Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/96184d-5981-4702-9d32-6cc0daf341c4/1/D_4AEevk8hbFjTq0KBK5hAK-Cyw.mft
File: D_4AEevk8hbFjTq0KBK5hAK-Cyw.mft (raw, json)
Hash identifier: a9kVxeLhbHz+edjiRPLh8zIz+GlEqf1FdY4WF3k08M4=
Subject key identifier: 4B:A9:1C:B1:60:E3:F6:57:3C:CE:E4:56:83:82:33:6D:54:59:5A:AB
Authority key identifier: 0F:FE:00:11:EB:E4:F2:16:C5:8D:3A:B4:28:12:B9:84:02:BE:0B:2C
Certificate issuer: /CN=0ffe0011ebe4f216c58d3ab42812b98402be0b2c
Certificate serial: 0198D5F122AEE5E78F588E540031E44969EE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D_4AEevk8hbFjTq0KBK5hAK-Cyw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9a/96184d-5981-4702-9d32-6cc0daf341c4/1/D_4AEevk8hbFjTq0KBK5hAK-Cyw.mft
Manifest number: 0FB0
Signing time: Sat 23 Aug 2025 08:00:06 +0000
Manifest this update: Sat 23 Aug 2025 08:00:06 +0000
Manifest next update: Sun 24 Aug 2025 08:00:06 +0000
Files and hashes: 1: D_4AEevk8hbFjTq0KBK5hAK-Cyw.crl (hash: +yoW31lpGjxsHg4t6mkDlViqqSrmZr2QwcyVAS71kzs=)
2: ZPNM7KgQKfcGyvV7_2daewtnAlI.roa (hash: gCwHJt9KCFIRPasHifDhV1IvkNRzDs0fMniT9GCnavA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9a/96184d-5981-4702-9d32-6cc0daf341c4/1/D_4AEevk8hbFjTq0KBK5hAK-Cyw.crl
rsync://rpki.ripe.net/repository/DEFAULT/9a/96184d-5981-4702-9d32-6cc0daf341c4/1/D_4AEevk8hbFjTq0KBK5hAK-Cyw.mft
rsync://rpki.ripe.net/repository/DEFAULT/D_4AEevk8hbFjTq0KBK5hAK-Cyw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 08:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:f1:22:ae:e5:e7:8f:58:8e:54:00:31:e4:49:69:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ffe0011ebe4f216c58d3ab42812b98402be0b2c
Validity
Not Before: Aug 23 08:00:06 2025 GMT
Not After : Aug 24 08:00:06 2025 GMT
Subject: CN=4ba91cb160e3f6573ccee4568382336d54595aab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:90:84:c6:0c:b1:63:82:ab:6d:a3:c3:ce:77:
43:e3:ac:b0:0a:6d:97:9a:cd:d8:bc:f6:0e:92:4f:
c8:cc:fb:de:6f:d6:c4:8d:73:8a:0a:b1:2e:1d:b8:
dd:b4:93:07:5d:f7:6f:af:ee:60:30:77:66:45:42:
b8:27:07:57:41:59:e5:8c:a8:9e:a9:29:9f:35:a5:
7d:df:f2:cd:9b:7b:1a:a7:60:85:62:7b:93:05:a7:
83:23:e3:b6:69:df:f7:36:a0:61:f6:8a:c0:c6:28:
5c:d4:c8:46:9f:a5:b8:4c:d6:1a:a4:6f:16:43:5c:
01:94:c8:98:02:ab:6e:c6:b4:b2:fc:51:38:cc:b7:
4a:89:07:35:90:41:07:63:9b:f6:29:18:ab:6e:6a:
56:82:fe:e1:fc:38:af:f4:1f:57:42:fa:e8:5a:2a:
47:02:5b:b3:18:76:15:b2:81:d2:e1:dc:a0:0f:6e:
1d:5f:9a:05:86:57:7c:53:9e:f8:1b:62:32:4c:6c:
04:39:0e:75:f8:43:5e:4d:59:e2:60:d9:10:ff:c2:
41:e7:91:36:de:79:d7:33:1a:28:4f:01:4a:ad:3f:
2c:78:b3:f3:f9:4d:f1:93:c4:5b:0c:f4:d8:9e:ba:
b5:f7:dc:6c:45:d1:da:a7:dc:f7:89:1b:23:50:52:
8b:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:A9:1C:B1:60:E3:F6:57:3C:CE:E4:56:83:82:33:6D:54:59:5A:AB
X509v3 Authority Key Identifier:
keyid:0F:FE:00:11:EB:E4:F2:16:C5:8D:3A:B4:28:12:B9:84:02:BE:0B:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D_4AEevk8hbFjTq0KBK5hAK-Cyw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/96184d-5981-4702-9d32-6cc0daf341c4/1/D_4AEevk8hbFjTq0KBK5hAK-Cyw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/96184d-5981-4702-9d32-6cc0daf341c4/1/D_4AEevk8hbFjTq0KBK5hAK-Cyw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:15:da:b9:7c:e6:02:04:16:7b:77:e0:90:13:db:bf:07:7f:
f7:35:42:27:5f:36:11:99:7a:1f:cd:b1:b5:04:7c:b2:e3:7f:
11:90:83:e6:05:eb:e8:a1:e7:9e:e9:d6:4b:8b:07:c7:1d:ee:
ee:2e:2a:50:d0:87:65:79:ff:86:39:2c:65:c0:88:7b:bc:cd:
ac:ac:36:4b:25:3a:64:af:91:26:80:8d:4c:42:03:db:0a:42:
b5:3a:1b:41:7f:85:2f:1e:21:2d:7a:18:17:1d:82:ed:66:1b:
8f:c7:94:c3:32:34:e0:3b:18:30:7b:40:de:66:bf:1b:95:26:
26:ea:d3:c1:4f:c0:91:e3:6a:07:f8:1f:d2:73:df:15:c0:9e:
85:f0:86:e5:0d:d4:7e:d8:fd:b8:ee:e8:82:a1:c8:7d:4b:90:
5a:c3:34:cd:7f:df:3e:df:f1:7a:f5:81:0d:9e:1e:4f:e6:35:
c2:22:c0:aa:f4:91:50:d0:0f:1d:f8:c4:bd:a1:f7:da:3c:de:
b5:fe:0c:d7:98:34:a4:e9:b7:12:4b:1f:de:26:66:87:ac:57:
d8:e3:79:ee:3b:f0:c6:bf:6d:76:26:17:dd:6a:27:9d:23:40:
f7:17:56:fc:0a:e8:5e:a4:13:b3:1b:ec:8a:e5:7b:a6:15:3d:
77:0d:8b:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 18:00:22 2025 by rpki-client