Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/e83ac5-448b-4e49-8ebf-8842e5edce02/1/h4R32LYtCfmui_29gSpT-X7UxXY.mft
File: h4R32LYtCfmui_29gSpT-X7UxXY.mft (raw, json)
Hash identifier: E9K/xsY/zK/jyWH4BX7aDtsbUvxVNhYj+c9U+P58QmA=
Subject key identifier: 6C:D4:74:9F:9F:B2:14:33:2A:1D:A6:5B:E6:17:9E:2B:51:CC:FF:3F
Authority key identifier: 87:84:77:D8:B6:2D:09:F9:AE:8B:FD:BD:81:2A:53:F9:7E:D4:C5:76
Certificate issuer: /CN=878477d8b62d09f9ae8bfdbd812a53f97ed4c576
Certificate serial: 0198D4E03BD29DF688B4DB99F683F39BED67
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h4R32LYtCfmui_29gSpT-X7UxXY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/e83ac5-448b-4e49-8ebf-8842e5edce02/1/h4R32LYtCfmui_29gSpT-X7UxXY.mft
Manifest number: 0471
Signing time: Sat 23 Aug 2025 03:02:01 +0000
Manifest this update: Sat 23 Aug 2025 03:02:01 +0000
Manifest next update: Sun 24 Aug 2025 03:02:01 +0000
Files and hashes: 1: 1-chTvEPLKpclBFunFsZudwhteCw.roa (hash: Mk7QbJ14tNyeCXu9wD1n7MpPtkSCXANni+lDYxJDiAk=)
2: h4R32LYtCfmui_29gSpT-X7UxXY.crl (hash: NDezIoUR8p6mMiQ2cx0QEIo9Ub/JuJ1uI3ShDXYKP5Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/e83ac5-448b-4e49-8ebf-8842e5edce02/1/h4R32LYtCfmui_29gSpT-X7UxXY.crl
rsync://rpki.ripe.net/repository/DEFAULT/fb/e83ac5-448b-4e49-8ebf-8842e5edce02/1/h4R32LYtCfmui_29gSpT-X7UxXY.mft
rsync://rpki.ripe.net/repository/DEFAULT/h4R32LYtCfmui_29gSpT-X7UxXY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 03:02:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:e0:3b:d2:9d:f6:88:b4:db:99:f6:83:f3:9b:ed:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=878477d8b62d09f9ae8bfdbd812a53f97ed4c576
Validity
Not Before: Aug 23 03:02:01 2025 GMT
Not After : Aug 24 03:02:01 2025 GMT
Subject: CN=6cd4749f9fb214332a1da65be6179e2b51ccff3f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:5e:90:b7:dc:fb:64:be:e0:04:46:64:06:b5:
ab:dd:73:7b:3a:9c:ea:f6:d9:23:cd:ff:ed:7d:74:
59:84:8d:85:20:78:96:7b:12:a4:88:3c:df:88:c1:
f4:5f:6c:f4:9c:bb:a3:de:b8:5e:88:88:e1:89:cd:
e1:1d:d9:5c:64:d1:aa:db:83:cf:fe:cb:4b:ea:cd:
15:17:c8:ec:84:ff:f1:86:f5:2b:ca:24:5b:e8:21:
f7:91:a9:0e:96:32:b3:f8:f2:38:d2:2d:ac:36:64:
fa:20:86:25:34:ab:36:db:86:f5:32:af:d0:95:5d:
39:f1:67:9f:07:e7:2c:fe:c5:aa:32:9b:0f:7e:d0:
ce:81:94:a1:fd:3e:c9:8e:2c:af:fa:de:ab:9c:9c:
23:5e:0f:62:99:46:0f:d5:30:30:54:60:2e:c7:37:
71:b8:34:69:14:53:9d:ab:d2:ce:99:77:89:4c:ac:
8f:b6:7e:4a:92:ba:6c:ae:5f:56:81:00:21:61:cb:
ed:6d:3a:11:4d:ef:03:b0:d6:ae:16:ad:62:65:45:
61:29:78:10:49:17:7d:8b:d8:7a:de:d9:f2:ae:8e:
07:60:de:fb:43:2d:d9:30:c8:48:b0:a7:5e:15:eb:
e6:38:c1:a3:98:15:77:7e:11:8d:aa:71:2d:b6:8a:
0a:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:D4:74:9F:9F:B2:14:33:2A:1D:A6:5B:E6:17:9E:2B:51:CC:FF:3F
X509v3 Authority Key Identifier:
keyid:87:84:77:D8:B6:2D:09:F9:AE:8B:FD:BD:81:2A:53:F9:7E:D4:C5:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h4R32LYtCfmui_29gSpT-X7UxXY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/e83ac5-448b-4e49-8ebf-8842e5edce02/1/h4R32LYtCfmui_29gSpT-X7UxXY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/e83ac5-448b-4e49-8ebf-8842e5edce02/1/h4R32LYtCfmui_29gSpT-X7UxXY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:22:51:58:37:f1:43:eb:ae:c8:b5:71:90:0d:b3:7d:aa:dd:
95:9b:26:7b:08:d6:2c:e7:08:14:db:c5:cb:d9:be:da:82:95:
25:55:0b:fd:16:51:b1:c5:15:1b:78:82:ce:20:5f:cf:3a:be:
2b:6e:40:7b:89:71:60:d8:ce:4d:3e:cd:af:38:11:19:1c:82:
3d:fa:36:ad:99:2a:de:37:e2:50:a6:db:ba:ac:f9:55:8d:a3:
c2:7e:fa:27:85:29:bb:f9:12:f0:bd:0e:f7:9d:38:59:cd:34:
97:f0:1c:2b:52:13:a1:4d:3d:5e:be:f4:ab:31:7c:cd:f7:9e:
1a:c1:22:4e:e7:a6:2e:27:6d:3f:98:ee:7d:ca:cc:a9:c4:5b:
68:e3:c6:c0:d6:7e:c6:ba:d9:8b:10:e8:70:da:33:b5:9d:79:
1b:e0:6f:cb:a7:43:8d:9b:95:c8:ce:5d:4d:f7:44:52:25:db:
44:fe:ea:3b:e0:dd:6c:ac:b7:57:d7:30:ab:32:33:d2:26:69:
4e:53:c5:68:d8:ec:94:77:71:90:cb:d8:e4:64:57:e5:78:38:
76:df:3f:c7:6a:85:98:7e:5a:2f:73:2b:a3:0c:b7:8a:c5:36:
eb:4a:f4:0d:44:57:05:2f:c3:3e:48:cc:ea:a3:43:4f:41:c5:
26:d7:ff:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 14:33:42 2025 by rpki-client