Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/73f749-4560-4abe-8d0b-e2c1abafaa6c/1/4BEGBvUk26pTjmfhI8r7xt8zhsA.mft
File: 4BEGBvUk26pTjmfhI8r7xt8zhsA.mft (raw, json)
Hash identifier: +BE3zpfT/Sb7bXBWf9nwhQNUiOrb1wSRIXgwRyE5idc=
Subject key identifier: 26:1F:A9:F3:E8:50:C9:DC:36:FC:C2:9A:48:3D:A3:E4:14:A1:77:28
Authority key identifier: E0:11:06:06:F5:24:DB:AA:53:8E:67:E1:23:CA:FB:C6:DF:33:86:C0
Certificate issuer: /CN=e0110606f524dbaa538e67e123cafbc6df3386c0
Certificate serial: 0198CBDD789B8B8784A0AEC555AD52087C53
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4BEGBvUk26pTjmfhI8r7xt8zhsA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/73f749-4560-4abe-8d0b-e2c1abafaa6c/1/4BEGBvUk26pTjmfhI8r7xt8zhsA.mft
Manifest number: 03AB
Signing time: Thu 21 Aug 2025 09:02:25 +0000
Manifest this update: Thu 21 Aug 2025 09:02:25 +0000
Manifest next update: Fri 22 Aug 2025 09:02:25 +0000
Files and hashes: 1: 4BEGBvUk26pTjmfhI8r7xt8zhsA.crl (hash: gCMVdX9SLPDd49XYbYswHMioyYwT01f6tZQv6Vm1xB8=)
2: LKg2o2zlysSfcmScabBK3xapbdE.roa (hash: 1l6VyqJgKUuQ/XvxIU6XnLgEokzCKE4ghCBRoC85WGg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/73f749-4560-4abe-8d0b-e2c1abafaa6c/1/4BEGBvUk26pTjmfhI8r7xt8zhsA.crl
rsync://rpki.ripe.net/repository/DEFAULT/fe/73f749-4560-4abe-8d0b-e2c1abafaa6c/1/4BEGBvUk26pTjmfhI8r7xt8zhsA.mft
rsync://rpki.ripe.net/repository/DEFAULT/4BEGBvUk26pTjmfhI8r7xt8zhsA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 22 Aug 2025 08:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:cb:dd:78:9b:8b:87:84:a0:ae:c5:55:ad:52:08:7c:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e0110606f524dbaa538e67e123cafbc6df3386c0
Validity
Not Before: Aug 21 09:02:25 2025 GMT
Not After : Aug 22 09:02:25 2025 GMT
Subject: CN=261fa9f3e850c9dc36fcc29a483da3e414a17728
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:5e:e8:cf:85:59:c0:8a:b7:59:03:1a:98:1b:
8c:ca:c5:70:81:00:df:6f:59:65:a9:cc:a8:28:ab:
9f:cc:f1:20:e1:58:56:18:ae:67:d9:30:ee:0c:7f:
f6:0c:72:6c:ac:76:9d:fb:49:0b:da:0b:ba:8e:0f:
13:b6:36:ff:94:7c:0d:34:4d:98:90:db:af:d1:3b:
7d:ef:cf:81:3b:bd:44:ef:70:9b:3f:25:a4:30:50:
90:7c:5d:84:9a:fb:82:62:7a:03:e7:00:9f:2a:ce:
4c:2e:e8:78:e8:67:e8:52:2a:30:1d:a5:00:e4:d8:
10:5c:a1:77:26:4f:ef:5a:58:fd:f8:8d:91:6b:a9:
ea:72:63:53:ee:d4:9f:b1:64:3d:69:4c:32:59:ac:
f3:14:e9:61:0d:a0:d0:75:2b:af:54:e5:63:72:b7:
d1:62:05:28:9d:c7:04:ab:c1:01:4d:fb:86:73:24:
9a:12:09:5f:f9:80:a3:a5:f2:28:26:cf:ba:ba:12:
80:5d:10:db:01:f1:a5:b3:67:52:fb:f4:c5:65:74:
d4:b1:23:2d:91:c9:1d:68:54:51:d2:61:29:80:8f:
f0:95:20:62:a8:a5:a6:06:e9:46:63:8b:22:93:1e:
91:91:c4:d1:0e:e0:bd:e3:5c:44:5c:9f:b1:19:75:
9e:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:1F:A9:F3:E8:50:C9:DC:36:FC:C2:9A:48:3D:A3:E4:14:A1:77:28
X509v3 Authority Key Identifier:
keyid:E0:11:06:06:F5:24:DB:AA:53:8E:67:E1:23:CA:FB:C6:DF:33:86:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4BEGBvUk26pTjmfhI8r7xt8zhsA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/73f749-4560-4abe-8d0b-e2c1abafaa6c/1/4BEGBvUk26pTjmfhI8r7xt8zhsA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/73f749-4560-4abe-8d0b-e2c1abafaa6c/1/4BEGBvUk26pTjmfhI8r7xt8zhsA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:93:cc:c8:1b:53:2e:3c:c9:60:77:98:4c:7f:7a:e8:fe:1a:
24:35:18:d9:7a:aa:16:62:9b:4e:be:70:34:c6:28:a3:dc:23:
69:0a:4d:a9:3e:3d:89:51:8e:67:a6:bf:76:af:9b:4f:41:1f:
9a:1b:25:f8:bb:96:d1:e8:4a:62:6c:ef:e9:72:2e:4c:00:97:
d6:20:14:c0:69:09:9b:dc:38:60:db:30:c4:56:12:17:2a:8f:
e3:88:b6:dc:5c:86:c3:b5:c9:32:f7:b1:9a:da:89:6a:28:10:
2b:0b:af:89:cd:94:ad:e9:e2:4e:01:96:c5:07:db:58:e1:0a:
1d:d1:06:6b:ad:b7:16:fd:d7:f6:c6:83:a5:cd:86:b6:40:35:
86:1e:6a:e8:f8:80:18:80:a7:57:6e:97:b9:bb:64:42:80:b2:
a5:31:25:bd:9f:a2:45:fe:be:d8:9c:b9:18:04:97:34:d0:bf:
1c:a1:76:99:2e:d9:79:e8:1f:00:d3:a1:1b:34:03:15:b8:12:
6e:ef:d6:71:5a:9e:a4:69:a7:14:cc:57:c2:31:24:af:2c:f3:
87:30:05:ef:01:3c:11:e2:13:91:e3:92:4c:74:21:7a:16:e8:
cd:fb:a5:b8:f8:be:c2:90:f2:9c:99:9c:ac:e0:8c:1f:bd:22:
0d:7b:99:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 21 11:09:54 2025 by rpki-client