Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/9680c7-57d7-49c6-8b63-40153c5d0a47/1/_4IIsSnFPofD8NDtG8qFcwFA85A.mft
File: _4IIsSnFPofD8NDtG8qFcwFA85A.mft (raw, json)
Hash identifier: 7S0mDaSJM/O6iEOGJ+5i2XPu1gIV7DFvXd7Jms6HOAg=
Subject key identifier: 19:0D:35:36:B0:86:1A:3E:67:A3:9C:F6:5B:64:88:0C:38:61:A1:99
Authority key identifier: FF:82:08:B1:29:C5:3E:87:C3:F0:D0:ED:1B:CA:85:73:01:40:F3:90
Certificate issuer: /CN=ff8208b129c53e87c3f0d0ed1bca85730140f390
Certificate serial: 019848C0C45D3BBBE9FE81400C1A66F48BD5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_4IIsSnFPofD8NDtG8qFcwFA85A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/9680c7-57d7-49c6-8b63-40153c5d0a47/1/_4IIsSnFPofD8NDtG8qFcwFA85A.mft
Manifest number: 0F0F
Signing time: Sat 26 Jul 2025 22:00:49 +0000
Manifest this update: Sat 26 Jul 2025 22:00:49 +0000
Manifest next update: Sun 27 Jul 2025 22:00:49 +0000
Files and hashes: 1: _4IIsSnFPofD8NDtG8qFcwFA85A.crl (hash: ZvGmEsvvNZGtApCYZWZ1lwkAK85aLJAzdvC9avD5bSg=)
2: qGecERglbMsiHMQJoiUSFGALt-E.roa (hash: yLMKR6LctC/w2fvLTclquZCs4hF15ArbhdOh5oCoDz8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/9680c7-57d7-49c6-8b63-40153c5d0a47/1/_4IIsSnFPofD8NDtG8qFcwFA85A.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/9680c7-57d7-49c6-8b63-40153c5d0a47/1/_4IIsSnFPofD8NDtG8qFcwFA85A.mft
rsync://rpki.ripe.net/repository/DEFAULT/_4IIsSnFPofD8NDtG8qFcwFA85A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 20:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:48:c0:c4:5d:3b:bb:e9:fe:81:40:0c:1a:66:f4:8b:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ff8208b129c53e87c3f0d0ed1bca85730140f390
Validity
Not Before: Jul 26 22:00:49 2025 GMT
Not After : Jul 27 22:00:49 2025 GMT
Subject: CN=190d3536b0861a3e67a39cf65b64880c3861a199
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:0f:18:17:ec:11:d1:de:0a:54:b9:2c:6a:2b:
0c:bb:70:eb:19:3b:e3:f3:4e:a5:72:0b:b1:88:83:
3e:78:69:96:75:62:37:dd:f0:83:14:ad:db:49:32:
eb:74:8a:45:82:14:97:5d:05:96:6f:58:e2:6b:3a:
b9:0e:82:0c:65:68:13:3b:c3:e0:17:24:00:c9:0b:
a8:f5:33:31:07:b8:8e:70:8c:5c:02:d1:6a:36:50:
cf:1b:bb:4f:6e:a9:d9:cd:53:46:f9:d3:99:bd:32:
32:a3:75:13:22:ad:86:b8:7e:ce:a6:3c:21:3e:22:
63:44:49:bc:db:97:3a:4b:df:28:38:4b:f0:34:63:
a8:c8:b4:ad:da:64:25:89:a7:30:73:1b:90:0d:61:
50:aa:1a:8a:83:48:b7:ae:7e:b4:a2:5b:c1:ed:a2:
d8:f9:a2:a7:20:34:dd:1e:48:34:8f:db:7f:0d:d5:
63:89:71:73:ec:2b:ac:52:7f:f3:92:02:ce:25:23:
b9:34:a2:a7:b4:6e:81:c0:51:31:c0:ec:8d:db:3a:
b2:c5:07:1e:3e:e8:34:a7:5f:c0:df:9f:7c:2b:bc:
3c:d1:72:2b:85:63:31:cd:81:d0:81:04:59:f1:a9:
4b:56:4d:f8:90:c9:42:6e:4b:3a:9e:40:e8:44:ff:
2c:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:0D:35:36:B0:86:1A:3E:67:A3:9C:F6:5B:64:88:0C:38:61:A1:99
X509v3 Authority Key Identifier:
keyid:FF:82:08:B1:29:C5:3E:87:C3:F0:D0:ED:1B:CA:85:73:01:40:F3:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_4IIsSnFPofD8NDtG8qFcwFA85A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/9680c7-57d7-49c6-8b63-40153c5d0a47/1/_4IIsSnFPofD8NDtG8qFcwFA85A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/9680c7-57d7-49c6-8b63-40153c5d0a47/1/_4IIsSnFPofD8NDtG8qFcwFA85A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:db:f8:df:f9:03:e4:07:73:e5:3d:47:19:2e:0e:ec:eb:36:
bc:95:6f:6b:62:96:1a:e1:c8:b4:d2:9e:92:77:14:59:0a:4b:
c7:6d:da:64:f0:4e:a1:7d:89:b5:68:99:64:60:3e:bc:34:6d:
0e:57:b6:42:a4:c2:b4:86:ae:a3:38:ed:c0:a2:8a:53:12:aa:
a3:01:fb:d5:be:e0:57:e6:8d:0a:a9:6a:fc:84:a8:28:ff:e3:
41:ff:88:6c:9b:bc:a0:54:6e:2e:b4:11:d8:d1:c5:a7:b2:a8:
6e:db:84:04:b7:b0:4a:de:0f:d1:4a:9c:79:bd:cb:61:74:72:
72:6d:78:78:eb:10:80:28:30:6f:7c:95:89:b4:ba:b0:d1:8a:
c1:44:e8:23:9d:83:f8:9b:fe:fc:39:d5:9f:e9:ce:45:1a:70:
96:c4:d0:47:d9:1d:44:a7:92:e4:c0:4e:0b:f6:5a:78:3f:f5:
40:6b:4e:f5:a3:db:bf:dc:3e:27:9f:7c:49:b5:28:d6:6a:a4:
97:8d:7c:fd:4b:1c:a4:3f:70:61:5b:3d:66:06:14:e8:db:eb:
9c:d3:fa:98:04:dd:1d:59:32:ee:36:79:e8:c1:ad:28:12:f8:
c0:f6:88:04:a2:3f:dc:dd:af:24:32:5b:7c:1c:43:b9:92:bd:
90:e1:55:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 01:47:37 2025 by rpki-client