Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/fc147a-83fc-4a53-a912-b6b76e22ffac/1/493Ty2SL60JR1HzEtlvNZLCajUs.mft
File: 493Ty2SL60JR1HzEtlvNZLCajUs.mft (raw, json)
Hash identifier: LRfrApdynnbfWmhk0NnClVrZIue2JX1cNb+B2vp6L3I=
Subject key identifier: 4B:E0:31:3B:86:D5:40:66:DF:E5:A8:B8:66:A4:B9:9C:32:34:74:51
Authority key identifier: E3:DD:D3:CB:64:8B:EB:42:51:D4:7C:C4:B6:5B:CD:64:B0:9A:8D:4B
Certificate issuer: /CN=e3ddd3cb648beb4251d47cc4b65bcd64b09a8d4b
Certificate serial: 01988F59E52BD28140AD5D6F719613B30688
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/493Ty2SL60JR1HzEtlvNZLCajUs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/fc147a-83fc-4a53-a912-b6b76e22ffac/1/493Ty2SL60JR1HzEtlvNZLCajUs.mft
Manifest number: 0E8D
Signing time: Sat 09 Aug 2025 15:01:29 +0000
Manifest this update: Sat 09 Aug 2025 15:01:29 +0000
Manifest next update: Sun 10 Aug 2025 15:01:29 +0000
Files and hashes: 1: 493Ty2SL60JR1HzEtlvNZLCajUs.crl (hash: HmDEs8fh61wfWD/BHrTsQc66hxu32cf2nBjmo2hhOZs=)
2: VaNHYKd7fkf8MUmIAFzRDiRSuAg.roa (hash: kArqpkPgXwbWfVfsCGeziL2LJL/J3oK8UFUA3DsKS6g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/fc147a-83fc-4a53-a912-b6b76e22ffac/1/493Ty2SL60JR1HzEtlvNZLCajUs.crl
rsync://rpki.ripe.net/repository/DEFAULT/2f/fc147a-83fc-4a53-a912-b6b76e22ffac/1/493Ty2SL60JR1HzEtlvNZLCajUs.mft
rsync://rpki.ripe.net/repository/DEFAULT/493Ty2SL60JR1HzEtlvNZLCajUs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 10 Aug 2025 14:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8f:59:e5:2b:d2:81:40:ad:5d:6f:71:96:13:b3:06:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e3ddd3cb648beb4251d47cc4b65bcd64b09a8d4b
Validity
Not Before: Aug 9 15:01:29 2025 GMT
Not After : Aug 10 15:01:29 2025 GMT
Subject: CN=4be0313b86d54066dfe5a8b866a4b99c32347451
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:35:e0:f5:d7:ab:8c:c3:7f:48:61:0b:52:f8:
ab:ef:80:da:74:38:10:b6:29:6f:85:22:7e:09:08:
49:ea:11:1b:76:18:c6:c5:e3:3d:f4:db:98:ec:e6:
78:e1:1b:83:75:cd:39:b7:92:71:5b:8d:d9:5d:c8:
77:24:bd:fa:6a:d4:ad:4a:21:ce:4d:17:ff:47:78:
37:9f:05:48:10:f0:b3:2d:4f:f8:53:f1:df:41:9f:
e4:25:a7:82:ab:71:60:bc:85:b5:59:4d:6d:2f:d0:
8a:bd:21:12:e7:44:1c:13:ba:d9:a8:4f:68:a4:2c:
72:e0:b5:1e:f0:b3:54:60:7d:6b:01:f9:24:0d:ff:
69:d3:4c:43:0e:ed:7c:90:7e:05:ce:87:17:5f:cf:
3a:43:fb:51:66:3d:b0:09:26:f6:55:c1:79:91:46:
d4:39:97:1d:1b:a9:06:69:79:85:ab:90:80:46:ed:
e8:67:19:86:c2:10:d1:79:98:c1:e2:9a:4f:0b:e6:
cc:62:3f:f4:1a:e2:77:71:a0:0f:67:07:f7:eb:1c:
64:d2:09:2d:9b:8c:11:3b:8f:71:d8:2d:12:74:79:
cc:c3:bd:3f:7a:58:04:6e:d8:de:7b:63:cd:f5:7a:
8b:40:53:8e:60:b6:80:45:5b:98:09:82:3d:34:d9:
b1:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:E0:31:3B:86:D5:40:66:DF:E5:A8:B8:66:A4:B9:9C:32:34:74:51
X509v3 Authority Key Identifier:
keyid:E3:DD:D3:CB:64:8B:EB:42:51:D4:7C:C4:B6:5B:CD:64:B0:9A:8D:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/493Ty2SL60JR1HzEtlvNZLCajUs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/fc147a-83fc-4a53-a912-b6b76e22ffac/1/493Ty2SL60JR1HzEtlvNZLCajUs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/fc147a-83fc-4a53-a912-b6b76e22ffac/1/493Ty2SL60JR1HzEtlvNZLCajUs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b3:a7:75:0c:13:ba:63:8b:45:7b:43:2a:10:fd:96:83:ba:16:
62:ef:17:ee:c7:7b:1d:a6:9e:43:85:70:57:aa:ea:dc:7f:c1:
1c:b9:cc:84:a2:3e:e3:da:df:57:b1:01:49:e6:1b:cc:99:3c:
d3:c1:ee:d0:6e:eb:09:11:b7:b4:93:a3:37:9d:e3:94:bf:9a:
41:34:a4:5c:36:a7:5a:75:60:15:4b:04:5d:61:b5:e4:9f:d2:
ea:1b:b3:49:74:eb:02:22:b8:b6:9a:87:88:65:5c:ca:39:ba:
ce:e4:9e:4a:41:69:0e:89:66:e9:47:ea:e1:65:aa:c6:c5:ce:
76:b6:e9:be:bf:17:e4:fb:6c:25:d7:cc:5a:88:6f:59:aa:72:
1c:44:a3:0f:d4:90:0c:ca:fb:9b:f7:1a:9c:23:17:4c:e9:55:
b2:cd:f9:ad:83:e5:b5:96:08:de:fc:f1:ab:c7:ca:77:9c:e6:
20:00:45:83:db:56:2d:e6:f2:73:52:56:c8:59:79:bf:16:e6:
f4:88:c5:02:13:59:9a:20:01:54:8b:42:db:7d:8a:25:16:77:
91:88:55:92:2a:9f:0d:50:1f:8a:97:a9:4c:34:9d:05:32:38:
b2:6a:e5:36:96:4f:25:9b:c0:b5:f1:64:57:dc:44:ee:e8:8a:
2a:83:8a:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 20:44:45 2025 by rpki-client