Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/f3d446-ac06-4902-a647-ef1570c72599/1/4T43FhOUZeaoz59r2LW492M68ig.mft
File: 4T43FhOUZeaoz59r2LW492M68ig.mft (raw, json)
Hash identifier: 8TVmYSbylPPerqaXdshLq9LhF6kC51DsXnFzTBp/hrs=
Subject key identifier: 05:7E:67:54:C0:AD:98:80:69:9B:CC:5D:32:D7:C2:72:8E:CD:8A:1A
Authority key identifier: E1:3E:37:16:13:94:65:E6:A8:CF:9F:6B:D8:B5:B8:F7:63:3A:F2:28
Certificate issuer: /CN=e13e3716139465e6a8cf9f6bd8b5b8f7633af228
Certificate serial: 0198D8501255DA52C91292AF3A3E5F065DC0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4T43FhOUZeaoz59r2LW492M68ig.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/f3d446-ac06-4902-a647-ef1570c72599/1/4T43FhOUZeaoz59r2LW492M68ig.mft
Manifest number: 164A
Signing time: Sat 23 Aug 2025 19:03:02 +0000
Manifest this update: Sat 23 Aug 2025 19:03:02 +0000
Manifest next update: Sun 24 Aug 2025 19:03:02 +0000
Files and hashes: 1: 4T43FhOUZeaoz59r2LW492M68ig.crl (hash: iZTwy2e7ni7PD7+WcH+qQV7cikQIiPWF4S7kKV1wvRI=)
2: VbNrPWQYTWo9s0J6s8AxjamlwvI.roa (hash: /mWvYY88JMhRPBUym5HOiq9hJe5sysSC0ACyBbQ58No=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/f3d446-ac06-4902-a647-ef1570c72599/1/4T43FhOUZeaoz59r2LW492M68ig.crl
rsync://rpki.ripe.net/repository/DEFAULT/ef/f3d446-ac06-4902-a647-ef1570c72599/1/4T43FhOUZeaoz59r2LW492M68ig.mft
rsync://rpki.ripe.net/repository/DEFAULT/4T43FhOUZeaoz59r2LW492M68ig.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 14:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d8:50:12:55:da:52:c9:12:92:af:3a:3e:5f:06:5d:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e13e3716139465e6a8cf9f6bd8b5b8f7633af228
Validity
Not Before: Aug 23 19:03:02 2025 GMT
Not After : Aug 24 19:03:02 2025 GMT
Subject: CN=057e6754c0ad9880699bcc5d32d7c2728ecd8a1a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:74:d4:48:c9:df:fc:c3:63:47:d0:63:69:78:
7c:31:20:76:54:bd:22:58:33:ff:18:5b:b4:f5:96:
86:b2:b7:0c:6b:20:27:96:9b:0c:2f:e5:67:90:44:
31:76:7d:ea:7b:56:f3:26:00:f2:c9:a0:21:94:2c:
d2:17:02:a2:b0:bd:bf:12:e5:63:94:5f:8c:47:0c:
d7:61:d8:07:b5:cc:74:d2:dc:0c:7f:6a:c0:fc:a1:
8a:4c:a9:66:51:e1:4f:a1:b6:c1:53:7b:d3:6e:04:
de:c7:f3:73:b4:42:aa:9e:96:68:48:9a:c9:8a:82:
3b:ba:2b:4d:15:60:f2:a7:bd:86:c4:9d:1f:0f:1a:
42:ef:5a:af:83:76:e7:b4:ec:ab:6d:fe:25:fe:fb:
8c:e7:6d:9b:be:eb:d0:d4:49:37:6b:23:cd:4d:1e:
ed:26:4e:a2:09:6a:15:5c:63:0a:18:21:38:42:8b:
12:3a:ee:5a:c6:e0:b1:f9:6b:6a:4e:b0:b2:d1:7f:
69:3d:30:46:fb:86:1c:97:c3:a4:d7:5f:97:59:cb:
e7:63:b0:d0:a2:68:74:5f:56:3c:f8:af:c0:15:5a:
dd:27:74:91:cf:c4:d8:86:6f:e6:70:9e:60:a3:97:
22:89:07:64:51:21:28:e4:18:80:e4:5e:fc:f6:bc:
7d:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:7E:67:54:C0:AD:98:80:69:9B:CC:5D:32:D7:C2:72:8E:CD:8A:1A
X509v3 Authority Key Identifier:
keyid:E1:3E:37:16:13:94:65:E6:A8:CF:9F:6B:D8:B5:B8:F7:63:3A:F2:28
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4T43FhOUZeaoz59r2LW492M68ig.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/f3d446-ac06-4902-a647-ef1570c72599/1/4T43FhOUZeaoz59r2LW492M68ig.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/f3d446-ac06-4902-a647-ef1570c72599/1/4T43FhOUZeaoz59r2LW492M68ig.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:69:18:b1:85:86:2e:a3:59:71:1a:e3:28:46:70:ca:42:a3:
1a:71:9b:da:fc:7a:92:3f:87:66:8e:d6:51:b8:29:44:d3:ca:
ed:12:ec:e3:24:f8:a5:88:c4:2e:a9:f5:17:fb:e5:91:76:de:
e8:b8:06:67:8b:6f:cc:52:f4:a6:53:4a:df:b4:c9:6e:81:7f:
5e:72:7b:06:51:75:70:e7:e3:84:77:7f:d2:d4:66:2b:0d:75:
b5:ef:97:91:a2:49:5d:5d:50:aa:28:09:1d:a9:47:af:80:0c:
c8:be:a3:6d:c2:e9:eb:c1:54:0a:5e:98:3f:6f:2e:cb:1a:0b:
14:b3:94:ff:0a:27:8b:8a:81:eb:d4:a6:70:36:ac:9a:11:8d:
a4:73:15:74:98:87:76:0e:b0:8d:e0:5c:23:87:c2:51:7d:cb:
da:af:52:b4:5f:80:58:75:7c:6f:7b:ec:a6:4e:41:cf:34:50:
ac:b6:bb:b9:04:18:05:bd:71:64:aa:39:f5:04:49:22:06:af:
8b:b6:7d:bf:e7:ce:5e:fa:ef:4b:50:60:ea:4d:04:2a:d1:2f:
4a:54:80:d9:af:b4:57:40:12:fd:4f:52:1d:9e:75:b4:57:ba:
bf:74:19:72:42:ad:9a:d3:d0:bc:3e:fc:fa:98:c5:76:3e:f4:
d8:0b:1c:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 00:07:31 2025 by rpki-client