Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/1fa4a1-9a1c-47de-aca6-9449957fd5a5/1/4FWc6ImuQkESH-ChZT5LlV8-30s.mft
File: 4FWc6ImuQkESH-ChZT5LlV8-30s.mft (raw, json)
Hash identifier: OtAeV/MnyYhebCpMf+NhzTJTHjJoSt8V1DGLHNSO3UY=
Subject key identifier: A0:B1:C4:C3:C7:FC:A3:6F:06:AF:A3:51:B5:25:90:5A:A9:E4:D1:15
Authority key identifier: E0:55:9C:E8:89:AE:42:41:12:1F:E0:A1:65:3E:4B:95:5F:3E:DF:4B
Certificate issuer: /CN=e0559ce889ae4241121fe0a1653e4b955f3edf4b
Certificate serial: 0198D583D63F43EB3D7BF47B14F785BE465B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4FWc6ImuQkESH-ChZT5LlV8-30s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/1fa4a1-9a1c-47de-aca6-9449957fd5a5/1/4FWc6ImuQkESH-ChZT5LlV8-30s.mft
Manifest number: 168D
Signing time: Sat 23 Aug 2025 06:00:43 +0000
Manifest this update: Sat 23 Aug 2025 06:00:43 +0000
Manifest next update: Sun 24 Aug 2025 06:00:43 +0000
Files and hashes: 1: 4FWc6ImuQkESH-ChZT5LlV8-30s.crl (hash: FbE/LJUEPEodXjYtA4jSX8u8HW+TSpYZG0bOXf25J9w=)
2: KjKCe6ofT1MaWcqvEHzd3y83DsE.roa (hash: fYONeSb8sEFnngSaKpwSRO2ffbgtr5Gv/r9LK52dcNs=)
3: SlPSzJLSqLldpHANrLpV_AWe7pQ.roa (hash: d6qRFjDfiO2ypdJTYqM1meZYiyL4RuK2vrauyRg7dG8=)
4: io1xlTrictoiAg25XieDOsF4cg4.roa (hash: BL3zyEmY4/LWh+C18a9B/ttwc0w74Pvj0LyvOcB7ki8=)
5: muJ6BoKN6UJKjXIiMD_vSPffAQs.roa (hash: Trtl5skBlLwn8vYaSomOWXsELEFXr89fuz0Ec3SlFmU=)
6: mxAMRSbkDznTEbPF5N19qenDsU8.roa (hash: ur7W44S4TLVAof77kuSb6v12hJqMvOyziCVMGbKEYDc=)
7: q3eBnPRVZ5sSRFdmqMI9Ye91g0U.roa (hash: jQaKxm+g5MsY5zZFyMAUbrdiM1WWvKedP6C676e0cPs=)
8: y1KiIU2GhHjjuvfOR3lz8y0STtE.roa (hash: 6zbqLZ+vgcUQ2nNaMv7BsXuuqJSs8GQBDDlBE1WD3gA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/1fa4a1-9a1c-47de-aca6-9449957fd5a5/1/4FWc6ImuQkESH-ChZT5LlV8-30s.crl
rsync://rpki.ripe.net/repository/DEFAULT/62/1fa4a1-9a1c-47de-aca6-9449957fd5a5/1/4FWc6ImuQkESH-ChZT5LlV8-30s.mft
rsync://rpki.ripe.net/repository/DEFAULT/4FWc6ImuQkESH-ChZT5LlV8-30s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:83:d6:3f:43:eb:3d:7b:f4:7b:14:f7:85:be:46:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e0559ce889ae4241121fe0a1653e4b955f3edf4b
Validity
Not Before: Aug 23 06:00:43 2025 GMT
Not After : Aug 24 06:00:43 2025 GMT
Subject: CN=a0b1c4c3c7fca36f06afa351b525905aa9e4d115
