Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/2dac8b-76cd-40f0-854e-1da2acc76e11/1/4rvHBn-KfFfWhtZ160aOmbhr1i0.mft
File: 4rvHBn-KfFfWhtZ160aOmbhr1i0.mft (raw, json)
Hash identifier: lJVT/YlL9abjdj2SCixcwWrJAl/tydE2Q5BgIKEIGX8=
Subject key identifier: F3:65:F4:C0:57:CC:07:F0:EA:51:72:3E:DD:83:59:13:40:7A:30:C1
Authority key identifier: E2:BB:C7:06:7F:8A:7C:57:D6:86:D6:75:EB:46:8E:99:B8:6B:D6:2D
Certificate issuer: /CN=e2bbc7067f8a7c57d686d675eb468e99b86bd62d
Certificate serial: 0198D6608BB30E7603F5A94938E629CFA4CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4rvHBn-KfFfWhtZ160aOmbhr1i0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/2dac8b-76cd-40f0-854e-1da2acc76e11/1/4rvHBn-KfFfWhtZ160aOmbhr1i0.mft
Manifest number: 161D
Signing time: Sat 23 Aug 2025 10:01:48 +0000
Manifest this update: Sat 23 Aug 2025 10:01:48 +0000
Manifest next update: Sun 24 Aug 2025 10:01:48 +0000
Files and hashes: 1: 4rvHBn-KfFfWhtZ160aOmbhr1i0.crl (hash: yAw+4r1cVghni+ZSDo4y8YPnAvMIfkSqTRk/DR5Qce0=)
2: S9IbEuckGJ-9L5NueHluP1etdYo.roa (hash: 3hI+07Eg5raje1kn4kUfDxud5d5a2unK+1/vO0g99aY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b7/2dac8b-76cd-40f0-854e-1da2acc76e11/1/4rvHBn-KfFfWhtZ160aOmbhr1i0.crl
rsync://rpki.ripe.net/repository/DEFAULT/b7/2dac8b-76cd-40f0-854e-1da2acc76e11/1/4rvHBn-KfFfWhtZ160aOmbhr1i0.mft
rsync://rpki.ripe.net/repository/DEFAULT/4rvHBn-KfFfWhtZ160aOmbhr1i0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:60:8b:b3:0e:76:03:f5:a9:49:38:e6:29:cf:a4:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e2bbc7067f8a7c57d686d675eb468e99b86bd62d
Validity
Not Before: Aug 23 10:01:48 2025 GMT
Not After : Aug 24 10:01:48 2025 GMT
Subject: CN=f365f4c057cc07f0ea51723edd835913407a30c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:e3:4c:35:37:cd:f6:0a:e6:47:dd:19:a9:e7:
57:9d:93:03:b3:28:a3:61:e8:99:0a:1f:c7:11:44:
97:6d:9b:9a:22:7b:8f:1f:a8:03:50:50:29:69:2d:
70:d8:42:a2:6f:41:40:5d:14:cc:b8:96:d4:b0:a6:
78:ca:bd:98:90:62:8d:ad:e1:72:1b:ad:17:bc:e4:
fb:80:15:3b:70:dc:15:66:d1:54:63:87:c1:02:16:
e6:7b:f5:e7:1d:8c:6a:ce:99:4a:bb:4e:c6:cc:e9:
b9:8d:86:e5:3d:14:91:21:0d:ea:9a:9a:7f:aa:ff:
2c:a8:1a:a6:b7:43:28:36:8a:d2:4d:48:fb:bd:29:
b6:f0:e2:5f:e9:c4:54:02:78:9d:f7:70:04:a9:74:
89:18:a5:ed:b1:21:62:65:5c:e4:b7:12:d0:85:4d:
4a:64:82:fc:e8:21:9f:24:fb:99:d5:c0:c9:a4:c1:
e8:df:bd:83:c8:a1:fd:fe:15:47:ba:1d:b6:5b:6b:
dc:75:e9:2b:03:ed:6a:09:49:82:5e:b9:b3:92:56:
82:01:17:20:6d:47:6c:c5:95:33:9a:eb:89:fd:6f:
6d:be:07:9f:aa:ea:52:25:e9:ba:32:65:3a:3e:ee:
6f:20:31:5d:4d:9e:ce:bd:e8:80:80:cb:7e:b7:62:
0f:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:65:F4:C0:57:CC:07:F0:EA:51:72:3E:DD:83:59:13:40:7A:30:C1
X509v3 Authority Key Identifier:
keyid:E2:BB:C7:06:7F:8A:7C:57:D6:86:D6:75:EB:46:8E:99:B8:6B:D6:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4rvHBn-KfFfWhtZ160aOmbhr1i0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/2dac8b-76cd-40f0-854e-1da2acc76e11/1/4rvHBn-KfFfWhtZ160aOmbhr1i0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/2dac8b-76cd-40f0-854e-1da2acc76e11/1/4rvHBn-KfFfWhtZ160aOmbhr1i0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:a2:52:db:ac:f4:96:20:82:02:4f:2e:41:d9:a1:d1:0f:d1:
f9:2d:19:d0:9c:2a:90:d8:d2:a7:fc:8c:3e:a7:27:e5:c8:ac:
99:e9:37:78:f9:83:43:d4:68:45:eb:41:56:3c:e1:32:ee:bd:
a2:3a:2d:31:ed:ba:36:6d:5d:ac:68:59:40:a0:9b:34:c8:f2:
70:e7:4e:be:d8:31:d6:19:42:5f:4b:41:fc:00:cf:6a:66:ca:
19:85:3c:0b:dc:97:c7:c6:bb:00:b7:fb:e7:2c:cc:c0:a2:3d:
44:3f:27:8a:7e:b1:ab:cf:8c:51:d3:7c:83:ca:2a:9b:79:0e:
f1:d9:48:49:83:fa:a7:a9:95:13:92:b9:54:e5:11:9b:fd:b2:
22:6d:3e:98:9b:77:90:1e:25:ca:fd:f3:2b:6c:78:bb:11:dd:
e3:6f:d8:36:d7:a3:c7:e2:47:ca:90:73:86:3e:13:9f:cd:40:
4f:65:36:c2:32:bb:e0:b8:95:54:cb:93:d1:dd:b9:07:9f:50:
ff:1a:fb:2c:8a:5d:67:6e:5b:60:82:2c:3e:80:52:2f:e8:82:
c7:8e:88:a9:6a:e0:bd:49:a3:a1:35:92:bd:c6:b0:23:30:24:
b0:09:bf:ee:b1:a8:a7:d5:4a:a5:55:16:3d:29:83:80:df:1f:
aa:93:79:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:22:50 2025 by rpki-client