Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/286d47-6434-41bd-9aa2-09ff79308bbe/1/4_cHBvbAz72cc6fz2DAjJApC9Q0.mft
File: 4_cHBvbAz72cc6fz2DAjJApC9Q0.mft (raw, json)
Hash identifier: +20p4Ji97GNin1omnT0xbEf6OiV0hw7fQV5bFEorNhc=
Subject key identifier: 14:8E:8D:50:64:1D:32:B8:A2:30:8B:C2:2F:D4:78:7D:2F:99:24:C8
Authority key identifier: E3:F7:07:06:F6:C0:CF:BD:9C:73:A7:F3:D8:30:23:24:0A:42:F5:0D
Certificate issuer: /CN=e3f70706f6c0cfbd9c73a7f3d83023240a42f50d
Certificate serial: 0199375C70D15C8BC0FFC6C033DCD281F527
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4_cHBvbAz72cc6fz2DAjJApC9Q0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/286d47-6434-41bd-9aa2-09ff79308bbe/1/4_cHBvbAz72cc6fz2DAjJApC9Q0.mft
Manifest number: 0D8A
Signing time: Thu 11 Sep 2025 06:00:28 +0000
Manifest this update: Thu 11 Sep 2025 06:00:28 +0000
Manifest next update: Fri 12 Sep 2025 06:00:28 +0000
Files and hashes: 1: 4_cHBvbAz72cc6fz2DAjJApC9Q0.crl (hash: 7WB2aVfwOaAMpeMEu7+orwIPL4OglCm0crjfX5ulv6I=)
2: JZBToS-O_vrT2aeKBSNggNB5se0.roa (hash: D8kzrex63NBxCoEgyWN4HyqVj2eRzOdT3Da1FU0u+nI=)
3: cKLdHjbMHa9DWXygLYK3fJRjYqw.roa (hash: aXunewdhx0tio/kXThZoUaubUGfQctWD4RTkIiazOVE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a8/286d47-6434-41bd-9aa2-09ff79308bbe/1/4_cHBvbAz72cc6fz2DAjJApC9Q0.crl
rsync://rpki.ripe.net/repository/DEFAULT/a8/286d47-6434-41bd-9aa2-09ff79308bbe/1/4_cHBvbAz72cc6fz2DAjJApC9Q0.mft
rsync://rpki.ripe.net/repository/DEFAULT/4_cHBvbAz72cc6fz2DAjJApC9Q0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Sep 2025 05:00:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:37:5c:70:d1:5c:8b:c0:ff:c6:c0:33:dc:d2:81:f5:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e3f70706f6c0cfbd9c73a7f3d83023240a42f50d
Validity
Not Before: Sep 11 06:00:28 2025 GMT
Not After : Sep 12 06:00:28 2025 GMT
Subject: CN=148e8d50641d32b8a2308bc22fd4787d2f9924c8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:cf:d2:85:b1:d6:bf:d8:17:ed:76:60:7c:d1:
4a:ea:67:04:4e:5a:a8:8a:06:eb:69:5f:fe:7a:8c:
e1:c6:00:a8:8d:f1:13:f2:f5:08:73:07:2b:7c:49:
49:8e:00:3c:29:b9:84:bf:73:82:f2:03:b6:a5:9c:
9e:e3:86:2b:00:d2:1b:e5:1c:93:88:cc:f4:bd:09:
c7:e2:41:df:11:d8:ae:5e:76:a0:35:e2:91:42:b5:
4e:ad:fc:ff:01:26:0c:2e:f5:f6:aa:1b:60:d0:2d:
37:36:8a:37:18:70:9e:fa:1a:f2:d4:ea:ca:a8:25:
67:f8:03:36:7c:9b:00:b0:c5:61:b6:1e:b9:0f:9d:
42:27:7d:74:c9:da:24:9a:6f:ea:a1:96:44:f9:51:
9d:5c:1e:dc:e5:7e:98:0d:81:b8:55:03:66:2a:e0:
5f:ff:35:bc:37:f4:0e:d5:75:6f:ee:ee:ed:db:81:
99:49:dd:51:de:44:1a:8e:9a:c0:4b:0c:3e:dd:47:
47:57:34:75:7b:da:e7:9c:ad:81:a9:a3:9e:a0:fb:
07:69:92:d4:75:39:41:47:46:c0:3e:7e:df:d1:ce:
c7:e9:d2:29:89:ca:6f:07:79:8b:2f:d7:60:3d:37:
63:fa:2e:e1:ac:a5:94:81:80:6d:0d:18:68:c0:80:
cb:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:8E:8D:50:64:1D:32:B8:A2:30:8B:C2:2F:D4:78:7D:2F:99:24:C8
X509v3 Authority Key Identifier:
keyid:E3:F7:07:06:F6:C0:CF:BD:9C:73:A7:F3:D8:30:23:24:0A:42:F5:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4_cHBvbAz72cc6fz2DAjJApC9Q0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/286d47-6434-41bd-9aa2-09ff79308bbe/1/4_cHBvbAz72cc6fz2DAjJApC9Q0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/286d47-6434-41bd-9aa2-09ff79308bbe/1/4_cHBvbAz72cc6fz2DAjJApC9Q0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:db:5b:fd:3e:b9:ac:82:21:b8:b5:14:f7:28:44:43:8b:b5:
cf:43:ad:a4:b8:b6:34:1b:df:05:03:c4:35:59:38:5e:ee:e1:
c5:1b:3d:87:17:b4:d9:3c:08:93:f2:9d:68:09:b1:b2:0a:59:
63:50:7a:e4:7f:2f:55:90:98:17:5f:fd:28:8d:10:1d:7b:d8:
36:0f:ba:aa:1c:27:3d:e7:b7:6b:ff:08:24:ab:45:09:46:a8:
69:3b:e9:8f:68:bd:17:5a:79:dc:88:08:30:b5:51:0c:99:10:
e1:50:86:40:47:98:7b:1b:e4:23:5c:a9:ca:f0:aa:26:42:2e:
29:fc:28:0f:71:92:83:a2:4d:bb:ed:ff:b6:b1:9d:a5:62:32:
c0:69:96:63:bc:26:75:4c:78:38:72:96:a4:92:a1:1a:11:79:
8f:03:c6:d8:11:73:29:e8:d9:c7:c2:2a:05:c6:b3:a0:50:84:
af:96:a9:53:36:d1:34:c9:7d:ca:ad:48:eb:1e:28:b2:5c:72:
0e:c1:6b:eb:61:d7:2b:42:03:99:a3:92:b1:f0:fe:52:58:92:
e3:9b:77:a1:65:d0:58:ab:69:51:1d:48:3b:23:52:8b:b1:86:
f6:09:b0:dc:18:7f:5d:1c:e6:72:07:8a:21:71:78:77:13:74:
68:a1:97:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 11 11:20:14 2025 by rpki-client