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:e3:58:7a:8c:96:c8:6e:32:c2:05:ca:1e:54:
21:d7:fc:ab:c6:91:e4:05:d2:b7:5b:21:69:7b:5b:
6e:29:2b:8e:bd:0c:ac:0f:d8:81:ad:85:97:c2:0a:
b2:ef:8e:06:70:62:05:d6:57:f1:76:e7:b4:ea:b7:
23:9f:b9:f3:a0:4b:c3:7a:a9:c7:f2:1f:0a:1b:f3:
67:f1:7c:41:7c:ed:db:3b:94:5f:b5:51:14:aa:5a:
1c:bf:e3:bb:10:fe:ba:5c:08:43:d1:70:ad:a6:d3:
85:4f:2d:d8:5f:a6:f9:4e:4f:87:a3:6e:4f:24:e0:
ae:ed:5d:34:c6:4f:9f:ef:fc:1b:7b:f0:13:5d:cc:
91:12:6a:9e:a0:bb:10:11:a4:04:9b:1a:b6:23:4c:
59:b7:3f:3a:53:8a:f7:93:2f:6a:2d:cf:c6:9f:08:
4f:2d:b3:bf:8c:04:48:01:c6:90:16:74:06:94:1c:
ff:1f:ec:fd:dd:b5:90:f8:26:da:60:50:99:e3:0f:
9a:ea:e4:c2:f5:a2:78:bf:12:ad:a9:bd:25:fe:7b:
21:a5:6b:ce:99:17:79:83:d5:c0:51:e6:4e:e8:12:
e2:77:b7:93:6b:41:83:8e:82:b4:d7:54:94:41:45:
eb:9b:15:48:db:d0:d8:8c:c5:a3:02:d1:f1:d7:23:
50:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:B1:C4:C3:C7:FC:A3:6F:06:AF:A3:51:B5:25:90:5A:A9:E4:D1:15
X509v3 Authority Key Identifier:
keyid:E0:55:9C:E8:89:AE:42:41:12:1F:E0:A1:65:3E:4B:95:5F:3E:DF:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4FWc6ImuQkESH-ChZT5LlV8-30s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/1fa4a1-9a1c-47de-aca6-9449957fd5a5/1/4FWc6ImuQkESH-ChZT5LlV8-30s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/1fa4a1-9a1c-47de-aca6-9449957fd5a5/1/4FWc6ImuQkESH-ChZT5LlV8-30s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:16:42:ed:cd:3a:13:23:72:20:e5:79:6b:5b:cb:66:cb:9b:
34:f0:5d:12:ee:b3:9e:28:c0:b1:de:83:25:df:0f:99:75:92:
85:0d:d6:b1:28:3a:c2:b2:9a:03:a3:54:fb:31:35:03:60:b3:
58:b0:66:b4:0b:a0:92:93:59:a5:4f:1e:16:6a:45:f8:be:8b:
f4:ce:9b:e4:37:b8:e0:e5:54:da:1a:02:5f:3e:47:f7:41:2f:
62:52:44:d5:b8:ca:0f:11:30:91:98:21:d4:6e:bb:4c:9d:a8:
98:d3:7f:9b:4e:7d:54:1d:89:79:4d:9f:6d:cc:84:3b:c4:69:
23:2f:e6:2d:00:2a:bc:67:f5:5f:a7:a4:e8:e5:44:bc:3e:62:
5a:09:b2:f2:ff:a7:ba:31:31:77:8d:ec:47:d4:92:8c:11:33:
eb:c2:c9:68:25:2b:13:eb:86:a1:63:da:71:9b:92:23:75:3a:
a0:ee:dd:a7:c7:c0:91:14:11:12:19:95:3f:94:d9:5e:1c:29:
14:11:83:db:05:ad:e2:dc:3a:9f:c1:af:bc:f7:0b:f6:31:bd:
22:7a:54:71:cd:81:2d:b3:18:ba:f1:c7:e6:ad:b1:f7:e6:e4:
7b:dd:31:50:81:2b:61:90:70:c7:f3:26:26:ee:27:83:af:66:
0b:5f:40:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:19:22 2025 by rpki-client