Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/7e3025-8caf-402c-b54f-cbb8cfee6e3c/1/4kLCt011daIop-ZPBAbzo5fHrlY.mft
File: 4kLCt011daIop-ZPBAbzo5fHrlY.mft (raw, json)
Hash identifier: m5e9LoPKS5bMPj0ybkDkBbdqQrkgoAmin3DjwnC0T+Y=
Subject key identifier: 53:C4:63:F4:D7:D6:CA:7D:39:23:02:DB:F0:09:F4:9E:EB:26:3A:D9
Authority key identifier: E2:42:C2:B7:4D:75:75:A2:28:A7:E6:4F:04:06:F3:A3:97:C7:AE:56
Certificate issuer: /CN=e242c2b74d7575a228a7e64f0406f3a397c7ae56
Certificate serial: 0198D515DD1C89D498565D9873BBA0356F82
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4kLCt011daIop-ZPBAbzo5fHrlY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/7e3025-8caf-402c-b54f-cbb8cfee6e3c/1/4kLCt011daIop-ZPBAbzo5fHrlY.mft
Manifest number: 0A0B
Signing time: Sat 23 Aug 2025 04:00:36 +0000
Manifest this update: Sat 23 Aug 2025 04:00:36 +0000
Manifest next update: Sun 24 Aug 2025 04:00:36 +0000
Files and hashes: 1: 4kLCt011daIop-ZPBAbzo5fHrlY.crl (hash: OFVDQ04oRroxk9OTmgUqBJIegvY8EXwutCS67AFKKxo=)
2: tqH_QlpRHC3I-MGoNxLkAHQ-nF8.roa (hash: NbmtGcVLSkgpCEX2NZ9d9iO41gK+6pDcIvg0Zs3pCA8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/7e3025-8caf-402c-b54f-cbb8cfee6e3c/1/4kLCt011daIop-ZPBAbzo5fHrlY.crl
rsync://rpki.ripe.net/repository/DEFAULT/e5/7e3025-8caf-402c-b54f-cbb8cfee6e3c/1/4kLCt011daIop-ZPBAbzo5fHrlY.mft
rsync://rpki.ripe.net/repository/DEFAULT/4kLCt011daIop-ZPBAbzo5fHrlY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 04:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:15:dd:1c:89:d4:98:56:5d:98:73:bb:a0:35:6f:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e242c2b74d7575a228a7e64f0406f3a397c7ae56
Validity
Not Before: Aug 23 04:00:36 2025 GMT
Not After : Aug 24 04:00:36 2025 GMT
Subject: CN=53c463f4d7d6ca7d392302dbf009f49eeb263ad9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:f8:7b:93:82:18:ab:79:b1:4a:0a:21:c5:58:
df:39:f9:cf:1d:a1:7a:1b:ce:04:9c:de:86:da:e9:
f8:a3:c7:f1:bf:fb:17:e2:92:b7:ca:0d:a5:42:d1:
3d:f4:84:56:e3:cf:1f:4c:f6:9d:49:db:c1:5f:95:
13:a5:66:a5:50:04:a5:20:0d:af:bf:97:ab:52:cd:
87:06:65:94:71:bd:65:20:3f:6a:31:16:f4:ac:a3:
39:98:02:b0:79:1c:fc:d7:92:49:8f:8c:40:c5:02:
cf:70:e9:17:36:35:64:88:87:e1:21:47:8f:fc:ec:
04:be:7d:fd:a6:ad:f8:20:09:df:86:80:76:3c:5f:
8b:92:a5:d2:c6:64:a3:af:d4:e5:08:15:d4:2b:93:
67:62:91:5c:30:b0:4d:2c:e1:b8:50:9f:a6:c4:a3:
81:08:75:79:77:35:fa:ae:c6:c0:86:2e:a8:fe:af:
64:f9:88:00:eb:80:c5:ed:de:26:44:78:ff:f9:d8:
d8:61:dd:df:83:a7:60:9d:2f:3a:ad:08:af:ec:9b:
66:94:c4:b8:1d:bc:8d:74:90:6a:da:69:b5:f9:74:
5f:49:13:80:d1:8a:e5:fe:db:bd:c9:82:88:5f:91:
8c:af:cf:81:13:1c:2d:d1:ae:fa:7a:c4:ea:97:84:
c0:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:C4:63:F4:D7:D6:CA:7D:39:23:02:DB:F0:09:F4:9E:EB:26:3A:D9
X509v3 Authority Key Identifier:
keyid:E2:42:C2:B7:4D:75:75:A2:28:A7:E6:4F:04:06:F3:A3:97:C7:AE:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4kLCt011daIop-ZPBAbzo5fHrlY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/7e3025-8caf-402c-b54f-cbb8cfee6e3c/1/4kLCt011daIop-ZPBAbzo5fHrlY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/7e3025-8caf-402c-b54f-cbb8cfee6e3c/1/4kLCt011daIop-ZPBAbzo5fHrlY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:82:db:c5:0c:c8:47:b7:6a:a7:1b:c5:d7:39:5b:90:24:5e:
21:0b:55:a0:b1:32:e7:65:44:f2:5d:9f:74:6d:3f:0c:bb:6e:
15:45:4a:14:a8:dc:f9:16:40:83:8f:99:87:ca:c9:01:2d:d0:
61:f8:18:b0:20:fa:3b:b9:44:45:4a:03:da:53:fd:b5:f0:5d:
cb:3f:3b:ce:ce:0a:12:85:c3:f1:5c:6b:37:c9:70:62:de:3b:
f1:94:a8:6d:f1:f1:5b:f3:34:ff:6e:c0:d5:98:6e:62:38:24:
05:b5:71:37:33:33:0a:5f:64:3b:c8:6d:0f:46:b4:b9:8e:ee:
8e:73:8d:46:f9:c5:70:f3:56:76:71:f8:87:f8:2f:83:ae:e0:
83:d5:51:6b:41:09:17:75:40:56:3d:49:53:25:e8:8d:5f:a9:
2d:55:4f:f3:05:44:89:da:57:a6:0f:32:9d:02:39:e0:3f:8a:
ff:f8:84:c0:32:42:e1:dd:0c:bc:ae:7c:b1:34:25:ea:cb:14:
0e:c1:44:81:11:28:3f:8f:69:c5:b7:9f:81:58:f5:0d:db:4b:
35:3c:03:3d:02:59:b2:ce:55:0b:80:4d:ab:47:e2:c1:87:0f:
ef:57:d8:5d:00:24:ba:84:e6:4e:ee:c3:3c:a9:4b:36:3f:d9:
b6:7c:90:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:04:44 2025 by rpki-client