Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/4b9a4c-802d-4b1e-94fe-c8f56c122fec/1/I4RnTqAHoSAwrI0r5WDbIfT8C5k.mft
File: I4RnTqAHoSAwrI0r5WDbIfT8C5k.mft (raw, json)
Hash identifier: 6EqvSK846mMauEucrIb53NHU7iYTDXyxknrOTBtQ/hw=
Subject key identifier: 0A:EF:F0:9B:38:ED:C3:B8:15:37:6D:2A:78:94:7A:14:5D:0B:FA:95
Authority key identifier: 23:84:67:4E:A0:07:A1:20:30:AC:8D:2B:E5:60:DB:21:F4:FC:0B:99
Certificate issuer: /CN=2384674ea007a12030ac8d2be560db21f4fc0b99
Certificate serial: 019932A41C8F3F8AE64AFD7D03B465246A5D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I4RnTqAHoSAwrI0r5WDbIfT8C5k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/4b9a4c-802d-4b1e-94fe-c8f56c122fec/1/I4RnTqAHoSAwrI0r5WDbIfT8C5k.mft
Manifest number: 01C4
Signing time: Wed 10 Sep 2025 08:00:39 +0000
Manifest this update: Wed 10 Sep 2025 08:00:39 +0000
Manifest next update: Thu 11 Sep 2025 08:00:39 +0000
Files and hashes: 1: I4RnTqAHoSAwrI0r5WDbIfT8C5k.crl (hash: Ybom8Bz0bnVE2X1mnhe14isgdsYVN/c3SU7O0TQdPSk=)
2: b-r28Bu4MGj-UsbsE6JV2xkR_Kg.roa (hash: CYtDxQh2JoY//+IHHkS7DA+4Jm80AdOA6Xho21YVow0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/4b9a4c-802d-4b1e-94fe-c8f56c122fec/1/I4RnTqAHoSAwrI0r5WDbIfT8C5k.crl
rsync://rpki.ripe.net/repository/DEFAULT/b0/4b9a4c-802d-4b1e-94fe-c8f56c122fec/1/I4RnTqAHoSAwrI0r5WDbIfT8C5k.mft
rsync://rpki.ripe.net/repository/DEFAULT/I4RnTqAHoSAwrI0r5WDbIfT8C5k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 11 Sep 2025 08:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:32:a4:1c:8f:3f:8a:e6:4a:fd:7d:03:b4:65:24:6a:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2384674ea007a12030ac8d2be560db21f4fc0b99
Validity
Not Before: Sep 10 08:00:39 2025 GMT
Not After : Sep 11 08:00:39 2025 GMT
Subject: CN=0aeff09b38edc3b815376d2a78947a145d0bfa95
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:e4:2d:c8:09:c6:b0:2c:fe:f2:8c:39:c7:c6:
f6:3c:94:63:b7:74:22:8c:89:d8:24:d6:7e:9f:3d:
be:88:58:c9:37:39:8b:8c:19:94:0a:58:0a:91:0e:
92:c7:c3:1c:ed:ad:3f:9e:81:89:de:c9:47:97:84:
a3:f5:fa:63:0c:fd:ea:3c:36:2f:b0:75:36:51:c9:
e7:69:6c:2c:53:da:2d:22:9a:56:68:38:62:74:3b:
b1:95:75:c8:ac:5b:29:b6:70:22:b3:0a:a9:41:c1:
96:dc:62:37:c3:58:e4:11:d9:52:3d:e8:ac:35:32:
5f:f8:c3:ca:40:2f:57:0f:29:ac:0b:9b:be:87:d5:
6c:f8:84:1a:cc:58:6e:7e:15:ae:1b:56:0b:b8:6a:
5e:91:84:22:bd:e2:62:4c:dc:db:67:0c:8a:03:64:
df:86:64:0a:06:17:dd:39:fa:d3:ea:a5:04:bf:f1:
d1:58:09:ff:74:31:ea:db:20:9a:20:6b:93:1b:74:
50:fb:68:27:95:9d:bc:a4:f4:fb:ef:6c:fb:0b:7b:
42:38:81:4d:fd:4c:7d:71:67:10:7d:fa:db:d5:90:
2c:91:39:a2:76:c4:0c:dc:9a:5f:0e:8c:f3:49:fa:
fd:b8:c7:bf:20:48:87:92:92:30:48:ef:02:ce:60:
e1:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:EF:F0:9B:38:ED:C3:B8:15:37:6D:2A:78:94:7A:14:5D:0B:FA:95
X509v3 Authority Key Identifier:
keyid:23:84:67:4E:A0:07:A1:20:30:AC:8D:2B:E5:60:DB:21:F4:FC:0B:99
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I4RnTqAHoSAwrI0r5WDbIfT8C5k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/4b9a4c-802d-4b1e-94fe-c8f56c122fec/1/I4RnTqAHoSAwrI0r5WDbIfT8C5k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/4b9a4c-802d-4b1e-94fe-c8f56c122fec/1/I4RnTqAHoSAwrI0r5WDbIfT8C5k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:d0:96:0e:bf:88:77:4e:8b:f9:20:82:f2:bc:19:2f:b7:dd:
8d:fb:98:3b:d2:63:97:b1:bf:8c:16:a2:70:e5:5c:5a:01:7a:
68:28:15:89:65:6c:52:72:6e:9a:01:f4:dd:4d:10:78:b7:41:
4b:2b:56:16:71:31:d3:a5:7c:9c:de:5a:2c:02:fd:37:d8:1c:
2e:b5:4a:b0:43:12:49:50:62:32:90:27:e4:ce:db:8b:ce:88:
04:2f:33:c6:34:b5:5e:66:f4:7a:80:85:98:fb:02:05:2f:f1:
01:a7:89:21:94:c8:51:5c:76:1b:da:82:f3:b0:c9:59:f5:54:
c0:e5:30:4f:1d:d8:3e:ef:85:1f:f6:56:ce:a1:b4:ce:16:33:
3d:cf:8e:25:5b:7b:34:99:52:31:eb:d9:6c:3c:ca:e2:3a:c8:
41:2c:1e:b8:b1:19:e2:e6:9d:28:af:c6:20:d9:6b:9f:da:85:
d9:24:dc:82:dc:0c:b3:f7:46:37:dd:c1:62:2f:61:7d:08:c2:
27:0f:b6:4f:84:ad:e1:c3:d8:12:e6:d6:1f:30:6b:d9:28:44:
70:d5:60:03:ab:6f:a7:34:80:9f:8c:9c:7b:58:ac:56:33:04:
72:81:c7:18:fa:47:20:70:ac:61:4e:c8:e7:34:a5:b6:9a:cc:
7a:e8:d0:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 10 14:08:40 2025 by rpki-client