Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/942e61-7ee6-41d4-b691-019a05ce5e7a/1/S4xZ6sloSDTLl8wq2FjVx03PbO0.mft
File: S4xZ6sloSDTLl8wq2FjVx03PbO0.mft (raw, json)
Hash identifier: xqNgDJksTkNLqnMxE1aM+kKdowWcK7sUeiGq021Y6Yw=
Subject key identifier: 73:3D:AC:9C:06:23:FF:E3:D9:E9:A6:4C:E3:36:27:63:EA:0F:25:98
Authority key identifier: 4B:8C:59:EA:C9:68:48:34:CB:97:CC:2A:D8:58:D5:C7:4D:CF:6C:ED
Certificate issuer: /CN=4b8c59eac9684834cb97cc2ad858d5c74dcf6ced
Certificate serial: 019922FA9CC6B7B3145939967E8FE9C7D129
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S4xZ6sloSDTLl8wq2FjVx03PbO0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/942e61-7ee6-41d4-b691-019a05ce5e7a/1/S4xZ6sloSDTLl8wq2FjVx03PbO0.mft
Manifest number: 04D8
Signing time: Sun 07 Sep 2025 07:01:13 +0000
Manifest this update: Sun 07 Sep 2025 07:01:13 +0000
Manifest next update: Mon 08 Sep 2025 07:01:13 +0000
Files and hashes: 1: RX0vF7s1v3ZmCOZA2PNfN34Nc0Q.roa (hash: DL5GkVVXEPj8zi75flOVBOwBTEyMxXVt8DN9ATKiCDI=)
2: S4xZ6sloSDTLl8wq2FjVx03PbO0.crl (hash: j4rJeoNoFGintLrlXttkYvNkRK/dDUF5tlm8M3rqO6I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/942e61-7ee6-41d4-b691-019a05ce5e7a/1/S4xZ6sloSDTLl8wq2FjVx03PbO0.crl
rsync://rpki.ripe.net/repository/DEFAULT/12/942e61-7ee6-41d4-b691-019a05ce5e7a/1/S4xZ6sloSDTLl8wq2FjVx03PbO0.mft
rsync://rpki.ripe.net/repository/DEFAULT/S4xZ6sloSDTLl8wq2FjVx03PbO0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:fa:9c:c6:b7:b3:14:59:39:96:7e:8f:e9:c7:d1:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b8c59eac9684834cb97cc2ad858d5c74dcf6ced
Validity
Not Before: Sep 7 07:01:13 2025 GMT
Not After : Sep 8 07:01:13 2025 GMT
Subject: CN=733dac9c0623ffe3d9e9a64ce3362763ea0f2598
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:12:3e:70:eb:6a:c8:00:c9:26:ef:09:ff:f0:
23:d2:73:a5:63:b9:94:53:38:31:30:5f:22:48:ae:
c7:b1:be:0e:1b:48:5e:26:7a:0b:d0:08:ac:a2:f1:
67:4c:16:27:09:c8:34:c1:35:6b:95:99:de:86:b1:
d6:1a:ec:75:b7:5f:a9:6e:0b:63:4d:9d:54:74:d3:
13:77:36:b9:db:a4:65:70:b5:0b:10:1a:f1:bf:5c:
b8:6a:d8:d2:6c:07:9b:e7:6a:fc:2f:83:e4:f9:30:
62:1b:d8:82:3f:1a:05:9a:78:85:d8:5b:74:4b:c9:
5b:38:e0:38:18:d0:3d:a6:c8:a1:a6:2d:e1:55:89:
f6:9c:00:72:ad:87:ce:3e:2f:75:1e:4d:31:5a:43:
6a:1c:70:b5:87:90:d6:7f:70:bb:1e:2e:b2:9e:e8:
79:db:c1:28:6e:1e:fc:9e:bf:af:cc:80:69:a8:4e:
d9:05:ca:9a:6e:2b:67:9a:7c:ff:10:b4:d7:f8:af:
ed:ee:a9:a2:ff:31:3a:40:c9:12:9d:ff:b3:64:45:
22:bc:41:57:fc:d0:3a:0e:e6:52:cb:93:45:f4:88:
c5:69:87:fe:00:c5:3b:20:c5:da:0b:b5:53:b7:43:
18:35:e3:c8:5e:dd:2f:bc:a6:e3:76:34:9b:7e:d6:
a3:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:3D:AC:9C:06:23:FF:E3:D9:E9:A6:4C:E3:36:27:63:EA:0F:25:98
X509v3 Authority Key Identifier:
keyid:4B:8C:59:EA:C9:68:48:34:CB:97:CC:2A:D8:58:D5:C7:4D:CF:6C:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S4xZ6sloSDTLl8wq2FjVx03PbO0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/942e61-7ee6-41d4-b691-019a05ce5e7a/1/S4xZ6sloSDTLl8wq2FjVx03PbO0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/942e61-7ee6-41d4-b691-019a05ce5e7a/1/S4xZ6sloSDTLl8wq2FjVx03PbO0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:df:c8:03:17:de:08:8b:c2:f3:10:f5:f6:a7:a2:b2:3c:87:
26:1d:ea:66:ea:0b:79:3d:a4:a6:e6:28:1a:a6:60:3e:9b:62:
92:74:86:b7:5a:97:2c:de:7e:a1:ef:b1:ae:31:d3:cf:0d:bd:
c0:5b:66:b0:2e:bf:47:5e:f4:52:1e:ab:d8:04:ba:7d:2b:ed:
63:b2:58:72:15:b2:27:16:c1:0b:83:17:fc:2b:9d:56:56:20:
72:63:a3:b6:5d:57:e9:2d:24:a4:e2:ae:8f:d1:36:89:5a:a0:
92:ae:b8:a3:a0:90:2e:21:78:f6:9f:71:7d:57:e0:6a:9a:c5:
96:e9:25:ac:a9:9a:65:86:2e:22:9d:de:39:05:90:2b:19:90:
cf:02:59:14:ef:aa:d0:36:42:31:11:7b:66:9d:00:7b:3b:79:
b1:d0:69:45:e8:ed:e2:eb:80:59:15:15:0b:8d:44:08:c8:b2:
8d:43:22:5e:da:8b:c5:92:6e:44:2b:3b:f1:0b:c4:14:0c:25:
78:c5:79:26:c3:d2:ff:df:fe:fb:e5:2b:34:04:7a:77:5a:03:
f3:e8:8a:65:26:a6:ae:6a:5f:3e:d9:12:a4:a5:35:d5:55:d5:
6a:59:87:80:69:e9:0e:55:39:61:ae:38:7e:77:00:fd:f6:89:
8c:8a:11:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 12:07:29 2025 by rpki-client