Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/3a6bb4-24b8-4086-a29d-ee6c509b6221/1/mFW4DEXftep6qn3R2O2LFPnB3EU.mft
File: mFW4DEXftep6qn3R2O2LFPnB3EU.mft (raw, json)
Hash identifier: KhkygVm4K6YtdIRZrFjFiIMdegM+dS5pfaAfKNhFgX8=
Subject key identifier: F4:D2:AD:0A:5E:BC:39:71:FC:DC:65:38:F9:7F:07:8E:F3:AA:AF:43
Authority key identifier: 98:55:B8:0C:45:DF:B5:EA:7A:AA:7D:D1:D8:ED:8B:14:F9:C1:DC:45
Certificate issuer: /CN=9855b80c45dfb5ea7aaa7dd1d8ed8b14f9c1dc45
Certificate serial: 019874F48F4729535EBD221BB64F23D51017
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mFW4DEXftep6qn3R2O2LFPnB3EU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/3a6bb4-24b8-4086-a29d-ee6c509b6221/1/mFW4DEXftep6qn3R2O2LFPnB3EU.mft
Manifest number: 0101
Signing time: Mon 04 Aug 2025 12:00:40 +0000
Manifest this update: Mon 04 Aug 2025 12:00:40 +0000
Manifest next update: Tue 05 Aug 2025 12:00:40 +0000
Files and hashes: 1: NymzbNZBsKNd-Q-QLvAahyZY8zY.roa (hash: 4tm9+O5MAP6uU3Q2HGQCNAKZry1kf/X+Xwuo3WltB+8=)
2: mFW4DEXftep6qn3R2O2LFPnB3EU.crl (hash: QE+CNmG97HcjF8wKzaR/UyoOdGmRi9FLOC1JYfpx2zs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/3a6bb4-24b8-4086-a29d-ee6c509b6221/1/mFW4DEXftep6qn3R2O2LFPnB3EU.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/3a6bb4-24b8-4086-a29d-ee6c509b6221/1/mFW4DEXftep6qn3R2O2LFPnB3EU.mft
rsync://rpki.ripe.net/repository/DEFAULT/mFW4DEXftep6qn3R2O2LFPnB3EU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 12:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:74:f4:8f:47:29:53:5e:bd:22:1b:b6:4f:23:d5:10:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9855b80c45dfb5ea7aaa7dd1d8ed8b14f9c1dc45
Validity
Not Before: Aug 4 12:00:40 2025 GMT
Not After : Aug 5 12:00:40 2025 GMT
Subject: CN=f4d2ad0a5ebc3971fcdc6538f97f078ef3aaaf43
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:0d:c4:72:a3:6f:de:7e:ed:a7:69:21:52:a5:
fc:de:73:20:28:46:17:7e:c3:27:7d:c1:00:c8:55:
77:b3:d8:3f:99:70:3d:89:b4:d7:e4:42:8a:6f:54:
9b:c0:13:c6:9c:37:60:c1:28:76:4d:44:c1:cb:f8:
92:c9:ad:02:5a:b9:43:0f:ff:3f:52:6c:f3:65:57:
7f:2c:d2:ef:dc:2f:b9:f2:05:d3:a1:a3:c7:65:c6:
23:1a:12:0d:08:01:bd:8d:9b:ac:0d:ea:f6:e8:5b:
22:16:f2:3e:34:58:71:72:28:f6:5d:16:cc:5d:95:
fe:7e:93:4d:4a:b4:15:2f:01:a0:82:30:9f:5b:b6:
6f:40:aa:36:c8:4e:63:a8:ce:15:60:cc:5c:46:78:
b0:fe:47:5f:27:08:64:31:7f:32:3f:29:f9:b0:35:
f1:84:04:48:bd:35:9c:3c:a0:d1:a3:04:c5:25:ac:
e3:84:f0:27:93:f4:fe:06:b6:83:7f:db:f9:9a:eb:
9a:02:9a:7a:df:04:8d:f0:db:4c:ed:b2:6e:60:7a:
42:87:5a:fd:9c:48:94:30:fb:6c:f2:48:dd:55:81:
97:da:b1:24:41:5e:23:99:43:bc:93:05:ac:f5:99:
76:b4:2e:87:14:fa:b4:0e:0e:61:d6:78:56:bd:ab:
51:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:D2:AD:0A:5E:BC:39:71:FC:DC:65:38:F9:7F:07:8E:F3:AA:AF:43
X509v3 Authority Key Identifier:
keyid:98:55:B8:0C:45:DF:B5:EA:7A:AA:7D:D1:D8:ED:8B:14:F9:C1:DC:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mFW4DEXftep6qn3R2O2LFPnB3EU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/3a6bb4-24b8-4086-a29d-ee6c509b6221/1/mFW4DEXftep6qn3R2O2LFPnB3EU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/3a6bb4-24b8-4086-a29d-ee6c509b6221/1/mFW4DEXftep6qn3R2O2LFPnB3EU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:b1:c0:67:5c:08:28:ce:2b:8e:e2:a1:72:0b:47:03:65:6c:
08:9f:e8:48:d0:27:27:e4:12:88:16:78:44:fc:87:f1:a0:fe:
6c:bd:cc:3d:4c:87:ae:5a:7c:a9:0e:72:38:6f:d8:21:39:c7:
5a:a6:0b:fe:09:c5:7e:88:97:86:de:f1:a5:24:32:33:2c:aa:
d8:c2:ea:37:41:29:c6:cf:8b:c9:41:51:92:c4:96:86:45:96:
b9:bd:2d:2d:2f:06:0d:ed:72:f4:cd:07:6c:85:75:24:22:86:
cc:ab:7f:3b:14:5a:0a:bf:3a:4b:2e:ab:69:cf:8e:48:c0:50:
be:68:f3:60:57:6f:fe:63:75:6a:f7:22:b1:97:7a:97:bf:a2:
13:5b:14:de:a9:ee:94:dd:54:c9:ba:b9:ca:a3:d4:1d:5c:35:
cd:8b:ab:d4:4e:2d:8f:65:c4:ed:12:60:8f:15:fc:af:01:72:
26:62:cf:2d:72:69:42:be:05:77:7c:92:24:df:36:58:c5:93:
05:5b:68:88:10:46:b3:a3:3c:df:9b:c2:70:42:44:4b:dc:83:
cc:46:05:b2:05:e1:0b:36:4b:79:87:d8:87:6e:d4:84:78:83:
0a:8c:08:4e:6e:6d:39:98:ec:5b:cf:48:be:ea:52:61:67:c7:
88:c1:31:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 18:30:38 2025 by rpki-client