Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/c28e27-d05b-478a-9b0b-db97892a51fd/1/4I6QfA_lCJGna9mbKQhwCmrGLjg.mft
File: 4I6QfA_lCJGna9mbKQhwCmrGLjg.mft (raw, json)
Hash identifier: O7WASFT/E5nABSrIgL9sof/sL/+lIEqIkA6nhCIN2XM=
Subject key identifier: F6:E1:35:E8:D7:E6:81:96:56:48:BB:63:D3:34:1F:44:42:A2:40:BD
Authority key identifier: E0:8E:90:7C:0F:E5:08:91:A7:6B:D9:9B:29:08:70:0A:6A:C6:2E:38
Certificate issuer: /CN=e08e907c0fe50891a76bd99b2908700a6ac62e38
Certificate serial: 019921B148DDC44AA9B8EDC46F8A90D28203
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4I6QfA_lCJGna9mbKQhwCmrGLjg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/c28e27-d05b-478a-9b0b-db97892a51fd/1/4I6QfA_lCJGna9mbKQhwCmrGLjg.mft
Manifest number: 1671
Signing time: Sun 07 Sep 2025 01:01:30 +0000
Manifest this update: Sun 07 Sep 2025 01:01:30 +0000
Manifest next update: Mon 08 Sep 2025 01:01:30 +0000
Files and hashes: 1: 4I6QfA_lCJGna9mbKQhwCmrGLjg.crl (hash: 8Pd7uYXI11EmeeNMkrbtJYS40PdCBJQ8B3/X2xy8UMw=)
2: STK2SAlRO7jYy3vcEqTR9ikjblA.roa (hash: k6oW+GQsDjU/vILzjfv+z+LTQhLzDJ0y7rBRC2wvlVc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/c28e27-d05b-478a-9b0b-db97892a51fd/1/4I6QfA_lCJGna9mbKQhwCmrGLjg.crl
rsync://rpki.ripe.net/repository/DEFAULT/5c/c28e27-d05b-478a-9b0b-db97892a51fd/1/4I6QfA_lCJGna9mbKQhwCmrGLjg.mft
rsync://rpki.ripe.net/repository/DEFAULT/4I6QfA_lCJGna9mbKQhwCmrGLjg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 01:01:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:21:b1:48:dd:c4:4a:a9:b8:ed:c4:6f:8a:90:d2:82:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e08e907c0fe50891a76bd99b2908700a6ac62e38
Validity
Not Before: Sep 7 01:01:30 2025 GMT
Not After : Sep 8 01:01:30 2025 GMT
Subject: CN=f6e135e8d7e681965648bb63d3341f4442a240bd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:80:f3:bf:0d:7c:a5:4e:9e:4e:86:6e:28:ad:
16:5f:9f:f3:e3:2a:52:e5:22:2a:fc:ef:69:c2:2e:
bf:be:29:70:3e:aa:de:9b:8f:37:83:93:d7:b3:1c:
bd:68:0e:05:30:4a:85:55:a7:4b:f9:04:4d:95:5c:
cf:42:b5:59:a0:72:5c:c7:d0:7d:89:1b:f4:de:55:
14:53:dd:89:ff:df:c4:65:8c:ea:15:22:4b:4c:80:
ee:6e:0f:b3:10:2e:78:78:53:02:1d:f1:5f:d9:6d:
e7:8a:49:6c:fa:37:e6:54:cf:0e:f1:44:15:cd:f8:
1e:8a:7c:59:30:21:74:0c:d5:98:46:33:ea:1b:93:
f2:bc:b2:7e:42:b1:c1:3e:2c:75:c3:1f:1b:82:f4:
41:61:39:8a:02:3d:8d:eb:e9:3f:0a:d3:cd:87:69:
32:5f:6f:16:61:94:30:60:41:6e:22:6a:b9:cc:80:
0a:3e:31:55:2d:3e:6c:cb:df:b7:b7:60:7e:cc:eb:
e7:37:a3:43:9c:62:61:14:a2:4a:96:a4:93:c9:0a:
86:87:b1:8c:26:ee:d3:86:4e:c0:2b:0a:85:25:3a:
da:64:20:56:b1:5e:47:24:6d:e7:5a:4c:c6:1d:99:
d1:b7:c4:db:35:c4:c6:6b:d8:7f:fc:09:7b:10:72:
0e:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:E1:35:E8:D7:E6:81:96:56:48:BB:63:D3:34:1F:44:42:A2:40:BD
X509v3 Authority Key Identifier:
keyid:E0:8E:90:7C:0F:E5:08:91:A7:6B:D9:9B:29:08:70:0A:6A:C6:2E:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4I6QfA_lCJGna9mbKQhwCmrGLjg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/c28e27-d05b-478a-9b0b-db97892a51fd/1/4I6QfA_lCJGna9mbKQhwCmrGLjg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/c28e27-d05b-478a-9b0b-db97892a51fd/1/4I6QfA_lCJGna9mbKQhwCmrGLjg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:04:86:09:54:6e:07:fa:e8:89:73:b8:0e:58:d9:21:22:2e:
f0:82:25:2c:a6:b1:66:6e:a9:f0:0e:df:74:c7:01:d6:a1:61:
06:ed:6d:12:94:2f:5a:8f:56:c6:07:f5:4a:22:04:7c:92:b3:
19:d7:b8:89:4e:76:36:06:f2:a6:b1:ca:10:c2:1a:c0:e2:9a:
f4:5c:5e:a1:0e:02:b6:00:01:e8:66:f1:42:94:c4:3a:88:22:
59:39:ba:ee:03:28:b5:6d:d3:cb:75:a6:59:86:b9:0a:3f:8e:
96:dd:82:5a:74:17:25:10:99:b8:ce:70:66:34:05:41:bb:0f:
e3:9d:65:57:30:25:0a:07:99:f8:0f:86:61:0e:08:d6:06:fc:
06:7d:6c:e3:b2:e3:4e:1e:ef:41:ba:32:b1:0c:2b:06:ed:85:
20:87:ea:5d:55:39:64:b7:d8:83:bf:94:22:80:f5:54:73:b2:
16:71:e4:03:8a:ab:08:21:f3:ac:1a:33:6f:6f:1e:ca:5d:dd:
f5:11:95:dc:88:4a:ca:2e:b0:82:d4:d5:99:e7:51:47:c3:88:
0a:4f:1c:8c:d0:de:db:48:29:71:5a:70:8f:ec:3c:39:7a:eb:
6d:ec:57:0e:4c:ec:eb:fe:96:c8:20:a0:55:ec:5a:25:df:f2:
4a:2e:69:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 10:15:15 2025 by rpki-client