Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/659d27-bbb5-49f4-8fd1-c264b75b6b78/1/4rRpKpKR8sZ7VswV2k0xASAjAXc.mft
File: 4rRpKpKR8sZ7VswV2k0xASAjAXc.mft (raw, json)
Hash identifier: Lhz0Wb9nCdfJkA+gD8it+XnLJfU4mjhUfoOqn/DCfbQ=
Subject key identifier: 08:10:78:67:AA:DE:47:23:1A:7B:8C:39:5B:60:E3:42:FC:BC:D8:6F
Authority key identifier: E2:B4:69:2A:92:91:F2:C6:7B:56:CC:15:DA:4D:31:01:20:23:01:77
Certificate issuer: /CN=e2b4692a9291f2c67b56cc15da4d310120230177
Certificate serial: 019923A0E305271339D51F758D88CE7BBACC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4rRpKpKR8sZ7VswV2k0xASAjAXc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/659d27-bbb5-49f4-8fd1-c264b75b6b78/1/4rRpKpKR8sZ7VswV2k0xASAjAXc.mft
Manifest number: 02D5
Signing time: Sun 07 Sep 2025 10:02:50 +0000
Manifest this update: Sun 07 Sep 2025 10:02:50 +0000
Manifest next update: Mon 08 Sep 2025 10:02:50 +0000
Files and hashes: 1: 4NCyaBU3y3IsV-tIz8ykBHkjQrA.roa (hash: 6MR/wTh/d3g4brX5BBFxl1tdarfWH7geP5gRFSxNByI=)
2: 4rRpKpKR8sZ7VswV2k0xASAjAXc.crl (hash: vAeTl5MqXMU0LW8Ripc49ody8MAz2BxoqIZKqc2arsc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/659d27-bbb5-49f4-8fd1-c264b75b6b78/1/4rRpKpKR8sZ7VswV2k0xASAjAXc.crl
rsync://rpki.ripe.net/repository/DEFAULT/cd/659d27-bbb5-49f4-8fd1-c264b75b6b78/1/4rRpKpKR8sZ7VswV2k0xASAjAXc.mft
rsync://rpki.ripe.net/repository/DEFAULT/4rRpKpKR8sZ7VswV2k0xASAjAXc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 07:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:23:a0:e3:05:27:13:39:d5:1f:75:8d:88:ce:7b:ba:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e2b4692a9291f2c67b56cc15da4d310120230177
Validity
Not Before: Sep 7 10:02:50 2025 GMT
Not After : Sep 8 10:02:50 2025 GMT
Subject: CN=08107867aade47231a7b8c395b60e342fcbcd86f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:f8:21:e5:e5:07:e2:48:d1:e0:5e:c4:cf:59:
84:2a:e1:00:9f:9b:f9:cd:14:40:0b:8b:8f:60:12:
10:d8:1a:12:77:91:5d:5f:11:e7:8f:66:43:42:87:
f3:c0:98:93:6d:f9:15:8c:ed:34:b8:a1:5f:11:b8:
52:e6:1e:00:3e:d9:8b:7f:db:13:d5:44:bb:d7:ab:
87:c0:9d:73:b5:7a:04:17:63:8b:0b:9d:e8:0e:6e:
90:75:7b:65:a9:cf:75:72:1b:a1:66:63:73:f6:47:
bb:99:68:91:44:86:72:76:a7:2c:c9:64:0b:29:ec:
8a:b4:55:93:db:14:29:cb:6a:32:0a:f5:f1:a8:66:
b3:4a:4c:03:a2:3d:fd:36:5d:c2:d6:41:91:31:e2:
2c:10:74:62:92:69:8d:5b:06:6c:89:c9:a6:42:12:
96:ae:21:7b:f3:5f:1b:fa:df:86:35:f1:e6:57:65:
07:02:c7:c3:51:8a:81:db:91:d0:c7:33:02:72:3d:
2c:47:d8:ee:fc:c6:20:e2:84:2c:19:bb:13:4b:72:
7e:2a:72:31:17:38:d1:31:65:c7:b4:fd:f2:2a:3b:
00:06:33:b6:50:bc:41:b0:28:7e:cd:8d:52:d4:ca:
75:00:e5:f7:bf:3b:b5:cc:e4:91:ec:c8:05:fc:3d:
9c:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:10:78:67:AA:DE:47:23:1A:7B:8C:39:5B:60:E3:42:FC:BC:D8:6F
X509v3 Authority Key Identifier:
keyid:E2:B4:69:2A:92:91:F2:C6:7B:56:CC:15:DA:4D:31:01:20:23:01:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4rRpKpKR8sZ7VswV2k0xASAjAXc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/659d27-bbb5-49f4-8fd1-c264b75b6b78/1/4rRpKpKR8sZ7VswV2k0xASAjAXc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/659d27-bbb5-49f4-8fd1-c264b75b6b78/1/4rRpKpKR8sZ7VswV2k0xASAjAXc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ae:b0:48:4f:9d:3d:c5:95:c7:24:74:3d:3a:09:7e:9f:9b:28:
c5:48:e2:aa:7b:a5:1b:f2:e0:82:eb:c7:c7:db:ed:17:85:46:
38:c4:51:f9:b4:78:58:40:62:aa:37:d1:48:77:d2:d6:cf:e1:
05:34:6a:19:d2:b6:d2:87:47:93:48:79:14:34:f6:1d:91:26:
38:ef:cc:fb:bf:a7:b5:3c:09:b7:74:c4:98:13:0c:d5:b2:1d:
ad:ef:f8:18:4f:f5:4e:de:62:cb:2d:07:20:a5:06:e9:31:99:
02:4b:a1:f0:81:c7:85:50:90:8a:8c:9b:09:c3:86:87:22:28:
74:d1:35:dc:c9:1e:a4:fc:cd:b4:fe:d2:1d:73:52:82:cd:4c:
5f:0e:1b:46:de:b3:0a:c9:5f:a8:16:39:9e:80:87:7f:2e:22:
7d:54:7b:84:26:a8:36:0f:e6:cc:57:ff:ff:58:a7:7e:eb:55:
77:5b:68:7c:1a:8e:33:80:7c:b4:96:4b:6e:89:ae:c6:56:54:
0a:c5:d6:af:91:53:df:a1:58:39:a1:f9:98:f0:50:fe:9a:59:
45:16:55:98:8f:eb:1a:0d:a7:7c:c4:80:f3:80:0d:2a:f7:58:
98:fb:38:90:60:3c:30:67:04:3e:e0:de:0b:88:48:5e:73:8e:
3a:ca:9c:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 13:32:26 2025 by rpki-client