Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/942e61-7ee6-41d4-b691-019a05ce5e7a/1/S4xZ6sloSDTLl8wq2FjVx03PbO0.mft
File: S4xZ6sloSDTLl8wq2FjVx03PbO0.mft (raw, json)
Hash identifier: sXZKZMhXwgGJmKDp3MXf6Q4B6+VorSYhCD0FU6MH1NA=
Subject key identifier: A0:12:49:5D:46:0B:D2:68:2A:C5:3B:55:1D:9B:00:CE:D7:01:60:A3
Authority key identifier: 4B:8C:59:EA:C9:68:48:34:CB:97:CC:2A:D8:58:D5:C7:4D:CF:6C:ED
Certificate issuer: /CN=4b8c59eac9684834cb97cc2ad858d5c74dcf6ced
Certificate serial: 01989223D6D542A7853FA41EF7A0F07143D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S4xZ6sloSDTLl8wq2FjVx03PbO0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/942e61-7ee6-41d4-b691-019a05ce5e7a/1/S4xZ6sloSDTLl8wq2FjVx03PbO0.mft
Manifest number: 048D
Signing time: Sun 10 Aug 2025 04:01:18 +0000
Manifest this update: Sun 10 Aug 2025 04:01:18 +0000
Manifest next update: Mon 11 Aug 2025 04:01:18 +0000
Files and hashes: 1: RX0vF7s1v3ZmCOZA2PNfN34Nc0Q.roa (hash: DL5GkVVXEPj8zi75flOVBOwBTEyMxXVt8DN9ATKiCDI=)
2: S4xZ6sloSDTLl8wq2FjVx03PbO0.crl (hash: EYHHkbU1tn6qP/fHOh1DONgLEbhgJDx1nfl73CRXCSU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/942e61-7ee6-41d4-b691-019a05ce5e7a/1/S4xZ6sloSDTLl8wq2FjVx03PbO0.crl
rsync://rpki.ripe.net/repository/DEFAULT/12/942e61-7ee6-41d4-b691-019a05ce5e7a/1/S4xZ6sloSDTLl8wq2FjVx03PbO0.mft
rsync://rpki.ripe.net/repository/DEFAULT/S4xZ6sloSDTLl8wq2FjVx03PbO0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 11 Aug 2025 04:01:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:92:23:d6:d5:42:a7:85:3f:a4:1e:f7:a0:f0:71:43:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b8c59eac9684834cb97cc2ad858d5c74dcf6ced
Validity
Not Before: Aug 10 04:01:18 2025 GMT
Not After : Aug 11 04:01:18 2025 GMT
Subject: CN=a012495d460bd2682ac53b551d9b00ced70160a3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:e0:5b:5a:2f:17:93:0b:0c:b9:17:b1:96:a4:
de:93:62:3b:2b:f3:40:54:98:7b:55:44:65:32:3a:
19:08:0c:91:60:69:32:ee:ed:e2:e5:e5:b9:92:e7:
51:b7:38:30:5d:50:69:f9:a1:5d:72:a1:d8:e6:d2:
3c:8a:e3:1e:10:e3:b6:b7:43:5a:bb:66:95:98:18:
c5:b6:f1:5c:8a:ca:24:8c:82:23:d3:8c:43:54:44:
91:de:32:33:63:f3:88:4b:e6:0f:6a:c8:d8:63:ec:
49:69:e9:18:79:b6:b3:15:4d:29:04:2c:07:71:5d:
58:3d:48:c5:62:86:62:a4:ed:a7:cd:5d:90:52:9b:
f3:1c:d1:00:61:13:9c:13:66:2a:74:5d:ef:de:e0:
ff:af:53:c0:08:30:eb:90:1e:35:fb:cb:96:bb:69:
11:c0:f6:29:33:79:4c:80:2f:11:02:11:7e:e5:a9:
80:8f:fb:60:4f:97:4e:e6:e4:c8:07:a9:bf:51:91:
72:66:7d:68:41:84:70:24:2b:b2:ab:7b:04:54:81:
f3:3d:64:63:e4:f2:02:66:e3:62:f2:88:bc:28:d8:
ab:1b:d3:5f:99:93:76:8b:01:02:4b:f3:68:b6:a9:
87:67:88:1c:5b:63:ad:53:c8:d1:8c:c9:eb:57:73:
f1:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:12:49:5D:46:0B:D2:68:2A:C5:3B:55:1D:9B:00:CE:D7:01:60:A3
X509v3 Authority Key Identifier:
keyid:4B:8C:59:EA:C9:68:48:34:CB:97:CC:2A:D8:58:D5:C7:4D:CF:6C:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S4xZ6sloSDTLl8wq2FjVx03PbO0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/942e61-7ee6-41d4-b691-019a05ce5e7a/1/S4xZ6sloSDTLl8wq2FjVx03PbO0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/942e61-7ee6-41d4-b691-019a05ce5e7a/1/S4xZ6sloSDTLl8wq2FjVx03PbO0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:d3:50:ba:e0:77:6b:8e:7a:a6:00:a9:e9:7a:4a:20:7b:3e:
1f:af:0e:2b:a0:b8:76:48:c6:3b:93:8d:fd:24:47:ea:85:2b:
37:cf:a6:6e:46:89:6a:c9:90:a7:bb:bd:ef:8f:be:6e:1a:e5:
ab:73:8c:e6:e4:5d:59:4a:90:a6:fc:90:ab:ef:d6:3d:0c:73:
b8:fb:b3:6e:e9:b2:33:1b:c7:a8:2f:8e:8b:14:bc:c9:1c:52:
ba:53:91:cc:10:64:6e:31:ef:26:a1:ce:f4:5a:33:93:1b:45:
0f:54:bf:72:83:18:16:7e:ab:4d:62:d8:3d:ba:da:38:31:70:
92:df:d3:4f:48:60:af:a8:50:fc:d6:00:4a:2c:00:89:08:95:
37:6a:ac:43:c4:0a:ef:d0:f6:1f:cd:70:10:c9:10:05:80:0f:
cf:21:9e:0a:5d:10:3f:fa:fb:dc:94:12:a6:ad:04:7a:c5:72:
b4:41:e2:23:65:6e:29:a7:d5:67:b0:30:fc:d9:97:03:f2:67:
ee:05:78:4d:6e:10:b3:bd:0d:44:c1:88:1b:89:95:69:6d:e2:
ba:56:97:c1:80:34:49:d7:76:92:58:fd:23:5f:cd:7c:df:f6:
a9:dd:04:de:54:4c:ab:6f:15:24:59:5f:11:ce:8c:92:d9:f6:
0a:7c:9a:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 13:45:26 2025 by rpki-client