Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/03a3bf-0cfc-430a-985d-28e773db91c2/1/4IlF0fx7Rw5oc2VfdVkwDgl6Zeg.mft
File: 4IlF0fx7Rw5oc2VfdVkwDgl6Zeg.mft (raw, json)
Hash identifier: yn0Y4DfxP//EuoEpOL9ZOPUD+6XZnfkzBgz9SYzoNmM=
Subject key identifier: 4D:0E:0C:47:13:30:77:5D:EF:F7:D0:10:62:09:96:14:F0:33:1B:A0
Authority key identifier: E0:89:45:D1:FC:7B:47:0E:68:73:65:5F:75:59:30:0E:09:7A:65:E8
Certificate issuer: /CN=e08945d1fc7b470e6873655f7559300e097a65e8
Certificate serial: 0199228C6EA9507D694F8E87DD3138FED7DB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4IlF0fx7Rw5oc2VfdVkwDgl6Zeg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/03a3bf-0cfc-430a-985d-28e773db91c2/1/4IlF0fx7Rw5oc2VfdVkwDgl6Zeg.mft
Manifest number: 1673
Signing time: Sun 07 Sep 2025 05:00:52 +0000
Manifest this update: Sun 07 Sep 2025 05:00:52 +0000
Manifest next update: Mon 08 Sep 2025 05:00:52 +0000
Files and hashes: 1: 4IlF0fx7Rw5oc2VfdVkwDgl6Zeg.crl (hash: zMH7k2ThiL2u5WbGCi9ZOId0JiPJaGFB7rhX5fEmUkg=)
2: v8biWOV_nsNX1ilIaxvt6SJe6Ow.roa (hash: ncGnxGmhlyRE3Vp5tuC1OddbegBnGSDwDfQcrYZJehw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/03a3bf-0cfc-430a-985d-28e773db91c2/1/4IlF0fx7Rw5oc2VfdVkwDgl6Zeg.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/03a3bf-0cfc-430a-985d-28e773db91c2/1/4IlF0fx7Rw5oc2VfdVkwDgl6Zeg.mft
rsync://rpki.ripe.net/repository/DEFAULT/4IlF0fx7Rw5oc2VfdVkwDgl6Zeg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:8c:6e:a9:50:7d:69:4f:8e:87:dd:31:38:fe:d7:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e08945d1fc7b470e6873655f7559300e097a65e8
Validity
Not Before: Sep 7 05:00:52 2025 GMT
Not After : Sep 8 05:00:52 2025 GMT
Subject: CN=4d0e0c471330775deff7d01062099614f0331ba0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:7e:53:7d:dc:77:d7:59:d9:1c:fa:0b:34:cc:
4b:b3:eb:c9:33:2e:ec:27:87:7e:7c:f6:65:6a:ab:
fd:45:84:8b:14:2e:8b:bf:32:34:7c:ea:9a:ab:14:
9b:c2:51:a6:18:6c:43:09:06:f8:ed:1c:5b:80:58:
01:0f:c2:59:86:60:4b:81:0e:88:3f:dd:50:d2:2e:
9c:a4:a5:74:c9:cb:de:6f:0b:d9:93:9c:45:f8:bb:
25:cc:7a:3b:9d:e2:e9:dc:57:0a:5e:e1:d7:62:2d:
45:87:c0:57:21:3a:61:b5:8e:41:85:16:92:da:8e:
7d:80:c3:2c:ed:db:b2:54:2e:52:fb:be:c7:f5:99:
a3:07:6b:78:18:60:0a:87:8c:3c:63:88:ed:30:60:
c1:56:99:92:ee:36:b5:50:37:1f:52:0c:4f:45:77:
e4:bf:d6:9f:86:3d:80:10:52:b5:44:81:85:be:52:
1e:4e:ee:8e:dc:67:81:f4:ac:81:83:5a:d4:ad:db:
b3:73:af:7b:e8:2d:3b:a7:d6:8c:ff:05:58:fc:b2:
96:2b:e7:f7:0a:09:e0:b9:2c:95:f3:1a:59:b0:3a:
56:56:31:d9:7d:50:15:33:39:47:c3:f6:ba:84:5e:
93:2c:87:b9:7f:06:0c:6c:88:46:bf:23:f9:16:65:
8e:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:0E:0C:47:13:30:77:5D:EF:F7:D0:10:62:09:96:14:F0:33:1B:A0
X509v3 Authority Key Identifier:
keyid:E0:89:45:D1:FC:7B:47:0E:68:73:65:5F:75:59:30:0E:09:7A:65:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4IlF0fx7Rw5oc2VfdVkwDgl6Zeg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/03a3bf-0cfc-430a-985d-28e773db91c2/1/4IlF0fx7Rw5oc2VfdVkwDgl6Zeg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/03a3bf-0cfc-430a-985d-28e773db91c2/1/4IlF0fx7Rw5oc2VfdVkwDgl6Zeg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
98:9e:25:ef:21:a0:50:bc:ec:dc:f1:15:56:94:a5:50:e3:af:
a0:08:e2:a3:22:1a:ab:51:0b:67:76:f0:8c:3e:51:97:1d:d3:
3d:11:10:ac:1a:f7:1b:5c:f8:07:9f:1b:3e:6e:c2:24:b6:03:
47:cd:b7:49:7b:e8:7e:0c:1c:0d:1b:f4:f7:36:77:84:21:97:
ae:4e:87:e4:65:6f:61:30:51:8b:00:f5:3d:93:ed:0b:b1:98:
f5:f0:77:cd:15:01:b8:36:a3:23:1e:c7:55:69:86:da:aa:fc:
7e:3a:bd:43:82:17:d7:6c:33:49:bc:aa:6c:02:f3:af:c0:80:
0a:8b:55:0d:b0:7a:84:2f:98:9c:29:ab:8a:dc:51:82:82:7e:
ba:c7:08:22:cc:79:0e:60:56:a7:10:0f:38:91:7c:ab:98:d4:
1f:ce:cd:7b:1d:84:3b:3c:62:23:da:6f:0c:cb:d6:c8:bb:cd:
9d:e0:e5:e6:cd:d5:75:e8:08:f5:fc:31:43:e0:f3:b9:12:ae:
6b:85:13:6e:4d:51:7c:63:25:e2:bc:ec:cf:05:f1:c5:64:1b:
fc:09:66:92:6d:f5:b6:62:36:de:56:37:90:ab:f1:7a:c2:06:
a8:a3:b8:64:7a:d1:a6:e7:f7:9f:2f:ab:a0:0b:07:ac:57:98:
43:70:5f:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 14:38:41 2025 by rpki-client