Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/282ac6-72c6-4b2c-9df9-8f1f2c914f04/1/4IFCtC45SABI0fzqWHo2k9pMC4o.mft
File: 4IFCtC45SABI0fzqWHo2k9pMC4o.mft (raw, json)
Hash identifier: 0YHFNgMYpGqusiZj4iXXQjNuKVbCrIk/MNXJsMK3oEo=
Subject key identifier: E0:6C:24:10:2B:4F:2B:91:88:50:4B:D0:2C:35:17:74:B5:68:4A:C4
Authority key identifier: E0:81:42:B4:2E:39:48:00:48:D1:FC:EA:58:7A:36:93:DA:4C:0B:8A
Certificate issuer: /CN=e08142b42e39480048d1fcea587a3693da4c0b8a
Certificate serial: 0198D515EF43D04230F9D525BC3E251C4ED3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4IFCtC45SABI0fzqWHo2k9pMC4o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/282ac6-72c6-4b2c-9df9-8f1f2c914f04/1/4IFCtC45SABI0fzqWHo2k9pMC4o.mft
Manifest number: 0434
Signing time: Sat 23 Aug 2025 04:00:40 +0000
Manifest this update: Sat 23 Aug 2025 04:00:40 +0000
Manifest next update: Sun 24 Aug 2025 04:00:40 +0000
Files and hashes: 1: 4IFCtC45SABI0fzqWHo2k9pMC4o.crl (hash: Bo7/UP83+qsBYgPoFR915fJapcOA/C0Nms+13pIdG9Q=)
2: SkmMZcDmD4tfD5IJGWfT10a999s.roa (hash: FtSYkAppozDXy+VqyVeW2kon4HMuVtycn1oxBmmVVwQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/282ac6-72c6-4b2c-9df9-8f1f2c914f04/1/4IFCtC45SABI0fzqWHo2k9pMC4o.crl
rsync://rpki.ripe.net/repository/DEFAULT/df/282ac6-72c6-4b2c-9df9-8f1f2c914f04/1/4IFCtC45SABI0fzqWHo2k9pMC4o.mft
rsync://rpki.ripe.net/repository/DEFAULT/4IFCtC45SABI0fzqWHo2k9pMC4o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 04:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:15:ef:43:d0:42:30:f9:d5:25:bc:3e:25:1c:4e:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e08142b42e39480048d1fcea587a3693da4c0b8a
Validity
Not Before: Aug 23 04:00:40 2025 GMT
Not After : Aug 24 04:00:40 2025 GMT
Subject: CN=e06c24102b4f2b9188504bd02c351774b5684ac4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:ef:02:7c:24:54:28:0f:b6:2b:e8:ac:e4:25:
d2:7e:6a:35:7f:35:2a:66:0c:98:16:74:56:77:32:
c9:1f:dc:4a:13:6b:0f:7b:0e:15:af:7f:29:de:e2:
f9:a1:ce:4a:fb:63:f7:d3:d4:b6:a1:18:ec:80:ef:
f9:05:f9:ac:e5:77:c9:34:78:41:54:49:69:b1:18:
83:76:20:ee:e2:c0:83:d3:ac:18:69:c1:99:95:81:
7a:e6:5e:dc:21:a9:63:bb:af:5e:10:95:5d:c6:f5:
ff:e0:6a:e0:8b:19:c6:99:b9:96:10:8d:d4:28:2e:
3d:c4:6e:de:7d:63:c4:de:cb:b9:3a:8e:31:c8:19:
bb:e1:44:e6:58:f3:22:35:fe:1b:20:f6:00:de:6a:
1c:22:d5:8a:7d:cb:2a:68:f1:bb:2d:f2:c1:e8:1e:
33:31:5f:30:94:6f:e3:69:04:6a:66:a7:4d:54:52:
0c:1e:4a:ef:96:5a:dd:7b:d3:d7:5f:5e:70:dc:5e:
42:c0:fc:5f:cc:0e:0d:d6:83:9b:d6:58:ad:03:ee:
96:74:39:02:c0:10:13:15:a8:44:68:b6:42:34:b2:
80:b7:f6:33:e9:41:d8:5e:44:82:57:34:0f:99:bc:
40:0e:df:ac:86:20:f2:3f:63:0d:60:f9:c4:96:dc:
11:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:6C:24:10:2B:4F:2B:91:88:50:4B:D0:2C:35:17:74:B5:68:4A:C4
X509v3 Authority Key Identifier:
keyid:E0:81:42:B4:2E:39:48:00:48:D1:FC:EA:58:7A:36:93:DA:4C:0B:8A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4IFCtC45SABI0fzqWHo2k9pMC4o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/282ac6-72c6-4b2c-9df9-8f1f2c914f04/1/4IFCtC45SABI0fzqWHo2k9pMC4o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/282ac6-72c6-4b2c-9df9-8f1f2c914f04/1/4IFCtC45SABI0fzqWHo2k9pMC4o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:69:b4:2c:89:08:d6:71:45:7e:46:60:dc:8c:3c:9c:d1:27:
12:0b:f6:33:cc:56:be:5d:47:c3:b3:04:fe:10:88:43:a1:c4:
3e:40:27:f3:af:c6:2f:37:0c:a0:21:c0:e2:0e:c7:40:f0:01:
4c:ac:ed:af:67:d6:9c:2b:81:da:cc:09:a6:16:4d:5f:03:e2:
38:c5:a1:14:59:aa:17:c4:b7:42:df:fd:b5:8c:d4:b3:00:da:
75:73:87:20:77:7f:6d:2e:39:9a:48:4c:bd:86:81:dc:74:41:
c9:fa:4a:8d:bb:84:8a:97:8b:f6:8b:19:a9:2c:b3:ef:e0:82:
76:cd:4a:11:3a:b1:9d:5a:ca:11:98:6f:e2:82:91:5d:14:7d:
21:53:fd:fa:2f:20:49:ef:b7:72:4a:32:76:7a:dd:85:74:f4:
46:bc:56:8c:cb:f2:98:fd:ab:93:dd:94:6a:d3:b4:d5:69:eb:
6f:ab:0f:9a:82:46:83:87:f9:00:5f:d9:cf:6a:01:77:54:39:
7d:5a:b8:b7:f3:37:4a:90:e0:8e:9e:47:51:a3:9e:8d:1c:d2:
06:a4:f8:dd:0f:25:41:10:61:0a:ad:f4:0c:2c:ec:1f:21:87:
8b:02:c6:e2:b8:3c:3d:38:db:3c:2d:ca:80:78:c9:f6:93:15:
c8:19:63:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:51:58 2025 by rpki-client