Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/9680c7-57d7-49c6-8b63-40153c5d0a47/1/_4IIsSnFPofD8NDtG8qFcwFA85A.mft
File: _4IIsSnFPofD8NDtG8qFcwFA85A.mft (raw, json)
Hash identifier: C4zDZMmjcXPvoVy821x08ZPTXBjDiRRbGpPuc3QeJtY=
Subject key identifier: DD:9A:A0:9C:55:DD:CB:B3:70:97:2A:11:E6:02:24:DA:4A:F0:D9:5B
Authority key identifier: FF:82:08:B1:29:C5:3E:87:C3:F0:D0:ED:1B:CA:85:73:01:40:F3:90
Certificate issuer: /CN=ff8208b129c53e87c3f0d0ed1bca85730140f390
Certificate serial: 0198D5BBE689951DC762DEC83D7631E68446
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_4IIsSnFPofD8NDtG8qFcwFA85A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/9680c7-57d7-49c6-8b63-40153c5d0a47/1/_4IIsSnFPofD8NDtG8qFcwFA85A.mft
Manifest number: 0F58
Signing time: Sat 23 Aug 2025 07:01:57 +0000
Manifest this update: Sat 23 Aug 2025 07:01:57 +0000
Manifest next update: Sun 24 Aug 2025 07:01:57 +0000
Files and hashes: 1: _4IIsSnFPofD8NDtG8qFcwFA85A.crl (hash: F/bQ9Naxh+y8+cRDzHoL13MRykBmWm7A8Hio0dMNO/A=)
2: qGecERglbMsiHMQJoiUSFGALt-E.roa (hash: yLMKR6LctC/w2fvLTclquZCs4hF15ArbhdOh5oCoDz8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/9680c7-57d7-49c6-8b63-40153c5d0a47/1/_4IIsSnFPofD8NDtG8qFcwFA85A.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/9680c7-57d7-49c6-8b63-40153c5d0a47/1/_4IIsSnFPofD8NDtG8qFcwFA85A.mft
rsync://rpki.ripe.net/repository/DEFAULT/_4IIsSnFPofD8NDtG8qFcwFA85A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 07:01:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:bb:e6:89:95:1d:c7:62:de:c8:3d:76:31:e6:84:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ff8208b129c53e87c3f0d0ed1bca85730140f390
Validity
Not Before: Aug 23 07:01:57 2025 GMT
Not After : Aug 24 07:01:57 2025 GMT
Subject: CN=dd9aa09c55ddcbb370972a11e60224da4af0d95b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:0d:3d:b5:39:0f:dd:a0:28:58:87:3d:d3:4f:
25:0d:9c:2c:b4:b1:fd:58:a6:af:76:90:42:bd:7e:
d6:67:26:c2:fc:96:3f:a8:17:43:41:76:aa:2b:e7:
7e:24:bb:fa:fc:ad:13:b6:4c:c8:6b:bb:10:ae:0e:
57:f9:16:61:f6:2f:5d:21:c7:ee:80:5e:6f:48:19:
1d:20:28:14:2f:34:c7:36:19:5b:b3:21:80:85:ed:
0f:b0:9a:d4:bb:c7:0a:48:ee:75:3b:4e:15:e0:f1:
66:63:c9:4b:28:ce:17:58:51:b0:4a:02:55:7e:d8:
2d:40:10:d1:09:ff:5c:63:ce:9c:28:03:4b:a6:b5:
fd:8a:fa:5c:2e:0e:34:ca:9c:23:81:22:25:4e:b1:
ee:ba:13:49:40:1a:c8:83:05:99:b9:a1:86:93:cc:
54:2c:f4:0f:ee:eb:2a:41:78:10:de:52:08:8c:a1:
3a:ae:a2:33:70:62:b8:ce:41:cf:f0:19:f4:e4:d8:
ab:93:8d:d1:65:8e:4a:a5:0f:e0:c3:61:77:7c:84:
3a:e8:b6:d8:1f:b0:28:ed:0d:c5:bc:91:00:8a:d7:
6e:63:37:e1:c7:f7:8a:b4:21:b2:ea:4e:8d:ba:a0:
30:e5:22:f9:9c:8c:d6:b2:63:11:2f:fb:70:50:6c:
fc:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:9A:A0:9C:55:DD:CB:B3:70:97:2A:11:E6:02:24:DA:4A:F0:D9:5B
X509v3 Authority Key Identifier:
keyid:FF:82:08:B1:29:C5:3E:87:C3:F0:D0:ED:1B:CA:85:73:01:40:F3:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_4IIsSnFPofD8NDtG8qFcwFA85A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/9680c7-57d7-49c6-8b63-40153c5d0a47/1/_4IIsSnFPofD8NDtG8qFcwFA85A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/9680c7-57d7-49c6-8b63-40153c5d0a47/1/_4IIsSnFPofD8NDtG8qFcwFA85A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:d5:dd:01:7e:9f:ff:5b:af:d9:35:de:3a:dc:b0:fd:c1:ee:
44:0b:b4:6d:fb:d9:39:2c:36:06:51:67:74:46:f2:c1:86:ad:
43:ec:e4:b5:b0:fc:c0:b3:7a:64:dc:36:31:91:29:7d:fe:48:
c4:af:17:7a:c1:e1:d1:bb:dd:1b:62:66:cf:36:46:51:ce:21:
5c:65:c5:97:f1:f1:5a:d5:b7:f4:ab:42:35:ab:1d:b1:42:c5:
fb:15:e4:9a:5e:98:3b:d6:82:cd:68:cd:36:0a:6b:af:d3:6e:
c2:5f:44:84:7b:d8:b4:26:6d:cf:05:85:cb:6a:02:59:bb:56:
48:ec:1f:d0:8d:1d:42:60:c5:ec:8f:56:de:1c:68:b0:d8:f1:
17:57:c1:e5:67:18:e3:f0:07:ee:c0:3e:44:27:87:90:95:5c:
17:a3:48:88:35:f5:62:0e:29:76:d2:df:8a:d8:14:25:b0:d8:
fe:91:dd:47:d3:14:71:4b:df:4c:dd:e2:bd:82:ec:6d:5e:e5:
4d:59:d4:e3:c4:5c:ef:13:83:6e:6c:f9:fb:47:5d:8c:b3:74:
99:40:56:b0:b2:b9:cf:f0:9c:3b:d5:d3:be:dc:32:c4:08:85:
06:57:4e:24:11:43:9f:36:0e:aa:e4:e1:c7:a7:30:47:93:01:
d2:72:64:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 16:56:42 2025 by rpki-client