Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/282ac6-72c6-4b2c-9df9-8f1f2c914f04/1/4IFCtC45SABI0fzqWHo2k9pMC4o.mft
File: 4IFCtC45SABI0fzqWHo2k9pMC4o.mft (raw, json)
Hash identifier: KmT66Gnp3ejJpRFg9n3RuqQQsbXK3BalwmAger1nOXw=
Subject key identifier: B0:1A:AE:4B:E9:3E:57:B0:3B:44:4E:90:6A:C4:1B:4F:BC:B8:09:D8
Authority key identifier: E0:81:42:B4:2E:39:48:00:48:D1:FC:EA:58:7A:36:93:DA:4C:0B:8A
Certificate issuer: /CN=e08142b42e39480048d1fcea587a3693da4c0b8a
Certificate serial: 019855A07CE25C3E38C9AA62E4A5B30281EF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4IFCtC45SABI0fzqWHo2k9pMC4o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/282ac6-72c6-4b2c-9df9-8f1f2c914f04/1/4IFCtC45SABI0fzqWHo2k9pMC4o.mft
Manifest number: 03F2
Signing time: Tue 29 Jul 2025 10:00:37 +0000
Manifest this update: Tue 29 Jul 2025 10:00:37 +0000
Manifest next update: Wed 30 Jul 2025 10:00:37 +0000
Files and hashes: 1: 4IFCtC45SABI0fzqWHo2k9pMC4o.crl (hash: FpwxoBb1knw0cQGhbf2IuHeTQt0ljnC1ubBK81hWUL0=)
2: SkmMZcDmD4tfD5IJGWfT10a999s.roa (hash: FtSYkAppozDXy+VqyVeW2kon4HMuVtycn1oxBmmVVwQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/282ac6-72c6-4b2c-9df9-8f1f2c914f04/1/4IFCtC45SABI0fzqWHo2k9pMC4o.crl
rsync://rpki.ripe.net/repository/DEFAULT/df/282ac6-72c6-4b2c-9df9-8f1f2c914f04/1/4IFCtC45SABI0fzqWHo2k9pMC4o.mft
rsync://rpki.ripe.net/repository/DEFAULT/4IFCtC45SABI0fzqWHo2k9pMC4o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Jul 2025 08:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:55:a0:7c:e2:5c:3e:38:c9:aa:62:e4:a5:b3:02:81:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e08142b42e39480048d1fcea587a3693da4c0b8a
Validity
Not Before: Jul 29 10:00:37 2025 GMT
Not After : Jul 30 10:00:37 2025 GMT
Subject: CN=b01aae4be93e57b03b444e906ac41b4fbcb809d8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:21:fe:21:01:5a:95:02:e7:9b:25:93:71:43:
f4:c6:e3:36:5e:93:fe:b1:f9:51:9f:1d:79:d8:46:
2d:bd:aa:aa:39:d8:a7:b4:3a:92:08:57:0a:83:d3:
d5:35:ab:2f:63:30:d9:ee:a2:ac:37:2a:4a:fa:17:
7c:0b:d7:f0:ef:cd:a2:9d:58:49:12:d1:20:24:f1:
45:15:82:51:2e:b4:90:c9:cb:d2:27:03:c3:96:ad:
b6:67:31:a6:36:a3:17:ce:cc:c6:b0:3c:f2:8d:dc:
30:d1:f1:52:bd:b3:e1:03:10:34:16:d3:f9:18:05:
a7:ed:bb:b2:24:a8:cc:31:38:d6:5f:51:05:b9:7f:
54:55:21:dc:8f:61:b3:e3:62:65:b4:08:b7:85:54:
f9:d5:7e:64:87:e4:48:8b:17:8a:df:81:e2:83:bc:
ab:e5:8e:c5:b1:ca:3f:b2:7a:36:12:e9:65:75:d6:
f2:4a:27:e6:22:4e:af:ec:e2:09:fc:91:7e:32:6b:
63:cc:7a:09:d7:21:4d:ac:49:71:cb:59:58:5a:c9:
4f:87:89:db:66:83:7d:9d:b3:48:e4:7a:f2:42:00:
06:eb:36:6e:f3:8f:f4:58:bd:92:f8:51:e8:f7:8a:
7d:29:95:4c:fe:9c:b5:4c:c8:ee:87:af:cb:58:1b:
20:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:1A:AE:4B:E9:3E:57:B0:3B:44:4E:90:6A:C4:1B:4F:BC:B8:09:D8
X509v3 Authority Key Identifier:
keyid:E0:81:42:B4:2E:39:48:00:48:D1:FC:EA:58:7A:36:93:DA:4C:0B:8A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4IFCtC45SABI0fzqWHo2k9pMC4o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/282ac6-72c6-4b2c-9df9-8f1f2c914f04/1/4IFCtC45SABI0fzqWHo2k9pMC4o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/282ac6-72c6-4b2c-9df9-8f1f2c914f04/1/4IFCtC45SABI0fzqWHo2k9pMC4o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:0e:e0:e7:b0:3a:b7:0e:ce:5e:43:84:f7:d6:23:37:b5:2c:
55:a6:33:d5:b6:8e:4e:7f:6e:65:61:2a:3a:41:4f:9e:66:be:
42:d8:6e:8b:16:2c:2c:19:82:1d:0e:fd:1f:ab:aa:a0:89:29:
75:09:73:fb:ae:78:f5:48:02:40:2d:90:9e:8c:64:d7:ab:e9:
97:a9:de:ab:0e:45:ff:9c:c8:6c:32:72:8a:99:b1:ca:30:2a:
c0:c2:68:bd:6b:cb:e5:76:42:da:4e:b0:a1:fc:4e:4d:84:7a:
60:be:cd:b5:53:2c:e3:26:3b:7a:5b:4b:35:df:d2:5f:8a:3b:
0e:07:0c:4c:a3:85:80:86:a1:ea:3d:22:a8:6a:53:3f:7a:f7:
73:62:a2:a9:55:41:be:a8:27:56:b2:f3:64:d3:59:af:3b:50:
b5:86:8e:b9:71:4c:13:57:18:7f:33:97:77:ef:0b:cc:7f:0e:
d6:9d:f8:1a:a5:1b:f6:af:a6:d3:4e:af:42:fd:b2:16:c5:1c:
2d:28:ff:cc:be:51:69:5f:f2:2d:b6:bd:7d:a6:68:bb:1b:07:
97:10:b6:51:3d:af:53:47:84:c7:b6:8f:41:10:a1:ac:6e:a2:
9d:99:57:8f:72:87:da:23:ce:1e:b6:fb:1a:c2:94:c7:bc:f7:
3a:8f:92:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 29 12:00:19 2025 by rpki-client