Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/3df0b6-47c9-40fe-8358-fdebbc927d40/1/r4W7ilBEPlBMSFPM4CXvWDQcHVA.mft
File: r4W7ilBEPlBMSFPM4CXvWDQcHVA.mft (raw, json)
Hash identifier: OSzSBfU/J+0b2innnLY2R2JlMeRrPVCwtRiyYRNh7Nw=
Subject key identifier: E2:25:C4:CD:85:49:AA:7B:ED:4A:BB:C1:2A:BB:34:9A:B4:51:98:57
Authority key identifier: AF:85:BB:8A:50:44:3E:50:4C:48:53:CC:E0:25:EF:58:34:1C:1D:50
Certificate issuer: /CN=af85bb8a50443e504c4853cce025ef58341c1d50
Certificate serial: 0198D661500F56FDDF21FD91253B7B23BF50
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r4W7ilBEPlBMSFPM4CXvWDQcHVA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/3df0b6-47c9-40fe-8358-fdebbc927d40/1/r4W7ilBEPlBMSFPM4CXvWDQcHVA.mft
Manifest number: 0AC1
Signing time: Sat 23 Aug 2025 10:02:38 +0000
Manifest this update: Sat 23 Aug 2025 10:02:38 +0000
Manifest next update: Sun 24 Aug 2025 10:02:38 +0000
Files and hashes: 1: r4W7ilBEPlBMSFPM4CXvWDQcHVA.crl (hash: 2NN+kDE+SZjJmO6OHqoODciRTtzzBVcF1IxW8lIOFpQ=)
2: toLcHJuza0nk_rSiToUi8cqjpA8.roa (hash: kRROIdBqbwyv0kgRq3rS5l7ig0u7UsDgEiLSwPvEVgQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/3df0b6-47c9-40fe-8358-fdebbc927d40/1/r4W7ilBEPlBMSFPM4CXvWDQcHVA.crl
rsync://rpki.ripe.net/repository/DEFAULT/cc/3df0b6-47c9-40fe-8358-fdebbc927d40/1/r4W7ilBEPlBMSFPM4CXvWDQcHVA.mft
rsync://rpki.ripe.net/repository/DEFAULT/r4W7ilBEPlBMSFPM4CXvWDQcHVA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 10:02:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:61:50:0f:56:fd:df:21:fd:91:25:3b:7b:23:bf:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=af85bb8a50443e504c4853cce025ef58341c1d50
Validity
Not Before: Aug 23 10:02:38 2025 GMT
Not After : Aug 24 10:02:38 2025 GMT
Subject: CN=e225c4cd8549aa7bed4abbc12abb349ab4519857
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:60:fd:ad:26:ce:a8:97:43:68:ed:77:ff:19:
b0:bd:67:ba:30:7c:c4:85:35:fd:fe:28:4b:3f:6d:
09:7b:e2:e3:a5:78:63:87:93:9d:f9:f9:3e:1e:09:
67:59:69:32:1e:ef:9f:b6:9f:e7:9f:58:38:9c:a6:
da:2c:30:af:ed:bc:03:dc:83:01:75:1e:f0:02:4d:
9e:2f:ed:22:17:f0:e0:95:6a:ec:d3:c8:d0:20:43:
61:c8:d4:a4:4a:93:4e:70:25:79:62:43:f3:cf:b3:
e6:42:af:76:6a:e8:3d:4b:e0:9f:17:cd:fb:34:3f:
e1:39:f0:fd:2f:29:ca:3a:7d:d6:16:a9:df:76:45:
2d:c5:f5:e8:a4:f8:12:ec:be:d8:19:cc:5b:78:42:
9d:2b:50:10:cb:16:28:72:57:9a:2f:be:82:42:c7:
2d:4c:4c:30:5e:c0:08:20:9d:40:38:93:10:43:74:
d7:0c:5a:18:0d:ef:10:b6:3c:b1:46:64:6b:30:cc:
90:4f:62:98:78:5f:f4:07:c0:a1:df:5d:43:cd:96:
6b:db:1b:66:8b:58:38:02:34:9f:95:69:f0:27:34:
1a:c5:bb:a6:bd:81:47:22:85:cf:00:2d:82:24:eb:
27:db:f3:f1:c1:40:e7:c9:01:18:41:81:79:4b:f7:
21:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:25:C4:CD:85:49:AA:7B:ED:4A:BB:C1:2A:BB:34:9A:B4:51:98:57
X509v3 Authority Key Identifier:
keyid:AF:85:BB:8A:50:44:3E:50:4C:48:53:CC:E0:25:EF:58:34:1C:1D:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r4W7ilBEPlBMSFPM4CXvWDQcHVA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/3df0b6-47c9-40fe-8358-fdebbc927d40/1/r4W7ilBEPlBMSFPM4CXvWDQcHVA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/3df0b6-47c9-40fe-8358-fdebbc927d40/1/r4W7ilBEPlBMSFPM4CXvWDQcHVA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a5:91:68:57:62:c7:96:24:a2:47:61:46:c5:ff:3d:5e:eb:fd:
4e:3d:bd:aa:c3:02:1d:73:21:26:76:44:e7:1d:0c:ae:d3:5e:
59:c4:c2:35:57:15:0b:81:58:62:84:ce:e4:40:d1:c9:41:be:
24:28:6a:61:0b:27:2f:a2:0e:5e:76:a9:05:f9:43:21:92:7e:
ef:ad:82:27:92:38:fd:70:0f:c6:e8:c7:b9:f6:a5:93:93:92:
0f:79:e1:1d:22:d7:cc:7f:66:41:89:c4:ca:f7:31:31:16:89:
ec:16:39:65:c4:b6:6a:d5:11:a8:2f:9c:2e:17:79:40:ba:df:
86:11:60:b7:64:12:83:d9:8f:78:04:d9:fb:ff:5d:f9:05:0c:
f5:a1:9c:a0:12:b7:bc:e3:d0:cd:75:1c:27:22:56:c5:72:86:
4c:6f:e0:4a:b4:91:7d:f0:2d:1e:0f:21:73:f8:b2:22:ac:42:
8e:5b:ec:49:f6:2b:df:62:49:a7:33:5e:3b:87:25:11:0a:03:
6f:b3:16:ba:65:44:a3:83:04:5c:9b:f6:dc:23:58:9f:dd:73:
0f:4c:b2:8e:8e:8b:c5:20:9b:f5:7c:d2:9b:c0:74:05:9b:fe:
c0:12:df:e8:3a:28:9f:28:96:2a:b7:ef:d1:85:c7:14:42:a0:
3b:75:2b:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 19:50:30 2025 by rpki-client