Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/a18cf1-a080-4945-8b21-05556959c455/1/4YDru8oPiQ3jU4kUIag91bZT2UA.mft
File: 4YDru8oPiQ3jU4kUIag91bZT2UA.mft (raw, json)
Hash identifier: l1ACskU3C5qcahP/tmuDEp4VkyHUSgU9DG5DVYmfng4=
Subject key identifier: 54:27:85:64:88:CB:4E:CE:C3:3E:D5:D6:57:A4:53:0F:19:2D:A9:B0
Authority key identifier: E1:80:EB:BB:CA:0F:89:0D:E3:53:89:14:21:A8:3D:D5:B6:53:D9:40
Certificate issuer: /CN=e180ebbbca0f890de353891421a83dd5b653d940
Certificate serial: 0198D404D2EDFABE58D53AE559A07C95EE97
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4YDru8oPiQ3jU4kUIag91bZT2UA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/a18cf1-a080-4945-8b21-05556959c455/1/4YDru8oPiQ3jU4kUIag91bZT2UA.mft
Manifest number: 1652
Signing time: Fri 22 Aug 2025 23:02:22 +0000
Manifest this update: Fri 22 Aug 2025 23:02:22 +0000
Manifest next update: Sat 23 Aug 2025 23:02:22 +0000
Files and hashes: 1: 3FLOlTCLI1G1gTETun5ejoasBuA.roa (hash: ZqTUajmkPh8jnrRO1gF7H9NNj5iQ+rkTS+4qDwUhPQw=)
2: 4YDru8oPiQ3jU4kUIag91bZT2UA.crl (hash: wA6+Yls7+rhVoM1s8xHBlFfKq3P+9GEtkZeOw0VuaeU=)
3: CMHg46_N_Yzu5cDNrodsWcXH1qs.roa (hash: 9+kqVKjcfEEoN1RX5aOJP2hJFs9a0+X0ktGFEifqfTA=)
4: ccRftpql5fjXlNV0NylDd4KOG5c.roa (hash: kdsSlrhnC//Y+wGXnH9Z3RLM6M+rlU4Fjt+Q8g1QTKU=)
5: iGsK_B5kc7f5LtdtrLxtSL9ku54.roa (hash: raQtWkSW1CK//C2quX0UqsJsM/839tIzJbksWP0Gq+o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/a18cf1-a080-4945-8b21-05556959c455/1/4YDru8oPiQ3jU4kUIag91bZT2UA.crl
rsync://rpki.ripe.net/repository/DEFAULT/f8/a18cf1-a080-4945-8b21-05556959c455/1/4YDru8oPiQ3jU4kUIag91bZT2UA.mft
rsync://rpki.ripe.net/repository/DEFAULT/4YDru8oPiQ3jU4kUIag91bZT2UA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Aug 2025 23:02:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:04:d2:ed:fa:be:58:d5:3a:e5:59:a0:7c:95:ee:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e180ebbbca0f890de353891421a83dd5b653d940
Validity
Not Before: Aug 22 23:02:22 2025 GMT
Not After : Aug 23 23:02:22 2025 GMT
Subject: CN=5427856488cb4ecec33ed5d657a4530f192da9b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:e2:fe:4a:f8:d3:35:d8:55:2a:5e:f1:11:11:
bd:ef:60:e4:ce:1f:bb:ad:1b:f8:2d:40:d0:6c:45:
e9:68:f5:4d:db:8c:4b:10:47:61:01:3d:38:73:24:
fc:89:1e:b0:d8:0c:0f:f7:e1:e3:6a:db:5f:07:b3:
f3:da:d9:8b:81:4f:d6:7d:48:c0:74:68:3b:ca:fc:
96:f4:ee:b6:1f:d6:fb:f6:fc:6b:c1:27:98:82:aa:
4b:59:ea:b9:e4:e9:c2:90:3e:11:db:a2:ef:f5:cc:
b3:40:50:fc:13:6b:50:8f:6e:af:4a:ed:43:de:68:
8b:27:aa:87:4e:cf:2c:8f:1d:ef:48:f1:21:aa:d5:
24:08:5e:45:d5:c6:64:8d:73:25:fa:44:62:e9:29:
18:0d:77:bc:1c:bc:e4:7b:14:72:3f:0f:8d:5b:fc:
4a:43:6b:f3:25:27:6a:66:a1:34:1c:33:b5:06:72:
72:20:38:65:b0:21:5b:38:e1:43:03:9f:57:47:01:
28:8a:9e:76:7d:89:19:95:0d:ce:5f:14:f5:e2:47:
1e:da:ee:59:15:17:35:6d:61:45:84:78:6c:bb:63:
6b:b2:7e:03:9b:bd:5f:dd:90:fb:15:aa:7a:ed:f8:
52:b0:7b:a0:be:b6:74:83:2d:70:76:33:71:ab:14:
24:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:27:85:64:88:CB:4E:CE:C3:3E:D5:D6:57:A4:53:0F:19:2D:A9:B0
X509v3 Authority Key Identifier:
keyid:E1:80:EB:BB:CA:0F:89:0D:E3:53:89:14:21:A8:3D:D5:B6:53:D9:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4YDru8oPiQ3jU4kUIag91bZT2UA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/a18cf1-a080-4945-8b21-05556959c455/1/4YDru8oPiQ3jU4kUIag91bZT2UA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/a18cf1-a080-4945-8b21-05556959c455/1/4YDru8oPiQ3jU4kUIag91bZT2UA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:cb:82:fd:e1:fe:dd:18:2d:5d:d5:61:6b:85:40:81:9f:28:
56:f1:8a:8c:76:09:c6:4c:f9:3a:ce:51:58:a1:f1:84:25:39:
e5:0d:36:5a:fe:0e:e8:9c:44:a5:a6:b1:1c:95:65:bb:5d:bb:
f3:ce:51:c3:ab:bd:a2:b3:6e:b5:36:72:63:fa:c7:05:62:4d:
3b:9f:7b:60:c6:6b:74:d6:8c:31:7b:81:3c:98:23:fd:7e:61:
f6:ca:8b:ed:37:31:f9:8d:f0:3d:2c:97:c6:d9:c1:89:3f:66:
6b:68:1d:3e:1a:47:93:15:ae:ef:73:dc:fd:67:d0:9c:9f:aa:
a4:7f:7d:a8:8a:7d:c2:64:5a:a8:9d:07:85:7f:44:0c:28:b0:
77:1b:cc:f1:4f:e2:70:8d:62:82:66:12:b8:33:90:94:b3:35:
f8:08:5b:f4:04:27:d5:4c:1e:fa:39:68:57:27:f3:0b:7c:9e:
ce:d8:d6:e3:eb:3f:1d:22:8d:c4:ea:10:ed:17:9e:9b:44:7a:
66:cc:22:87:a6:ad:6b:52:2a:ee:88:25:4c:cc:86:34:b9:cc:
a7:80:56:4a:0c:5b:bc:a3:73:42:38:7b:45:7b:27:d5:a9:30:
e9:6c:e5:ab:cb:c8:0c:c9:4d:7c:b3:50:f3:8f:b7:67:9a:39:
09:c0:0d:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:26:08 2025 by rpki-client