Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/8ccebf-f9fa-4c46-aee8-ccbfa73424a7/1/f-4_OCBz8sPk_M_8o4TFsM2CbCY.mft
File: f-4_OCBz8sPk_M_8o4TFsM2CbCY.mft (raw, json)
Hash identifier: RYdN2Nm7uaQl/E8wW9rTmYnCZ53sC+z8p59JhVM8jJU=
Subject key identifier: 59:DD:EE:D7:76:A4:45:0A:C6:4A:9F:60:E2:74:E3:3C:EF:17:46:BD
Authority key identifier: 7F:EE:3F:38:20:73:F2:C3:E4:FC:CF:FC:A3:84:C5:B0:CD:82:6C:26
Certificate issuer: /CN=7fee3f382073f2c3e4fccffca384c5b0cd826c26
Certificate serial: 0198D7E1A2D60A78564523660F1240C9332E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/f-4_OCBz8sPk_M_8o4TFsM2CbCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/8ccebf-f9fa-4c46-aee8-ccbfa73424a7/1/f-4_OCBz8sPk_M_8o4TFsM2CbCY.mft
Manifest number: 021B
Signing time: Sat 23 Aug 2025 17:02:25 +0000
Manifest this update: Sat 23 Aug 2025 17:02:25 +0000
Manifest next update: Sun 24 Aug 2025 17:02:25 +0000
Files and hashes: 1: bp5x62Zyl7JWmy23aQgvM10ld6k.roa (hash: WQfC7fNdtGvy/wZ5eChzXDiN7gOvNpvcGnI7lpvTUh0=)
2: f-4_OCBz8sPk_M_8o4TFsM2CbCY.crl (hash: eQS77UOPuVHNUgY6hEaziNqlAgjQVwYm5x+A6ZbylQw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/8ccebf-f9fa-4c46-aee8-ccbfa73424a7/1/f-4_OCBz8sPk_M_8o4TFsM2CbCY.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/8ccebf-f9fa-4c46-aee8-ccbfa73424a7/1/f-4_OCBz8sPk_M_8o4TFsM2CbCY.mft
rsync://rpki.ripe.net/repository/DEFAULT/f-4_OCBz8sPk_M_8o4TFsM2CbCY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 14:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d7:e1:a2:d6:0a:78:56:45:23:66:0f:12:40:c9:33:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7fee3f382073f2c3e4fccffca384c5b0cd826c26
Validity
Not Before: Aug 23 17:02:25 2025 GMT
Not After : Aug 24 17:02:25 2025 GMT
Subject: CN=59ddeed776a4450ac64a9f60e274e33cef1746bd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:ac:d3:db:9c:fd:21:db:6f:08:9a:de:6f:74:
e2:a9:6c:c5:5b:85:2e:c8:d9:e8:81:81:d7:45:47:
b4:2f:55:3c:cb:a0:ed:71:aa:6f:17:ff:ee:1d:bd:
2b:50:b9:1b:2e:5b:1a:9a:89:31:f5:90:c6:7e:b7:
b9:de:57:09:38:17:28:47:9c:15:2b:76:d2:a6:b5:
69:c1:17:59:2e:3b:25:98:91:57:26:57:f8:bc:59:
f7:41:62:a9:ab:fb:c0:01:ff:6e:7b:7d:5b:48:4f:
fe:0c:11:75:d5:85:de:93:07:24:2c:01:59:c5:ba:
6e:39:38:07:7b:b0:51:8d:ef:04:41:d8:50:35:3d:
4b:e7:42:ec:10:04:d7:3c:0d:73:9d:90:a1:5c:19:
c3:b4:6c:99:6d:bf:d9:b2:db:1c:0b:7e:d8:2d:b5:
31:27:db:5b:73:6f:6c:8e:54:40:49:25:13:92:df:
f5:94:4a:78:ba:82:de:2c:46:7d:a2:00:fd:a9:aa:
8f:2c:8b:9d:43:b7:26:89:5b:46:9d:eb:c4:4e:7c:
3e:3b:12:b6:e8:b6:bf:ce:bf:66:9b:c3:c4:53:46:
9d:c2:b6:a4:07:11:7d:5c:7e:bd:2c:21:81:d4:e9:
42:a3:64:6f:f5:25:e9:6b:ab:cd:0a:61:7c:7e:76:
ff:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:DD:EE:D7:76:A4:45:0A:C6:4A:9F:60:E2:74:E3:3C:EF:17:46:BD
X509v3 Authority Key Identifier:
keyid:7F:EE:3F:38:20:73:F2:C3:E4:FC:CF:FC:A3:84:C5:B0:CD:82:6C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/f-4_OCBz8sPk_M_8o4TFsM2CbCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/8ccebf-f9fa-4c46-aee8-ccbfa73424a7/1/f-4_OCBz8sPk_M_8o4TFsM2CbCY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/8ccebf-f9fa-4c46-aee8-ccbfa73424a7/1/f-4_OCBz8sPk_M_8o4TFsM2CbCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:11:e2:99:3e:76:6d:a7:da:73:40:21:55:30:6a:43:7d:31:
7e:9d:43:13:84:f6:ec:19:0d:2e:78:06:44:d7:ae:29:1b:77:
57:ee:cc:6b:67:c3:95:e1:2f:bb:29:5f:8c:c0:76:78:7f:be:
a7:1a:84:ae:05:ed:b3:f2:6a:b5:db:94:c5:58:52:b8:67:a0:
24:00:d0:26:7d:7e:7c:45:fd:08:4b:fa:84:ff:5d:ef:06:31:
d1:25:5b:b1:9a:d8:39:2b:24:a0:dd:cf:97:71:d3:63:86:4b:
27:5c:bf:73:8c:70:01:73:2c:1d:c8:b9:e7:2b:77:75:57:6e:
bc:7a:f7:37:bf:44:bf:d4:e0:62:95:bb:b0:32:ee:7a:0f:54:
45:9c:7c:68:fa:8b:a4:d5:88:26:b5:13:f9:d8:19:fe:7e:e1:
b0:42:ac:3d:aa:ca:e3:82:13:f1:9d:48:76:96:eb:72:74:fb:
dc:15:c5:b1:bd:b8:e4:b6:37:38:50:69:4f:d2:96:65:da:da:
1e:8f:95:2c:e4:66:d7:a5:07:a7:3d:21:ae:c4:be:10:08:64:
a7:12:a4:08:fd:71:65:10:19:88:ba:b2:35:cc:15:e5:20:f3:
72:c7:78:1b:c9:73:85:ad:bb:b7:97:41:68:6f:63:42:96:cd:
cf:ae:50:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 00:24:22 2025 by rpki-client