Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/d16e3e-eb09-4fb9-9081-bd3e7adde8de/1/4g44BaG09bYc_nMBDoOMLw0ltEs.mft
File: 4g44BaG09bYc_nMBDoOMLw0ltEs.mft (raw, json)
Hash identifier: t3aL7Y+Q62nHi1/84fQZuMfDzk5sx3dyFHdxbqBSNds=
Subject key identifier: A8:1C:B8:93:FB:21:5A:C7:03:D7:03:49:CE:CC:CD:AF:EF:62:43:75
Authority key identifier: E2:0E:38:05:A1:B4:F5:B6:1C:FE:73:01:0E:83:8C:2F:0D:25:B4:4B
Certificate issuer: /CN=e20e3805a1b4f5b61cfe73010e838c2f0d25b44b
Certificate serial: 0198D66072F9A862F1D3D99A8554FC50F4B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4g44BaG09bYc_nMBDoOMLw0ltEs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/d16e3e-eb09-4fb9-9081-bd3e7adde8de/1/4g44BaG09bYc_nMBDoOMLw0ltEs.mft
Manifest number: 0D5C
Signing time: Sat 23 Aug 2025 10:01:41 +0000
Manifest this update: Sat 23 Aug 2025 10:01:41 +0000
Manifest next update: Sun 24 Aug 2025 10:01:41 +0000
Files and hashes: 1: 4g44BaG09bYc_nMBDoOMLw0ltEs.crl (hash: 3FXAUlYXUEgLqO0hTWyrd/WeON9MU5iNrRjskUVG6/0=)
2: BD04oGhJezcKgfhBVSPLxiCwx-U.roa (hash: 6BJW9GRsg9XqwBDaRIKZatrd81rOIFw+haS77P869vM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/d16e3e-eb09-4fb9-9081-bd3e7adde8de/1/4g44BaG09bYc_nMBDoOMLw0ltEs.crl
rsync://rpki.ripe.net/repository/DEFAULT/ab/d16e3e-eb09-4fb9-9081-bd3e7adde8de/1/4g44BaG09bYc_nMBDoOMLw0ltEs.mft
rsync://rpki.ripe.net/repository/DEFAULT/4g44BaG09bYc_nMBDoOMLw0ltEs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:60:72:f9:a8:62:f1:d3:d9:9a:85:54:fc:50:f4:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e20e3805a1b4f5b61cfe73010e838c2f0d25b44b
Validity
Not Before: Aug 23 10:01:41 2025 GMT
Not After : Aug 24 10:01:41 2025 GMT
Subject: CN=a81cb893fb215ac703d70349cecccdafef624375
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:e6:cc:da:f2:fd:18:ce:6d:af:38:df:ee:de:
b1:e4:e4:18:16:38:06:6f:0d:5a:fe:2f:44:ac:7d:
5f:31:bf:b5:af:9f:28:6c:90:51:8e:cb:39:d9:37:
3c:69:4b:55:bd:d8:46:b0:35:a4:7f:14:a9:eb:e9:
52:20:d5:4d:93:24:89:32:50:e0:80:d3:a0:23:1b:
ec:3d:47:9f:48:25:24:d0:04:24:f6:71:36:a6:7d:
7b:14:08:fd:a2:3d:62:90:25:b3:ed:3b:24:1d:5f:
eb:d2:23:3b:30:3f:92:fd:1e:eb:b8:1b:a2:d5:fa:
27:fe:1e:ee:07:1f:c1:9b:58:4a:af:bd:96:2a:24:
90:04:82:6d:20:5c:4d:93:b0:16:f5:0a:db:f5:03:
a2:a1:33:97:29:a0:70:f8:5b:ec:82:8c:be:f0:ea:
e2:6a:10:5b:89:95:cb:9c:78:b6:eb:1c:0c:7f:b3:
43:93:b2:5a:ed:b7:34:40:a3:fb:b6:d0:6b:b5:7b:
15:5f:7e:d6:fa:62:5b:43:f4:c1:db:c2:c7:35:6d:
6a:90:3a:62:f3:f3:e1:60:a0:4b:83:96:af:0e:f3:
c4:5a:52:55:77:23:59:a3:66:3f:ac:e8:59:de:ea:
fc:20:67:e7:a2:df:09:da:66:72:c5:4c:d5:b9:e1:
fe:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:1C:B8:93:FB:21:5A:C7:03:D7:03:49:CE:CC:CD:AF:EF:62:43:75
X509v3 Authority Key Identifier:
keyid:E2:0E:38:05:A1:B4:F5:B6:1C:FE:73:01:0E:83:8C:2F:0D:25:B4:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4g44BaG09bYc_nMBDoOMLw0ltEs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/d16e3e-eb09-4fb9-9081-bd3e7adde8de/1/4g44BaG09bYc_nMBDoOMLw0ltEs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/d16e3e-eb09-4fb9-9081-bd3e7adde8de/1/4g44BaG09bYc_nMBDoOMLw0ltEs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:93:ed:27:6b:a3:43:8b:27:a3:d7:b1:bf:62:6a:e4:36:b3:
28:6a:25:02:fb:8e:48:05:b0:81:7e:00:eb:bb:26:bf:25:57:
19:cf:da:c1:be:ee:32:3b:f7:27:28:15:bb:03:e6:b7:97:53:
87:af:60:66:ad:5c:ca:df:15:0b:31:5d:db:b4:7f:ac:4e:36:
b0:a1:98:e5:de:e8:05:2a:e7:51:e4:45:6f:53:d8:31:03:b1:
72:d4:79:0d:0b:9e:76:4e:a2:82:3a:77:62:b2:43:50:65:2d:
b7:79:b3:c4:32:a9:22:6d:29:a0:f3:67:8e:c2:88:65:19:a9:
c0:57:2d:a8:b4:4d:e3:01:36:d0:90:56:0c:5c:5e:c7:7a:7d:
81:ec:1e:db:88:a7:22:c8:51:81:6e:7b:8c:22:cb:c9:99:0f:
9b:9b:a8:72:09:92:9a:56:6c:51:2a:b8:9e:52:d7:57:98:06:
bb:ba:5d:1f:30:97:9d:68:01:4c:70:79:79:e7:3b:70:d3:af:
62:a4:18:b8:60:31:a6:9d:a4:24:00:e0:ff:ce:49:77:3b:20:
a3:ef:4d:c3:5e:b5:87:46:43:c4:b7:36:8d:bf:7f:2d:95:16:
e0:e6:c6:49:63:ac:eb:9f:66:a8:63:b8:6a:55:61:dd:ff:77:
72:1a:34:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:21:20 2025 by rpki-client