Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/8a3ee9-4f37-45be-8aac-798ab773eafa/1/0627YSN4H_DjVBNEaseTHP9KSQ0.mft
File: 0627YSN4H_DjVBNEaseTHP9KSQ0.mft (raw, json)
Hash identifier: 4tMJnrEi1FOpx9oIQHVSuKA2ZVe3XQv77tDjjavlsYs=
Subject key identifier: 4F:DD:8C:FC:CF:30:7F:19:A4:6F:6B:14:6B:B6:6D:D7:D0:F3:EE:B7
Authority key identifier: D3:AD:BB:61:23:78:1F:F0:E3:54:13:44:6A:C7:93:1C:FF:4A:49:0D
Certificate issuer: /CN=d3adbb6123781ff0e35413446ac7931cff4a490d
Certificate serial: 0198D583D02F61EEACDDE7077F6A176CD320
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0627YSN4H_DjVBNEaseTHP9KSQ0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/8a3ee9-4f37-45be-8aac-798ab773eafa/1/0627YSN4H_DjVBNEaseTHP9KSQ0.mft
Manifest number: 164A
Signing time: Sat 23 Aug 2025 06:00:42 +0000
Manifest this update: Sat 23 Aug 2025 06:00:42 +0000
Manifest next update: Sun 24 Aug 2025 06:00:42 +0000
Files and hashes: 1: 0627YSN4H_DjVBNEaseTHP9KSQ0.crl (hash: gUHRcYp643k6EfIz4ZQAxhnKrHHQr+MiI1p+cwSqai8=)
2: yWi1Y-nakOmyfRqesRZIzBZCSpo.roa (hash: XIYZfLdl8kZlRiSAj90PT17pvRJ8h9U9zRjI6i+BCkM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/8a3ee9-4f37-45be-8aac-798ab773eafa/1/0627YSN4H_DjVBNEaseTHP9KSQ0.crl
rsync://rpki.ripe.net/repository/DEFAULT/fe/8a3ee9-4f37-45be-8aac-798ab773eafa/1/0627YSN4H_DjVBNEaseTHP9KSQ0.mft
rsync://rpki.ripe.net/repository/DEFAULT/0627YSN4H_DjVBNEaseTHP9KSQ0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 06:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:83:d0:2f:61:ee:ac:dd:e7:07:7f:6a:17:6c:d3:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3adbb6123781ff0e35413446ac7931cff4a490d
Validity
Not Before: Aug 23 06:00:42 2025 GMT
Not After : Aug 24 06:00:42 2025 GMT
Subject: CN=4fdd8cfccf307f19a46f6b146bb66dd7d0f3eeb7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:2f:5f:6a:0e:65:9e:b7:7b:14:c3:57:07:e8:
48:57:d0:b4:cb:14:f1:cd:d4:db:0c:c8:50:50:4e:
63:d1:f9:7f:e3:4d:bb:19:79:e3:18:c5:50:58:01:
6d:5b:37:31:7b:21:2d:b4:c8:73:af:b2:5c:37:8d:
58:0e:d0:16:e1:c2:aa:f8:59:30:e7:d8:8b:7a:be:
ca:a4:8e:76:54:37:0d:f6:0a:21:b4:83:83:bc:76:
bd:d5:e5:91:d5:27:66:f5:75:10:02:fe:03:00:b7:
76:4c:b4:93:2d:62:26:93:7e:73:b9:80:c3:f7:e1:
28:bd:96:f1:2b:e3:1f:da:57:47:42:e7:ed:0a:b1:
17:00:ee:db:a9:d6:76:a0:e1:d1:c2:a9:f2:d5:11:
b6:b5:af:57:f9:e9:b7:24:a1:d6:be:e9:4c:b5:e3:
af:e3:fd:74:43:d3:0e:05:f0:c1:cd:ad:82:eb:fa:
08:90:1b:49:bb:f6:bc:2b:14:19:09:6f:f9:34:67:
6a:98:39:44:8a:83:59:bd:bb:5a:c0:28:d9:98:07:
5e:8b:a1:45:13:40:6b:dd:c7:dc:e3:b1:b3:1b:bc:
5d:86:d9:ef:71:07:71:cb:1f:9f:07:42:87:75:18:
f3:bb:ec:98:78:80:7f:82:99:f5:12:92:1f:75:b2:
a5:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:DD:8C:FC:CF:30:7F:19:A4:6F:6B:14:6B:B6:6D:D7:D0:F3:EE:B7
X509v3 Authority Key Identifier:
keyid:D3:AD:BB:61:23:78:1F:F0:E3:54:13:44:6A:C7:93:1C:FF:4A:49:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0627YSN4H_DjVBNEaseTHP9KSQ0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/8a3ee9-4f37-45be-8aac-798ab773eafa/1/0627YSN4H_DjVBNEaseTHP9KSQ0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/8a3ee9-4f37-45be-8aac-798ab773eafa/1/0627YSN4H_DjVBNEaseTHP9KSQ0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:4c:08:b7:22:44:59:ea:cc:f7:28:89:d1:07:c3:c0:03:94:
3e:3f:ce:24:f0:24:fa:28:9a:0e:f3:b9:92:6a:76:61:79:f6:
25:66:ab:7e:aa:8a:f3:c8:58:98:75:e0:1f:f9:1b:2a:09:e1:
0d:dc:e1:de:96:ea:29:57:62:69:05:0a:31:94:da:8a:d4:e8:
73:de:fd:f6:6b:97:43:98:f9:15:9d:ce:66:73:77:55:24:8a:
05:f7:34:04:89:f5:56:27:aa:b0:83:46:18:80:3f:9d:54:cb:
0d:f9:d5:45:82:56:c0:32:b2:0c:da:09:6e:5b:2d:19:9c:2d:
67:a2:1e:51:9f:77:76:2c:d4:27:e4:c1:56:10:ca:a9:0e:02:
af:66:2f:cb:03:cc:43:55:9d:53:29:7e:72:b2:c2:b8:32:59:
b7:90:c4:43:71:7a:b1:22:98:fe:3f:e0:89:ae:78:07:e6:6d:
e8:a9:91:d9:10:72:b4:bb:64:9e:27:44:87:d1:6a:7b:ae:73:
eb:8e:03:aa:2e:a6:65:c5:f6:aa:e7:4f:88:81:21:a4:4f:75:
a3:01:da:b8:c1:4c:06:ab:9e:e0:62:c9:75:b6:74:65:7f:c9:
62:df:d5:03:e5:46:63:33:14:fb:2c:bd:88:58:ef:56:e0:44:
ab:26:5b:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 16:08:44 2025 by rpki-client