Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/683ffb-65eb-4972-997a-5f29c9f549e8/1/4sP8GYx3L1m47eUphWtS6heaTjg.mft
File: 4sP8GYx3L1m47eUphWtS6heaTjg.mft (raw, json)
Hash identifier: 7pRTd7OcZ0odqw+mRfs3jarL53WLDF6d5vqQksVVXRg=
Subject key identifier: AC:AF:CA:31:09:F2:90:81:07:F1:EF:71:A5:4D:79:81:93:8B:B0:D5
Authority key identifier: E2:C3:FC:19:8C:77:2F:59:B8:ED:E5:29:85:6B:52:EA:17:9A:4E:38
Certificate issuer: /CN=e2c3fc198c772f59b8ede529856b52ea179a4e38
Certificate serial: 0199221E672B01769D497C694B3D8930967B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4sP8GYx3L1m47eUphWtS6heaTjg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/683ffb-65eb-4972-997a-5f29c9f549e8/1/4sP8GYx3L1m47eUphWtS6heaTjg.mft
Manifest number: 1671
Signing time: Sun 07 Sep 2025 03:00:41 +0000
Manifest this update: Sun 07 Sep 2025 03:00:41 +0000
Manifest next update: Mon 08 Sep 2025 03:00:41 +0000
Files and hashes: 1: 4sP8GYx3L1m47eUphWtS6heaTjg.crl (hash: qY56iWorUvx/7LcuPFzjkhVtw2KNG4qQghI/feHajT0=)
2: psTRvusZFk5Ps_Sd4pnp1hlanU8.roa (hash: 2FkietEjo3H8sm7po2MUV7JtW5puIthhRvn1WmaMes0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/683ffb-65eb-4972-997a-5f29c9f549e8/1/4sP8GYx3L1m47eUphWtS6heaTjg.crl
rsync://rpki.ripe.net/repository/DEFAULT/dc/683ffb-65eb-4972-997a-5f29c9f549e8/1/4sP8GYx3L1m47eUphWtS6heaTjg.mft
rsync://rpki.ripe.net/repository/DEFAULT/4sP8GYx3L1m47eUphWtS6heaTjg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 03:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:1e:67:2b:01:76:9d:49:7c:69:4b:3d:89:30:96:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e2c3fc198c772f59b8ede529856b52ea179a4e38
Validity
Not Before: Sep 7 03:00:41 2025 GMT
Not After : Sep 8 03:00:41 2025 GMT
Subject: CN=acafca3109f2908107f1ef71a54d7981938bb0d5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:80:bd:d7:43:d3:35:6a:4e:00:4a:9e:36:14:
df:fa:6f:10:1a:a3:76:4b:d5:db:9d:3c:36:99:bd:
44:7d:af:9b:79:14:d9:2a:57:1b:60:56:87:09:60:
3e:a5:95:70:53:c9:79:0d:40:59:1e:8f:a7:37:8a:
6a:94:75:61:ea:5e:b5:cb:d1:0d:10:5d:f5:4c:06:
c1:b9:58:e7:d8:ae:b3:76:2b:f4:e7:f2:b5:f7:b1:
f5:35:b6:2c:69:74:b3:7b:9c:c2:ec:bf:77:1a:18:
14:03:12:3c:d7:91:5e:04:83:f4:b4:63:39:7a:fa:
bc:17:f8:b9:89:52:c3:ee:7c:ef:46:fe:bb:4b:fb:
c6:73:11:c0:2b:18:cc:d1:66:df:4b:87:46:c1:05:
99:a5:3f:05:77:b2:ea:a3:60:a2:7a:5d:03:88:41:
bd:aa:03:6d:47:ff:07:18:e4:71:92:6f:e9:12:f8:
60:47:73:a9:2b:2c:7a:e2:0b:2e:3a:b8:38:f5:2d:
0d:fc:55:c8:61:63:19:e2:2b:40:91:8c:54:1d:8f:
fe:7b:9b:35:da:54:43:98:ff:86:6e:c7:38:c0:2f:
52:c6:a6:67:8a:8b:ea:fb:03:55:e7:9b:22:67:76:
15:b9:8f:d7:29:a0:bf:4d:19:0e:09:4e:80:f9:fc:
b3:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:AF:CA:31:09:F2:90:81:07:F1:EF:71:A5:4D:79:81:93:8B:B0:D5
X509v3 Authority Key Identifier:
keyid:E2:C3:FC:19:8C:77:2F:59:B8:ED:E5:29:85:6B:52:EA:17:9A:4E:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4sP8GYx3L1m47eUphWtS6heaTjg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/683ffb-65eb-4972-997a-5f29c9f549e8/1/4sP8GYx3L1m47eUphWtS6heaTjg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/683ffb-65eb-4972-997a-5f29c9f549e8/1/4sP8GYx3L1m47eUphWtS6heaTjg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:ff:8f:e6:b1:cc:9c:bc:88:f1:14:25:fb:06:9d:26:84:4c:
84:53:40:3a:4c:a8:e7:19:a9:e2:82:2a:20:f4:e1:65:81:b8:
f2:55:0b:2a:3f:5b:8a:65:5b:2f:fa:89:e3:48:b0:b3:62:c6:
34:53:79:fc:52:93:b3:f7:22:ea:1a:27:ea:5d:7a:33:c1:47:
ad:ea:cd:4d:4e:99:1f:2f:a1:98:a0:49:c8:03:af:25:9a:a6:
43:de:7d:0c:68:14:55:51:53:fe:cd:36:00:0f:ef:58:e2:3e:
58:af:d3:a8:77:6d:b0:87:8a:9b:e5:2a:d0:f3:09:14:0e:61:
19:40:58:ce:78:38:07:a5:cf:21:67:62:c8:76:27:4f:4c:fa:
c8:97:23:a8:6d:b7:6a:68:82:e4:4d:7e:24:16:10:3c:c1:2e:
f3:c3:b1:5f:f2:38:3c:5f:dc:45:76:99:80:a0:dc:13:74:0b:
2b:c5:03:aa:5f:10:6f:b7:37:7a:41:01:56:3b:41:f5:77:96:
5f:99:5e:ae:0d:49:68:3a:a2:59:f8:0e:d9:6c:ab:66:bc:b5:
dd:83:17:a3:c6:03:b9:d5:3d:ce:db:9d:97:e4:e4:55:c1:15:
99:e2:fa:03:fa:ff:52:22:8f:3b:7f:03:f9:6a:1d:48:01:ca:
48:01:1f:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 11:42:39 2025 by rpki-client