Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9d/968a85-01d3-4b0c-b920-66cbf876ab3e/1/4B8Zbdft0RMdAiD9t3cSJiG7ve8.mft
File: 4B8Zbdft0RMdAiD9t3cSJiG7ve8.mft (raw, json)
Hash identifier: rUs1HdOVb6c6ffNPwUI0gbEOb+4mxd3svNr5mZ4SLCo=
Subject key identifier: A4:90:70:BA:70:35:8D:DA:A7:D3:C7:31:3F:E7:D2:CA:2F:49:B5:D9
Authority key identifier: E0:1F:19:6D:D7:ED:D1:13:1D:02:20:FD:B7:77:12:26:21:BB:BD:EF
Certificate issuer: /CN=e01f196dd7edd1131d0220fdb777122621bbbdef
Certificate serial: 0198D7059673E854BD038432EAE58B2F13D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4B8Zbdft0RMdAiD9t3cSJiG7ve8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9d/968a85-01d3-4b0c-b920-66cbf876ab3e/1/4B8Zbdft0RMdAiD9t3cSJiG7ve8.mft
Manifest number: 0B5D
Signing time: Sat 23 Aug 2025 13:02:04 +0000
Manifest this update: Sat 23 Aug 2025 13:02:04 +0000
Manifest next update: Sun 24 Aug 2025 13:02:04 +0000
Files and hashes: 1: 4B8Zbdft0RMdAiD9t3cSJiG7ve8.crl (hash: DLmfhXU2VIlmD0VDhuAbHf+1/UqPcNPf/K1sqx3BftM=)
2: 4ea1dMd4wRgTBo1jIMebmZZJLM4.roa (hash: s7rnybcZ+EzxkGbEPGLzvVlVM7bMx+c1GhcuJyz67VI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9d/968a85-01d3-4b0c-b920-66cbf876ab3e/1/4B8Zbdft0RMdAiD9t3cSJiG7ve8.crl
rsync://rpki.ripe.net/repository/DEFAULT/9d/968a85-01d3-4b0c-b920-66cbf876ab3e/1/4B8Zbdft0RMdAiD9t3cSJiG7ve8.mft
rsync://rpki.ripe.net/repository/DEFAULT/4B8Zbdft0RMdAiD9t3cSJiG7ve8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 12:50:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d7:05:96:73:e8:54:bd:03:84:32:ea:e5:8b:2f:13:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e01f196dd7edd1131d0220fdb777122621bbbdef
Validity
Not Before: Aug 23 13:02:04 2025 GMT
Not After : Aug 24 13:02:04 2025 GMT
Subject: CN=a49070ba70358ddaa7d3c7313fe7d2ca2f49b5d9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:d6:d0:bf:33:5e:c4:7f:57:9a:ab:c0:be:40:
6b:ca:b9:c9:ff:27:03:e8:cd:c8:68:8e:3c:26:5b:
19:2c:78:e8:c4:64:98:4a:fe:e3:97:06:84:46:3f:
34:46:5d:fd:d0:9d:6c:29:0b:fc:ef:6f:a3:9c:6a:
14:8d:3c:c0:e1:68:87:78:c7:3b:5b:96:79:01:1c:
2e:c4:a5:f5:e9:eb:85:ef:54:74:9e:60:75:21:0c:
04:16:9c:e7:55:f4:65:2a:7a:b5:65:29:76:a0:70:
8b:0e:3b:a5:fb:cb:12:e1:d1:07:3d:6f:c0:c1:aa:
09:1b:fe:5a:dc:2d:cf:83:fc:e6:1d:9d:c7:b1:21:
81:57:52:9f:69:3e:1f:12:c4:02:1f:a9:d3:10:87:
44:c9:2e:e7:0b:06:fd:ae:d1:4c:c5:40:56:83:2b:
00:b8:d6:0f:d2:5b:0d:60:ff:f1:68:05:49:27:4c:
24:e0:7a:49:7b:ca:47:80:ea:15:97:8e:85:26:7f:
23:59:f8:a8:7a:40:ad:b4:70:8c:ad:a5:f8:f6:3f:
8d:8d:5f:10:9a:19:50:1f:99:64:e2:95:a3:8f:67:
2e:90:95:27:f8:4c:c8:dc:5c:00:23:7f:09:1b:e4:
94:8e:7f:85:41:6c:3c:18:99:c3:5e:32:d8:bc:a0:
4b:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:90:70:BA:70:35:8D:DA:A7:D3:C7:31:3F:E7:D2:CA:2F:49:B5:D9
X509v3 Authority Key Identifier:
keyid:E0:1F:19:6D:D7:ED:D1:13:1D:02:20:FD:B7:77:12:26:21:BB:BD:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4B8Zbdft0RMdAiD9t3cSJiG7ve8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/968a85-01d3-4b0c-b920-66cbf876ab3e/1/4B8Zbdft0RMdAiD9t3cSJiG7ve8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/968a85-01d3-4b0c-b920-66cbf876ab3e/1/4B8Zbdft0RMdAiD9t3cSJiG7ve8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:12:32:a3:b7:2a:9a:2f:01:5f:23:02:d5:8e:3e:c8:63:71:
38:c4:11:65:09:ea:e2:a1:da:f5:f7:92:3b:ff:6c:bb:42:d2:
6f:60:85:d2:e3:c0:be:54:06:9e:ee:50:0f:83:39:41:cb:cc:
3b:bb:df:9c:7e:9e:87:fe:98:3f:14:c5:e9:02:a4:63:39:81:
fd:2d:6f:92:72:2c:45:4a:29:60:77:4c:fb:e7:4f:f6:67:b2:
31:c2:9a:9d:7d:1e:1f:fb:12:b9:e6:82:eb:48:f8:46:d5:9b:
df:5c:27:5a:20:6c:4b:a5:c7:fd:6b:74:74:1f:da:1f:87:d9:
3b:26:8b:0d:1f:0c:2c:e5:c8:dc:5f:10:fd:53:91:25:64:bd:
55:69:9b:27:86:ba:d0:ec:5f:0a:4b:cf:a0:45:74:6a:df:43:
99:a8:d4:14:f8:c0:8f:ac:7d:65:2c:18:57:8a:01:0a:9e:00:
ac:0e:7a:cd:32:c9:fa:88:5a:e0:e8:a7:05:ed:4c:00:89:d3:
dd:5f:74:1b:f5:fb:94:65:da:c0:2d:4d:5a:dc:e9:6a:97:ba:
fd:3e:e9:32:56:0a:1f:85:52:49:da:75:df:48:42:ee:12:fc:
ac:6b:e9:4d:ed:c8:88:19:86:05:9d:1a:86:a8:be:10:5c:98:
11:f0:0c:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 17:47:54 2025 by rpki-client