Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/655a1c-baf5-475f-a308-932ab341a367/1/4p9JZACcdLuBrtnGcHgBPcho7xc.mft
File: 4p9JZACcdLuBrtnGcHgBPcho7xc.mft (raw, json)
Hash identifier: u8/HB4qMMQqC+HEtbTbB5VNOFmiBOUdsQQvh7HDk9uA=
Subject key identifier: 00:3F:C1:85:53:8C:33:80:1B:66:C2:0B:4A:DE:21:54:37:0B:B7:7D
Authority key identifier: E2:9F:49:64:00:9C:74:BB:81:AE:D9:C6:70:78:01:3D:C8:68:EF:17
Certificate issuer: /CN=e29f4964009c74bb81aed9c67078013dc868ef17
Certificate serial: 0198D5BB98EE97987F57422EA45D00984263
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4p9JZACcdLuBrtnGcHgBPcho7xc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/655a1c-baf5-475f-a308-932ab341a367/1/4p9JZACcdLuBrtnGcHgBPcho7xc.mft
Manifest number: 164B
Signing time: Sat 23 Aug 2025 07:01:38 +0000
Manifest this update: Sat 23 Aug 2025 07:01:38 +0000
Manifest next update: Sun 24 Aug 2025 07:01:38 +0000
Files and hashes: 1: 1KTjmYkB3cj_19bwNwOyE5tGxCk.roa (hash: H8xeX/8Uyv31FbjznlcJqitCSYJrp0RSe/v1PmExVLA=)
2: 4p9JZACcdLuBrtnGcHgBPcho7xc.crl (hash: gyNvIUUXh/L46Ga9jvHcYbsZGdp2XLuh/3gG3yOJFlI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/655a1c-baf5-475f-a308-932ab341a367/1/4p9JZACcdLuBrtnGcHgBPcho7xc.crl
rsync://rpki.ripe.net/repository/DEFAULT/d5/655a1c-baf5-475f-a308-932ab341a367/1/4p9JZACcdLuBrtnGcHgBPcho7xc.mft
rsync://rpki.ripe.net/repository/DEFAULT/4p9JZACcdLuBrtnGcHgBPcho7xc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:bb:98:ee:97:98:7f:57:42:2e:a4:5d:00:98:42:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e29f4964009c74bb81aed9c67078013dc868ef17
Validity
Not Before: Aug 23 07:01:38 2025 GMT
Not After : Aug 24 07:01:38 2025 GMT
Subject: CN=003fc185538c33801b66c20b4ade2154370bb77d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:42:42:2f:1d:f9:66:07:cd:c2:55:85:5e:32:
ed:f1:46:34:61:6c:8b:3c:0b:88:44:e9:85:9b:28:
2d:af:7d:e3:1c:ef:f5:77:00:05:29:b3:98:33:86:
fb:4d:5e:26:be:90:ad:ac:d8:9b:56:df:c3:ad:bb:
99:a8:c9:75:5e:a0:f0:28:5a:d4:85:e4:72:e9:86:
d3:df:94:92:55:53:38:d5:d5:8f:76:a8:43:ae:c6:
bf:b3:30:cc:77:91:5a:d5:04:7b:12:89:2c:dd:8c:
86:ea:65:eb:10:7e:c1:b7:82:8e:2a:dd:de:b9:d8:
bf:e5:10:44:53:29:21:3b:82:b4:34:48:75:14:8f:
c6:2e:14:7d:1b:ea:09:39:07:72:a7:18:46:fe:39:
f1:32:45:ee:72:c1:08:c2:5e:b3:8c:0a:54:4a:ee:
ec:a8:8d:cb:e2:7e:84:e3:c8:42:0d:9c:03:f5:0c:
84:e6:5d:d9:e8:51:38:f9:8b:85:25:1e:ff:6e:b7:
5d:08:c3:16:58:fd:31:b6:80:5a:e2:91:bf:e9:34:
44:b1:d5:92:d0:7e:62:65:9d:a7:e5:d7:54:11:08:
2c:06:ec:7d:ac:28:7f:1f:fb:2d:41:cf:a7:66:f5:
44:f3:ce:2d:11:cf:c1:34:7e:7c:a3:1b:06:91:23:
14:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:3F:C1:85:53:8C:33:80:1B:66:C2:0B:4A:DE:21:54:37:0B:B7:7D
X509v3 Authority Key Identifier:
keyid:E2:9F:49:64:00:9C:74:BB:81:AE:D9:C6:70:78:01:3D:C8:68:EF:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4p9JZACcdLuBrtnGcHgBPcho7xc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/655a1c-baf5-475f-a308-932ab341a367/1/4p9JZACcdLuBrtnGcHgBPcho7xc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/655a1c-baf5-475f-a308-932ab341a367/1/4p9JZACcdLuBrtnGcHgBPcho7xc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:13:cd:23:35:43:46:2b:a9:bb:ed:9c:5a:a9:a8:cc:4f:44:
e2:c3:ff:88:b6:30:cf:a9:e7:83:2f:9e:d0:10:6e:f4:07:5b:
8c:8c:57:f3:69:de:ba:f0:ca:ba:04:42:2b:f3:46:0e:bf:29:
ea:e8:2b:f2:94:c2:d8:02:1a:56:04:58:69:d6:4f:1b:fe:08:
1f:4f:05:9a:e0:20:46:47:a8:54:1f:91:74:e1:61:41:bf:15:
e3:6e:e6:2c:83:0a:c4:58:fa:4c:35:e2:7f:0a:ef:ed:c0:9a:
e3:2f:12:6a:88:37:8a:14:00:a2:70:7b:5e:38:0b:fa:78:7b:
29:f9:d2:9c:3e:18:53:20:0c:e8:9b:03:b9:65:0a:00:4c:7b:
a5:28:6c:7a:96:78:b9:d7:fa:ca:e7:79:6c:43:19:19:a8:b6:
6d:f3:44:b4:de:00:b3:a7:39:9a:73:e1:eb:f7:f6:6a:14:da:
1d:4a:58:52:1a:58:2c:2d:83:a9:d2:6e:d8:4d:34:82:a6:f0:
c2:66:d9:91:32:d0:be:ed:39:10:3f:af:eb:41:1f:1e:27:e4:
00:76:51:b1:ab:a2:b7:36:e5:f1:64:d4:94:e2:a9:4f:ee:2d:
a6:87:cf:c9:45:df:aa:9d:51:7e:d2:3a:3f:ee:4f:26:f5:d1:
e6:f5:ec:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:26:07 2025 by rpki-client