Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/d2e826-5acb-47d6-92a4-43bb19f2e53b/1/s4WUFGIC4vbDRWsGlv8YVi8bn4E.mft
File: s4WUFGIC4vbDRWsGlv8YVi8bn4E.mft (raw, json)
Hash identifier: 7hOufQm3cCP+dqbIUWF7Lsr6WLeMR86Zg3pV7+41LlE=
Subject key identifier: AA:AF:35:D8:0B:CE:56:32:4E:B7:71:8F:2B:EF:E5:9C:03:6B:F6:00
Authority key identifier: B3:85:94:14:62:02:E2:F6:C3:45:6B:06:96:FF:18:56:2F:1B:9F:81
Certificate issuer: /CN=b38594146202e2f6c3456b0696ff18562f1b9f81
Certificate serial: 0198D4A7C51C8A04000F9B27945B13EBF000
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s4WUFGIC4vbDRWsGlv8YVi8bn4E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/d2e826-5acb-47d6-92a4-43bb19f2e53b/1/s4WUFGIC4vbDRWsGlv8YVi8bn4E.mft
Manifest number: 09D2
Signing time: Sat 23 Aug 2025 02:00:21 +0000
Manifest this update: Sat 23 Aug 2025 02:00:21 +0000
Manifest next update: Sun 24 Aug 2025 02:00:21 +0000
Files and hashes: 1: IcIyZXTtvGCVT7kmzm3an6XI4Ds.roa (hash: 9+rlboX5YqLY2xGwqsRBQUwcIF0ZyOqFrf8SvNh+rfQ=)
2: s4WUFGIC4vbDRWsGlv8YVi8bn4E.crl (hash: f2WV0eQws/9bufiyNYOEKUXH/9c+NZiNSSoFrPUxpis=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/d2e826-5acb-47d6-92a4-43bb19f2e53b/1/s4WUFGIC4vbDRWsGlv8YVi8bn4E.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/d2e826-5acb-47d6-92a4-43bb19f2e53b/1/s4WUFGIC4vbDRWsGlv8YVi8bn4E.mft
rsync://rpki.ripe.net/repository/DEFAULT/s4WUFGIC4vbDRWsGlv8YVi8bn4E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 02:00:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:a7:c5:1c:8a:04:00:0f:9b:27:94:5b:13:eb:f0:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b38594146202e2f6c3456b0696ff18562f1b9f81
Validity
Not Before: Aug 23 02:00:21 2025 GMT
Not After : Aug 24 02:00:21 2025 GMT
Subject: CN=aaaf35d80bce56324eb7718f2befe59c036bf600
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:d8:47:2e:0f:d7:6b:1a:9d:57:d5:4e:b1:fe:
76:52:c2:2d:7e:7a:69:20:aa:a7:01:09:cb:a1:07:
d5:35:df:50:f2:5f:17:6d:bc:34:60:1c:ab:65:5e:
df:82:7a:ec:08:d6:71:6c:ec:82:ca:14:83:c2:3f:
d7:4f:cc:7f:87:a4:cf:c0:97:c6:8e:54:16:90:80:
d3:b6:bf:8a:f5:62:96:99:6a:f0:77:50:70:a5:e1:
b4:dc:c2:d4:dc:d9:3b:48:24:9b:3e:b9:53:5e:4a:
90:c9:fb:c3:b4:c9:95:ce:ea:89:17:4e:3f:18:0b:
5a:3a:c3:95:c8:bf:8c:18:0a:7f:a1:a4:8e:4c:23:
6b:43:d3:84:26:d5:f8:c0:f7:bb:ad:bf:1a:f6:22:
11:bc:f5:95:31:7f:08:b1:fb:18:45:78:2e:60:e4:
a9:35:74:53:44:d9:38:7e:d8:a4:23:96:a6:1f:b0:
c2:ca:00:29:7c:e1:4a:db:c3:7d:e1:27:ab:b4:f4:
ef:52:82:b3:9e:fc:52:70:a1:88:6a:af:a3:3c:a3:
2a:aa:2d:e3:75:bb:9d:64:ad:c8:cf:0c:3b:f8:af:
3a:d0:fc:83:e6:16:67:dd:48:07:46:3f:70:3b:85:
54:31:d3:cb:b4:00:1e:f9:22:e3:57:a3:f2:88:be:
76:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:AF:35:D8:0B:CE:56:32:4E:B7:71:8F:2B:EF:E5:9C:03:6B:F6:00
X509v3 Authority Key Identifier:
keyid:B3:85:94:14:62:02:E2:F6:C3:45:6B:06:96:FF:18:56:2F:1B:9F:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s4WUFGIC4vbDRWsGlv8YVi8bn4E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/d2e826-5acb-47d6-92a4-43bb19f2e53b/1/s4WUFGIC4vbDRWsGlv8YVi8bn4E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/d2e826-5acb-47d6-92a4-43bb19f2e53b/1/s4WUFGIC4vbDRWsGlv8YVi8bn4E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:d7:89:48:ab:bc:ce:4e:95:67:03:9d:e2:3d:47:ec:be:fd:
b5:d6:ab:b3:18:24:9c:4b:eb:63:08:ee:ab:a0:7a:ec:c4:42:
15:17:cc:ee:a7:6c:7e:01:67:3e:05:51:91:d0:71:6e:bb:b0:
db:90:1c:de:fd:e0:87:34:b1:f1:a1:ff:2e:d4:16:4e:23:43:
a8:a3:61:2d:44:08:4a:92:a4:5a:91:72:37:b8:45:09:e7:5c:
ba:07:ed:df:83:47:6a:9f:dc:13:3d:14:cb:b6:6f:92:a5:1c:
48:d3:ce:54:73:4b:b1:8d:ac:a7:44:9f:5f:0a:18:ff:94:87:
7a:07:23:02:7f:9b:07:00:f0:8a:30:d6:b0:88:a9:b2:ed:b7:
35:82:f3:cd:85:e1:a8:d6:04:ff:b3:01:b1:d2:ec:be:e2:85:
3f:e5:59:46:a0:45:a7:29:e0:87:08:33:10:da:b4:dd:d5:5d:
36:7b:a9:c7:27:19:ca:61:9e:26:b9:8c:68:98:4d:fe:49:09:
cd:52:d3:18:22:f7:a6:aa:74:c5:29:ea:42:95:db:eb:bd:4d:
bc:5a:d6:87:8a:fc:c7:90:c6:c8:72:ef:98:6b:b3:10:8d:e4:
71:c6:cc:d2:9c:3e:54:d6:0d:3b:62:1e:08:b3:f5:d7:10:84:
a6:ac:9e:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:48:52 2025 by rpki-client