Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/b2698c-6409-459c-b046-ea6f705d2c0d/1/4jy32eUh5kaf1-KtE2A_t-6_4OA.mft
File: 4jy32eUh5kaf1-KtE2A_t-6_4OA.mft (raw, json)
Hash identifier: aYT0OlbEM6+3jRzSDvi+VlD6LkEdDIMX9a3pDGfRgKg=
Subject key identifier: 38:70:74:5E:DE:78:2D:21:D3:61:F3:A7:8F:60:42:89:5F:91:EB:BB
Authority key identifier: E2:3C:B7:D9:E5:21:E6:46:9F:D7:E2:AD:13:60:3F:B7:EE:BF:E0:E0
Certificate issuer: /CN=e23cb7d9e521e6469fd7e2ad13603fb7eebfe0e0
Certificate serial: 0198D6617E7E7A632AE550508B1A352F52C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4jy32eUh5kaf1-KtE2A_t-6_4OA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/b2698c-6409-459c-b046-ea6f705d2c0d/1/4jy32eUh5kaf1-KtE2A_t-6_4OA.mft
Manifest number: 0981
Signing time: Sat 23 Aug 2025 10:02:50 +0000
Manifest this update: Sat 23 Aug 2025 10:02:50 +0000
Manifest next update: Sun 24 Aug 2025 10:02:50 +0000
Files and hashes: 1: 4jy32eUh5kaf1-KtE2A_t-6_4OA.crl (hash: VZX4ErzuUpmS0bmQhE0X0dOXeH4vQsSWepIIkiThbyg=)
2: A2XZpMhjoSl2eIpUcSwowos8QQA.roa (hash: 7IQHzb+LeNjLi41+XbYgKffdbEsxRoe4BI+dUjjQXH8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/b2698c-6409-459c-b046-ea6f705d2c0d/1/4jy32eUh5kaf1-KtE2A_t-6_4OA.crl
rsync://rpki.ripe.net/repository/DEFAULT/ba/b2698c-6409-459c-b046-ea6f705d2c0d/1/4jy32eUh5kaf1-KtE2A_t-6_4OA.mft
rsync://rpki.ripe.net/repository/DEFAULT/4jy32eUh5kaf1-KtE2A_t-6_4OA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 10:02:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:61:7e:7e:7a:63:2a:e5:50:50:8b:1a:35:2f:52:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e23cb7d9e521e6469fd7e2ad13603fb7eebfe0e0
Validity
Not Before: Aug 23 10:02:50 2025 GMT
Not After : Aug 24 10:02:50 2025 GMT
Subject: CN=3870745ede782d21d361f3a78f6042895f91ebbb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:35:9a:91:d2:91:76:a9:ac:d1:3a:2b:39:a4:
57:da:36:80:60:a5:4c:41:d7:08:de:74:e9:6f:9b:
e0:19:30:41:2a:08:11:f8:6c:19:34:d0:ea:7d:ac:
11:b1:1b:7d:95:ae:53:5a:51:39:8a:09:d1:c0:ee:
51:36:14:68:14:a2:b7:be:44:18:02:2b:ec:83:d7:
2b:a7:4d:f2:8e:00:e0:f3:37:a5:a1:96:86:ba:40:
ec:f7:73:f0:b2:fc:3b:18:26:48:a1:5a:06:09:2b:
eb:cc:6c:6b:d8:f0:5d:d4:59:0a:0e:22:b7:60:b2:
1f:44:01:f5:33:45:1f:8d:39:8b:02:17:07:17:90:
aa:c5:f2:da:7f:22:88:e3:e4:9b:a8:16:f8:b7:21:
84:68:49:06:cd:4c:9b:8e:8c:72:b8:72:e6:8c:19:
94:13:3f:5f:db:79:1a:db:96:f6:e9:37:57:20:ba:
31:8b:53:9b:02:2b:44:b0:05:83:06:b0:cb:4c:d6:
30:af:5a:51:97:35:18:09:43:6b:a1:78:64:69:fa:
1f:39:0e:f5:4e:c1:67:12:61:6e:3c:87:1b:60:15:
db:12:e7:b9:f3:90:32:7c:27:0d:92:de:59:ff:1b:
58:46:4a:bd:d3:26:d2:24:2b:fa:a4:89:d5:5c:92:
ff:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:70:74:5E:DE:78:2D:21:D3:61:F3:A7:8F:60:42:89:5F:91:EB:BB
X509v3 Authority Key Identifier:
keyid:E2:3C:B7:D9:E5:21:E6:46:9F:D7:E2:AD:13:60:3F:B7:EE:BF:E0:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4jy32eUh5kaf1-KtE2A_t-6_4OA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/b2698c-6409-459c-b046-ea6f705d2c0d/1/4jy32eUh5kaf1-KtE2A_t-6_4OA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/b2698c-6409-459c-b046-ea6f705d2c0d/1/4jy32eUh5kaf1-KtE2A_t-6_4OA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:33:66:ef:32:8c:15:63:9a:d8:f3:cb:bb:5b:92:51:70:57:
5b:48:fc:69:86:be:32:5f:4a:70:92:a6:06:ae:c4:3f:b0:bb:
1e:54:f1:be:f6:96:aa:05:14:0e:70:33:73:63:6b:7e:e3:f3:
04:7b:ee:41:d6:52:ac:a8:5e:d3:51:d7:fe:e6:38:ae:f9:f0:
b0:15:c1:8a:02:f1:18:45:a9:70:9f:fc:12:04:8c:71:46:bb:
00:68:ee:3e:9e:f0:35:78:95:d9:32:f0:86:08:23:8a:0f:c9:
2b:40:ca:c5:05:22:1e:fc:63:be:8e:a4:c4:f5:a5:d1:ef:ea:
28:a2:1c:17:ba:4f:e1:f9:b8:c2:c9:8b:65:a8:2e:61:c5:e6:
cf:1d:fd:da:34:f0:ec:c9:2d:6e:80:64:7b:a2:46:8c:6d:fd:
70:11:0b:de:1e:05:1d:f6:b6:82:0a:04:7c:5a:f0:c4:99:87:
62:0f:fc:cd:34:8a:5f:6e:b6:10:c8:23:16:3b:c2:17:d9:2a:
d6:c1:05:c8:89:e6:2e:7e:37:ce:2c:50:29:7e:1c:c8:e9:8c:
27:47:cb:aa:64:d2:b9:83:ca:e4:03:57:d5:85:a2:c5:32:70:
52:ac:44:41:52:d0:4b:e5:08:c7:fc:a5:3d:55:bd:1d:9f:8b:
fe:e5:78:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 17:46:46 2025 by rpki-client