Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/4ba973-0e9f-4352-9838-642dc9127680/1/S4nYf45BtQgtOJFgFeBZ5W3QEU4.mft
File: S4nYf45BtQgtOJFgFeBZ5W3QEU4.mft (raw, json)
Hash identifier: uS62wD29OvtwMegVh3vhbQqBjFsxp4ixoohkDtnxXPY=
Subject key identifier: AA:AD:D0:2D:95:5B:11:D3:D3:00:BD:EC:ED:63:F5:A2:C1:4E:F9:98
Authority key identifier: 4B:89:D8:7F:8E:41:B5:08:2D:38:91:60:15:E0:59:E5:6D:D0:11:4E
Certificate issuer: /CN=4b89d87f8e41b5082d38916015e059e56dd0114e
Certificate serial: 019894B885D2BEFB4DC692A7A0F2475E0521
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S4nYf45BtQgtOJFgFeBZ5W3QEU4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/4ba973-0e9f-4352-9838-642dc9127680/1/S4nYf45BtQgtOJFgFeBZ5W3QEU4.mft
Manifest number: 0E98
Signing time: Sun 10 Aug 2025 16:02:57 +0000
Manifest this update: Sun 10 Aug 2025 16:02:57 +0000
Manifest next update: Mon 11 Aug 2025 16:02:57 +0000
Files and hashes: 1: S4nYf45BtQgtOJFgFeBZ5W3QEU4.crl (hash: BLc19mugl1hiD5r2B/LfwwgSBUsilZp96QH3y3LfHnI=)
2: crOsrOXIXenqmjjK7E42FO9nzAY.roa (hash: FavBc7FYhPnbTZq/1FuhdovJ2d7YJv+63Ene4V7HX3s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/4ba973-0e9f-4352-9838-642dc9127680/1/S4nYf45BtQgtOJFgFeBZ5W3QEU4.crl
rsync://rpki.ripe.net/repository/DEFAULT/0b/4ba973-0e9f-4352-9838-642dc9127680/1/S4nYf45BtQgtOJFgFeBZ5W3QEU4.mft
rsync://rpki.ripe.net/repository/DEFAULT/S4nYf45BtQgtOJFgFeBZ5W3QEU4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 11 Aug 2025 16:02:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:94:b8:85:d2:be:fb:4d:c6:92:a7:a0:f2:47:5e:05:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b89d87f8e41b5082d38916015e059e56dd0114e
Validity
Not Before: Aug 10 16:02:57 2025 GMT
Not After : Aug 11 16:02:57 2025 GMT
Subject: CN=aaadd02d955b11d3d300bdeced63f5a2c14ef998
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:a0:84:35:61:d5:51:26:64:73:5e:76:51:ec:
3b:0c:75:42:2e:3a:03:18:74:b3:7a:67:3e:c0:d8:
f3:bd:1e:75:6c:38:8a:69:74:2f:16:34:c9:49:43:
fb:02:cc:4e:39:7e:65:c8:c3:a8:f5:56:94:12:58:
aa:83:97:d9:b7:92:82:37:92:98:f1:84:84:bd:49:
8b:ab:53:ff:45:52:a0:32:e5:c1:99:41:39:95:bc:
5b:ca:16:2a:3e:04:30:06:22:61:86:e1:2d:ba:67:
3a:50:d7:4a:75:4e:09:44:96:e7:f6:72:40:4a:43:
64:58:44:9a:bc:87:e7:5d:a8:ec:b4:82:72:5b:38:
eb:6c:0a:81:bb:9f:fd:3f:0b:b3:e0:37:74:91:38:
c0:8f:fd:ac:3d:35:7e:50:39:94:de:7e:d0:77:52:
a5:b1:9b:8d:37:13:a8:18:10:55:07:21:2d:93:ca:
61:6c:48:73:74:87:22:ef:c2:0c:7b:11:1c:d3:3f:
78:9b:e8:e7:74:49:06:47:45:17:e8:6e:6d:4a:b0:
dd:03:74:24:38:6e:29:8f:1d:38:02:f0:dc:05:2c:
37:bb:35:a2:dd:73:7c:92:4e:03:da:d2:3f:bb:f0:
bb:95:22:71:ef:ce:c7:12:b4:1c:78:c1:39:6e:a2:
d4:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:AD:D0:2D:95:5B:11:D3:D3:00:BD:EC:ED:63:F5:A2:C1:4E:F9:98
X509v3 Authority Key Identifier:
keyid:4B:89:D8:7F:8E:41:B5:08:2D:38:91:60:15:E0:59:E5:6D:D0:11:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S4nYf45BtQgtOJFgFeBZ5W3QEU4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/4ba973-0e9f-4352-9838-642dc9127680/1/S4nYf45BtQgtOJFgFeBZ5W3QEU4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/4ba973-0e9f-4352-9838-642dc9127680/1/S4nYf45BtQgtOJFgFeBZ5W3QEU4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a4:82:f6:53:4b:81:f4:3f:06:a1:62:60:7d:26:b7:18:dc:08:
12:2a:31:18:f8:0a:e9:b4:f9:d7:ee:83:f5:12:83:40:c3:a6:
50:37:25:16:f7:3c:62:7a:54:3a:ab:67:e8:22:0e:80:e7:ee:
9f:9b:bc:73:b2:4f:e6:93:65:be:d7:75:e9:4d:b3:bb:d4:45:
b7:f2:07:cf:f4:3d:51:cb:56:93:ce:35:27:91:70:7b:40:87:
f3:74:ec:ce:78:f0:b9:8d:02:1d:36:0b:df:69:54:c5:51:58:
82:70:db:3e:eb:83:25:46:c4:7e:b9:53:0d:7c:20:a5:58:ac:
5a:95:da:57:c3:78:19:fe:be:19:59:96:5d:d6:e4:a2:60:b1:
58:11:48:31:9d:4c:b0:d7:2d:91:94:4e:14:19:95:40:11:7e:
98:84:93:44:eb:3b:66:e9:55:c5:5b:54:f7:c9:07:09:21:6f:
98:4a:fb:18:ee:1b:36:68:2a:0e:de:1d:18:29:fd:e1:50:c4:
cc:2a:17:24:ac:1e:12:68:e9:14:d1:a5:cc:82:47:55:fc:53:
0d:64:2b:40:f0:e9:26:dd:e4:cc:db:71:e4:12:60:d3:6b:75:
60:0c:73:65:d2:61:25:a2:aa:13:d3:1e:bc:7b:f4:0e:89:5d:
5d:18:2e:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 20:59:16 2025 by rpki-client