Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/ba19e4-71cc-470e-bda5-9da4cc620533/1/4q7DyKsR_AWMmo70AO8cPRRKe6g.mft
File: 4q7DyKsR_AWMmo70AO8cPRRKe6g.mft (raw, json)
Hash identifier: TShsaeNjThlkV2S8/RZYQSliUTsv8apbZpj0K0TieVY=
Subject key identifier: 92:46:A2:85:1E:71:64:9D:74:91:3A:77:23:1A:10:19:99:1A:02:CA
Authority key identifier: E2:AE:C3:C8:AB:11:FC:05:8C:9A:8E:F4:00:EF:1C:3D:14:4A:7B:A8
Certificate issuer: /CN=e2aec3c8ab11fc058c9a8ef400ef1c3d144a7ba8
Certificate serial: 0198D583842547CADF5C90713E833AB39150
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4q7DyKsR_AWMmo70AO8cPRRKe6g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/ba19e4-71cc-470e-bda5-9da4cc620533/1/4q7DyKsR_AWMmo70AO8cPRRKe6g.mft
Manifest number: 08CF
Signing time: Sat 23 Aug 2025 06:00:22 +0000
Manifest this update: Sat 23 Aug 2025 06:00:22 +0000
Manifest next update: Sun 24 Aug 2025 06:00:22 +0000
Files and hashes: 1: 1qu70rxHLlsLAV5g5Efa66s6iag.roa (hash: YmJJTTwGISEG6l96iV4cbfKm+Xa4J2z07ynSRxjgi3U=)
2: 4q7DyKsR_AWMmo70AO8cPRRKe6g.crl (hash: ndaONqo6ghhk9I+eQmnrCLlcUTkDygNy0tQkhJkh1aU=)
3: q1pnCW-BLUiZBZvb23K3UxB_wVE.roa (hash: pCVPRKxVl5EU92p/4v7xk8uVkYaxmpQbOuLsACDt2jk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/ba19e4-71cc-470e-bda5-9da4cc620533/1/4q7DyKsR_AWMmo70AO8cPRRKe6g.crl
rsync://rpki.ripe.net/repository/DEFAULT/c1/ba19e4-71cc-470e-bda5-9da4cc620533/1/4q7DyKsR_AWMmo70AO8cPRRKe6g.mft
rsync://rpki.ripe.net/repository/DEFAULT/4q7DyKsR_AWMmo70AO8cPRRKe6g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:83:84:25:47:ca:df:5c:90:71:3e:83:3a:b3:91:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e2aec3c8ab11fc058c9a8ef400ef1c3d144a7ba8
Validity
Not Before: Aug 23 06:00:22 2025 GMT
Not After : Aug 24 06:00:22 2025 GMT
Subject: CN=9246a2851e71649d74913a77231a1019991a02ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:a2:18:96:5a:83:42:76:21:2f:fa:e8:9b:05:
d1:66:00:df:72:bb:2d:28:14:e8:fb:8c:b1:88:23:
f1:0a:a0:19:57:08:c8:ba:ab:7c:05:17:47:7b:3c:
aa:9d:d2:d4:1c:ea:e8:2e:c7:37:c1:ac:19:3c:ec:
f2:85:b7:86:45:50:98:46:ce:66:db:3a:7f:08:79:
0f:70:7c:d8:06:99:c8:35:2c:be:e9:a4:9f:8d:7d:
ab:2a:a6:66:f1:cc:c7:37:3d:39:d0:3f:03:a8:a3:
ca:b2:b4:ff:11:06:7c:a3:ae:04:da:b9:16:54:63:
f4:29:43:4b:8f:68:a2:0e:1a:c8:b1:2a:e9:ce:21:
62:47:15:bf:bc:6e:75:45:f8:c2:55:16:45:7e:9b:
e2:df:ad:fd:24:59:17:e0:35:23:c9:38:f4:fc:43:
73:b0:0d:e4:4b:fa:a1:65:74:73:56:d4:25:a1:5a:
40:05:b5:f2:f7:47:68:29:ba:f6:7c:f1:67:c6:c8:
4f:62:e8:8d:ac:6e:c1:18:9b:8b:d3:06:0a:d0:f5:
6f:29:6d:61:eb:f4:20:25:35:35:da:15:b3:50:7d:
53:70:cc:79:37:d3:51:5d:87:21:d1:02:fa:a3:b0:
06:3a:d9:70:69:83:10:22:47:44:3b:1a:3a:fa:3f:
14:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:46:A2:85:1E:71:64:9D:74:91:3A:77:23:1A:10:19:99:1A:02:CA
X509v3 Authority Key Identifier:
keyid:E2:AE:C3:C8:AB:11:FC:05:8C:9A:8E:F4:00:EF:1C:3D:14:4A:7B:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4q7DyKsR_AWMmo70AO8cPRRKe6g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/ba19e4-71cc-470e-bda5-9da4cc620533/1/4q7DyKsR_AWMmo70AO8cPRRKe6g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/ba19e4-71cc-470e-bda5-9da4cc620533/1/4q7DyKsR_AWMmo70AO8cPRRKe6g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:58:79:a3:89:f0:3c:dc:6c:86:76:b3:2d:f2:07:07:36:3d:
56:9a:58:08:6e:15:dd:30:2d:8b:8b:35:9e:80:29:60:28:17:
19:eb:df:ce:52:f8:f2:06:99:af:0d:04:5d:76:f9:73:bc:82:
23:35:43:f9:3c:f5:fa:f3:c0:95:f3:02:f6:05:af:11:be:b2:
6e:37:a8:c0:89:b3:ac:34:ab:bf:77:8e:5b:49:59:c6:8c:97:
84:1d:9c:d6:45:31:35:14:56:ce:ea:e9:50:d2:05:b2:79:30:
af:c7:e7:1e:3a:74:e5:43:cb:f3:0c:de:17:c6:ae:9a:55:db:
52:05:76:ca:c3:31:52:e3:89:33:fa:ce:b1:0a:ad:c3:30:4b:
a1:6c:d8:7e:f6:70:97:32:26:fb:02:18:a8:e3:aa:de:10:9d:
ca:a1:2e:52:ba:8a:06:2d:94:b2:63:bb:23:c5:1c:e1:af:2f:
17:24:4c:ae:d1:eb:77:e3:bf:d9:e9:4f:7f:ee:be:49:07:a9:
9e:b0:b9:09:2f:68:cc:8c:aa:2e:57:73:49:69:bb:10:e8:2a:
bc:a9:48:d4:41:b5:2d:12:e4:db:cd:05:de:67:c3:4f:43:0b:
ec:eb:23:ce:a1:10:8e:61:3b:81:4b:86:d0:87:3a:cf:a0:c8:
31:c5:10:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:52:38 2025 by rpki-client