Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/0167eb-0d16-4cc1-8047-142fcacd7a49/1/4xVK21ou2ZnPHbnBJxsiCdrTRJ4.mft
File: 4xVK21ou2ZnPHbnBJxsiCdrTRJ4.mft (raw, json)
Hash identifier: eWtGzaXVQGWF+8t3hcqNboJZGD7vi+KYskKD1Atrx6Y=
Subject key identifier: 6F:21:FF:C4:3B:C1:73:78:53:21:2F:A5:67:93:14:7C:6F:A5:64:9B
Authority key identifier: E3:15:4A:DB:5A:2E:D9:99:CF:1D:B9:C1:27:1B:22:09:DA:D3:44:9E
Certificate issuer: /CN=e3154adb5a2ed999cf1db9c1271b2209dad3449e
Certificate serial: 019872D017A5CD2AA193D3C5B34E0061804F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4xVK21ou2ZnPHbnBJxsiCdrTRJ4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/0167eb-0d16-4cc1-8047-142fcacd7a49/1/4xVK21ou2ZnPHbnBJxsiCdrTRJ4.mft
Manifest number: 14AA
Signing time: Mon 04 Aug 2025 02:01:36 +0000
Manifest this update: Mon 04 Aug 2025 02:01:36 +0000
Manifest next update: Tue 05 Aug 2025 02:01:36 +0000
Files and hashes: 1: 4xVK21ou2ZnPHbnBJxsiCdrTRJ4.crl (hash: SCS485S+WalXYxaIwXTc9VRdKMmOi8A5c8jSPa56xoc=)
2: YKk_IxXaH7sfK7_gRS3093UyRYo.roa (hash: COs47LOLhU2xn+3tfczoJAT+wVHUvoY7/hZnsmTjtwc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/23/0167eb-0d16-4cc1-8047-142fcacd7a49/1/4xVK21ou2ZnPHbnBJxsiCdrTRJ4.crl
rsync://rpki.ripe.net/repository/DEFAULT/23/0167eb-0d16-4cc1-8047-142fcacd7a49/1/4xVK21ou2ZnPHbnBJxsiCdrTRJ4.mft
rsync://rpki.ripe.net/repository/DEFAULT/4xVK21ou2ZnPHbnBJxsiCdrTRJ4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 02:01:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:72:d0:17:a5:cd:2a:a1:93:d3:c5:b3:4e:00:61:80:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e3154adb5a2ed999cf1db9c1271b2209dad3449e
Validity
Not Before: Aug 4 02:01:36 2025 GMT
Not After : Aug 5 02:01:36 2025 GMT
Subject: CN=6f21ffc43bc1737853212fa56793147c6fa5649b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:7a:82:f2:dd:84:db:ff:64:7a:2c:cd:6e:f4:
69:d2:e8:97:25:23:ed:8b:e1:97:a0:a8:22:c1:57:
ee:06:5b:9e:59:38:60:85:c3:f5:94:1a:2d:79:e7:
00:0d:87:5e:8d:67:fe:fa:9b:14:ce:89:d8:bc:82:
27:f6:8c:9c:16:cb:f8:68:5e:71:d9:12:84:d3:39:
fe:09:b1:50:c4:6d:d6:ac:0b:2e:37:96:f9:01:75:
e1:0a:48:68:6f:58:e8:2b:68:9b:dc:19:04:64:56:
6d:07:61:f3:25:48:76:ae:2f:95:d1:3b:1b:5b:bc:
7f:6f:9d:81:54:f1:e5:a9:eb:43:bc:54:25:01:17:
b5:b7:ae:93:3e:39:ec:9d:eb:f9:92:9d:d7:84:da:
ec:af:39:de:06:ae:ba:3d:53:b8:05:4d:3a:42:35:
fa:ba:e5:fb:29:03:74:6b:3a:ef:57:89:1f:86:f4:
76:e8:d5:fc:48:5a:0a:58:33:4b:81:90:e5:a1:c5:
5d:40:4c:53:e2:24:bf:d1:6c:61:5c:9f:c8:2d:3a:
d8:48:a3:7d:ea:d0:99:26:6f:7d:7e:03:3f:9d:67:
20:a9:22:d9:ea:c3:6f:5f:46:72:99:cc:98:24:32:
da:4a:c8:7a:d5:34:ed:0d:ec:93:8f:c3:5b:d5:ad:
6e:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:21:FF:C4:3B:C1:73:78:53:21:2F:A5:67:93:14:7C:6F:A5:64:9B
X509v3 Authority Key Identifier:
keyid:E3:15:4A:DB:5A:2E:D9:99:CF:1D:B9:C1:27:1B:22:09:DA:D3:44:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4xVK21ou2ZnPHbnBJxsiCdrTRJ4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/0167eb-0d16-4cc1-8047-142fcacd7a49/1/4xVK21ou2ZnPHbnBJxsiCdrTRJ4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/23/0167eb-0d16-4cc1-8047-142fcacd7a49/1/4xVK21ou2ZnPHbnBJxsiCdrTRJ4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:8d:23:d9:5d:dd:1f:e2:18:47:3f:93:23:e1:c8:5e:d2:df:
25:b4:38:b0:db:b6:e4:2f:50:f6:9b:a4:8e:ce:6e:fd:28:0a:
98:dd:a0:14:91:ff:13:c2:b8:cd:21:ff:58:fd:7a:9d:ed:83:
7a:fa:5b:85:22:47:60:6b:7a:17:6c:fd:b0:cf:c4:b9:e7:36:
84:3b:e1:aa:b7:3d:f8:8d:7b:bb:5f:df:73:f6:18:ef:e7:16:
a1:c9:63:9d:d9:0e:9d:d2:c7:a1:93:00:b1:b0:c0:d1:f2:de:
a6:a9:61:7b:7a:4f:70:bb:8e:40:fa:f0:04:48:3d:06:11:93:
3a:c9:bd:a8:ad:e6:1d:ff:80:91:a7:7c:a8:36:ac:08:f7:5d:
69:07:d7:8b:ee:03:50:9e:24:d2:39:5d:92:9c:84:c0:d5:28:
64:2a:33:f3:3c:ea:80:77:c2:a5:51:af:58:d3:63:43:76:7d:
80:eb:9e:9e:17:73:51:1a:78:16:71:cf:f0:7b:62:da:d5:60:
44:80:93:44:02:ec:65:cb:86:5b:1c:34:d2:b6:05:d6:30:90:
85:dd:77:79:cb:ae:d4:f4:7a:32:3d:fc:67:40:9c:e9:26:4f:
6f:e1:c1:0b:ba:75:49:cb:0b:c8:b3:73:02:09:d4:26:a7:26:
c2:61:6e:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:09:40 2025 by rpki-client