Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/358be9-192d-4ae9-b4bd-eed556af2c7f/1/4b3MskUKGgU8icwhPkrpuGR4LeM.mft
File: 4b3MskUKGgU8icwhPkrpuGR4LeM.mft (raw, json)
Hash identifier: DuLQ1s0ru3/q4F7QLxccurefL+xYRfe4OCANWMLEAac=
Subject key identifier: 03:3D:75:9B:AF:DC:3E:C4:A5:3A:3E:B9:8C:B7:40:C2:5E:16:A9:2A
Authority key identifier: E1:BD:CC:B2:45:0A:1A:05:3C:89:CC:21:3E:4A:E9:B8:64:78:2D:E3
Certificate issuer: /CN=e1bdccb2450a1a053c89cc213e4ae9b864782de3
Certificate serial: 0198D4A7F89D359EFEBB2B7E04727F607D10
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4b3MskUKGgU8icwhPkrpuGR4LeM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/358be9-192d-4ae9-b4bd-eed556af2c7f/1/4b3MskUKGgU8icwhPkrpuGR4LeM.mft
Manifest number: 0F31
Signing time: Sat 23 Aug 2025 02:00:34 +0000
Manifest this update: Sat 23 Aug 2025 02:00:34 +0000
Manifest next update: Sun 24 Aug 2025 02:00:34 +0000
Files and hashes: 1: 4b3MskUKGgU8icwhPkrpuGR4LeM.crl (hash: +US3lCLsNN93TtzKwhlmyp+JJF1LuAgZK63JGooKZDE=)
2: 7uR_yiVUsKXN9cQ9UEqMaOjd_ow.roa (hash: OVRCNzp/6ULY8TXLR8C+JnnDlpd68DlkSuJjHaG4io0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/358be9-192d-4ae9-b4bd-eed556af2c7f/1/4b3MskUKGgU8icwhPkrpuGR4LeM.crl
rsync://rpki.ripe.net/repository/DEFAULT/7b/358be9-192d-4ae9-b4bd-eed556af2c7f/1/4b3MskUKGgU8icwhPkrpuGR4LeM.mft
rsync://rpki.ripe.net/repository/DEFAULT/4b3MskUKGgU8icwhPkrpuGR4LeM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 02:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:a7:f8:9d:35:9e:fe:bb:2b:7e:04:72:7f:60:7d:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e1bdccb2450a1a053c89cc213e4ae9b864782de3
Validity
Not Before: Aug 23 02:00:34 2025 GMT
Not After : Aug 24 02:00:34 2025 GMT
Subject: CN=033d759bafdc3ec4a53a3eb98cb740c25e16a92a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:8f:67:60:72:eb:2b:9f:fd:75:a8:dd:25:a0:
e8:a0:06:ef:fb:fe:52:26:9b:f2:fa:ed:76:54:15:
09:e6:a7:f1:fc:45:f0:f8:81:b6:f4:b1:a5:77:72:
fa:5d:2f:61:95:62:1d:82:f0:0c:bc:bb:46:67:5d:
41:44:92:7f:a6:81:3a:92:c1:40:8e:d0:4c:d0:e8:
c7:d0:c8:d7:8e:6b:69:4c:85:98:f7:6f:b3:c7:a6:
c8:75:5f:2f:40:d7:1d:de:b1:12:dd:7d:a9:6e:59:
d4:1b:37:e8:15:e9:17:ad:a7:50:a0:82:b4:94:84:
ab:2c:dc:df:7c:c8:92:f8:bb:0f:47:38:50:a3:b0:
3e:f2:66:e8:4b:2c:60:b4:9a:ab:12:89:eb:bb:91:
a0:d8:e9:d8:3e:ba:91:2b:79:42:2d:d5:e3:17:91:
93:32:f3:95:4f:1d:11:36:ad:86:71:28:eb:e6:21:
c9:90:b1:25:c7:a8:c8:ab:6d:d7:79:52:d1:a8:4d:
6a:3b:05:89:e8:c4:70:a1:11:bf:90:99:44:2e:38:
b6:05:6b:86:ef:ad:9d:a8:06:a7:b0:c0:84:a1:43:
ac:b2:8d:66:c9:07:55:c9:66:7a:5e:45:94:49:bc:
74:3e:be:38:3d:f8:90:ed:1c:aa:22:16:46:bf:7d:
4e:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:3D:75:9B:AF:DC:3E:C4:A5:3A:3E:B9:8C:B7:40:C2:5E:16:A9:2A
X509v3 Authority Key Identifier:
keyid:E1:BD:CC:B2:45:0A:1A:05:3C:89:CC:21:3E:4A:E9:B8:64:78:2D:E3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b3MskUKGgU8icwhPkrpuGR4LeM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/358be9-192d-4ae9-b4bd-eed556af2c7f/1/4b3MskUKGgU8icwhPkrpuGR4LeM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/358be9-192d-4ae9-b4bd-eed556af2c7f/1/4b3MskUKGgU8icwhPkrpuGR4LeM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a6:67:14:af:3a:07:ee:2b:42:39:7f:9e:47:07:fe:f6:9c:83:
1c:95:ec:17:30:b8:2d:77:89:26:b3:1a:e6:e7:8a:d6:b8:06:
c3:2f:20:8d:9b:ed:20:68:ac:c6:03:72:0c:05:a3:ca:78:1f:
84:76:9e:bc:1e:14:24:86:b2:3a:56:21:91:4c:ca:ff:e0:a6:
a9:d3:b2:58:c3:c6:f8:29:99:5b:2b:5a:8e:f3:56:84:09:ba:
03:d5:0f:b8:a3:09:4f:d6:de:94:46:5f:1b:16:b9:c2:17:22:
75:76:8c:4c:c4:f5:3e:c0:10:6b:7b:cc:5c:76:a9:3c:cb:1c:
25:6e:01:74:4c:3f:71:f9:83:3b:57:d7:cd:ed:94:a9:b0:5e:
25:cb:72:20:08:11:e7:54:b7:ab:de:f8:03:4a:12:b6:02:d7:
a7:b1:8f:00:2f:96:df:50:a5:e9:40:78:7c:5a:29:b3:4c:6b:
6c:ec:05:f2:e6:2c:b6:1e:5d:79:8f:d4:8f:9b:a2:f4:f2:e6:
75:72:f7:10:8a:05:00:1c:07:67:58:98:bb:db:1f:42:6c:1a:
c5:36:3f:59:0b:4e:09:41:e8:9a:e2:84:1b:5d:75:5e:3b:a1:
e9:6a:29:df:ca:52:0e:a0:a9:e9:49:2d:f6:b1:a1:4c:fa:14:
1c:10:bf:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:28:46 2025 by rpki-client