Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/4291a2-03a9-4195-b1a7-3f40547e52d1/1/s4slrXyWWJ5KjKpfpIksxN_Me1M.mft
File: s4slrXyWWJ5KjKpfpIksxN_Me1M.mft (raw, json)
Hash identifier: s8Pl6BabbXrpEJshga4a7AQsl+fDYpIDZxtCcTsvvoA=
Subject key identifier: D8:D4:B3:07:47:C9:CF:99:9B:8B:81:77:9E:3C:04:7F:FD:09:EC:8A
Authority key identifier: B3:8B:25:AD:7C:96:58:9E:4A:8C:AA:5F:A4:89:2C:C4:DF:CC:7B:53
Certificate issuer: /CN=b38b25ad7c96589e4a8caa5fa4892cc4dfcc7b53
Certificate serial: 0198D4045E597488D7CC7C15DDD8EA3899DF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s4slrXyWWJ5KjKpfpIksxN_Me1M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/4291a2-03a9-4195-b1a7-3f40547e52d1/1/s4slrXyWWJ5KjKpfpIksxN_Me1M.mft
Manifest number: 1649
Signing time: Fri 22 Aug 2025 23:01:52 +0000
Manifest this update: Fri 22 Aug 2025 23:01:52 +0000
Manifest next update: Sat 23 Aug 2025 23:01:52 +0000
Files and hashes: 1: JJG6lSZApZVFWCoCMzoaHnqrdjA.roa (hash: /ZXBf7GoIevwDbia6b3jjdIqB98IB5pgV+PKh4AI8CE=)
2: s4slrXyWWJ5KjKpfpIksxN_Me1M.crl (hash: xCsPuV91kgjTSxnh+oyidnWRfobYy/IEKRBB67MLvMI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/4291a2-03a9-4195-b1a7-3f40547e52d1/1/s4slrXyWWJ5KjKpfpIksxN_Me1M.crl
rsync://rpki.ripe.net/repository/DEFAULT/e7/4291a2-03a9-4195-b1a7-3f40547e52d1/1/s4slrXyWWJ5KjKpfpIksxN_Me1M.mft
rsync://rpki.ripe.net/repository/DEFAULT/s4slrXyWWJ5KjKpfpIksxN_Me1M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Aug 2025 23:01:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:04:5e:59:74:88:d7:cc:7c:15:dd:d8:ea:38:99:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b38b25ad7c96589e4a8caa5fa4892cc4dfcc7b53
Validity
Not Before: Aug 22 23:01:52 2025 GMT
Not After : Aug 23 23:01:52 2025 GMT
Subject: CN=d8d4b30747c9cf999b8b81779e3c047ffd09ec8a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:bc:aa:2a:34:e6:21:da:c0:ed:13:7e:28:c7:
65:8b:4e:b4:59:0e:99:06:3a:e0:33:2c:2d:8a:2b:
d8:05:d6:a7:1b:08:50:f1:bc:af:0a:71:1c:77:2e:
8c:a7:fa:ba:ec:e8:50:11:87:64:b3:5b:56:26:e6:
5d:96:82:2e:26:70:65:99:74:be:ec:17:6f:6d:ad:
ae:45:f8:ed:22:99:bc:81:96:58:fc:a1:f2:40:92:
bb:97:12:9b:04:ad:7e:c7:99:8c:67:8c:b1:be:26:
a1:d7:c8:95:b4:18:ff:17:ee:92:e6:da:46:cc:99:
56:a7:d0:8f:3b:9b:f4:d4:d0:69:6f:1c:3c:86:1f:
81:4e:1f:d6:7d:e9:66:3c:eb:b5:ac:2b:b0:21:fe:
09:5b:5a:d4:9e:04:67:be:22:a5:d6:6a:8b:6f:fb:
79:b5:55:49:62:53:ec:6c:e9:e6:a8:30:4c:57:b1:
c4:79:a1:9a:9d:c6:f5:d1:db:11:06:cd:25:06:3a:
c6:c9:75:62:8b:4f:78:4a:3c:fa:66:9c:ae:6b:35:
4c:c0:3b:68:f4:41:7d:6c:1f:14:61:0c:15:c8:b3:
2c:ee:91:16:f6:79:5e:df:bf:38:51:59:cd:75:81:
4d:e0:c1:7c:70:d4:b8:38:df:b4:64:88:15:c9:4f:
41:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:D4:B3:07:47:C9:CF:99:9B:8B:81:77:9E:3C:04:7F:FD:09:EC:8A
X509v3 Authority Key Identifier:
keyid:B3:8B:25:AD:7C:96:58:9E:4A:8C:AA:5F:A4:89:2C:C4:DF:CC:7B:53
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s4slrXyWWJ5KjKpfpIksxN_Me1M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/4291a2-03a9-4195-b1a7-3f40547e52d1/1/s4slrXyWWJ5KjKpfpIksxN_Me1M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/4291a2-03a9-4195-b1a7-3f40547e52d1/1/s4slrXyWWJ5KjKpfpIksxN_Me1M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:94:3d:46:40:e7:9a:a7:bf:34:70:10:1e:55:69:e9:f1:fa:
1a:3a:6c:48:b8:c5:53:74:b7:c9:e0:39:31:97:b5:29:ff:19:
7c:da:08:08:33:ea:69:53:6d:a8:5b:4e:e4:75:f4:1a:c0:79:
ad:5a:8b:68:35:90:db:5f:18:e0:d8:d4:c5:e9:b2:25:74:8a:
c6:38:3b:4b:c6:56:c9:ae:70:75:5f:bb:be:e9:8f:c8:c3:26:
86:78:2f:aa:f8:77:cb:6d:fa:d7:e0:92:7d:1e:12:60:7b:21:
1b:8d:a0:e3:5b:0d:12:af:a7:0e:e7:32:27:5d:36:67:08:27:
c7:3c:d7:de:bf:e1:41:7f:4d:a5:ef:d3:eb:c9:24:9e:78:6d:
83:20:c3:97:ea:3d:00:e0:f6:af:0d:49:d0:31:c2:3d:da:78:
5a:6f:25:a6:b6:ef:4e:f8:72:4e:18:76:38:3c:ab:1c:fb:b8:
e1:c9:28:af:9b:a7:46:07:e3:f4:aa:80:84:60:25:af:4b:5b:
a8:37:a7:9b:c7:fe:62:b7:36:85:17:b3:b1:d5:ce:25:71:09:
85:73:44:92:8f:d7:e1:34:41:cf:81:4b:64:00:67:29:18:fb:
9d:ba:e9:42:43:62:4c:17:b1:3f:d7:57:24:4d:90:32:bc:16:
ef:c1:e1:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:24:32 2025 by rpki-client