Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/1fa4a1-9a1c-47de-aca6-9449957fd5a5/1/4FWc6ImuQkESH-ChZT5LlV8-30s.mft
File: 4FWc6ImuQkESH-ChZT5LlV8-30s.mft (raw, json)
Hash identifier: QfSQSV0S5FMXRAknva9pVTqZpTeShkYPvwCinCrYO5o=
Subject key identifier: A7:B6:A4:02:83:C1:00:73:32:55:04:31:DC:6D:64:76:6D:E0:D4:29
Authority key identifier: E0:55:9C:E8:89:AE:42:41:12:1F:E0:A1:65:3E:4B:95:5F:3E:DF:4B
Certificate issuer: /CN=e0559ce889ae4241121fe0a1653e4b955f3edf4b
Certificate serial: 019929A118A37A9033641A6ED2F3C11F6EE0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4FWc6ImuQkESH-ChZT5LlV8-30s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/1fa4a1-9a1c-47de-aca6-9449957fd5a5/1/4FWc6ImuQkESH-ChZT5LlV8-30s.mft
Manifest number: 16B9
Signing time: Mon 08 Sep 2025 14:00:47 +0000
Manifest this update: Mon 08 Sep 2025 14:00:47 +0000
Manifest next update: Tue 09 Sep 2025 14:00:47 +0000
Files and hashes: 1: 4FWc6ImuQkESH-ChZT5LlV8-30s.crl (hash: yPSdbvWKIj0YnJ3CYUK0WavY/J9ERv2tisXSPepoyVA=)
2: KjKCe6ofT1MaWcqvEHzd3y83DsE.roa (hash: fYONeSb8sEFnngSaKpwSRO2ffbgtr5Gv/r9LK52dcNs=)
3: SlPSzJLSqLldpHANrLpV_AWe7pQ.roa (hash: d6qRFjDfiO2ypdJTYqM1meZYiyL4RuK2vrauyRg7dG8=)
4: dnATRXfDPX52AFAC8W24K75pthk.roa (hash: QuyKbnNvTPncMC1e5oEVLqCDe3vLb3ObMAmyMLOVGPI=)
5: muJ6BoKN6UJKjXIiMD_vSPffAQs.roa (hash: Trtl5skBlLwn8vYaSomOWXsELEFXr89fuz0Ec3SlFmU=)
6: mxAMRSbkDznTEbPF5N19qenDsU8.roa (hash: ur7W44S4TLVAof77kuSb6v12hJqMvOyziCVMGbKEYDc=)
7: q3eBnPRVZ5sSRFdmqMI9Ye91g0U.roa (hash: jQaKxm+g5MsY5zZFyMAUbrdiM1WWvKedP6C676e0cPs=)
8: y1KiIU2GhHjjuvfOR3lz8y0STtE.roa (hash: 6zbqLZ+vgcUQ2nNaMv7BsXuuqJSs8GQBDDlBE1WD3gA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/1fa4a1-9a1c-47de-aca6-9449957fd5a5/1/4FWc6ImuQkESH-ChZT5LlV8-30s.crl
rsync://rpki.ripe.net/repository/DEFAULT/62/1fa4a1-9a1c-47de-aca6-9449957fd5a5/1/4FWc6ImuQkESH-ChZT5LlV8-30s.mft
rsync://rpki.ripe.net/repository/DEFAULT/4FWc6ImuQkESH-ChZT5LlV8-30s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 09 Sep 2025 14:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:29:a1:18:a3:7a:90:33:64:1a:6e:d2:f3:c1:1f:6e:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e0559ce889ae4241121fe0a1653e4b955f3edf4b
Validity
Not Before: Sep 8 14:00:47 2025 GMT
Not After : Sep 9 14:00:47 2025 GMT
Subject: CN=a7b6a40283c1007332550431dc6d64766de0d429
