Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/3cd961-2dcd-4518-bfb8-a16cf7ac7dd8/1/4MKGY5gUKldLpHsZfXF5G14jr3w.mft
File: 4MKGY5gUKldLpHsZfXF5G14jr3w.mft (raw, json)
Hash identifier: LnZbZAEgXDNyuQ1SXCvf0U0qcBkwldBYPDr0JbycVhE=
Subject key identifier: 79:42:B0:C0:3B:CB:10:53:4F:DD:CE:6E:9D:7B:33:FA:14:8F:CB:CE
Authority key identifier: E0:C2:86:63:98:14:2A:57:4B:A4:7B:19:7D:71:79:1B:5E:23:AF:7C
Certificate issuer: /CN=e0c2866398142a574ba47b197d71791b5e23af7c
Certificate serial: 0198D6603E0493BAEB42224350BC0FB07FAE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4MKGY5gUKldLpHsZfXF5G14jr3w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/3cd961-2dcd-4518-bfb8-a16cf7ac7dd8/1/4MKGY5gUKldLpHsZfXF5G14jr3w.mft
Manifest number: 1648
Signing time: Sat 23 Aug 2025 10:01:28 +0000
Manifest this update: Sat 23 Aug 2025 10:01:28 +0000
Manifest next update: Sun 24 Aug 2025 10:01:28 +0000
Files and hashes: 1: 4MKGY5gUKldLpHsZfXF5G14jr3w.crl (hash: /gu/MVYBvauD9Ul3Ze74TVQBVFIT2Yi/0b/Zbyy0agQ=)
2: S8FepsEj5yTfhoJEKIV6MM1Ae2g.roa (hash: akrj8wyt2+2beT5os1QACCsWDw3JzGKZbUx/i8JS4K0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9c/3cd961-2dcd-4518-bfb8-a16cf7ac7dd8/1/4MKGY5gUKldLpHsZfXF5G14jr3w.crl
rsync://rpki.ripe.net/repository/DEFAULT/9c/3cd961-2dcd-4518-bfb8-a16cf7ac7dd8/1/4MKGY5gUKldLpHsZfXF5G14jr3w.mft
rsync://rpki.ripe.net/repository/DEFAULT/4MKGY5gUKldLpHsZfXF5G14jr3w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:60:3e:04:93:ba:eb:42:22:43:50:bc:0f:b0:7f:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e0c2866398142a574ba47b197d71791b5e23af7c
Validity
Not Before: Aug 23 10:01:28 2025 GMT
Not After : Aug 24 10:01:28 2025 GMT
Subject: CN=7942b0c03bcb10534fddce6e9d7b33fa148fcbce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:11:42:5c:bd:ab:fb:b0:6a:0b:a1:72:c3:52:
e7:f0:a7:82:5b:05:0b:0a:70:90:3d:dd:cc:6c:b3:
8b:53:89:10:df:9b:f0:8c:cd:df:d8:e5:8b:33:e9:
06:78:09:03:92:09:d3:47:77:2f:90:b5:d3:2c:d0:
0f:f0:fd:f5:56:f0:51:83:de:87:0d:cf:05:96:f0:
ca:01:67:4d:cc:40:87:24:f9:f7:3b:04:99:97:b0:
36:4d:a7:1a:76:9a:dd:1e:75:8e:2a:d1:13:dc:7e:
75:6e:6a:36:e1:92:b3:41:a2:bd:58:e6:18:c7:2f:
38:1f:80:75:51:9f:69:6e:9c:7f:16:b5:8b:51:cb:
c6:24:52:04:80:fc:5a:46:40:57:7d:04:21:38:d8:
d4:9b:5b:1d:84:32:03:ca:0e:d4:ad:27:98:45:0b:
8a:b4:90:f2:16:4a:6f:2b:72:b4:06:0d:7f:8d:aa:
4b:ce:9d:46:69:d6:03:e4:74:9f:65:9d:64:ed:c7:
fe:05:ec:fc:29:37:b2:fe:dc:3e:40:7e:84:1a:23:
7d:7f:7e:7f:f7:3e:f1:a2:33:1c:ad:fe:fa:c5:a2:
67:b2:c9:ad:8e:d4:cb:09:97:c8:df:c2:3b:25:02:
b9:fb:4d:81:1f:95:a4:c6:8f:24:3f:fb:31:16:85:
0d:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:42:B0:C0:3B:CB:10:53:4F:DD:CE:6E:9D:7B:33:FA:14:8F:CB:CE
X509v3 Authority Key Identifier:
keyid:E0:C2:86:63:98:14:2A:57:4B:A4:7B:19:7D:71:79:1B:5E:23:AF:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4MKGY5gUKldLpHsZfXF5G14jr3w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/3cd961-2dcd-4518-bfb8-a16cf7ac7dd8/1/4MKGY5gUKldLpHsZfXF5G14jr3w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/3cd961-2dcd-4518-bfb8-a16cf7ac7dd8/1/4MKGY5gUKldLpHsZfXF5G14jr3w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:bb:78:12:f6:d7:5e:47:b4:a9:e2:e8:31:5e:45:80:7e:29:
c3:0a:10:39:24:a8:28:64:a6:01:25:12:af:f5:14:7f:cc:c7:
45:0d:a2:a8:ff:50:ae:7b:0d:df:5e:4d:a1:e6:b4:bf:ec:d7:
3e:a4:3b:c2:3a:01:af:60:1d:5d:d4:b1:5d:b8:c0:ac:e9:6f:
03:1e:90:57:50:58:f5:9c:4d:0b:33:81:b4:49:ed:8e:f9:27:
88:76:e1:73:db:2f:c6:e2:fa:5d:15:0d:3f:80:d8:b6:7c:a6:
1a:1f:c9:e2:e5:bc:62:66:ac:6d:1d:db:95:e5:91:27:49:22:
ef:39:4f:7a:2e:49:79:fc:d0:d4:b9:7b:eb:be:c5:9a:9c:cb:
f9:72:37:ee:c8:81:1c:8e:9a:b1:50:e2:2c:20:78:ac:44:99:
c5:95:54:2d:b6:06:02:bd:cf:89:8c:be:86:6f:43:d7:b7:15:
ba:19:d7:90:5c:cd:81:41:30:13:ec:47:2d:e4:a5:e7:c2:c6:
a9:0a:bf:7f:3f:38:66:8f:c0:99:ee:a4:80:d5:2f:d9:e3:f2:
4d:f0:5d:1e:55:e2:19:80:ef:7f:72:e7:8f:1c:5e:c3:dd:d6:
39:5c:03:eb:db:1d:c2:87:af:b6:29:15:4c:d8:63:32:11:27:
1f:6c:0f:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:28:28 2025 by rpki-client