Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/28d600-a869-4ab1-9b2e-446019966a19/1/4FdMKHjWtTYTm4lfCMnG2xjhKps.mft
File: 4FdMKHjWtTYTm4lfCMnG2xjhKps.mft (raw, json)
Hash identifier: V4HoKU0x16F4xP/vWRtTGKx78tzO727Ui74qHWhNCGQ=
Subject key identifier: E5:20:6C:F9:5F:2E:C4:DE:37:D4:85:D5:5B:56:07:14:FE:2F:8C:3E
Authority key identifier: E0:57:4C:28:78:D6:B5:36:13:9B:89:5F:08:C9:C6:DB:18:E1:2A:9B
Certificate issuer: /CN=e0574c2878d6b536139b895f08c9c6db18e12a9b
Certificate serial: 0199375D07512253EA941B367498CC4ED18F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4FdMKHjWtTYTm4lfCMnG2xjhKps.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/28d600-a869-4ab1-9b2e-446019966a19/1/4FdMKHjWtTYTm4lfCMnG2xjhKps.mft
Manifest number: 1684
Signing time: Thu 11 Sep 2025 06:01:07 +0000
Manifest this update: Thu 11 Sep 2025 06:01:07 +0000
Manifest next update: Fri 12 Sep 2025 06:01:07 +0000
Files and hashes: 1: 4FdMKHjWtTYTm4lfCMnG2xjhKps.crl (hash: Q4ULdtnZYgy/A8eKEYRpBcjyWBIdN7006M57bfry6mw=)
2: F5_lNgEgzfWoE5_Cqsta810GUD8.roa (hash: iFMsbMYL1gucfU8DYPuCeVZjMtj1pfRR/WALBk/WmbI=)
3: GPk2iBuHJkhE3vpf7v6PEKywv7w.roa (hash: GWqOVJmjwk1Pn1GbnWABjMV1e5ehhhP81Lyr4q/ji2E=)
4: OflCzXga8ucfjVqp9uUhh7zK_qM.roa (hash: tJ4j/9WnUQafTpRcoYrdjgTWc0yGFpsicsnou7Bw3VU=)
5: SwP1NYlZc5jbDBXXeMNl1hjy1LA.roa (hash: DMSgzACIbB/JZuNfMaMP2kCv3jA/gmECBXJyT4DQzwk=)
6: W6KxeoLPp69-NZgXYljCkgfMzmI.roa (hash: WWTdkNcNGcm7BbXaoCx/steftEF6zzmySvzLX5r6lpM=)
7: aAP3usYXoFfJgmCfE8_VSaJGbTU.roa (hash: x6wsw/R7hONUKg46ARfXmJgysd6wAhjXDI0EDejXv3A=)
8: uGW4wsIIh4UfRdPgdZPrknwT0_s.roa (hash: DewiqU6mTjj3HeFVXlyQsAjNkoAtpsCRp10m8FffrLA=)
9: x9MROVO0I_4DbRC-cdgvtpUcqSo.roa (hash: nmMjnQZ2GqEE7VMtJSqrjcD6wbWb5UdEwkmJmCMyG7E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/28d600-a869-4ab1-9b2e-446019966a19/1/4FdMKHjWtTYTm4lfCMnG2xjhKps.crl
rsync://rpki.ripe.net/repository/DEFAULT/e4/28d600-a869-4ab1-9b2e-446019966a19/1/4FdMKHjWtTYTm4lfCMnG2xjhKps.mft
rsync://rpki.ripe.net/repository/DEFAULT/4FdMKHjWtTYTm4lfCMnG2xjhKps.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Sep 2025 05:00:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:37:5d:07:51:22:53:ea:94:1b:36:74:98:cc:4e:d1:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e0574c2878d6b536139b895f08c9c6db18e12a9b
Validity
Not Before: Sep 11 06:01:07 2025 GMT
Not After : Sep 12 06:01:07 2025 GMT
