Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/aa5cc0-bb56-4b47-b7c1-44f41d9e1277/1/4GmrbwlXKvtG6fjpoGOdgguWlCI.mft
File: 4GmrbwlXKvtG6fjpoGOdgguWlCI.mft (raw, json)
Hash identifier: wjv3pGibgHl9c8CQ7YH9S7ywE8WwmKZ2LSbF+HFv+G0=
Subject key identifier: 50:DE:42:D8:80:AF:BE:81:6D:77:E1:73:A4:4A:08:FC:1C:78:D9:E0
Authority key identifier: E0:69:AB:6F:09:57:2A:FB:46:E9:F8:E9:A0:63:9D:82:0B:96:94:22
Certificate issuer: /CN=e069ab6f09572afb46e9f8e9a0639d820b969422
Certificate serial: 0198D5164C76BEF9746E2BF21565C5AC757D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4GmrbwlXKvtG6fjpoGOdgguWlCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/aa5cc0-bb56-4b47-b7c1-44f41d9e1277/1/4GmrbwlXKvtG6fjpoGOdgguWlCI.mft
Manifest number: 15DF
Signing time: Sat 23 Aug 2025 04:01:04 +0000
Manifest this update: Sat 23 Aug 2025 04:01:04 +0000
Manifest next update: Sun 24 Aug 2025 04:01:04 +0000
Files and hashes: 1: 3JZ_5w4aMWvRVbzCod8mUk7eyJM.roa (hash: vnbCaew1m+lh3Dj5sXD9W+bmDkZl62H3PlaW/PwhcMY=)
2: 4GmrbwlXKvtG6fjpoGOdgguWlCI.crl (hash: OJHZPrQRcDpR6oxWXDCaI80LQob862d3I+5QLRUWqoA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9b/aa5cc0-bb56-4b47-b7c1-44f41d9e1277/1/4GmrbwlXKvtG6fjpoGOdgguWlCI.crl
rsync://rpki.ripe.net/repository/DEFAULT/9b/aa5cc0-bb56-4b47-b7c1-44f41d9e1277/1/4GmrbwlXKvtG6fjpoGOdgguWlCI.mft
rsync://rpki.ripe.net/repository/DEFAULT/4GmrbwlXKvtG6fjpoGOdgguWlCI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 04:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:16:4c:76:be:f9:74:6e:2b:f2:15:65:c5:ac:75:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e069ab6f09572afb46e9f8e9a0639d820b969422
Validity
Not Before: Aug 23 04:01:04 2025 GMT
Not After : Aug 24 04:01:04 2025 GMT
Subject: CN=50de42d880afbe816d77e173a44a08fc1c78d9e0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:d7:af:0c:b3:25:1b:c3:4a:34:67:bb:e6:0d:
ae:5e:2b:08:1e:9e:7f:9f:17:5e:10:3f:ce:40:19:
13:45:74:fb:91:e4:f8:21:4b:90:7a:97:da:9e:3d:
48:c6:fa:c7:4e:c5:40:9f:4b:ad:dd:e8:fe:83:f4:
7b:c7:8f:93:a8:f9:bc:ac:65:3d:21:91:b9:60:d5:
5a:3c:08:0d:37:ac:36:bd:23:6c:4c:9a:73:a9:80:
6b:a6:37:e3:8e:95:66:f0:e0:a6:b7:c5:65:65:64:
7f:33:9d:b7:b3:31:bf:68:de:78:f3:5e:be:35:ef:
68:2c:03:9c:8f:02:75:18:49:5a:c6:38:00:25:56:
e9:63:3f:5b:69:81:3f:e1:0d:3b:ec:4a:b5:11:b9:
fa:b2:39:21:c0:ed:32:97:1f:05:54:12:4d:0d:5f:
14:d1:31:b5:db:a0:1d:a4:2d:b2:dc:76:82:c5:68:
b4:78:fd:8c:18:3d:7f:38:33:91:ed:a5:07:22:c6:
6a:2f:fc:e4:53:f3:11:d0:ba:c2:22:a9:86:49:48:
b1:7e:e2:fd:7d:fd:44:4a:3c:f8:fd:93:b2:26:7d:
e5:7f:aa:72:67:df:bc:a9:14:81:17:98:dd:50:3d:
56:9b:52:24:fa:10:88:3b:78:7c:aa:1c:44:35:32:
7a:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:DE:42:D8:80:AF:BE:81:6D:77:E1:73:A4:4A:08:FC:1C:78:D9:E0
X509v3 Authority Key Identifier:
keyid:E0:69:AB:6F:09:57:2A:FB:46:E9:F8:E9:A0:63:9D:82:0B:96:94:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4GmrbwlXKvtG6fjpoGOdgguWlCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/aa5cc0-bb56-4b47-b7c1-44f41d9e1277/1/4GmrbwlXKvtG6fjpoGOdgguWlCI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/aa5cc0-bb56-4b47-b7c1-44f41d9e1277/1/4GmrbwlXKvtG6fjpoGOdgguWlCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:49:b9:53:62:16:74:08:52:5d:1d:76:72:90:e1:e1:68:13:
eb:d0:79:cd:c2:25:c4:22:a1:95:32:ed:f1:37:e6:63:8b:cd:
75:ae:e9:04:6f:c8:5e:34:ce:71:8f:e8:b1:54:0f:76:c4:e4:
30:ab:89:ce:75:d5:43:11:57:1a:0c:e4:07:24:f7:8e:36:83:
24:f4:e2:22:5e:93:d3:63:4d:c4:5c:af:17:36:43:8e:8d:a5:
ec:6f:3d:c1:35:21:8b:58:87:6b:8e:cf:84:f1:86:4b:40:06:
84:61:4d:44:ed:f9:63:73:23:5c:bc:08:00:14:bc:4a:6e:97:
a9:ca:a3:30:c4:99:a7:6d:d5:7c:34:e2:e4:b2:40:8c:3b:fb:
8b:03:c1:e7:6b:17:ce:92:ef:58:fd:f2:54:9b:fc:b0:59:c9:
73:51:4c:31:bc:c8:c4:ab:05:1a:71:76:d4:85:1d:2c:f6:ea:
fc:d9:37:8b:1e:86:0f:62:81:fa:ca:d6:3f:7b:10:ed:aa:66:
c1:59:1c:6a:a8:bc:c0:ae:02:37:10:fd:18:ee:3b:e0:36:73:
4a:8f:80:86:ef:f0:8c:dc:f5:a4:c6:f7:76:76:53:bb:2c:7e:
8d:17:68:27:ae:93:dd:b6:16:e0:5b:6c:fa:c4:cf:a9:f7:11:
98:06:01:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 11:33:40 2025 by rpki-client