Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/0582ff-7189-4c3c-a45f-b493a9df4f8f/1/x4JzWqmNRkXQQQk6dmKhI3lQOjE.mft
File: x4JzWqmNRkXQQQk6dmKhI3lQOjE.mft (raw, json)
Hash identifier: /ZN3nhbQHJUj+AsokbquC6/mJFdgxCFguoUpG515gWo=
Subject key identifier: D4:7F:4A:DE:87:E7:04:E9:E0:89:68:1A:36:17:A8:DC:29:69:77:D9
Authority key identifier: C7:82:73:5A:A9:8D:46:45:D0:41:09:3A:76:62:A1:23:79:50:3A:31
Certificate issuer: /CN=c782735aa98d4645d041093a7662a12379503a31
Certificate serial: 01988EEB963F2FF3A484DDE6F9691FB7BB4B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x4JzWqmNRkXQQQk6dmKhI3lQOjE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/0582ff-7189-4c3c-a45f-b493a9df4f8f/1/x4JzWqmNRkXQQQk6dmKhI3lQOjE.mft
Manifest number: 0DF0
Signing time: Sat 09 Aug 2025 13:01:00 +0000
Manifest this update: Sat 09 Aug 2025 13:01:00 +0000
Manifest next update: Sun 10 Aug 2025 13:01:00 +0000
Files and hashes: 1: tjSYgzQ0bYjCtyMesUCoqcYRKAI.roa (hash: V0DKhUKbNvI4aOcWkxFt+dLkw7F0CNEt1KU67bvkMmI=)
2: x4JzWqmNRkXQQQk6dmKhI3lQOjE.crl (hash: gokNmOg0uGnKbYPnqKZMAzVjgi2ZK4r58FirXykneUI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/0582ff-7189-4c3c-a45f-b493a9df4f8f/1/x4JzWqmNRkXQQQk6dmKhI3lQOjE.crl
rsync://rpki.ripe.net/repository/DEFAULT/90/0582ff-7189-4c3c-a45f-b493a9df4f8f/1/x4JzWqmNRkXQQQk6dmKhI3lQOjE.mft
rsync://rpki.ripe.net/repository/DEFAULT/x4JzWqmNRkXQQQk6dmKhI3lQOjE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 10 Aug 2025 13:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8e:eb:96:3f:2f:f3:a4:84:dd:e6:f9:69:1f:b7:bb:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c782735aa98d4645d041093a7662a12379503a31
Validity
Not Before: Aug 9 13:01:00 2025 GMT
Not After : Aug 10 13:01:00 2025 GMT
Subject: CN=d47f4ade87e704e9e089681a3617a8dc296977d9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:04:f3:0c:13:96:21:af:68:3b:b6:ab:f8:f1:
39:d3:44:e8:d2:46:e7:7a:a8:33:6a:8b:e1:ee:50:
12:6e:85:5a:78:71:1f:97:2e:a9:75:f3:98:b3:87:
17:aa:11:98:07:0f:f5:f1:7b:03:f7:57:13:52:fe:
78:6c:23:90:9e:10:8a:4d:07:a9:e4:46:33:f4:3f:
66:1d:95:90:c7:bf:3e:1b:02:ac:6e:69:95:74:1c:
96:56:c7:c7:6b:38:d6:87:82:7e:93:8f:32:ea:84:
7f:77:e8:03:f5:6c:7a:65:d9:80:17:37:ce:7f:93:
43:88:c1:ee:1b:b0:78:ae:18:a0:a3:ad:f2:c5:30:
5a:cb:79:c8:e3:8c:27:29:29:df:74:89:db:b4:0a:
24:7d:49:51:17:e9:65:b6:50:b6:75:5d:a7:1e:04:
21:4f:4e:54:32:3a:7e:45:69:0b:5e:9d:64:22:8b:
f3:c7:d0:a8:38:01:05:4c:86:1d:ac:41:d5:77:40:
b3:c3:2e:0e:c4:79:a5:8e:f3:5c:53:e9:e4:85:56:
8a:90:4b:2b:ae:dc:90:4d:89:65:81:28:25:43:d1:
0e:92:8b:e6:f2:68:52:79:5f:e9:06:f0:6c:aa:2e:
e2:dd:49:58:04:5d:02:ad:63:65:35:99:34:40:97:
dd:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:7F:4A:DE:87:E7:04:E9:E0:89:68:1A:36:17:A8:DC:29:69:77:D9
X509v3 Authority Key Identifier:
keyid:C7:82:73:5A:A9:8D:46:45:D0:41:09:3A:76:62:A1:23:79:50:3A:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x4JzWqmNRkXQQQk6dmKhI3lQOjE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/0582ff-7189-4c3c-a45f-b493a9df4f8f/1/x4JzWqmNRkXQQQk6dmKhI3lQOjE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/0582ff-7189-4c3c-a45f-b493a9df4f8f/1/x4JzWqmNRkXQQQk6dmKhI3lQOjE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:68:a7:4d:9b:53:22:a8:20:10:6e:49:ff:88:1d:83:da:2f:
a3:47:c1:33:2e:ce:bf:cb:b6:d4:08:74:c0:c5:22:90:66:eb:
22:25:57:ae:58:f8:3a:90:3f:93:7d:92:90:51:a5:c6:a1:01:
63:2d:4b:50:73:8b:7f:6f:28:24:b2:3b:61:bd:c3:59:af:1a:
3c:ea:81:a3:92:34:cb:d7:ec:6d:c5:9d:3e:10:25:4f:83:bf:
31:bb:59:28:c9:09:69:7b:8a:56:4e:fb:01:3e:ae:1c:c0:ea:
14:28:95:24:cf:1d:d6:0e:28:67:43:5d:72:13:69:b9:7b:e2:
18:93:db:f9:af:0c:f3:ec:4d:2e:3a:2d:3b:39:fe:3d:7a:c6:
e2:0b:cf:34:ab:16:b8:5a:04:9d:a6:2c:6e:56:f9:25:11:58:
e2:32:34:43:48:bb:d8:38:ce:d0:4a:4d:04:0d:5c:bd:7c:a9:
e3:83:76:b4:05:05:9b:60:b3:c7:f4:12:11:02:6c:0c:c1:96:
ea:03:71:0e:ef:7a:2c:42:d1:bc:62:16:57:3b:35:de:38:20:
49:e8:d1:1c:6d:63:af:85:68:ce:44:76:17:a2:9d:f3:80:15:
9a:54:af:51:b0:dc:30:88:42:ea:60:26:e4:c7:c7:f0:06:f7:
88:5e:b5:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 22:41:32 2025 by rpki-client