41:97:9f:7b:b8:7e:98:
e5:84:d5:ed:aa:b1:a0:25:50:22:dc:9d:1d:81:8f:1c:c4:49:
49:f0:e8:15:85:f0:0c:b5:99:cb:db:9f:70:da:31:96:b6:5a:
a1:26:d5:d1:0b:51:e2:41:c6:00:fa:51:0f:0d:0b:e5:81:a1:
6a:ac:32:31:13:e2:d6:f7:49:68:b4:e0:e0:5f:24:28:bc:80:
59:04:f0:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 17:31:24 2025 by rpki-client