Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/c6929d-ac53-48f0-9afe-2c9679ace9b1/1/4OG_U-vte1SAhvSvaANFQPIKeOw.mft
File: 4OG_U-vte1SAhvSvaANFQPIKeOw.mft (raw, json)
Hash identifier: 4ln+brCsJOpUgpkh4/f23m8mwzhQCrwHDSBkd9h0Xw0=
Subject key identifier: 32:BA:E7:83:8B:E7:1A:C3:6F:AF:8F:8D:D6:6D:08:97:38:E0:5F:3E
Authority key identifier: E0:E1:BF:53:EB:ED:7B:54:80:86:F4:AF:68:03:45:40:F2:0A:78:EC
Certificate issuer: /CN=e0e1bf53ebed7b548086f4af68034540f20a78ec
Certificate serial: 0198D6298BD880F7C9D775F1F5180047B237
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4OG_U-vte1SAhvSvaANFQPIKeOw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/c6929d-ac53-48f0-9afe-2c9679ace9b1/1/4OG_U-vte1SAhvSvaANFQPIKeOw.mft
Manifest number: 8C
Signing time: Sat 23 Aug 2025 09:01:43 +0000
Manifest this update: Sat 23 Aug 2025 09:01:43 +0000
Manifest next update: Sun 24 Aug 2025 09:01:43 +0000
Files and hashes: 1: 4OG_U-vte1SAhvSvaANFQPIKeOw.crl (hash: 7VacsbVq+TzTnA91srlRJJCCuc/cmXgPo3em1RpaM8E=)
2: L18LfUdDFMe4UbMpcGQhNbyBBFA.roa (hash: qvvnhzQads/EsFKpKYrOSE0oyBJYg5HQKOC8BoIIN9s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a8/c6929d-ac53-48f0-9afe-2c9679ace9b1/1/4OG_U-vte1SAhvSvaANFQPIKeOw.crl
rsync://rpki.ripe.net/repository/DEFAULT/a8/c6929d-ac53-48f0-9afe-2c9679ace9b1/1/4OG_U-vte1SAhvSvaANFQPIKeOw.mft
rsync://rpki.ripe.net/repository/DEFAULT/4OG_U-vte1SAhvSvaANFQPIKeOw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 09:01:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:29:8b:d8:80:f7:c9:d7:75:f1:f5:18:00:47:b2:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e0e1bf53ebed7b548086f4af68034540f20a78ec
Validity
Not Before: Aug 23 09:01:43 2025 GMT
Not After : Aug 24 09:01:43 2025 GMT
Subject: CN=32bae7838be71ac36faf8f8dd66d089738e05f3e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:70:14:a7:9a:78:7f:46:2c:9e:ec:e6:84:d1:
10:82:2e:8a:9f:b7:89:eb:3f:ab:a1:6e:1f:5b:da:
44:1c:77:51:f7:ab:04:2b:f8:7e:90:f8:72:e4:23:
90:a1:1e:e3:ca:02:a2:6e:b3:c8:55:8c:eb:52:2b:
5e:2d:fb:bb:eb:38:ac:f2:1c:45:06:bc:1b:ba:cb:
6b:f6:e8:c5:d8:87:a3:be:d8:4b:80:dd:83:4a:b4:
a4:21:49:f7:1f:86:14:e5:6b:42:7b:a3:93:cf:fb:
20:19:3e:ba:20:d3:68:fe:33:af:27:3f:91:57:14:
57:cf:d0:3b:0b:6a:34:bc:4a:5f:29:da:6d:36:9d:
dc:b4:a3:17:36:2e:e4:fd:a5:d1:55:01:30:df:ce:
5a:0a:54:f3:65:e5:af:94:c6:0c:06:f7:88:6f:99:
24:40:ca:ab:5d:3f:83:91:b7:6d:cc:93:7b:5b:41:
64:5b:d5:73:e8:31:73:ec:38:21:b1:2e:7b:36:3d:
a5:b5:20:e7:ed:19:fb:3b:2b:74:c7:79:e1:42:0f:
47:cd:9f:a2:02:fb:c2:11:d2:12:78:2f:6c:23:b1:
e4:33:c9:01:d5:3c:4a:14:6a:47:87:2e:41:1d:49:
bf:07:c9:ad:0e:a0:2d:23:d9:33:08:58:20:cd:d8:
63:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:BA:E7:83:8B:E7:1A:C3:6F:AF:8F:8D:D6:6D:08:97:38:E0:5F:3E
X509v3 Authority Key Identifier:
keyid:E0:E1:BF:53:EB:ED:7B:54:80:86:F4:AF:68:03:45:40:F2:0A:78:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4OG_U-vte1SAhvSvaANFQPIKeOw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/c6929d-ac53-48f0-9afe-2c9679ace9b1/1/4OG_U-vte1SAhvSvaANFQPIKeOw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/c6929d-ac53-48f0-9afe-2c9679ace9b1/1/4OG_U-vte1SAhvSvaANFQPIKeOw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
99:85:20:2f:d9:26:5d:0c:0e:41:15:f5:41:4f:61:3c:4c:df:
ce:ad:f7:e3:e0:2d:44:03:35:24:87:09:dd:48:83:a4:65:cf:
a3:ef:26:60:0d:54:ec:7b:eb:0a:76:0c:61:b3:20:a5:e3:f2:
d6:54:85:44:59:ea:6f:1c:e2:52:7d:e5:c7:f4:e0:d0:50:16:
92:34:4c:49:65:f4:8e:70:ba:53:c3:1a:92:a4:32:de:b8:9c:
00:71:61:34:3a:12:83:b2:dc:14:ac:d8:ed:9f:98:93:f7:41:
06:bf:5d:57:15:47:0f:f2:b7:65:cc:42:30:ff:31:0d:bf:51:
fb:75:79:8e:0c:b7:52:9d:13:9f:54:0a:7a:33:72:75:13:84:
cf:fe:bd:e0:99:1f:fb:b0:03:3b:5d:5f:1b:6e:64:89:6a:a9:
e9:ca:91:c8:7f:d2:4b:eb:25:f6:50:37:2b:d2:5c:40:5b:92:
68:74:64:f6:e9:ed:dc:9b:1c:e0:44:04:c6:f4:e9:c8:7a:f2:
32:66:47:b2:d5:14:68:53:82:33:62:0c:6b:d9:bb:c0:c0:ad:
2d:d4:d3:96:45:86:d8:a9:86:b8:03:66:a0:8b:52:ce:65:ff:
80:4e:5c:b6:71:45:e6:3c:e7:4e:51:1f:98:b0:04:58:e2:34:
af:43:7d:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 18:45:40 2025 by rpki-client