Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/09b6c7-52ef-4897-bfa6-5e0e281d7da3/1/X4anFB9vt7TCi84xRGe2FU4Pk3c.mft
File: X4anFB9vt7TCi84xRGe2FU4Pk3c.mft (raw, json)
Hash identifier: QKbJCVJvRNWQ0XQZdjBNCUAUpPouHvp9u5kardPQ5f0=
Subject key identifier: 4A:49:17:8E:3D:D3:29:05:96:0F:1B:EA:D3:D8:4B:E9:48:B1:68:D9
Authority key identifier: 5F:86:A7:14:1F:6F:B7:B4:C2:8B:CE:31:44:67:B6:15:4E:0F:93:77
Certificate issuer: /CN=5f86a7141f6fb7b4c28bce314467b6154e0f9377
Certificate serial: 0198D4DFF292DD14C4615A0F6475E88CFDEE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X4anFB9vt7TCi84xRGe2FU4Pk3c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/09b6c7-52ef-4897-bfa6-5e0e281d7da3/1/X4anFB9vt7TCi84xRGe2FU4Pk3c.mft
Manifest number: 0DE3
Signing time: Sat 23 Aug 2025 03:01:43 +0000
Manifest this update: Sat 23 Aug 2025 03:01:43 +0000
Manifest next update: Sun 24 Aug 2025 03:01:43 +0000
Files and hashes: 1: BR7Kxw4uDHIJjtWZxBN3yY39MEc.roa (hash: NNnpY2dCMdRRtPAK+Xc47po5O7wykSonQcaPlzT/ALM=)
2: X4anFB9vt7TCi84xRGe2FU4Pk3c.crl (hash: XBJL3WZ69jHlXkiI+eoVWV+WUYtEwCGqafH+A6Ykkgc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ad/09b6c7-52ef-4897-bfa6-5e0e281d7da3/1/X4anFB9vt7TCi84xRGe2FU4Pk3c.crl
rsync://rpki.ripe.net/repository/DEFAULT/ad/09b6c7-52ef-4897-bfa6-5e0e281d7da3/1/X4anFB9vt7TCi84xRGe2FU4Pk3c.mft
rsync://rpki.ripe.net/repository/DEFAULT/X4anFB9vt7TCi84xRGe2FU4Pk3c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:df:f2:92:dd:14:c4:61:5a:0f:64:75:e8:8c:fd:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5f86a7141f6fb7b4c28bce314467b6154e0f9377
Validity
Not Before: Aug 23 03:01:43 2025 GMT
Not After : Aug 24 03:01:43 2025 GMT
Subject: CN=4a49178e3dd32905960f1bead3d84be948b168d9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:ae:84:24:56:3c:d6:58:9c:fa:db:20:83:7d:
b5:d7:64:3e:bf:3d:db:17:08:ff:95:f0:18:c9:18:
11:67:53:16:7d:e1:4a:d9:21:5d:a3:70:2a:4e:1a:
de:f8:97:be:ec:56:72:b0:c5:c4:94:2d:f3:ab:6d:
22:aa:de:27:2c:d0:82:26:43:98:7c:e7:e6:28:fc:
47:60:4e:7a:b4:60:40:73:fc:24:32:21:43:59:4b:
32:f2:a9:c6:65:ed:00:2a:ab:48:b3:55:50:8e:49:
e4:78:77:91:f0:8e:cc:15:6f:ee:e2:34:c0:63:cb:
f6:b4:c8:47:3e:fd:9b:be:96:a5:12:d7:cb:af:2b:
1f:66:2e:61:d7:bd:a5:fd:73:f3:9c:83:f4:68:f7:
9c:8f:59:ac:2c:41:9a:11:11:d9:0b:f0:c8:0b:fe:
6b:a1:87:71:e2:1e:3e:6d:7f:8b:cf:13:62:74:1f:
3a:f7:2b:7b:51:17:c9:2a:cf:88:2b:c5:34:d8:e8:
23:ed:db:90:2d:57:53:26:6e:b2:4d:88:09:61:f1:
7b:98:76:c1:3d:bf:ff:eb:37:4a:ed:4b:03:91:3a:
46:36:71:b7:2e:d0:2f:10:40:01:df:b1:71:c1:09:
71:75:c4:35:38:d9:99:b0:89:12:e5:65:8b:fc:6d:
d3:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:49:17:8E:3D:D3:29:05:96:0F:1B:EA:D3:D8:4B:E9:48:B1:68:D9
X509v3 Authority Key Identifier:
keyid:5F:86:A7:14:1F:6F:B7:B4:C2:8B:CE:31:44:67:B6:15:4E:0F:93:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X4anFB9vt7TCi84xRGe2FU4Pk3c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/09b6c7-52ef-4897-bfa6-5e0e281d7da3/1/X4anFB9vt7TCi84xRGe2FU4Pk3c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/09b6c7-52ef-4897-bfa6-5e0e281d7da3/1/X4anFB9vt7TCi84xRGe2FU4Pk3c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ac:75:80:d0:b3:24:51:20:70:cd:74:6d:9b:ad:5a:1c:89:b3:
ea:b0:80:8b:2a:d9:51:54:d8:ba:d6:09:6a:52:73:63:31:a2:
69:c1:91:ab:8c:ca:25:4f:46:ab:70:e3:b3:a5:d1:82:85:8c:
11:96:83:59:d1:04:54:8e:e4:00:18:c4:6b:ad:ab:fe:ae:76:
94:5f:13:d3:7a:56:47:57:96:34:91:9e:9c:a8:c6:5e:41:27:
15:3c:e5:01:38:cd:92:d0:8d:32:27:73:d9:08:e5:c1:fa:de:
20:45:5f:a9:d5:5f:1d:ed:3f:8d:60:78:a4:0b:1d:d6:b5:f7:
15:d4:8e:b3:c4:45:d6:fa:b4:44:d7:1e:38:4d:a1:f5:ea:ef:
95:19:68:7d:ab:ed:0b:41:00:d9:9a:25:7d:e6:e4:d2:e5:e5:
3c:9f:ed:b7:52:e5:5a:05:5a:30:65:76:a4:62:39:46:55:b0:
da:cf:80:e2:f4:95:8a:45:73:c3:d4:db:e9:32:2d:06:47:f0:
b2:d8:a0:f5:93:2b:f3:c4:77:50:7d:a7:f5:6e:93:28:26:0a:
af:c8:47:11:19:d6:d5:89:ed:dd:2f:cd:fc:e6:fb:c9:1c:53:
f1:d6:55:5c:a6:2a:14:a2:5e:00:92:a4:e6:f7:b4:a2:79:0b:
b1:f0:51:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 09:37:57 2025 by rpki-client