Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/d8c4ba-1c48-480b-bb59-d2310bba0e11/1/4OvbaaM-jzrzY64UT4U1OOgDG2M.mft
File: 4OvbaaM-jzrzY64UT4U1OOgDG2M.mft (raw, json)
Hash identifier: JewMqwymlWwfzbi250PNhazXbYqMsZS2vExMXblnwME=
Subject key identifier: 85:1B:43:C3:10:F3:11:DF:6D:E6:52:49:E9:EF:8F:D9:C9:7B:D5:29
Authority key identifier: E0:EB:DB:69:A3:3E:8F:3A:F3:63:AE:14:4F:85:35:38:E8:03:1B:63
Certificate issuer: /CN=e0ebdb69a33e8f3af363ae144f853538e8031b63
Certificate serial: 019923D617209EB4AEF3CFABA08CF7EC2812
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4OvbaaM-jzrzY64UT4U1OOgDG2M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/d8c4ba-1c48-480b-bb59-d2310bba0e11/1/4OvbaaM-jzrzY64UT4U1OOgDG2M.mft
Manifest number: 0949
Signing time: Sun 07 Sep 2025 11:00:57 +0000
Manifest this update: Sun 07 Sep 2025 11:00:57 +0000
Manifest next update: Mon 08 Sep 2025 11:00:57 +0000
Files and hashes: 1: 3eUay2tu69uIVC2ydoh-KNcQB3E.roa (hash: G/dDpLohr3NTC2lM78apSFe1V+YNmYFmlWqkTGl1RZw=)
2: 4OvbaaM-jzrzY64UT4U1OOgDG2M.crl (hash: EZdSyVLfcKqLiZuSehRr4mQ+a0nCGhVLkX7vdBq2mZA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/78/d8c4ba-1c48-480b-bb59-d2310bba0e11/1/4OvbaaM-jzrzY64UT4U1OOgDG2M.crl
rsync://rpki.ripe.net/repository/DEFAULT/78/d8c4ba-1c48-480b-bb59-d2310bba0e11/1/4OvbaaM-jzrzY64UT4U1OOgDG2M.mft
rsync://rpki.ripe.net/repository/DEFAULT/4OvbaaM-jzrzY64UT4U1OOgDG2M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 07:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:23:d6:17:20:9e:b4:ae:f3:cf:ab:a0:8c:f7:ec:28:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e0ebdb69a33e8f3af363ae144f853538e8031b63
Validity
Not Before: Sep 7 11:00:57 2025 GMT
Not After : Sep 8 11:00:57 2025 GMT
Subject: CN=851b43c310f311df6de65249e9ef8fd9c97bd529
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:c7:f4:e5:23:58:c2:1c:98:ae:e9:a8:82:13:
62:23:91:84:9d:f6:21:c2:be:4a:00:8e:6c:79:6c:
61:3f:4c:7c:2e:11:3f:1b:ac:aa:91:6f:18:f2:ac:
03:af:d9:75:d8:a6:28:94:ce:11:91:b8:95:33:b6:
95:09:dd:00:e4:a5:08:d0:b7:af:fb:5f:25:a6:33:
9c:44:88:bb:33:4a:46:3f:b0:84:6a:13:62:aa:70:
a3:fd:a4:97:b1:65:67:d0:d9:d9:30:c5:0a:d0:c6:
2e:65:54:40:62:47:1b:05:a9:b0:60:5d:5a:5b:1b:
84:f7:08:bf:da:78:fe:0b:76:e0:93:07:e5:20:f8:
d0:9d:fb:c9:6e:37:c9:7a:6f:2b:89:45:5c:12:69:
52:fd:46:b0:74:2d:e9:86:b6:94:66:8e:0b:31:e3:
aa:fc:dc:83:a0:29:33:f4:d9:80:3d:9e:08:a5:43:
87:ae:d5:c0:9c:fe:23:a3:a9:b9:9c:af:6b:6e:96:
18:ba:f2:b9:70:52:ef:a2:0b:ee:cf:4e:ce:74:54:
7f:0d:9b:36:c5:7e:ad:4c:50:53:2d:2f:bf:82:78:
34:6b:ba:88:20:6a:6a:65:7f:14:d0:f8:eb:1d:7f:
2d:8b:14:a5:de:7b:29:d8:a2:0e:89:81:64:6d:ae:
26:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:1B:43:C3:10:F3:11:DF:6D:E6:52:49:E9:EF:8F:D9:C9:7B:D5:29
X509v3 Authority Key Identifier:
keyid:E0:EB:DB:69:A3:3E:8F:3A:F3:63:AE:14:4F:85:35:38:E8:03:1B:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4OvbaaM-jzrzY64UT4U1OOgDG2M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/d8c4ba-1c48-480b-bb59-d2310bba0e11/1/4OvbaaM-jzrzY64UT4U1OOgDG2M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/d8c4ba-1c48-480b-bb59-d2310bba0e11/1/4OvbaaM-jzrzY64UT4U1OOgDG2M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
cb:a6:30:f7:9e:fa:68:cd:80:6c:17:8e:d2:6b:b5:09:7e:84:
d2:2d:a1:2a:12:f5:7e:4d:c9:7e:60:4c:30:8e:21:04:49:c9:
0b:a8:8f:f1:11:52:a5:39:54:31:3a:c7:37:81:89:d0:ba:ba:
2d:2b:ff:9d:78:c6:a0:2e:4b:34:14:d8:37:bf:fc:75:13:c3:
f0:74:4f:04:42:86:24:40:5e:68:0e:40:87:b1:3f:ab:10:33:
16:fc:9a:d0:85:06:76:a5:50:1c:d9:d2:24:cd:a9:cf:a2:57:
07:f8:62:2b:fa:01:d9:59:ec:e6:e0:7a:49:5f:23:3e:8a:f5:
df:0d:6c:1e:69:d3:19:69:d2:9c:74:c0:69:4f:04:7d:6f:5b:
ff:dc:74:73:26:3b:80:80:64:7b:41:65:e7:b1:34:9d:e3:0d:
fc:2a:9a:74:87:a9:35:ce:d3:c3:6d:f7:d4:19:0d:53:c6:9b:
78:c7:35:44:56:d6:34:2e:ca:80:ab:d5:a7:70:ae:09:3f:50:
12:34:c7:d1:7b:3b:51:d6:b9:1b:20:bc:2c:ef:ff:5d:01:c1:
dc:f7:c4:06:03:d1:c4:66:2c:13:93:ca:00:ed:b5:f3:61:78:
d8:20:37:e8:9b:81:41:07:8d:84:cd:67:21:6c:f8:cd:be:3a:
80:a6:3f:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 13:16:31 2025 by rpki-client