Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/659d27-bbb5-49f4-8fd1-c264b75b6b78/1/4rRpKpKR8sZ7VswV2k0xASAjAXc.mft
File: 4rRpKpKR8sZ7VswV2k0xASAjAXc.mft (raw, json)
Hash identifier: XihafHEFFT3eC6/hRV5dj3ce3fH/nsvSn28jTInVR8U=
Subject key identifier: 40:CA:20:83:03:AC:80:90:2D:57:C0:31:0F:1C:3A:79:23:D6:44:19
Authority key identifier: E2:B4:69:2A:92:91:F2:C6:7B:56:CC:15:DA:4D:31:01:20:23:01:77
Certificate issuer: /CN=e2b4692a9291f2c67b56cc15da4d310120230177
Certificate serial: 0198D85126DC0D3336B6D69DC5769CA90539
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4rRpKpKR8sZ7VswV2k0xASAjAXc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/659d27-bbb5-49f4-8fd1-c264b75b6b78/1/4rRpKpKR8sZ7VswV2k0xASAjAXc.mft
Manifest number: 02AE
Signing time: Sat 23 Aug 2025 19:04:13 +0000
Manifest this update: Sat 23 Aug 2025 19:04:13 +0000
Manifest next update: Sun 24 Aug 2025 19:04:13 +0000
Files and hashes: 1: 4NCyaBU3y3IsV-tIz8ykBHkjQrA.roa (hash: 6MR/wTh/d3g4brX5BBFxl1tdarfWH7geP5gRFSxNByI=)
2: 4rRpKpKR8sZ7VswV2k0xASAjAXc.crl (hash: HkAWQlJRUSyVqR1RHRiN+dpP/A5GKnXSjaWziq9YalU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/659d27-bbb5-49f4-8fd1-c264b75b6b78/1/4rRpKpKR8sZ7VswV2k0xASAjAXc.crl
rsync://rpki.ripe.net/repository/DEFAULT/cd/659d27-bbb5-49f4-8fd1-c264b75b6b78/1/4rRpKpKR8sZ7VswV2k0xASAjAXc.mft
rsync://rpki.ripe.net/repository/DEFAULT/4rRpKpKR8sZ7VswV2k0xASAjAXc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 19:04:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d8:51:26:dc:0d:33:36:b6:d6:9d:c5:76:9c:a9:05:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e2b4692a9291f2c67b56cc15da4d310120230177
Validity
Not Before: Aug 23 19:04:13 2025 GMT
Not After : Aug 24 19:04:13 2025 GMT
Subject: CN=40ca208303ac80902d57c0310f1c3a7923d64419
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:fc:bf:b7:81:e3:ce:b3:cf:8e:54:cc:67:98:
b6:f5:45:67:c1:ad:c6:91:3b:25:cd:3d:b9:64:c2:
70:ee:3e:37:e9:5f:9b:8a:97:f6:1a:3e:d5:58:f2:
12:34:ea:03:7f:57:16:97:5d:b3:57:be:c1:21:66:
97:b8:52:1d:f8:fd:c1:75:93:d4:a4:40:87:67:df:
bf:eb:fe:9e:6e:f5:e5:94:1e:6e:11:a8:a9:b1:d6:
31:87:1d:a3:d4:3c:76:35:56:30:1a:2a:c9:df:25:
97:1a:b3:95:86:9f:3f:8f:21:7d:99:4a:3b:ab:7c:
81:96:c0:d7:6d:9d:8b:0e:7e:75:3f:a0:cd:b2:ac:
7a:ab:cc:0b:31:75:c7:d6:d1:6d:37:6f:b8:81:eb:
9c:d7:a1:a9:75:ca:f2:81:04:c0:4c:69:11:59:83:
d4:ac:0e:9f:17:85:71:17:9b:d6:b4:cf:19:4e:76:
38:d0:94:de:38:de:63:ed:14:02:6d:53:1c:1a:fe:
e6:76:8a:18:5a:e6:24:34:85:de:e7:72:cb:2e:d2:
e2:ca:71:4f:ca:d6:7d:df:af:b0:cd:25:8a:42:41:
05:e8:48:e6:03:7c:6e:5d:11:c0:3a:0d:6e:85:b3:
ce:cd:31:8e:c1:c4:c1:83:34:11:4a:5b:0e:a0:62:
38:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:CA:20:83:03:AC:80:90:2D:57:C0:31:0F:1C:3A:79:23:D6:44:19
X509v3 Authority Key Identifier:
keyid:E2:B4:69:2A:92:91:F2:C6:7B:56:CC:15:DA:4D:31:01:20:23:01:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4rRpKpKR8sZ7VswV2k0xASAjAXc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/659d27-bbb5-49f4-8fd1-c264b75b6b78/1/4rRpKpKR8sZ7VswV2k0xASAjAXc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/659d27-bbb5-49f4-8fd1-c264b75b6b78/1/4rRpKpKR8sZ7VswV2k0xASAjAXc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
92:cb:79:ad:4b:e5:77:c0:6f:d9:55:e6:f8:87:ca:34:e8:e9:
f8:34:1f:8e:5c:fc:f8:f7:cb:97:bc:06:3c:c5:fe:06:ce:95:
ed:cf:1a:28:55:fb:25:74:f6:8e:03:98:85:99:76:f5:4a:35:
f2:2d:fb:76:56:4f:ea:5d:f3:da:24:65:f3:da:da:6b:8e:7f:
f8:3c:fe:ae:e2:d1:3c:d7:13:d2:e8:6d:61:e3:59:9e:d9:35:
9f:d6:4d:09:2d:7d:54:4d:53:6e:da:8c:e0:ef:b8:41:61:da:
80:15:e0:6e:d9:69:c9:78:1f:36:93:9f:cd:a5:4f:9d:c1:60:
c2:a4:f3:3e:91:96:4d:6f:ee:96:82:5d:d7:ea:3e:bf:42:c6:
c4:58:20:9a:34:6d:3c:16:25:0d:a5:90:41:60:32:0b:c4:fd:
90:0b:07:ce:b4:44:a8:5e:ac:00:f7:ac:dd:c4:41:07:89:b2:
4a:a6:45:b5:2e:45:22:e9:8c:4e:1a:fa:17:8a:c8:e0:66:ce:
33:4b:e2:2e:fc:83:92:11:27:6a:68:04:c0:58:e8:7b:60:4a:
3d:07:3e:fb:aa:82:0e:e1:44:d6:01:64:19:f9:2d:95:f7:68:
ac:98:6e:a8:a3:d2:dc:05:9c:b3:da:83:99:2c:ad:31:a9:7c:
b4:f8:62:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 05:23:10 2025 by rpki-client