Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/ae0d8b-4857-4ba7-b342-5ec336bf743b/1/4n4d0HRmJ4A2ulzZQ9ew4CHPhig.mft
File: 4n4d0HRmJ4A2ulzZQ9ew4CHPhig.mft (raw, json)
Hash identifier: 8zBMoBW7JQUtwxP4l5GKfkwkHWPqXA/fCT88yczNrFk=
Subject key identifier: 67:7A:CA:BD:C4:1E:08:B4:BF:B4:83:F7:E3:B1:A7:22:55:C1:10:6E
Authority key identifier: E2:7E:1D:D0:74:66:27:80:36:BA:5C:D9:43:D7:B0:E0:21:CF:86:28
Certificate issuer: /CN=e27e1dd07466278036ba5cd943d7b0e021cf8628
Certificate serial: 0198D58360B0D45E2D58DD8598E3C34DB334
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4n4d0HRmJ4A2ulzZQ9ew4CHPhig.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/ae0d8b-4857-4ba7-b342-5ec336bf743b/1/4n4d0HRmJ4A2ulzZQ9ew4CHPhig.mft
Manifest number: 05A3
Signing time: Sat 23 Aug 2025 06:00:13 +0000
Manifest this update: Sat 23 Aug 2025 06:00:13 +0000
Manifest next update: Sun 24 Aug 2025 06:00:13 +0000
Files and hashes: 1: 4n4d0HRmJ4A2ulzZQ9ew4CHPhig.crl (hash: 6eX9qkp2EPgZ4qk1FmAuXf1mnBHoea5oTA1Ozj2D1sU=)
2: FDe_pjW_jnnn_wQOP-AVXix4Szo.roa (hash: VtZUc2Nt2trLnWpsaaIqK/XsZumvjhDGxHdBVKEJhRw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/ae0d8b-4857-4ba7-b342-5ec336bf743b/1/4n4d0HRmJ4A2ulzZQ9ew4CHPhig.crl
rsync://rpki.ripe.net/repository/DEFAULT/f3/ae0d8b-4857-4ba7-b342-5ec336bf743b/1/4n4d0HRmJ4A2ulzZQ9ew4CHPhig.mft
rsync://rpki.ripe.net/repository/DEFAULT/4n4d0HRmJ4A2ulzZQ9ew4CHPhig.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:83:60:b0:d4:5e:2d:58:dd:85:98:e3:c3:4d:b3:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e27e1dd07466278036ba5cd943d7b0e021cf8628
Validity
Not Before: Aug 23 06:00:13 2025 GMT
Not After : Aug 24 06:00:13 2025 GMT
Subject: CN=677acabdc41e08b4bfb483f7e3b1a72255c1106e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:47:b7:8e:ca:ef:b0:ed:1a:0d:e6:92:8e:82:
5a:bf:e0:9c:58:81:df:33:f6:cb:ea:0e:bb:63:c8:
a1:df:96:68:fa:ed:f0:df:55:ad:b1:06:10:57:20:
03:64:72:b6:44:96:f9:4f:cb:d2:e2:61:c8:45:ce:
f8:60:3c:c9:3d:ea:0e:4e:6b:81:fd:30:76:f2:8a:
aa:e1:56:05:cb:f2:76:52:6b:34:5d:63:a6:5d:e4:
40:33:c9:44:99:29:ae:69:ba:62:7f:1d:3e:2d:8c:
d5:53:41:e4:3b:5e:91:57:75:5b:f8:ef:02:0d:3b:
96:d1:46:a5:c0:d0:0b:39:26:e7:3f:03:51:b9:34:
29:7f:8c:99:08:24:62:55:e4:24:07:a9:66:e0:a9:
11:98:d5:66:39:40:be:27:92:cc:5b:ab:f5:20:bf:
d3:81:de:1f:fc:ff:d7:df:9f:0e:a6:f4:b3:f7:90:
f7:a2:c4:22:ed:2f:12:15:43:1b:7f:a4:9f:95:e1:
e6:90:4f:b6:96:c7:e5:8b:22:d0:45:43:bc:e9:52:
e8:a0:1a:6c:ac:05:fc:3d:d4:02:7e:29:89:41:92:
52:a7:08:43:02:d7:3f:f3:a0:62:f0:fe:c5:82:50:
63:e9:a9:68:79:8c:67:99:c8:38:0a:49:06:05:32:
d1:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:7A:CA:BD:C4:1E:08:B4:BF:B4:83:F7:E3:B1:A7:22:55:C1:10:6E
X509v3 Authority Key Identifier:
keyid:E2:7E:1D:D0:74:66:27:80:36:BA:5C:D9:43:D7:B0:E0:21:CF:86:28
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4n4d0HRmJ4A2ulzZQ9ew4CHPhig.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/ae0d8b-4857-4ba7-b342-5ec336bf743b/1/4n4d0HRmJ4A2ulzZQ9ew4CHPhig.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/ae0d8b-4857-4ba7-b342-5ec336bf743b/1/4n4d0HRmJ4A2ulzZQ9ew4CHPhig.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
97:57:d9:0e:58:e9:a4:df:e5:30:77:bc:fd:dc:aa:c0:a9:05:
03:bb:d2:d7:ff:1e:38:b4:7b:2e:4c:14:a8:e3:8c:c8:80:a8:
10:d0:74:58:47:0e:e0:42:9e:e6:87:1b:84:4d:ef:f9:0b:53:
a2:a7:4f:41:76:98:7c:45:3b:c8:f3:15:1b:34:c0:6a:ef:53:
cc:c9:9b:cb:75:80:d2:6a:d2:3e:7a:9c:3c:32:a8:20:ce:06:
a4:45:82:61:44:b5:b6:70:ae:77:dc:b4:33:f2:c2:29:9a:34:
9f:7c:15:c7:e5:f2:09:9b:0b:84:a9:fc:c3:1e:71:e2:66:2e:
a4:52:0e:3e:82:cd:36:75:a9:37:46:27:ba:cf:7c:ee:d0:0d:
67:51:9e:45:90:ac:0a:7a:e2:e5:60:61:47:44:17:51:2b:7c:
47:d1:52:ee:17:82:f4:41:2b:53:bd:f4:81:cf:76:4f:17:d6:
6c:a8:74:65:03:8b:ad:55:cb:39:56:10:94:9c:a4:74:55:62:
39:b1:3d:7a:68:76:06:05:7a:45:45:e3:57:87:b5:bb:d5:77:
40:4d:95:f5:fa:86:6c:dc:4c:23:d8:28:6e:92:83:7c:bf:5b:
80:3b:e6:a7:af:66:8e:10:fb:a5:ae:e7:01:69:7a:17:dd:89:
73:c9:bd:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 14:37:21 2025 by rpki-client