Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/466119-873f-4cfd-91a6-b1e313d79893/1/4K-xYKlzOKshEUhArdxhgKW6QrE.mft
File: 4K-xYKlzOKshEUhArdxhgKW6QrE.mft (raw, json)
Hash identifier: Gz606BJrkYJgl3B30wVzjpvN2pHZ4MLmgRZKBcnQjHU=
Subject key identifier: 84:A9:1B:57:10:59:4A:F3:8B:F9:D3:91:39:43:89:11:BE:EA:B1:A0
Authority key identifier: E0:AF:B1:60:A9:73:38:AB:21:11:48:40:AD:DC:61:80:A5:BA:42:B1
Certificate issuer: /CN=e0afb160a97338ab21114840addc6180a5ba42b1
Certificate serial: 019888445BE8CC1E83C33CE52877173975B7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4K-xYKlzOKshEUhArdxhgKW6QrE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6b/466119-873f-4cfd-91a6-b1e313d79893/1/4K-xYKlzOKshEUhArdxhgKW6QrE.mft
Manifest number: 12F6
Signing time: Fri 08 Aug 2025 06:00:37 +0000
Manifest this update: Fri 08 Aug 2025 06:00:37 +0000
Manifest next update: Sat 09 Aug 2025 06:00:37 +0000
Files and hashes: 1: 4K-xYKlzOKshEUhArdxhgKW6QrE.crl (hash: /zjA3kulSAith3GJJDoA7LGMmWaX3RioG6tCGNbXLIM=)
2: Gwy6_uUvgZKl_FsgbK0SBR2765s.roa (hash: e+42Dv5ZMct1RmCP3DiJKtyiBUgVYfDjN9qagjZj7ck=)
3: RoGLSCET83zk1v-3GNDAGUmNCf4.roa (hash: TK8/4ls6e1537IxcrmPC8DEH8k32Or5yu+pxFNpz4Eo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6b/466119-873f-4cfd-91a6-b1e313d79893/1/4K-xYKlzOKshEUhArdxhgKW6QrE.crl
rsync://rpki.ripe.net/repository/DEFAULT/6b/466119-873f-4cfd-91a6-b1e313d79893/1/4K-xYKlzOKshEUhArdxhgKW6QrE.mft
rsync://rpki.ripe.net/repository/DEFAULT/4K-xYKlzOKshEUhArdxhgKW6QrE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 09 Aug 2025 06:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:88:44:5b:e8:cc:1e:83:c3:3c:e5:28:77:17:39:75:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e0afb160a97338ab21114840addc6180a5ba42b1
Validity
Not Before: Aug 8 06:00:37 2025 GMT
Not After : Aug 9 06:00:37 2025 GMT
Subject: CN=84a91b5710594af38bf9d39139438911beeab1a0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:b8:2b:80:8d:82:ce:f4:1b:d2:dd:23:b2:b0:
42:63:4b:ff:6a:6f:e4:2d:3b:1f:7e:c7:98:98:f6:
30:07:93:81:db:01:70:b2:10:56:fe:87:f7:7d:7f:
80:02:a1:05:e0:ac:e4:d2:31:c9:8e:30:fe:29:38:
9b:ba:68:19:0d:9e:c5:cd:c2:13:cd:b1:2d:57:53:
c1:dd:88:bf:c1:c6:32:9a:26:64:f3:d2:cc:c6:da:
9f:af:88:d2:b2:5d:29:e3:e7:ef:d7:b8:50:2d:a7:
11:f6:97:5d:34:39:a2:9e:6b:b3:02:05:0a:64:7e:
bd:22:d7:92:86:7a:ec:b6:1a:41:65:60:f4:a7:ac:
3f:24:51:91:b6:b8:86:6f:85:30:da:3c:b1:46:23:
2f:81:b9:f5:83:91:33:18:bf:6b:67:20:4f:14:35:
66:10:47:8b:87:71:2f:8e:b8:11:f5:55:24:3e:6a:
9d:59:e0:a7:19:12:ab:79:3c:15:06:4d:76:e4:de:
3c:bf:7f:95:e8:04:e9:31:7d:65:6f:6f:c8:e3:5e:
ca:d1:53:86:2e:95:07:24:33:21:3b:60:05:38:b2:
b4:88:3c:76:c5:d0:81:fb:f2:08:c7:3b:93:60:82:
29:10:b7:91:c9:d5:16:b0:2a:7a:d7:d6:a4:8d:41:
cf:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:A9:1B:57:10:59:4A:F3:8B:F9:D3:91:39:43:89:11:BE:EA:B1:A0
X509v3 Authority Key Identifier:
keyid:E0:AF:B1:60:A9:73:38:AB:21:11:48:40:AD:DC:61:80:A5:BA:42:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4K-xYKlzOKshEUhArdxhgKW6QrE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/466119-873f-4cfd-91a6-b1e313d79893/1/4K-xYKlzOKshEUhArdxhgKW6QrE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/466119-873f-4cfd-91a6-b1e313d79893/1/4K-xYKlzOKshEUhArdxhgKW6QrE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:36:5b:8d:d6:b9:23:be:59:97:89:89:82:0b:03:a9:bd:0c:
24:1f:a2:5b:65:89:18:aa:65:64:87:3f:69:98:c5:01:b3:c7:
11:0d:da:5a:04:a6:42:26:fe:1c:72:cf:e6:e7:43:e4:4d:fc:
6d:a2:4c:36:dc:b5:d3:3e:a0:19:fa:e7:78:51:03:b5:c5:89:
bd:c0:dc:a5:4b:2e:96:b3:ba:cd:fa:ba:ec:17:ed:40:86:fe:
b9:2f:aa:b4:ee:13:e1:6d:79:90:fc:23:a5:96:3a:7c:74:db:
e1:59:1b:4e:09:8d:37:37:ba:4a:50:01:28:b3:4a:66:8c:be:
84:87:a8:d7:85:03:02:8b:e8:07:41:fe:51:4d:45:3b:b2:39:
5e:c0:2f:f7:92:9e:a1:7a:36:c0:b8:a1:7a:97:53:5e:0f:ce:
d3:72:c6:50:9a:39:17:92:d1:2a:6a:84:e2:91:c5:b1:de:54:
6b:ab:4a:37:e3:dd:14:dc:c6:f0:41:43:99:c1:a0:71:84:9a:
23:a5:69:e2:94:9c:df:1f:1e:75:16:c6:28:26:db:30:96:9d:
af:40:47:76:b9:a4:60:d6:a8:1e:df:38:7c:d8:55:30:e2:2f:
76:9a:de:98:48:b4:22:4b:8e:c9:95:7a:71:2d:30:44:52:63:
74:db:b3:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 8 12:51:39 2025 by rpki-client