
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/f2f1d3-f4c1-49df-9d41-bc76caf07860/1/r4jIvS2oviecF3KhEQqjiPDvEQI.mft
File: r4jIvS2oviecF3KhEQqjiPDvEQI.mft (raw, json)
Hash identifier: EGx74JJ4v6edV7/i6kCaJvhpL4WO6c4NtqO89LI3vBk=
Subject key identifier: 46:93:71:E3:FD:B5:43:14:25:70:E7:75:3F:65:1D:11:36:73:59:76
Authority key identifier: AF:88:C8:BD:2D:A8:BE:27:9C:17:72:A1:11:0A:A3:88:F0:EF:11:02
Certificate issuer: /CN=af88c8bd2da8be279c1772a1110aa388f0ef1102
Certificate serial: 0198458955C4AB5B7FBB72854D4F043D058F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r4jIvS2oviecF3KhEQqjiPDvEQI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/f2f1d3-f4c1-49df-9d41-bc76caf07860/1/r4jIvS2oviecF3KhEQqjiPDvEQI.mft
Manifest number: 15FF
Signing time: Sat 26 Jul 2025 07:01:24 +0000
Manifest this update: Sat 26 Jul 2025 07:01:24 +0000
Manifest next update: Sun 27 Jul 2025 07:01:24 +0000
Files and hashes: 1: V6I7xtb-s540gCh7ELkbFAWWNm8.roa (hash: 4XfEuv+JUU8dRovsqOYBux0Sp8hqu4SxoGQivq4ciLk=)
2: r4jIvS2oviecF3KhEQqjiPDvEQI.crl (hash: ZcLovijgzhEO5ybDK1JL0yqRmKuLc30V4buLBw3N2kw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/f2f1d3-f4c1-49df-9d41-bc76caf07860/1/r4jIvS2oviecF3KhEQqjiPDvEQI.crl
rsync://rpki.ripe.net/repository/DEFAULT/a1/f2f1d3-f4c1-49df-9d41-bc76caf07860/1/r4jIvS2oviecF3KhEQqjiPDvEQI.mft
rsync://rpki.ripe.net/repository/DEFAULT/r4jIvS2oviecF3KhEQqjiPDvEQI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 02:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:45:89:55:c4:ab:5b:7f:bb:72:85:4d:4f:04:3d:05:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=af88c8bd2da8be279c1772a1110aa388f0ef1102
Validity
Not Before: Jul 26 07:01:24 2025 GMT
Not After : Jul 27 07:01:24 2025 GMT
Subject: CN=469371e3fdb543142570e7753f651d1136735976
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:fd:e5:0e:77:26:7c:bf:53:44:28:1c:01:0f:
66:18:74:48:68:a6:1e:4a:5d:f6:1e:e8:40:bd:c3:
bd:3e:08:8c:2b:51:f8:f3:a0:6f:b3:66:a8:03:ba:
f7:b1:1a:36:4c:95:34:17:ed:f7:88:fd:1f:08:41:
76:b7:da:ea:b7:f8:6a:07:c3:30:65:1d:f1:18:c5:
6f:85:8e:3d:9d:89:90:ee:82:18:09:8d:15:e8:dd:
21:f8:31:9b:b0:f9:a9:69:8e:95:06:c6:91:1b:fd:
99:ae:55:0f:0f:a9:c8:f5:e7:80:9a:41:f7:2e:f1:
f0:9a:65:40:37:a4:e2:22:e5:5a:52:da:54:46:df:
fc:4b:8e:32:ad:90:ff:1d:13:c1:71:0c:7c:77:d4:
2f:ed:c8:21:b3:0f:ba:d8:a0:e5:52:01:d3:ab:74:
6b:81:b1:88:b7:34:31:53:9e:a8:3d:f3:25:5f:a2:
4e:6e:7c:35:c8:63:48:e8:80:2a:3b:6b:50:d4:63:
85:09:95:80:51:c0:82:ae:da:27:e4:28:9a:e3:57:
ec:12:b6:52:55:8a:06:81:e5:60:e0:0e:70:2c:9b:
b3:4c:9e:bb:13:6e:74:02:e2:d2:dd:1f:e5:ea:69:
f4:98:f9:27:90:64:91:2b:69:d4:cd:72:61:9d:85:
79:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:93:71:E3:FD:B5:43:14:25:70:E7:75:3F:65:1D:11:36:73:59:76
X509v3 Authority Key Identifier:
keyid:AF:88:C8:BD:2D:A8:BE:27:9C:17:72:A1:11:0A:A3:88:F0:EF:11:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r4jIvS2oviecF3KhEQqjiPDvEQI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/f2f1d3-f4c1-49df-9d41-bc76caf07860/1/r4jIvS2oviecF3KhEQqjiPDvEQI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/f2f1d3-f4c1-49df-9d41-bc76caf07860/1/r4jIvS2oviecF3KhEQqjiPDvEQI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c3:71:fb:f6:1b:0d:63:1a:17:ff:0b:42:9f:e1:0b:84:e0:8d:
94:87:98:a2:6f:95:4e:0e:d1:60:4a:c4:96:6c:43:93:7c:54:
56:c0:58:3d:6e:19:95:87:f5:2a:c9:df:d0:66:46:26:1b:bd:
e6:80:0e:ff:8c:72:b3:45:d9:b5:bc:a7:10:c3:65:9c:f9:c0:
8a:8f:19:fb:7b:47:be:be:9f:3c:8f:d3:9d:80:60:94:5f:1f:
1f:4e:20:b1:d3:18:2c:91:02:00:d4:85:46:21:fe:ab:66:ca:
41:d4:db:b3:3e:5b:ac:02:bd:ea:c4:2b:6e:db:17:6a:43:d4:
ae:2b:ad:90:4c:95:1c:f4:f5:d4:3d:c7:a3:05:89:0d:d3:e3:
20:3b:60:61:14:8e:20:c5:3e:dd:63:bc:59:0a:ef:e6:b5:c6:
d0:b4:d0:97:44:ca:05:b2:f5:5f:71:6d:07:d2:30:5c:3b:cf:
b9:1e:e4:d3:af:83:54:bf:29:62:4b:bb:2b:37:78:17:1d:81:
c4:dc:e6:0e:2b:83:02:66:58:a7:38:43:ce:ad:2e:13:62:c6:
23:95:f2:5f:5d:6c:0f:6c:99:66:76:ec:a6:8c:78:fe:6d:4b:
d9:d6:fd:25:f7:15:a1:1d:96:a3:72:7d:23:fb:52:ab:29:c2:
50:37:3d:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 11:28:55 2025 by rpki-client