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:58:3a:12:0a:a3:63:fa:7a:06:98:cd:99:bc:
ff:40:72:e8:0d:0d:af:29:fb:4f:ba:0f:21:60:3b:
ae:83:a2:40:ba:30:d5:60:9a:b3:57:84:d7:61:76:
1c:7d:26:e8:fa:6a:03:71:83:6d:5c:72:19:ec:88:
ba:d6:31:8b:05:ea:e0:04:77:0b:67:4a:5f:8c:7a:
b3:0e:32:7e:31:1f:6c:74:cc:60:c8:10:83:bf:11:
35:f9:ee:d3:3e:4f:94:1d:4e:4c:67:80:3f:71:f2:
f0:b5:4e:53:26:7b:84:52:42:9f:39:b4:97:13:3c:
f9:34:6b:22:ba:65:70:69:6f:18:3b:eb:28:64:9f:
8f:7c:1c:b3:af:3e:c6:7d:94:1a:a9:c3:30:4b:d2:
f5:35:db:6f:48:6c:1b:ab:af:f1:b8:d4:49:71:c1:
1e:23:7a:99:fa:15:31:a0:ec:ab:ea:42:3a:3e:4f:
70:ca:2e:c8:5e:e5:31:2c:d6:97:66:e6:6d:4a:5c:
88:9c:9e:d3:8e:01:dc:c9:31:e8:d7:06:be:9e:91:
92:a3:0f:2f:59:24:a9:ad:c7:66:c5:02:25:db:27:
2b:88:94:c9:cf:b7:c3:cd:b7:f9:c5:2d:08:ad:a1:
12:e5:38:39:67:83:ed:92:30:1d:2d:c9:a8:be:14:
87:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:B6:A4:02:83:C1:00:73:32:55:04:31:DC:6D:64:76:6D:E0:D4:29
X509v3 Authority Key Identifier:
keyid:E0:55:9C:E8:89:AE:42:41:12:1F:E0:A1:65:3E:4B:95:5F:3E:DF:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4FWc6ImuQkESH-ChZT5LlV8-30s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/1fa4a1-9a1c-47de-aca6-9449957fd5a5/1/4FWc6ImuQkESH-ChZT5LlV8-30s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/1fa4a1-9a1c-47de-aca6-9449957fd5a5/1/4FWc6ImuQkESH-ChZT5LlV8-30s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
76:41:21:0a:b0:dc:35:8e:41:52:a0:f0:94:e7:22:47:a4:22:
6e:08:c7:09:35:e1:77:5a:90:77:bc:29:56:ca:06:d7:7a:31:
00:b8:64:36:ca:27:60:65:91:2e:ca:47:66:3e:18:dc:f8:9f:
82:14:e8:09:46:22:12:67:40:27:d7:1a:a8:b9:0b:99:9d:36:
6c:63:57:e9:b9:f1:76:b2:ec:53:e8:ff:86:61:f2:4f:89:98:
13:4e:4a:8a:1e:54:a7:29:93:da:d1:bc:ae:17:df:88:c6:41:
cf:db:47:42:02:e9:ff:6c:da:16:a1:4a:53:52:ed:28:46:e6:
0c:3f:39:59:c3:64:e3:27:ca:a5:90:0c:e8:6a:1e:a0:12:a0:
c4:52:4b:b2:07:65:de:5c:42:6b:e3:d4:33:fb:5d:7f:45:f9:
9a:fa:d9:20:d8:19:ff:31:a7:db:b4:c2:5b:91:8e:e8:2a:b1:
be:e1:fc:d0:cd:27:03:ce:0b:15:fe:6f:98:52:50:af:fd:29:
d4:ba:94:70:44:8f:d0:66:18:98:24:9c:1b:e5:53:d5:7c:a2:
9c:ec:7b:69:b2:00:7e:bb:f9:83:e6:7c:1f:b8:c1:b4:cd:a5:
f3:d4:0d:29:55:84:5b:d1:5f:4f:2e:e0:6a:a7:e3:85:36:e8:
68:09:26:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 8 20:55:56 2025 by rpki-client