Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/647f28-59cf-4d68-a50f-1764b03618fc/1/4jwMPgEGyWXUYM0MPLxeI0-CprQ.mft
File: 4jwMPgEGyWXUYM0MPLxeI0-CprQ.mft (raw, json)
Hash identifier: kdYH5cKP88VJCtyBv1R6cCL3dCrPDdh3MYS1sf1Sq+E=
Subject key identifier: 24:32:8B:DB:C5:7C:F9:2F:EB:38:05:D3:92:33:A2:0A:09:8D:44:FF
Authority key identifier: E2:3C:0C:3E:01:06:C9:65:D4:60:CD:0C:3C:BC:5E:23:4F:82:A6:B4
Certificate issuer: /CN=e23c0c3e0106c965d460cd0c3cbc5e234f82a6b4
Certificate serial: 0198D472E98B207F667C0B519C141DB6ED25
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4jwMPgEGyWXUYM0MPLxeI0-CprQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/647f28-59cf-4d68-a50f-1764b03618fc/1/4jwMPgEGyWXUYM0MPLxeI0-CprQ.mft
Manifest number: 10AB
Signing time: Sat 23 Aug 2025 01:02:37 +0000
Manifest this update: Sat 23 Aug 2025 01:02:37 +0000
Manifest next update: Sun 24 Aug 2025 01:02:37 +0000
Files and hashes: 1: 4jwMPgEGyWXUYM0MPLxeI0-CprQ.crl (hash: HHQMQc9lPA12Uq+stS/J7nDKhwlhGBIHz+CnuBemSa8=)
2: lEkuEW8EviMetjsHoH1cfPquirw.roa (hash: a862beX9o/VH2MAJR1fguEQH5T+CIEuXUqOcrtZ0/zw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/647f28-59cf-4d68-a50f-1764b03618fc/1/4jwMPgEGyWXUYM0MPLxeI0-CprQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/c4/647f28-59cf-4d68-a50f-1764b03618fc/1/4jwMPgEGyWXUYM0MPLxeI0-CprQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/4jwMPgEGyWXUYM0MPLxeI0-CprQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:72:e9:8b:20:7f:66:7c:0b:51:9c:14:1d:b6:ed:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e23c0c3e0106c965d460cd0c3cbc5e234f82a6b4
Validity
Not Before: Aug 23 01:02:37 2025 GMT
Not After : Aug 24 01:02:37 2025 GMT
Subject: CN=24328bdbc57cf92feb3805d39233a20a098d44ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:b7:b6:9c:25:54:51:e7:50:51:95:4a:1f:77:
5d:e3:cf:4e:90:e2:bf:d5:ea:40:48:8e:03:74:be:
a6:a2:17:62:fe:ec:01:4a:d5:b2:06:99:c2:1b:f6:
20:35:54:2c:50:75:fa:6a:6e:58:f6:24:9d:7f:fe:
c1:54:3c:27:9d:37:48:3b:76:18:22:93:ee:82:03:
92:0b:c2:4c:de:20:4a:11:36:d9:d5:46:3b:30:40:
4d:96:76:49:c5:e9:0e:26:56:7e:f7:95:78:6a:49:
ab:73:36:19:67:e4:3c:55:50:5c:4e:eb:08:f8:c2:
77:a6:01:43:35:6e:dc:ba:44:52:d7:d6:62:10:b6:
53:b1:05:b2:81:d3:d6:c8:cb:f3:af:e9:ef:8d:e7:
a1:27:77:43:3c:5b:47:c5:8f:1c:76:dd:39:61:9e:
07:93:45:62:84:99:3e:e7:c3:47:d2:de:2b:91:72:
9f:d6:dc:18:e8:7d:a7:13:4a:54:56:c1:5b:fe:f4:
81:94:80:a3:de:2e:1f:b6:df:4b:55:13:a3:e4:2e:
71:92:08:10:81:e9:2b:fe:94:9a:11:80:8e:3b:aa:
fa:7e:67:2d:70:90:c6:65:7d:73:81:1e:9c:3b:62:
a2:7d:58:42:3d:63:ce:85:1b:1f:35:65:51:a5:36:
a4:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:32:8B:DB:C5:7C:F9:2F:EB:38:05:D3:92:33:A2:0A:09:8D:44:FF
X509v3 Authority Key Identifier:
keyid:E2:3C:0C:3E:01:06:C9:65:D4:60:CD:0C:3C:BC:5E:23:4F:82:A6:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4jwMPgEGyWXUYM0MPLxeI0-CprQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/647f28-59cf-4d68-a50f-1764b03618fc/1/4jwMPgEGyWXUYM0MPLxeI0-CprQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/647f28-59cf-4d68-a50f-1764b03618fc/1/4jwMPgEGyWXUYM0MPLxeI0-CprQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:0a:6b:72:5a:18:18:bb:19:ab:a7:53:cf:e0:c9:61:d9:1b:
74:e0:14:0e:6e:10:1a:4a:aa:d6:1f:52:86:07:03:4b:54:09:
dd:ab:dd:eb:62:11:95:8b:9c:a1:f1:1a:0f:7e:09:9f:9f:d6:
33:89:af:60:20:28:fb:e5:14:de:bf:4b:ba:48:14:6a:32:8f:
54:ab:70:45:ba:7d:44:76:db:95:a4:7c:3d:4c:d1:29:cf:b7:
ef:b1:5f:90:a0:cf:b8:49:6d:74:fe:ee:62:f8:83:d4:57:29:
2c:81:e5:c9:a8:1d:5e:8a:07:98:ac:96:dc:7e:82:e8:66:bf:
f6:36:ac:f7:05:c1:83:d0:0e:60:ec:e0:1c:a1:ba:08:a5:6a:
d9:37:dd:53:15:c2:ff:49:3a:3d:b9:94:0a:34:10:58:f1:b7:
30:25:e9:0b:b1:ca:94:0c:90:49:5d:27:8d:69:01:87:5d:68:
20:c3:f6:5d:1d:96:50:53:19:3d:1f:2e:d8:bf:79:e1:08:e7:
82:00:8a:38:97:f2:6b:06:4a:4f:83:c3:38:b3:ea:7d:f1:81:
71:9c:60:65:51:bc:0e:e4:63:aa:59:1c:e0:ff:60:0e:ce:9f:
c2:ab:04:71:59:d1:7c:4a:7e:5c:d5:a4:f4:30:66:c3:e6:cc:
86:cd:e1:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:19:17 2025 by rpki-client