Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/0338f3-0802-4e5b-9241-60bf71937104/1/4KAIqA2P8mJiXmX-JYdpFYspmPA.mft
File: 4KAIqA2P8mJiXmX-JYdpFYspmPA.mft (raw, json)
Hash identifier: qcLNqfyY2uyXc2sMgnwGqfbwdCbiFqWwJrmUb7myWpc=
Subject key identifier: 58:AD:F3:39:E0:1D:CB:45:C8:90:C4:2F:2D:AD:8D:37:8E:15:1A:73
Authority key identifier: E0:A0:08:A8:0D:8F:F2:62:62:5E:65:FE:25:87:69:15:8B:29:98:F0
Certificate issuer: /CN=e0a008a80d8ff262625e65fe258769158b2998f0
Certificate serial: 0199228C3591E197F64A3D6400DA66DA0507
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4KAIqA2P8mJiXmX-JYdpFYspmPA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/0338f3-0802-4e5b-9241-60bf71937104/1/4KAIqA2P8mJiXmX-JYdpFYspmPA.mft
Manifest number: 1673
Signing time: Sun 07 Sep 2025 05:00:38 +0000
Manifest this update: Sun 07 Sep 2025 05:00:38 +0000
Manifest next update: Mon 08 Sep 2025 05:00:38 +0000
Files and hashes: 1: 4KAIqA2P8mJiXmX-JYdpFYspmPA.crl (hash: gndqK+7jjRf15lUht4hR7XMStebNb7rVPQ1/rxLG3Xw=)
2: y5zHo6daLtznM6YyOsYqUp-odjg.roa (hash: jHrEQD+W4TVeVi8oEScgmYIF6Mmipa4IpJr32ELwoTo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ec/0338f3-0802-4e5b-9241-60bf71937104/1/4KAIqA2P8mJiXmX-JYdpFYspmPA.crl
rsync://rpki.ripe.net/repository/DEFAULT/ec/0338f3-0802-4e5b-9241-60bf71937104/1/4KAIqA2P8mJiXmX-JYdpFYspmPA.mft
rsync://rpki.ripe.net/repository/DEFAULT/4KAIqA2P8mJiXmX-JYdpFYspmPA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:8c:35:91:e1:97:f6:4a:3d:64:00:da:66:da:05:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e0a008a80d8ff262625e65fe258769158b2998f0
Validity
Not Before: Sep 7 05:00:38 2025 GMT
Not After : Sep 8 05:00:38 2025 GMT
Subject: CN=58adf339e01dcb45c890c42f2dad8d378e151a73
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:94:0d:a6:53:27:1d:61:f8:12:55:95:6e:a5:
00:d6:09:c2:de:dc:8f:00:9f:bd:1a:43:c5:ac:78:
9e:18:ff:6e:62:3b:f6:ee:e7:d2:c0:bd:a0:3e:4e:
23:b1:f6:e3:a3:e4:1b:f0:49:30:d8:b1:b1:cd:76:
f8:2b:7a:7c:2c:1a:b6:81:80:b1:34:b1:79:e8:0f:
35:e3:f6:ec:49:69:80:dc:98:7d:d1:2f:65:1d:2f:
be:70:18:41:42:ef:00:73:45:fc:1f:ae:3e:9c:84:
62:4b:2c:72:48:59:9d:b9:84:a3:6a:48:de:a4:18:
a7:59:ed:80:63:79:d3:54:89:2a:d1:e1:b7:6b:53:
74:ad:d5:47:1f:64:18:03:86:5d:56:53:0b:9d:8d:
08:39:06:8d:64:25:dc:53:b5:70:0f:7f:a6:44:a3:
45:b2:36:37:40:40:83:57:1a:67:f5:09:91:fa:ea:
c1:23:76:3c:d2:81:75:1f:c4:29:ea:4c:74:41:70:
27:1a:22:d4:8b:3c:7b:84:0a:7b:59:f4:2a:46:48:
b0:d4:46:d4:ee:52:96:42:32:5c:77:bf:35:6d:db:
60:60:7d:b9:aa:e3:28:82:94:6a:be:cc:c9:ec:d4:
fe:fa:79:8b:88:56:ba:88:0f:6e:c8:e8:8c:af:e2:
94:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:AD:F3:39:E0:1D:CB:45:C8:90:C4:2F:2D:AD:8D:37:8E:15:1A:73
X509v3 Authority Key Identifier:
keyid:E0:A0:08:A8:0D:8F:F2:62:62:5E:65:FE:25:87:69:15:8B:29:98:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4KAIqA2P8mJiXmX-JYdpFYspmPA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/0338f3-0802-4e5b-9241-60bf71937104/1/4KAIqA2P8mJiXmX-JYdpFYspmPA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/0338f3-0802-4e5b-9241-60bf71937104/1/4KAIqA2P8mJiXmX-JYdpFYspmPA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bd:79:67:84:3d:88:73:91:dd:a4:dc:07:f8:29:7c:30:81:2d:
1a:ea:87:b7:10:f3:7c:aa:bb:64:e7:8e:2e:45:96:63:a2:8c:
fd:37:c9:1f:ee:f2:64:a7:e5:c8:ac:fb:6f:71:f8:a2:a9:da:
6e:0a:e0:8c:24:33:df:dc:8c:08:d1:9e:35:82:a9:c2:23:60:
e1:73:2f:e8:c3:dd:8d:e3:41:45:ad:87:3a:70:b8:9b:31:3e:
84:20:46:1c:10:6d:fc:3e:d8:99:14:8a:81:21:58:96:0a:91:
fd:e1:69:01:9c:a7:63:cd:6d:1f:e3:fe:48:df:0a:e6:d8:ac:
85:18:60:a7:72:d0:aa:d1:d4:4b:a5:4d:10:5d:69:5c:05:a2:
82:84:e2:6c:a9:81:1a:81:c0:0e:8b:07:60:3e:8e:07:a8:9a:
05:ea:66:45:75:72:ae:de:f6:78:58:1f:72:17:e5:2a:1a:f6:
8b:a8:e7:31:3d:b8:ba:54:08:03:1f:2e:db:67:13:7a:45:2b:
26:f5:d1:7d:12:62:e5:95:94:53:5a:0d:73:c3:cd:8d:1a:5d:
11:ae:8b:cd:12:05:6e:87:4e:f6:4b:e9:5e:fc:eb:18:6a:24:
d8:67:3b:1f:ca:25:64:e5:4c:9e:c2:1f:b8:5f:35:f8:87:62:
ed:e1:6e:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 14:43:39 2025 by rpki-client