Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/64ed62-a8ef-4802-a1b4-9f97b0fc4832/1/4kVMRWzmi6j-ytVCqrlhCx7MEuI.mft
File: 4kVMRWzmi6j-ytVCqrlhCx7MEuI.mft (raw, json)
Hash identifier: 9wTawR4LUQIiGPIiwG+ygSE+dOF3MYtu51cpvUEuuS8=
Subject key identifier: 0E:AF:4A:FB:C0:5E:26:25:3E:10:FA:47:15:92:62:BF:77:7E:4A:37
Authority key identifier: E2:45:4C:45:6C:E6:8B:A8:FE:CA:D5:42:AA:B9:61:0B:1E:CC:12:E2
Certificate issuer: /CN=e2454c456ce68ba8fecad542aab9610b1ecc12e2
Certificate serial: 0198D6CD8C285B6E395600B5B79B9C28D222
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4kVMRWzmi6j-ytVCqrlhCx7MEuI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/64ed62-a8ef-4802-a1b4-9f97b0fc4832/1/4kVMRWzmi6j-ytVCqrlhCx7MEuI.mft
Manifest number: 164D
Signing time: Sat 23 Aug 2025 12:00:51 +0000
Manifest this update: Sat 23 Aug 2025 12:00:51 +0000
Manifest next update: Sun 24 Aug 2025 12:00:51 +0000
Files and hashes: 1: 4kVMRWzmi6j-ytVCqrlhCx7MEuI.crl (hash: qa7dx58Q10czKMAhUwSB0LBv1qRG7gu+e7XnCPah6kU=)
2: 9wiAjxQ8cKdQoI4k97phXcqjm0U.roa (hash: aw34neSnWmkzi+er/oSuocGYd5WKHEhdmA5jFSEL7u8=)
3: VHke2dRAU413gG-qOq91BqFotnA.roa (hash: tCtViRscoxX/FUXZsRP79cmOS8/23LI5c9CHWFx8Vhg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/aa/64ed62-a8ef-4802-a1b4-9f97b0fc4832/1/4kVMRWzmi6j-ytVCqrlhCx7MEuI.crl
rsync://rpki.ripe.net/repository/DEFAULT/aa/64ed62-a8ef-4802-a1b4-9f97b0fc4832/1/4kVMRWzmi6j-ytVCqrlhCx7MEuI.mft
rsync://rpki.ripe.net/repository/DEFAULT/4kVMRWzmi6j-ytVCqrlhCx7MEuI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 12:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:cd:8c:28:5b:6e:39:56:00:b5:b7:9b:9c:28:d2:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e2454c456ce68ba8fecad542aab9610b1ecc12e2
Validity
Not Before: Aug 23 12:00:51 2025 GMT
Not After : Aug 24 12:00:51 2025 GMT
Subject: CN=0eaf4afbc05e26253e10fa47159262bf777e4a37
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:e6:7b:c4:bd:cd:dc:d8:8c:bc:03:80:63:6d:
b6:ac:43:a9:0a:0f:80:86:a7:b4:4e:be:35:ff:34:
2a:78:ce:42:fd:5c:68:9e:5b:b6:0c:1f:f2:07:e6:
51:5d:96:4a:1a:d2:a4:fd:db:31:e9:9e:6e:d0:c0:
6a:5e:50:1c:da:57:f3:b9:8a:05:c0:62:ff:45:7a:
b3:a1:92:b8:f8:44:36:e6:f1:c9:ce:9b:15:69:fb:
60:ae:b4:a9:c0:81:a5:f1:12:04:8e:90:26:f7:28:
3d:46:ef:26:c1:4b:d3:15:cf:4b:68:fb:97:a0:89:
87:6d:7b:a0:d3:c2:b8:27:e5:39:48:ab:eb:0a:e8:
3c:c2:27:49:9f:7d:ad:bd:fd:1b:f3:88:06:e6:88:
d5:2d:ab:21:e3:d7:5c:96:d4:f1:a8:02:a7:07:32:
fa:69:5e:0e:78:23:03:42:d4:00:27:f3:b3:80:fa:
0b:6a:76:3c:57:c1:e0:8a:a6:c9:72:42:91:f1:cb:
5e:0c:8f:78:66:4a:f4:21:05:bd:bb:20:ce:12:75:
f8:94:2b:17:8d:20:fb:b7:2a:8b:6a:03:b8:01:43:
e8:63:94:04:53:24:87:ff:f1:73:4c:cf:7d:6f:93:
d1:ca:e6:ed:9a:ef:3f:bf:9c:7d:58:1e:d5:14:e9:
98:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:AF:4A:FB:C0:5E:26:25:3E:10:FA:47:15:92:62:BF:77:7E:4A:37
X509v3 Authority Key Identifier:
keyid:E2:45:4C:45:6C:E6:8B:A8:FE:CA:D5:42:AA:B9:61:0B:1E:CC:12:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4kVMRWzmi6j-ytVCqrlhCx7MEuI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/64ed62-a8ef-4802-a1b4-9f97b0fc4832/1/4kVMRWzmi6j-ytVCqrlhCx7MEuI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/64ed62-a8ef-4802-a1b4-9f97b0fc4832/1/4kVMRWzmi6j-ytVCqrlhCx7MEuI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:55:b8:7f:1d:d9:69:a0:79:05:77:19:cb:8e:88:a0:e7:f8:
4b:f3:e9:55:e9:e1:be:b0:0e:9b:47:95:59:0a:36:a0:ca:48:
f2:57:56:26:0c:de:ea:80:c4:ef:34:2d:f5:a7:6c:e4:d7:a2:
48:e5:d1:25:34:3a:2a:8f:ab:8e:81:b7:d1:ff:be:e9:dc:ba:
94:d0:63:86:4b:d9:aa:24:ad:5e:db:54:50:69:51:a5:48:ab:
10:2e:63:b4:d2:b2:73:f7:48:74:50:0d:9f:5a:1c:bc:cc:1e:
e1:ae:54:d8:e4:08:21:5b:24:6d:84:34:a9:c8:26:db:f0:13:
92:8b:fd:5f:ec:d8:77:38:b9:e4:db:ab:17:4a:66:13:92:ca:
e6:14:2f:41:21:b9:37:b4:0e:0b:0e:d2:10:9c:3a:8a:fd:58:
4e:f2:4c:25:1d:98:74:b6:b9:35:d0:c9:a2:d3:f6:4d:c1:46:
89:f3:69:58:91:7b:6f:fe:c9:30:c1:96:e9:84:2a:f1:6d:c6:
e9:02:ba:c4:10:97:9f:50:08:9c:41:10:85:33:1e:da:31:5e:
7b:5c:5c:a5:68:94:f6:c3:2a:aa:21:79:ed:3c:66:da:d8:46:
b1:b9:33:9d:0f:6d:cb:43:b9:42:4f:8a:04:8d:4a:f1:d7:b1:
18:4b:e5:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 16:12:14 2025 by rpki-client