Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/4291a2-03a9-4195-b1a7-3f40547e52d1/1/s4slrXyWWJ5KjKpfpIksxN_Me1M.mft
File: s4slrXyWWJ5KjKpfpIksxN_Me1M.mft (raw, json)
Hash identifier: 0VzWZCcNRaOAcJeeg2ABs7CezUKh2vrVEGGrc5okyNo=
Subject key identifier: FE:8C:2C:0C:A9:D6:2E:24:26:F1:A6:5D:65:E3:32:6F:C2:D7:C5:7E
Authority key identifier: B3:8B:25:AD:7C:96:58:9E:4A:8C:AA:5F:A4:89:2C:C4:DF:CC:7B:53
Certificate issuer: /CN=b38b25ad7c96589e4a8caa5fa4892cc4dfcc7b53
Certificate serial: 01984AE5D912E3EA1BF31EE64F9DCD6730D8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s4slrXyWWJ5KjKpfpIksxN_Me1M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/4291a2-03a9-4195-b1a7-3f40547e52d1/1/s4slrXyWWJ5KjKpfpIksxN_Me1M.mft
Manifest number: 1602
Signing time: Sun 27 Jul 2025 08:00:33 +0000
Manifest this update: Sun 27 Jul 2025 08:00:33 +0000
Manifest next update: Mon 28 Jul 2025 08:00:33 +0000
Files and hashes: 1: JJG6lSZApZVFWCoCMzoaHnqrdjA.roa (hash: /ZXBf7GoIevwDbia6b3jjdIqB98IB5pgV+PKh4AI8CE=)
2: s4slrXyWWJ5KjKpfpIksxN_Me1M.crl (hash: XvexVND70C+HZCsgM9Su0IhXyf7DKXfD0jAo8DrKstE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/4291a2-03a9-4195-b1a7-3f40547e52d1/1/s4slrXyWWJ5KjKpfpIksxN_Me1M.crl
rsync://rpki.ripe.net/repository/DEFAULT/e7/4291a2-03a9-4195-b1a7-3f40547e52d1/1/s4slrXyWWJ5KjKpfpIksxN_Me1M.mft
rsync://rpki.ripe.net/repository/DEFAULT/s4slrXyWWJ5KjKpfpIksxN_Me1M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4a:e5:d9:12:e3:ea:1b:f3:1e:e6:4f:9d:cd:67:30:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b38b25ad7c96589e4a8caa5fa4892cc4dfcc7b53
Validity
Not Before: Jul 27 08:00:33 2025 GMT
Not After : Jul 28 08:00:33 2025 GMT
Subject: CN=fe8c2c0ca9d62e2426f1a65d65e3326fc2d7c57e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:e4:9e:fd:fe:8a:28:cb:ba:52:e4:70:f4:e7:
fb:fc:8a:12:d2:63:ff:7d:98:7f:f9:af:e9:48:7b:
61:cf:19:df:41:06:9a:6a:53:79:40:1e:73:38:62:
00:1e:23:66:31:14:a6:23:df:ff:b4:75:ca:bb:0d:
2e:4a:52:ae:64:f9:73:9a:06:01:84:56:25:d7:e3:
d6:21:29:46:a2:d1:6c:88:78:e0:cc:71:5a:7f:f5:
b2:ff:04:89:81:cf:c3:34:cc:5f:c0:f1:fb:d3:d4:
91:f9:88:7b:e5:0c:d2:71:8c:80:15:0a:59:cf:85:
99:74:8c:45:8e:31:b6:6b:47:62:3f:84:5d:72:80:
44:00:97:91:33:a3:43:98:51:3d:29:ec:0f:b8:dd:
eb:97:f5:28:54:6b:6f:a0:48:06:15:58:b8:6e:08:
af:b5:10:a6:e3:37:b8:c4:a2:b2:4c:a4:35:6a:68:
ae:fa:61:ac:7c:bc:e9:ee:f3:0f:3b:ef:8c:7c:8d:
94:f6:de:ff:cb:f6:a4:eb:1e:3d:79:ab:31:cd:5e:
f4:c1:c4:ef:ca:60:4f:b0:08:45:b6:24:7a:e0:1e:
88:80:e5:52:62:3e:37:75:d4:79:a1:2f:89:64:95:
cf:75:16:11:e5:73:72:bf:3c:15:d8:d4:d3:97:a3:
7f:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:8C:2C:0C:A9:D6:2E:24:26:F1:A6:5D:65:E3:32:6F:C2:D7:C5:7E
X509v3 Authority Key Identifier:
keyid:B3:8B:25:AD:7C:96:58:9E:4A:8C:AA:5F:A4:89:2C:C4:DF:CC:7B:53
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s4slrXyWWJ5KjKpfpIksxN_Me1M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/4291a2-03a9-4195-b1a7-3f40547e52d1/1/s4slrXyWWJ5KjKpfpIksxN_Me1M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/4291a2-03a9-4195-b1a7-3f40547e52d1/1/s4slrXyWWJ5KjKpfpIksxN_Me1M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:03:cd:f4:22:23:0e:65:5e:3d:48:b2:a6:a0:92:b0:78:90:
f0:7c:48:41:23:85:32:77:80:3b:00:d7:cf:6a:4a:f6:f6:e4:
1c:4d:1a:b1:45:32:88:ae:5a:d2:72:7f:08:e7:92:4e:cd:9d:
ac:61:52:f6:5d:96:72:c5:20:94:4e:a5:06:76:7e:c0:c9:e6:
12:f3:c9:80:20:c1:e9:3d:7f:c2:ca:da:1c:b6:24:1e:11:a4:
a8:d2:2d:95:ab:cb:95:48:0c:ae:2c:95:95:cd:6a:d3:80:b3:
9d:6e:b1:64:01:47:ea:c8:2c:8b:40:2b:2a:3c:2b:48:59:42:
d7:c6:f0:e9:7e:4d:72:e9:15:ee:29:d3:0d:c6:6e:d4:1a:8e:
df:b2:bd:29:f3:e4:93:63:b5:e4:04:c9:d4:31:c7:56:27:99:
a0:5e:54:ee:d8:39:cd:81:97:c9:a2:32:77:79:e0:a9:ce:0b:
cb:12:27:cf:52:b4:23:d1:a9:28:0d:fc:a8:c5:4f:70:4e:17:
cf:05:c7:e5:f7:c1:05:10:93:43:97:07:ab:af:71:6c:4c:c9:
20:5b:2a:7c:32:09:f9:61:cd:ca:c5:17:bb:2b:81:37:ef:f6:
e6:77:b8:90:ef:a9:f9:f5:a3:bb:45:08:9d:37:d4:38:ed:9d:
90:b2:a9:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 10:35:22 2025 by rpki-client