Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/1db0d1-aa93-45c0-9889-d8a555c64214/1/u4N41EQt9p9H3A6lgqErKrUUvg8.mft
File: u4N41EQt9p9H3A6lgqErKrUUvg8.mft (raw, json)
Hash identifier: mEYLbrDPir9HXXjTm1WE3XLTfsz5kfgjddpDeJPyPSc=
Subject key identifier: DA:BD:6A:49:74:11:6F:0B:34:EE:A1:DE:E1:36:85:0A:2A:B4:85:05
Authority key identifier: BB:83:78:D4:44:2D:F6:9F:47:DC:0E:A5:82:A1:2B:2A:B5:14:BE:0F
Certificate issuer: /CN=bb8378d4442df69f47dc0ea582a12b2ab514be0f
Certificate serial: 0198D70620525BE306CDADDC2AFD013204C1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u4N41EQt9p9H3A6lgqErKrUUvg8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/1db0d1-aa93-45c0-9889-d8a555c64214/1/u4N41EQt9p9H3A6lgqErKrUUvg8.mft
Manifest number: 0148
Signing time: Sat 23 Aug 2025 13:02:39 +0000
Manifest this update: Sat 23 Aug 2025 13:02:39 +0000
Manifest next update: Sun 24 Aug 2025 13:02:39 +0000
Files and hashes: 1: u4N41EQt9p9H3A6lgqErKrUUvg8.crl (hash: Im4r8BRu0DBONzaD49OnO9DxTaUBWFjaeT7IQhTSlG4=)
2: wtPW8rjnB4NENZEIpc5mDSX_MnA.roa (hash: 2y63dYWO6V1/po4xW8CvZ0E3YT0MzqdNzzTlTFQ0Gb0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/1db0d1-aa93-45c0-9889-d8a555c64214/1/u4N41EQt9p9H3A6lgqErKrUUvg8.crl
rsync://rpki.ripe.net/repository/DEFAULT/c5/1db0d1-aa93-45c0-9889-d8a555c64214/1/u4N41EQt9p9H3A6lgqErKrUUvg8.mft
rsync://rpki.ripe.net/repository/DEFAULT/u4N41EQt9p9H3A6lgqErKrUUvg8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 12:50:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d7:06:20:52:5b:e3:06:cd:ad:dc:2a:fd:01:32:04:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bb8378d4442df69f47dc0ea582a12b2ab514be0f
Validity
Not Before: Aug 23 13:02:39 2025 GMT
Not After : Aug 24 13:02:39 2025 GMT
Subject: CN=dabd6a4974116f0b34eea1dee136850a2ab48505
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:d9:ae:0c:ed:83:de:5e:65:2d:46:bc:65:4c:
84:16:e3:3d:2b:90:da:ce:2c:9a:6a:0f:8f:62:96:
28:10:d9:e1:d0:3b:2b:87:f3:80:e9:c9:43:65:91:
0a:22:79:70:d1:3b:cc:d0:de:2b:f0:c3:19:be:50:
b8:e6:2d:3b:27:f1:bb:49:7e:48:e6:54:cc:4d:c0:
97:92:45:22:0e:81:80:68:24:c0:4c:34:07:b6:b8:
46:ed:3e:f3:4f:21:04:c4:2b:ce:40:00:64:98:c7:
b5:fd:0a:8d:23:35:f5:5f:d2:c4:f6:cc:5e:14:2d:
0d:95:68:af:e2:f5:38:e9:34:12:f1:b7:a1:3f:31:
b4:ec:3d:e5:4b:d9:d8:b6:6f:ac:76:d7:51:68:e1:
8d:ad:f2:dd:3b:5f:6d:df:41:a0:6a:0c:35:09:55:
58:27:fd:6c:e4:fe:00:20:96:81:d9:65:3c:54:bc:
a2:12:fc:8c:3c:fa:07:bd:db:db:c5:38:67:67:1c:
43:19:84:23:8e:54:16:35:4c:ab:4f:6c:25:4f:81:
3e:3e:86:e8:99:90:ea:a5:7e:ad:96:0f:9e:65:af:
6f:ed:3c:e6:f7:fa:c0:45:73:29:72:7e:88:77:88:
2d:54:fa:fc:3c:dd:d1:c8:31:d6:6b:7e:62:c9:ff:
23:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:BD:6A:49:74:11:6F:0B:34:EE:A1:DE:E1:36:85:0A:2A:B4:85:05
X509v3 Authority Key Identifier:
keyid:BB:83:78:D4:44:2D:F6:9F:47:DC:0E:A5:82:A1:2B:2A:B5:14:BE:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u4N41EQt9p9H3A6lgqErKrUUvg8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/1db0d1-aa93-45c0-9889-d8a555c64214/1/u4N41EQt9p9H3A6lgqErKrUUvg8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/1db0d1-aa93-45c0-9889-d8a555c64214/1/u4N41EQt9p9H3A6lgqErKrUUvg8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:34:ad:49:c1:25:fa:2f:a3:2c:8e:9c:44:01:a0:8c:2d:87:
1e:f0:42:7d:6c:ad:49:39:71:bf:83:aa:3d:e0:20:9e:88:60:
fc:00:8d:31:a3:2d:4a:cb:03:74:0a:58:2c:8c:0c:25:75:c6:
80:ce:52:6f:1c:ea:75:3b:bd:04:81:59:35:c3:4e:be:de:f2:
48:36:38:03:e0:52:44:0a:9c:fd:27:c3:3d:e8:04:a0:c3:84:
bd:fa:37:12:81:8d:b9:cd:a4:9b:fe:3d:44:b7:ba:52:72:5e:
c9:37:1f:26:9a:b5:b7:41:c7:74:24:23:6e:47:9b:95:80:bd:
7a:8b:7a:99:a7:8b:29:2f:f0:55:07:9c:94:9e:ce:b7:9c:6e:
00:76:1a:a2:2f:fb:30:91:2a:eb:28:a1:b2:90:bd:40:d7:da:
87:37:94:b2:56:af:e2:df:6a:b2:01:0b:de:37:a3:47:92:7e:
c8:2d:2f:96:f6:45:03:39:5f:bf:a7:80:9e:de:8f:ec:f5:e6:
f6:06:b5:04:f9:55:e9:14:18:f1:5f:d5:98:5b:19:9f:b2:e8:
e2:80:b8:87:7d:82:bb:06:87:8d:de:89:18:5c:8d:77:cd:5e:
a5:49:d6:e4:0d:b7:03:85:ec:59:ef:6b:99:7f:6c:d4:b0:e8:
78:cd:56:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 17:14:07 2025 by rpki-client