Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/d8c4ba-1c48-480b-bb59-d2310bba0e11/1/4OvbaaM-jzrzY64UT4U1OOgDG2M.mft
File: 4OvbaaM-jzrzY64UT4U1OOgDG2M.mft (raw, json)
Hash identifier: YXnxKYqsLSt98FZNZbhYkiWP8wQQ2jgYBy69SspkCuw=
Subject key identifier: 3D:13:27:45:09:DF:1A:C2:4B:27:A9:E7:8A:11:0F:DA:57:D5:67:72
Authority key identifier: E0:EB:DB:69:A3:3E:8F:3A:F3:63:AE:14:4F:85:35:38:E8:03:1B:63
Certificate issuer: /CN=e0ebdb69a33e8f3af363ae144f853538e8031b63
Certificate serial: 0198D6986F0F6B6AD2F9B8082F5B49460377
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4OvbaaM-jzrzY64UT4U1OOgDG2M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/d8c4ba-1c48-480b-bb59-d2310bba0e11/1/4OvbaaM-jzrzY64UT4U1OOgDG2M.mft
Manifest number: 0921
Signing time: Sat 23 Aug 2025 11:02:50 +0000
Manifest this update: Sat 23 Aug 2025 11:02:50 +0000
Manifest next update: Sun 24 Aug 2025 11:02:50 +0000
Files and hashes: 1: 3eUay2tu69uIVC2ydoh-KNcQB3E.roa (hash: G/dDpLohr3NTC2lM78apSFe1V+YNmYFmlWqkTGl1RZw=)
2: 4OvbaaM-jzrzY64UT4U1OOgDG2M.crl (hash: eQGtfZ3YSSdwyXf9KnCyy5AXptyJgthIL3MFpKgXHOY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/78/d8c4ba-1c48-480b-bb59-d2310bba0e11/1/4OvbaaM-jzrzY64UT4U1OOgDG2M.crl
rsync://rpki.ripe.net/repository/DEFAULT/78/d8c4ba-1c48-480b-bb59-d2310bba0e11/1/4OvbaaM-jzrzY64UT4U1OOgDG2M.mft
rsync://rpki.ripe.net/repository/DEFAULT/4OvbaaM-jzrzY64UT4U1OOgDG2M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:98:6f:0f:6b:6a:d2:f9:b8:08:2f:5b:49:46:03:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e0ebdb69a33e8f3af363ae144f853538e8031b63
Validity
Not Before: Aug 23 11:02:50 2025 GMT
Not After : Aug 24 11:02:50 2025 GMT
Subject: CN=3d13274509df1ac24b27a9e78a110fda57d56772
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:11:81:05:8c:74:e0:91:8d:06:45:dd:ea:c8:
27:86:b4:e6:79:1b:2d:f4:b8:7b:d8:2e:c6:9f:18:
aa:6c:de:90:eb:2c:ea:32:6f:0c:70:42:5d:24:cc:
a2:db:00:1c:4a:e5:07:83:c3:81:eb:fb:7b:f1:03:
39:d4:64:a5:5b:a6:01:ba:89:1c:2d:07:dc:c0:30:
da:44:de:2b:7c:4d:9a:01:ce:c3:1c:a0:27:8b:65:
ad:3b:48:84:8c:c4:07:d0:62:da:e7:0e:39:23:c4:
f9:33:8b:b9:9c:77:66:95:d8:84:d0:1f:ba:b8:b8:
35:dd:e5:e4:64:d2:41:37:78:33:f8:d2:4c:ea:7e:
15:29:9b:f8:86:98:1a:76:ca:ec:4b:9f:bb:ec:2e:
4d:08:05:d8:09:cb:77:73:eb:9a:b1:8f:7f:33:d1:
9d:7a:5d:cd:a6:f3:36:84:9e:5b:e1:c4:a2:b5:3c:
58:e2:50:f9:0e:93:a9:8d:5e:e6:23:b9:c8:9a:0b:
2d:94:03:f5:56:43:cd:60:e9:03:a6:96:84:fc:b4:
07:4e:72:63:77:6e:a9:e3:6a:e5:06:3f:9a:d5:96:
b3:59:80:93:ba:da:cf:43:f7:15:08:15:a2:1e:64:
3a:cb:d3:97:f5:c6:19:8b:04:04:fc:b4:ef:25:b6:
fc:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:13:27:45:09:DF:1A:C2:4B:27:A9:E7:8A:11:0F:DA:57:D5:67:72
X509v3 Authority Key Identifier:
keyid:E0:EB:DB:69:A3:3E:8F:3A:F3:63:AE:14:4F:85:35:38:E8:03:1B:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4OvbaaM-jzrzY64UT4U1OOgDG2M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/d8c4ba-1c48-480b-bb59-d2310bba0e11/1/4OvbaaM-jzrzY64UT4U1OOgDG2M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/d8c4ba-1c48-480b-bb59-d2310bba0e11/1/4OvbaaM-jzrzY64UT4U1OOgDG2M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b9:c9:a2:ea:0c:d2:5c:54:a2:fe:e6:c9:d6:25:25:2f:ed:85:
be:8c:d5:71:00:ea:3a:9b:51:36:60:ac:0a:4d:16:72:9b:4c:
ad:1e:1b:56:99:ad:f5:60:e2:54:5e:47:e1:00:b4:77:7c:72:
e1:f8:7f:41:7d:c4:63:0b:0c:66:62:a4:c6:e0:ad:7c:ab:6c:
fa:fc:38:f8:20:d2:b6:39:12:a6:32:1c:2b:2e:9c:9e:80:72:
05:3a:1d:b5:80:a6:d0:7b:2c:7b:73:5d:de:07:27:18:7f:d5:
36:eb:0f:18:6d:f1:fd:0e:da:d1:da:80:d8:30:2c:8c:37:ae:
31:cd:00:58:d0:da:9e:c2:ec:49:79:64:73:c0:a1:10:b2:2d:
0e:c2:21:74:d3:3b:42:17:46:a9:ca:6f:f6:1f:54:02:9e:20:
38:44:9c:c1:b7:ce:d4:f3:f5:95:76:c9:49:fc:66:d1:a4:c5:
47:20:b2:22:95:ad:bf:fc:d5:48:b1:e5:a7:dd:1f:ef:24:0b:
56:a5:5f:4f:05:3d:96:ab:25:57:2b:8d:15:a5:70:0d:08:63:
2c:8d:22:0d:aa:7b:80:c8:0b:c8:58:a7:a0:0e:ed:1d:aa:e5:
c1:c0:49:e3:dd:e1:c3:ac:d3:c4:b5:a7:99:fb:a0:68:9e:6e:
22:c9:3c:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 13:28:53 2025 by rpki-client