Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/2618f8-1264-4011-9b88-e327e5227066/1/P4E4_qBm1vUEQ2ABzJ1_M523NMg.mft
File: P4E4_qBm1vUEQ2ABzJ1_M523NMg.mft (raw, json)
Hash identifier: RxUmRwiGLctv69unvH9PLsoDOoXUmZmKb/T9I9HnicI=
Subject key identifier: 4B:1A:83:B5:0D:C8:CA:C9:C5:12:4F:A9:75:BA:E8:D1:F1:53:EC:6E
Authority key identifier: 3F:81:38:FE:A0:66:D6:F5:04:43:60:01:CC:9D:7F:33:9D:B7:34:C8
Certificate issuer: /CN=3f8138fea066d6f504436001cc9d7f339db734c8
Certificate serial: 0198D661490022DE564DDBAA00D2B28C3143
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P4E4_qBm1vUEQ2ABzJ1_M523NMg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/2618f8-1264-4011-9b88-e327e5227066/1/P4E4_qBm1vUEQ2ABzJ1_M523NMg.mft
Manifest number: 02CC
Signing time: Sat 23 Aug 2025 10:02:36 +0000
Manifest this update: Sat 23 Aug 2025 10:02:36 +0000
Manifest next update: Sun 24 Aug 2025 10:02:36 +0000
Files and hashes: 1: P4E4_qBm1vUEQ2ABzJ1_M523NMg.crl (hash: OxWeOr/hA5HVbULzev583k3CjYU0If5LEgECTprLhEQ=)
2: a7YNlS63NsZTTW2uGzFrnfKok9w.roa (hash: A6Vj/t1HktktvRKs1GT2mBgPnzQ8ZrkihcAERAUHOMs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/75/2618f8-1264-4011-9b88-e327e5227066/1/P4E4_qBm1vUEQ2ABzJ1_M523NMg.crl
rsync://rpki.ripe.net/repository/DEFAULT/75/2618f8-1264-4011-9b88-e327e5227066/1/P4E4_qBm1vUEQ2ABzJ1_M523NMg.mft
rsync://rpki.ripe.net/repository/DEFAULT/P4E4_qBm1vUEQ2ABzJ1_M523NMg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 10:02:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:61:49:00:22:de:56:4d:db:aa:00:d2:b2:8c:31:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3f8138fea066d6f504436001cc9d7f339db734c8
Validity
Not Before: Aug 23 10:02:36 2025 GMT
Not After : Aug 24 10:02:36 2025 GMT
Subject: CN=4b1a83b50dc8cac9c5124fa975bae8d1f153ec6e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:65:1a:73:c4:8b:e1:0d:72:cb:d4:96:97:b0:
dd:da:cf:44:f6:cb:c0:ba:03:9a:78:d2:c9:0b:35:
6e:b0:27:f2:30:33:13:92:7e:48:1b:e5:c5:a1:13:
73:d1:5e:6d:ca:43:7c:e7:43:39:e5:c6:f2:ca:25:
25:02:eb:d0:d9:56:b3:2a:ac:c4:e2:c2:ed:68:0b:
72:82:b9:f9:b7:42:d8:86:70:82:8f:3b:ea:81:0b:
7e:0f:87:c8:8d:0c:2a:88:0d:12:19:3e:04:76:06:
24:6e:95:10:07:bf:e0:67:4a:de:28:37:6a:9d:a8:
3c:de:65:82:21:c4:05:6b:53:1f:52:c3:7f:4b:fd:
e2:8e:6a:c7:c0:40:46:3b:5b:d3:12:8d:aa:13:e3:
ed:78:1e:56:1e:a4:48:0d:32:78:3c:d6:6d:c4:39:
ef:5b:1e:1b:92:d9:12:a5:fe:29:50:69:51:3f:72:
19:ed:fa:7e:02:58:4a:75:b7:6b:0e:7b:ac:53:13:
6c:b9:cc:c1:1a:07:1b:41:51:ce:fa:47:ee:6d:c6:
dc:a1:84:90:c3:37:ef:07:77:d4:9e:2b:19:36:5d:
bc:bf:1e:5e:7c:82:c7:ad:8a:fe:6e:83:fe:5b:e3:
6a:fc:1a:13:c6:0a:1d:70:80:8f:8a:59:8e:d8:df:
9e:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:1A:83:B5:0D:C8:CA:C9:C5:12:4F:A9:75:BA:E8:D1:F1:53:EC:6E
X509v3 Authority Key Identifier:
keyid:3F:81:38:FE:A0:66:D6:F5:04:43:60:01:CC:9D:7F:33:9D:B7:34:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P4E4_qBm1vUEQ2ABzJ1_M523NMg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/2618f8-1264-4011-9b88-e327e5227066/1/P4E4_qBm1vUEQ2ABzJ1_M523NMg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/75/2618f8-1264-4011-9b88-e327e5227066/1/P4E4_qBm1vUEQ2ABzJ1_M523NMg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:d4:57:c4:0d:1b:eb:06:07:3a:4a:6d:6f:6c:e2:f5:98:b9:
95:7e:d8:a0:a3:37:6b:58:0d:82:3d:02:8f:7a:fc:84:48:a7:
d7:a6:d6:56:82:04:e4:4b:af:76:3b:cc:b6:80:99:81:02:8a:
ab:c2:0e:05:bd:d6:62:cf:ca:b9:f8:f6:fa:da:18:3f:42:c9:
d4:4c:96:77:30:95:f9:3b:38:92:ac:e8:ee:a0:18:fb:aa:71:
f6:0c:5c:4d:4f:a8:80:9c:3b:e1:bd:9b:ac:57:54:3a:47:18:
e0:22:5d:a3:9f:49:a0:2c:6d:c4:a5:76:c1:1f:4b:40:09:ce:
c2:19:20:37:79:3b:56:31:35:f1:13:49:5f:80:6e:6a:61:cf:
e6:27:3f:04:5e:24:f3:bb:fd:1b:e0:7e:87:bd:ce:e6:52:96:
fe:17:50:56:e1:86:5d:65:41:1c:e1:f9:11:6a:95:8e:70:0e:
96:ce:f0:d6:9a:fa:f0:cd:2e:ca:dc:1d:0e:49:bc:40:84:f2:
1c:9d:40:1f:a3:fe:d4:b7:7b:e5:44:71:a0:33:ec:9f:c8:92:
88:83:87:d3:ae:b8:57:71:6b:ea:45:8b:b1:b8:2d:9d:a1:3f:
bf:3e:be:16:ef:97:3a:aa:38:29:88:cf:76:42:88:b7:0d:8c:
e2:a4:87:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 16:35:16 2025 by rpki-client