Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/7c9bb7-268a-4362-bd08-901a373df080/1/4oTj0vGiHIK7s9ZvdvC9kzNRPJo.mft
File: 4oTj0vGiHIK7s9ZvdvC9kzNRPJo.mft (raw, json)
Hash identifier: f9qjzBtxF2V2nOkErBLv59D0+RbHt/j2Qd9P/tEVqiY=
Subject key identifier: 38:E0:02:D3:F0:93:1E:09:88:6A:F0:94:AF:35:1F:DA:28:61:2B:B5
Authority key identifier: E2:84:E3:D2:F1:A2:1C:82:BB:B3:D6:6F:76:F0:BD:93:33:51:3C:9A
Certificate issuer: /CN=e284e3d2f1a21c82bbb3d66f76f0bd9333513c9a
Certificate serial: 01984708CA3F12DB09E5FB7E8D879187F8BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4oTj0vGiHIK7s9ZvdvC9kzNRPJo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/7c9bb7-268a-4362-bd08-901a373df080/1/4oTj0vGiHIK7s9ZvdvC9kzNRPJo.mft
Manifest number: 10FE
Signing time: Sat 26 Jul 2025 14:00:15 +0000
Manifest this update: Sat 26 Jul 2025 14:00:15 +0000
Manifest next update: Sun 27 Jul 2025 14:00:15 +0000
Files and hashes: 1: 4oTj0vGiHIK7s9ZvdvC9kzNRPJo.crl (hash: 4p7jRkuW5FHxvEUSRuUgu6wPRG98Rsp8NNHLT6dBY6k=)
2: q2EHI1QqAri510M2ZcKkjLI2cEU.roa (hash: 404e8//wzDitUa6OCGaYRBgvvc05hb46lBTtLtVyVk8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/7c9bb7-268a-4362-bd08-901a373df080/1/4oTj0vGiHIK7s9ZvdvC9kzNRPJo.crl
rsync://rpki.ripe.net/repository/DEFAULT/d7/7c9bb7-268a-4362-bd08-901a373df080/1/4oTj0vGiHIK7s9ZvdvC9kzNRPJo.mft
rsync://rpki.ripe.net/repository/DEFAULT/4oTj0vGiHIK7s9ZvdvC9kzNRPJo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 14:00:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:47:08:ca:3f:12:db:09:e5:fb:7e:8d:87:91:87:f8:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e284e3d2f1a21c82bbb3d66f76f0bd9333513c9a
Validity
Not Before: Jul 26 14:00:15 2025 GMT
Not After : Jul 27 14:00:15 2025 GMT
Subject: CN=38e002d3f0931e09886af094af351fda28612bb5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:52:fd:ea:e8:77:e2:a3:e9:b8:9d:b0:24:b0:
40:d0:bd:8d:c3:55:42:3b:c0:29:b3:a7:81:2a:e1:
d0:3f:79:2c:3f:10:02:39:93:65:2a:4f:2e:e7:4e:
d1:56:b6:53:a5:e0:bb:bd:f4:ae:2c:76:f8:8e:c6:
67:a4:91:a4:aa:71:4d:90:ab:67:7e:c0:67:bb:cf:
56:22:82:cc:c6:ab:c6:5b:8f:b7:00:fc:e3:e8:66:
0c:eb:3a:b3:6b:2d:2f:7a:81:aa:74:9c:e5:cf:c9:
8d:5b:96:fb:53:49:20:31:b6:4c:38:23:d2:eb:24:
ad:a4:29:52:80:e7:9a:cd:67:d8:1b:1f:41:42:1b:
40:17:23:37:72:4e:48:00:89:35:e0:25:5b:a2:38:
60:67:70:60:0c:15:20:e9:c0:e4:36:c3:cd:69:41:
8b:93:7b:f4:84:c6:9d:ac:2a:1f:e7:4e:aa:29:fe:
44:21:3c:d3:47:fd:b8:a6:c7:be:9b:a7:97:7a:fe:
6d:b0:c7:0d:58:20:29:71:06:61:4c:95:bd:07:08:
ac:94:c1:a4:44:96:d9:f7:8f:bc:53:07:3d:37:c4:
3e:dd:25:c1:61:08:2f:d8:0c:3d:99:27:22:4a:1b:
70:b3:9c:61:67:b4:fa:4b:47:3c:5b:88:91:a6:6d:
e2:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:E0:02:D3:F0:93:1E:09:88:6A:F0:94:AF:35:1F:DA:28:61:2B:B5
X509v3 Authority Key Identifier:
keyid:E2:84:E3:D2:F1:A2:1C:82:BB:B3:D6:6F:76:F0:BD:93:33:51:3C:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4oTj0vGiHIK7s9ZvdvC9kzNRPJo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/7c9bb7-268a-4362-bd08-901a373df080/1/4oTj0vGiHIK7s9ZvdvC9kzNRPJo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/7c9bb7-268a-4362-bd08-901a373df080/1/4oTj0vGiHIK7s9ZvdvC9kzNRPJo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9f:4f:d4:d6:d1:35:a4:8e:2d:e6:a1:de:5f:8b:3d:87:d6:71:
46:45:a5:72:2a:f7:c4:8e:1c:d6:d6:f1:47:e4:3a:74:bf:73:
7f:4c:4e:c4:3d:f6:3d:8e:85:be:8d:a5:cd:61:8a:23:75:3e:
93:0d:74:c5:b8:7b:8c:e0:57:cb:3e:f9:cb:3c:3d:a2:4c:f6:
e3:46:32:d6:4f:54:0c:10:ce:c0:2b:43:70:69:9e:62:ff:e0:
cf:a0:10:fc:a7:17:a0:f4:85:be:1d:9f:43:8d:3c:6f:f3:f4:
84:ca:d9:70:94:d1:0c:0b:d6:fa:fb:d5:c9:1e:fb:0a:fd:fe:
44:b2:4a:71:48:d0:55:0c:4d:0e:46:2e:4c:8b:f9:f9:99:fc:
be:06:da:fa:00:68:89:d9:fa:95:f2:54:fa:e0:5b:38:33:12:
89:42:ea:82:08:09:a3:99:09:b1:c1:c7:e8:f0:46:25:97:49:
e6:64:89:eb:59:3d:8a:91:f6:4f:12:0a:ab:68:a7:42:78:ca:
9e:06:42:7c:06:c1:38:2d:95:ea:9f:f9:f2:5c:d7:57:d4:f4:
e5:9a:b0:8e:46:2b:ed:08:fd:b1:65:72:5b:83:ab:05:8a:61:
39:3c:e5:a1:de:ab:18:bf:02:ec:3c:9e:74:7b:9b:a7:40:55:
3d:3f:86:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 00:29:59 2025 by rpki-client