Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/19bd8a-c6f1-42e2-8460-cdab19a3fdeb/1/4zTsOTRI2DvxUV9JZ6RICY5V-0M.mft
File: 4zTsOTRI2DvxUV9JZ6RICY5V-0M.mft (raw, json)
Hash identifier: bdUFV13NQQNC0dRAzaF4uyq4fAJ8J26ZlEeoGdpMXgk=
Subject key identifier: 39:1F:00:D8:F2:95:04:62:42:0B:EE:58:24:1F:C1:EB:F2:E5:FB:51
Authority key identifier: E3:34:EC:39:34:48:D8:3B:F1:51:5F:49:67:A4:48:09:8E:55:FB:43
Certificate issuer: /CN=e334ec393448d83bf1515f4967a448098e55fb43
Certificate serial: 0198D4A79184D6F1AF63644DCD31D4586283
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4zTsOTRI2DvxUV9JZ6RICY5V-0M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/95/19bd8a-c6f1-42e2-8460-cdab19a3fdeb/1/4zTsOTRI2DvxUV9JZ6RICY5V-0M.mft
Manifest number: 1648
Signing time: Sat 23 Aug 2025 02:00:08 +0000
Manifest this update: Sat 23 Aug 2025 02:00:08 +0000
Manifest next update: Sun 24 Aug 2025 02:00:08 +0000
Files and hashes: 1: 3i7bDwmXfkGeboYerA9gz4okFig.roa (hash: fWhHLCsrKiodDbQX5MlZg8yk8IDQZFwIAhXPpQk2VnY=)
2: 4zTsOTRI2DvxUV9JZ6RICY5V-0M.crl (hash: 1h/4XVDHwq49OnI/2D+jxABv6ususzOgdaXIzRimOzE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/95/19bd8a-c6f1-42e2-8460-cdab19a3fdeb/1/4zTsOTRI2DvxUV9JZ6RICY5V-0M.crl
rsync://rpki.ripe.net/repository/DEFAULT/95/19bd8a-c6f1-42e2-8460-cdab19a3fdeb/1/4zTsOTRI2DvxUV9JZ6RICY5V-0M.mft
rsync://rpki.ripe.net/repository/DEFAULT/4zTsOTRI2DvxUV9JZ6RICY5V-0M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 02:00:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:a7:91:84:d6:f1:af:63:64:4d:cd:31:d4:58:62:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e334ec393448d83bf1515f4967a448098e55fb43
Validity
Not Before: Aug 23 02:00:08 2025 GMT
Not After : Aug 24 02:00:08 2025 GMT
Subject: CN=391f00d8f2950462420bee58241fc1ebf2e5fb51
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:90:fc:ce:31:39:df:fb:56:7d:10:53:f7:47:
2f:ac:6b:ef:70:9a:cd:d0:98:8d:78:43:61:6b:5a:
81:cb:06:e4:1d:f3:0c:c5:c2:1d:26:45:3e:39:cb:
7f:00:7b:ea:03:fa:c7:08:6b:12:3f:57:7f:3c:88:
d0:ea:2e:3e:cd:28:5b:35:4a:d9:c1:64:d4:6d:6c:
3a:78:6a:34:5a:45:12:04:d3:e9:c4:47:b1:35:8b:
2b:45:6f:12:07:59:22:de:23:94:91:f6:84:47:17:
08:74:21:9e:6a:92:e1:aa:89:82:ce:14:41:79:49:
16:56:1f:e9:9f:9e:61:49:28:6e:2d:44:a1:ac:f7:
24:52:57:92:cd:c9:6a:16:a8:21:89:f9:0e:e2:9b:
00:31:a1:43:3c:45:82:ca:54:21:7e:df:0b:e4:3e:
8a:5c:c6:0f:08:43:a0:04:54:9d:7c:e3:b1:ca:e1:
12:6f:6e:70:fa:d4:1f:09:05:fb:4c:aa:bd:26:e1:
64:ce:95:55:93:db:7b:40:c5:bf:e9:eb:60:d8:08:
1f:7b:cd:b7:72:e2:d8:1e:fc:4a:ed:c8:6e:a2:8c:
4a:93:b6:14:88:86:5c:ce:34:8f:29:65:7b:76:7b:
94:c5:92:31:f8:03:27:3d:5e:27:53:9b:0d:56:d8:
22:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:1F:00:D8:F2:95:04:62:42:0B:EE:58:24:1F:C1:EB:F2:E5:FB:51
X509v3 Authority Key Identifier:
keyid:E3:34:EC:39:34:48:D8:3B:F1:51:5F:49:67:A4:48:09:8E:55:FB:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4zTsOTRI2DvxUV9JZ6RICY5V-0M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/19bd8a-c6f1-42e2-8460-cdab19a3fdeb/1/4zTsOTRI2DvxUV9JZ6RICY5V-0M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/95/19bd8a-c6f1-42e2-8460-cdab19a3fdeb/1/4zTsOTRI2DvxUV9JZ6RICY5V-0M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:65:5d:ab:ba:44:8d:8c:a6:d3:70:b2:b5:a4:e8:0c:1b:f0:
3a:7e:3f:03:b7:98:47:c3:e6:02:34:15:75:56:3a:38:c5:e6:
d2:40:5e:71:50:7e:f1:d9:4d:f0:df:74:f3:ff:3d:80:f4:02:
58:0b:f8:ea:0c:b5:48:c3:d6:0e:21:d8:85:cd:e8:86:e9:b4:
86:92:08:80:9d:3e:c1:ff:31:56:07:df:05:f2:41:5d:00:46:
32:f3:6a:bc:69:05:b9:6c:89:b8:4f:dc:de:09:63:e9:35:3a:
57:26:c4:11:57:11:a8:70:a7:44:d4:90:5f:55:3f:49:da:a0:
cd:1b:86:41:bb:81:2a:20:58:81:d5:47:b8:97:5d:af:18:9c:
f9:12:b1:e7:de:d4:ca:f1:4c:7c:9c:ba:6a:d2:e9:fc:5b:82:
af:29:7b:16:0c:1c:eb:4f:b9:73:c3:a5:ae:1a:9b:cd:c5:06:
67:dd:8e:a7:a8:37:08:d4:00:52:2d:d1:c1:6c:26:95:fe:38:
42:3d:0d:2d:c8:bb:cb:1b:2a:45:57:17:f5:ca:3a:86:b2:16:
15:96:10:72:d4:55:0a:ce:7f:ef:56:0e:df:0b:25:7f:da:b9:
9f:a3:0f:32:bc:75:30:d5:d2:fa:52:35:33:c3:56:40:c7:7c:
e0:a9:6d:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:50:47 2025 by rpki-client