Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/b9178b-c7ba-4d4e-af9e-6acd21d4baf8/1/4iTkUOr-1MJZttwKNOMG8a0oS8Q.mft
File: 4iTkUOr-1MJZttwKNOMG8a0oS8Q.mft (raw, json)
Hash identifier: VHHoWOhBSVQiDIIp9B0YGaA5omGDcvrICVy/rHQ+c94=
Subject key identifier: 98:08:94:E5:B3:78:9B:63:92:98:E9:E9:3A:40:72:08:9D:3A:DE:63
Authority key identifier: E2:24:E4:50:EA:FE:D4:C2:59:B6:DC:0A:34:E3:06:F1:AD:28:4B:C4
Certificate issuer: /CN=e224e450eafed4c259b6dc0a34e306f1ad284bc4
Certificate serial: 01991C5388CDD2267FA05090CCF8A30FCE0C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4iTkUOr-1MJZttwKNOMG8a0oS8Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/b9178b-c7ba-4d4e-af9e-6acd21d4baf8/1/4iTkUOr-1MJZttwKNOMG8a0oS8Q.mft
Manifest number: 1672
Signing time: Sat 06 Sep 2025 00:01:00 +0000
Manifest this update: Sat 06 Sep 2025 00:01:00 +0000
Manifest next update: Sun 07 Sep 2025 00:01:00 +0000
Files and hashes: 1: 4iTkUOr-1MJZttwKNOMG8a0oS8Q.crl (hash: bZsZr/F5LFqpdzMzkzny3tmSQYnlg/qd1nzsmI7By9A=)
2: SifsSXB3IxM773oq0Xz9LePnp8I.roa (hash: zgIEbQQ5tBYSjxuoWIlb12GUFr1oCylWnPsgULnZLUs=)
3: pe-h0g6N0Y23HKrAKsDD9huS1mE.roa (hash: ylxKfNsAYg9jbE4bG9j7buLcVQFIUsPKCa1+TwgGN2I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a8/b9178b-c7ba-4d4e-af9e-6acd21d4baf8/1/4iTkUOr-1MJZttwKNOMG8a0oS8Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/a8/b9178b-c7ba-4d4e-af9e-6acd21d4baf8/1/4iTkUOr-1MJZttwKNOMG8a0oS8Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/4iTkUOr-1MJZttwKNOMG8a0oS8Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 07 Sep 2025 00:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:1c:53:88:cd:d2:26:7f:a0:50:90:cc:f8:a3:0f:ce:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e224e450eafed4c259b6dc0a34e306f1ad284bc4
Validity
Not Before: Sep 6 00:01:00 2025 GMT
Not After : Sep 7 00:01:00 2025 GMT
Subject: CN=980894e5b3789b639298e9e93a4072089d3ade63
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:62:85:89:6c:c0:cc:2a:1f:9a:e8:9a:19:b3:
ce:1c:cb:1f:e4:00:c5:28:ef:aa:c2:a9:87:58:b2:
fc:26:ca:0e:dd:b3:84:22:fc:02:86:fe:24:0c:1a:
d1:7e:e5:15:cf:7e:9c:14:16:c2:a6:5f:ff:e8:1d:
83:32:19:9e:78:e5:de:bb:19:df:43:34:42:17:0e:
bb:ce:d1:20:cb:15:db:01:08:04:ef:95:6b:95:cc:
e0:89:0d:14:d9:d9:2d:5e:f9:57:32:8e:8a:a2:bd:
7b:75:1f:01:52:63:59:ed:06:ac:02:dc:be:87:d5:
8d:c0:49:17:3c:06:06:b1:8a:60:46:e1:f4:bf:b7:
68:15:9f:c4:26:c6:a1:9f:49:42:4d:2e:f6:b6:9b:
75:7b:83:47:cd:0f:e7:59:43:cd:9e:19:b0:9d:fa:
61:88:0a:0a:a7:43:c8:18:85:38:36:af:ef:ec:63:
18:06:ca:2b:23:c0:11:d8:84:50:b5:03:65:b1:cb:
5e:f9:b2:53:cb:96:1e:ce:35:e7:6e:98:59:5e:9a:
74:7f:19:13:47:73:7d:99:0c:a7:d7:79:92:47:27:
8e:ba:5f:4b:ce:f7:ec:0f:d2:87:df:2e:27:20:68:
8d:13:33:70:73:14:fe:0e:14:ba:b8:a3:61:cf:e4:
c9:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:08:94:E5:B3:78:9B:63:92:98:E9:E9:3A:40:72:08:9D:3A:DE:63
X509v3 Authority Key Identifier:
keyid:E2:24:E4:50:EA:FE:D4:C2:59:B6:DC:0A:34:E3:06:F1:AD:28:4B:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4iTkUOr-1MJZttwKNOMG8a0oS8Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/b9178b-c7ba-4d4e-af9e-6acd21d4baf8/1/4iTkUOr-1MJZttwKNOMG8a0oS8Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/b9178b-c7ba-4d4e-af9e-6acd21d4baf8/1/4iTkUOr-1MJZttwKNOMG8a0oS8Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:d2:b7:e6:0d:19:a8:0c:c9:0a:dd:07:61:1f:d8:bb:f5:0d:
74:ba:d7:a2:19:20:d9:ef:d2:cc:de:f1:38:69:d7:2a:db:5e:
71:ee:25:ed:3a:0e:1f:03:0c:d7:48:15:c7:79:99:90:fc:90:
76:6c:5b:21:20:10:1d:10:31:d4:4c:2a:4b:7a:b6:d4:cb:26:
a5:01:1c:31:86:b6:dc:68:44:6e:36:37:39:a0:f3:c4:c2:7f:
e8:2e:82:df:b7:71:e1:07:10:6e:1f:9f:4d:50:d8:18:17:67:
ee:e1:32:2f:d3:b8:17:f4:7b:8e:ad:20:a1:84:64:74:2f:fd:
a1:28:8a:cd:e8:95:a1:45:b4:ab:f5:60:c0:4c:49:b5:69:5a:
28:49:59:0c:ec:eb:72:16:17:35:01:99:e9:35:5f:d9:6b:bf:
dd:06:97:f8:5f:90:b7:e5:e6:99:77:aa:da:aa:b0:84:1f:fc:
2c:5c:8a:64:50:5d:47:c7:fa:52:6d:82:5b:ef:1b:35:be:d8:
47:73:fb:dc:ee:cd:aa:ce:fd:78:f9:71:e5:3b:ad:6d:0f:43:
43:49:41:5e:59:9d:ef:8a:65:df:c1:90:3d:ea:dd:21:23:43:
83:92:c3:93:3e:4b:9a:f8:3a:95:f0:a5:cc:31:08:50:95:b5:
30:b6:e5:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 6 07:56:33 2025 by rpki-client