Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/8f8e84-ff35-49be-8fa2-b6b7481bec9e/1/4j-PXFJCXfYrREVDOqz9jKW_Lp0.mft
File: 4j-PXFJCXfYrREVDOqz9jKW_Lp0.mft (raw, json)
Hash identifier: vzP4nOsm8ZsL/xvl64sw0yzq13P0gmU9Ku/6QRQS95w=
Subject key identifier: D8:65:D2:47:C6:D5:BF:CE:BB:1B:D7:31:20:3F:54:42:82:7C:93:48
Authority key identifier: E2:3F:8F:5C:52:42:5D:F6:2B:44:45:43:3A:AC:FD:8C:A5:BF:2E:9D
Certificate issuer: /CN=e23f8f5c52425df62b4445433aacfd8ca5bf2e9d
Certificate serial: 0198D850EFA9CCC06875E01F88FD86F93E81
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4j-PXFJCXfYrREVDOqz9jKW_Lp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/8f8e84-ff35-49be-8fa2-b6b7481bec9e/1/4j-PXFJCXfYrREVDOqz9jKW_Lp0.mft
Manifest number: 02CA
Signing time: Sat 23 Aug 2025 19:03:59 +0000
Manifest this update: Sat 23 Aug 2025 19:03:59 +0000
Manifest next update: Sun 24 Aug 2025 19:03:59 +0000
Files and hashes: 1: 4j-PXFJCXfYrREVDOqz9jKW_Lp0.crl (hash: yJ8MaPhlp1YXCbd5BXjgxr1ZTfMlJZIO4e8COptpNSs=)
2: 6ppH0TTYhzfLzHV3xSzl4LSdV6c.roa (hash: OehC5Yx+JGVn7qI8wxptwUUS4CQUtx99kzGyWmtybhI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/8f8e84-ff35-49be-8fa2-b6b7481bec9e/1/4j-PXFJCXfYrREVDOqz9jKW_Lp0.crl
rsync://rpki.ripe.net/repository/DEFAULT/90/8f8e84-ff35-49be-8fa2-b6b7481bec9e/1/4j-PXFJCXfYrREVDOqz9jKW_Lp0.mft
rsync://rpki.ripe.net/repository/DEFAULT/4j-PXFJCXfYrREVDOqz9jKW_Lp0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 17:19:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d8:50:ef:a9:cc:c0:68:75:e0:1f:88:fd:86:f9:3e:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e23f8f5c52425df62b4445433aacfd8ca5bf2e9d
Validity
Not Before: Aug 23 19:03:59 2025 GMT
Not After : Aug 24 19:03:59 2025 GMT
Subject: CN=d865d247c6d5bfcebb1bd731203f5442827c9348
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:4e:f2:fb:62:6f:9d:bb:56:fc:dc:fa:63:99:
05:09:49:65:d7:b7:17:2c:2e:5e:3f:24:95:4f:9b:
c7:07:7c:73:e6:a1:60:83:ea:cf:0f:63:e9:3b:68:
87:c9:7a:e8:db:72:d8:d8:da:cb:8b:d8:0f:06:1b:
d9:ea:9a:c1:d1:fa:bd:81:df:57:e7:b0:e7:c1:21:
df:0a:48:bd:ee:0d:f5:82:22:da:cd:f6:ea:ed:89:
ae:07:6a:ae:85:e6:28:7c:37:02:20:17:2b:8f:35:
6d:c8:62:a7:d9:ee:53:ec:97:e3:60:9d:88:1c:a1:
84:81:e8:d1:7d:9f:15:7b:38:5a:32:d2:91:c5:a2:
96:68:8a:75:c5:4b:c3:30:76:ae:ef:2d:60:7e:d4:
d2:a3:41:ba:44:b7:73:bb:bf:d2:c3:47:ff:f3:7e:
8d:9d:f7:c8:de:ac:01:5b:59:82:72:eb:c4:8d:17:
ed:43:46:c5:eb:90:14:80:d6:b6:ed:c3:f2:56:3b:
2e:ed:bf:7a:35:f8:d6:cf:74:62:21:15:5f:a8:1c:
6e:21:47:fd:29:35:70:4b:03:da:ec:cf:84:a0:c0:
bb:46:1e:ef:fa:2b:bd:8c:33:32:7d:15:c3:93:e5:
34:44:da:7d:d9:f0:6a:0d:ea:8d:f2:78:20:16:34:
96:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:65:D2:47:C6:D5:BF:CE:BB:1B:D7:31:20:3F:54:42:82:7C:93:48
X509v3 Authority Key Identifier:
keyid:E2:3F:8F:5C:52:42:5D:F6:2B:44:45:43:3A:AC:FD:8C:A5:BF:2E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4j-PXFJCXfYrREVDOqz9jKW_Lp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/8f8e84-ff35-49be-8fa2-b6b7481bec9e/1/4j-PXFJCXfYrREVDOqz9jKW_Lp0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/8f8e84-ff35-49be-8fa2-b6b7481bec9e/1/4j-PXFJCXfYrREVDOqz9jKW_Lp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:3f:cf:06:ae:ee:92:c0:97:91:b7:69:69:a2:65:54:bb:df:
6c:1f:16:af:fc:69:b3:72:64:97:7c:27:f3:33:2f:b6:d2:85:
cf:f6:a2:ef:10:1e:2c:70:78:d3:ee:f9:78:e6:d0:29:87:79:
6a:c0:68:6a:69:f1:69:63:7f:94:58:be:f2:96:96:94:dd:b0:
f9:58:39:53:d6:0d:0b:ce:92:58:83:94:45:26:5a:db:e3:3b:
b7:fe:47:fd:4a:4f:a1:a9:72:7f:01:69:c7:ce:35:95:af:a7:
d2:f5:2a:a7:50:12:81:f8:c8:8b:7b:9c:2a:b5:7a:82:f8:1d:
ac:61:b5:f3:45:60:ad:59:61:88:16:59:20:b2:c2:38:98:47:
03:5b:f7:e5:31:97:c9:14:c9:29:f6:b9:0a:33:55:ee:8b:e4:
f2:16:1e:e4:e4:fe:19:99:35:60:d1:67:61:f9:3c:27:29:ff:
7f:c7:5a:88:6b:83:82:57:f8:20:60:33:43:c9:59:7f:4d:ed:
58:eb:c1:32:d0:7f:19:01:5a:10:a9:6c:de:31:dc:43:db:63:
62:9a:04:02:51:5a:1e:4b:b5:8e:30:44:6c:37:ae:85:85:eb:
0e:17:de:5d:5e:3d:33:23:1f:28:2d:4a:0e:8c:f4:8d:2c:77:
a7:63:ef:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 03:10:07 2025 by rpki-client