Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/4159c3-814d-4001-8527-139043749c48/1/4U8mT6SkyQ3LSpnMzsUMVQj0RJg.mft
File: 4U8mT6SkyQ3LSpnMzsUMVQj0RJg.mft (raw, json)
Hash identifier: mEe8mEo9eFDUQSbvK+6CPRTHfRNU8jiooMlZMYLIWUE=
Subject key identifier: FB:4C:BE:2A:FF:92:B0:25:F1:08:49:55:2F:B7:F7:4C:83:71:8B:A0
Authority key identifier: E1:4F:26:4F:A4:A4:C9:0D:CB:4A:99:CC:CE:C5:0C:55:08:F4:44:98
Certificate issuer: /CN=e14f264fa4a4c90dcb4a99cccec50c5508f44498
Certificate serial: 0199228D115CD12D9557A07926BEBAEEC5D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4U8mT6SkyQ3LSpnMzsUMVQj0RJg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/4159c3-814d-4001-8527-139043749c48/1/4U8mT6SkyQ3LSpnMzsUMVQj0RJg.mft
Manifest number: 1673
Signing time: Sun 07 Sep 2025 05:01:34 +0000
Manifest this update: Sun 07 Sep 2025 05:01:34 +0000
Manifest next update: Mon 08 Sep 2025 05:01:34 +0000
Files and hashes: 1: 4U8mT6SkyQ3LSpnMzsUMVQj0RJg.crl (hash: OIRcSYZvY4P8zmI5QTGK8zRGSLciPbd1whFWu/0B4oM=)
2: Bc91mt-aFwpn9DwtZ394zqgnwAk.roa (hash: 4bDq/638WIm11nNJQQb6YF/e7JLWlty4w4akKWg+wAI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6c/4159c3-814d-4001-8527-139043749c48/1/4U8mT6SkyQ3LSpnMzsUMVQj0RJg.crl
rsync://rpki.ripe.net/repository/DEFAULT/6c/4159c3-814d-4001-8527-139043749c48/1/4U8mT6SkyQ3LSpnMzsUMVQj0RJg.mft
rsync://rpki.ripe.net/repository/DEFAULT/4U8mT6SkyQ3LSpnMzsUMVQj0RJg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:8d:11:5c:d1:2d:95:57:a0:79:26:be:ba:ee:c5:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e14f264fa4a4c90dcb4a99cccec50c5508f44498
Validity
Not Before: Sep 7 05:01:34 2025 GMT
Not After : Sep 8 05:01:34 2025 GMT
Subject: CN=fb4cbe2aff92b025f10849552fb7f74c83718ba0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:90:34:1d:95:d9:3a:80:a7:24:97:9d:db:3d:
63:9d:ad:11:45:15:59:ce:c5:d3:11:3f:55:d4:78:
ac:e8:21:01:ff:26:88:13:d0:62:b8:41:0a:2a:a9:
23:ab:37:b2:1e:99:6b:16:d3:4b:14:32:17:fe:df:
1b:83:7e:ab:f2:bd:09:ef:64:e2:ae:34:ef:30:16:
c1:c6:17:7d:de:8f:21:b4:a1:ea:ef:7d:46:96:95:
24:f5:d7:27:cd:46:fa:29:cd:74:bc:1a:6f:6f:c8:
c2:24:0c:54:35:a0:27:13:69:9c:31:dd:0e:a6:95:
3a:1d:7f:bb:3e:f8:a5:96:dd:70:ab:f1:05:99:7b:
fa:24:1c:7c:99:2e:92:2f:58:1d:b9:22:58:8a:e4:
87:a8:1d:39:09:e4:6b:b7:01:88:2a:94:34:db:b3:
c7:83:8e:eb:f1:f7:b0:c6:d3:ca:f6:c6:40:5c:0c:
34:af:cd:9d:53:8c:f0:37:68:81:ae:c1:6e:14:af:
03:13:8c:68:1c:00:91:27:23:9e:62:60:e6:a8:20:
9d:35:24:c1:ea:86:7f:98:9d:e9:8e:84:39:a2:d9:
d3:bf:98:9b:ea:a5:fd:fa:33:7a:60:5b:e7:03:19:
5a:bf:6c:eb:30:48:8c:6d:fc:34:04:7d:75:11:f3:
0d:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:4C:BE:2A:FF:92:B0:25:F1:08:49:55:2F:B7:F7:4C:83:71:8B:A0
X509v3 Authority Key Identifier:
keyid:E1:4F:26:4F:A4:A4:C9:0D:CB:4A:99:CC:CE:C5:0C:55:08:F4:44:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4U8mT6SkyQ3LSpnMzsUMVQj0RJg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/4159c3-814d-4001-8527-139043749c48/1/4U8mT6SkyQ3LSpnMzsUMVQj0RJg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/4159c3-814d-4001-8527-139043749c48/1/4U8mT6SkyQ3LSpnMzsUMVQj0RJg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:be:c3:07:4e:48:ad:7d:55:3e:85:3a:33:71:03:e5:8d:04:
ab:46:71:6f:c5:31:a1:04:29:04:73:de:8d:1a:97:fc:69:f4:
00:e5:70:ff:4c:aa:26:38:81:8e:bc:7b:b8:ca:17:6e:05:f6:
6b:e6:5b:6b:0a:70:41:82:cf:fb:d3:f7:66:56:80:60:81:f4:
4a:07:84:95:ad:7b:d6:f1:54:2f:43:8a:92:9f:d7:89:15:4a:
19:58:97:98:a9:e2:9d:7a:f4:1f:96:c8:fa:24:0f:35:9e:80:
a2:eb:35:2e:e7:63:d5:8d:ce:a1:d0:25:98:02:65:2a:e0:a8:
63:81:0b:f3:44:4b:7b:19:86:f5:9b:32:39:1d:73:6d:f8:f0:
b6:ae:2d:9f:9e:a7:4f:85:92:b8:a8:f5:50:2c:04:01:51:d9:
7a:d9:19:55:dc:c4:a4:0a:98:f6:5f:f8:93:a5:8c:ed:e2:7b:
df:4c:62:3f:05:3e:cf:9b:4d:e8:da:54:f1:31:0d:15:7a:34:
8f:6c:df:a8:1d:44:15:90:38:d1:53:9d:b6:bf:7b:4f:3c:80:
a6:a2:75:02:ab:a5:fe:0d:30:28:7a:b2:b9:e2:1e:ec:e1:1a:
ae:35:bd:6e:49:a8:a5:2c:10:0d:95:4f:c4:7f:0b:e9:1a:40:
c1:f8:54:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 11:29:24 2025 by rpki-client