Subject: CN=e5206cf95f2ec4de37d485d55b560714fe2f8c3e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:b7:6a:e9:d1:ec:dd:8d:b7:3b:4e:30:4f:cc:
9b:de:58:2a:22:33:2d:47:b2:d3:bc:84:d9:d7:72:
38:b0:ec:33:e2:04:89:76:61:aa:94:9e:db:f0:bc:
56:b8:e2:0f:27:6c:80:53:09:c4:24:20:df:9a:3e:
bf:43:a6:a9:31:1e:42:5d:07:5b:f6:50:b8:b5:5d:
bf:1c:90:e3:01:a8:af:b1:0c:57:eb:dc:a5:5d:8b:
5b:d7:56:f3:be:db:c6:ea:b8:c2:b3:30:f4:5e:32:
27:41:65:c1:e3:03:eb:a4:94:9d:7d:60:85:0b:64:
15:55:bd:77:49:07:fe:4c:09:7a:46:68:88:70:45:
ab:90:d2:a1:ae:a4:99:3b:fa:ee:ba:bc:09:b4:0d:
ce:eb:2b:13:8f:4a:d7:c1:3d:2f:95:35:d9:1b:70:
f5:b8:8b:75:df:a2:83:74:5d:ee:57:8c:f8:3a:35:
72:6c:e0:91:5a:11:54:01:ff:7a:53:ee:3d:89:c8:
0d:fe:58:fe:9a:4e:93:40:43:4c:04:11:f4:98:37:
c8:7c:2d:23:20:68:eb:8a:17:2a:c9:85:1f:28:1a:
e0:6d:c0:f6:72:b0:e2:ea:7b:df:b1:f4:ce:7d:fa:
4a:de:d3:e2:83:46:04:81:4b:fe:01:e2:3f:ac:5d:
5c:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:20:6C:F9:5F:2E:C4:DE:37:D4:85:D5:5B:56:07:14:FE:2F:8C:3E
X509v3 Authority Key Identifier:
keyid:E0:57:4C:28:78:D6:B5:36:13:9B:89:5F:08:C9:C6:DB:18:E1:2A:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4FdMKHjWtTYTm4lfCMnG2xjhKps.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/28d600-a869-4ab1-9b2e-446019966a19/1/4FdMKHjWtTYTm4lfCMnG2xjhKps.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/28d600-a869-4ab1-9b2e-446019966a19/1/4FdMKHjWtTYTm4lfCMnG2xjhKps.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:62:1f:98:a7:30:fe:9a:87:2b:65:0c:6f:cc:01:0f:87:78:
ba:64:8e:34:88:42:05:4d:03:fb:0a:89:99:e3:38:0e:4e:1f:
33:a5:6c:74:cc:73:c3:06:86:91:b1:33:ec:14:44:b1:9d:c8:
21:66:9a:db:b7:24:e1:3b:39:8c:30:ca:ba:04:a8:ff:29:19:
72:42:8d:93:54:00:de:f9:1a:d7:d1:1f:07:c2:de:74:0a:c7:
71:ce:9e:26:fb:24:ef:80:91:e7:27:ce:f1:10:d5:6e:38:72:
97:c8:3e:87:01:65:8f:4c:b1:e7:80:c6:90:a4:1f:83:ca:c8:
41:74:63:a0:73:48:a0:48:a7:20:a8:89:13:b3:cb:f0:c8:5d:
9c:a2:41:05:73:e9:62:42:26:08:27:aa:a8:a3:42:aa:8d:e9:
aa:76:75:ff:45:d1:14:df:54:5c:ef:62:41:ee:52:3b:bf:f2:
d6:0f:e0:94:7e:d0:fc:6f:66:98:cd:4d:e0:ab:8d:ba:45:b4:
38:1c:d7:0e:2b:af:39:07:d8:b9:a7:76:03:bd:fe:50:a7:ef:
08:ed:a8:92:97:5d:7a:31:a2:22:78:87:84:2c:8c:52:1f:c4:
f2:ce:91:e8:ad:fd:36:0f:3c:2e:36:a3:f8:55:ff:a4:05:a9:
69:53:91:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 11 08:32:06 2025 by rpki-client