Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/61db4e-3efc-462d-ab1f-e590e6b4cd0e/1/4Rzmt92aasCzJLpa2HOwr0ajktQ.mft
File: 4Rzmt92aasCzJLpa2HOwr0ajktQ.mft (raw, json)
Hash identifier: MUn4nB7IONqHNV/phbqZvNqZ7AXkcHRlKdhmKgAM/Y4=
Subject key identifier: 81:85:CB:04:02:57:B0:12:CB:E2:F0:D1:5A:ED:0C:3B:BE:0D:BD:37
Authority key identifier: E1:1C:E6:B7:DD:9A:6A:C0:B3:24:BA:5A:D8:73:B0:AF:46:A3:92:D4
Certificate issuer: /CN=e11ce6b7dd9a6ac0b324ba5ad873b0af46a392d4
Certificate serial: 0198966DB366A8A66D271C2F2185D2915BB7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4Rzmt92aasCzJLpa2HOwr0ajktQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/61db4e-3efc-462d-ab1f-e590e6b4cd0e/1/4Rzmt92aasCzJLpa2HOwr0ajktQ.mft
Manifest number: 39
Signing time: Mon 11 Aug 2025 00:00:28 +0000
Manifest this update: Mon 11 Aug 2025 00:00:28 +0000
Manifest next update: Tue 12 Aug 2025 00:00:28 +0000
Files and hashes: 1: 4Rzmt92aasCzJLpa2HOwr0ajktQ.crl (hash: LApViN/T2i7i1cWFxAskreDV3IDCAA68DHNRdR71Oq0=)
2: OcyVVi-jBM0G3opoob8aVpqeL7k.roa (hash: Lmj/ERqEQsOvuljDrquPNBuk7nAamhzs4Ctv+M+OeMk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9c/61db4e-3efc-462d-ab1f-e590e6b4cd0e/1/4Rzmt92aasCzJLpa2HOwr0ajktQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/9c/61db4e-3efc-462d-ab1f-e590e6b4cd0e/1/4Rzmt92aasCzJLpa2HOwr0ajktQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/4Rzmt92aasCzJLpa2HOwr0ajktQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 12 Aug 2025 00:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:96:6d:b3:66:a8:a6:6d:27:1c:2f:21:85:d2:91:5b:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e11ce6b7dd9a6ac0b324ba5ad873b0af46a392d4
Validity
Not Before: Aug 11 00:00:28 2025 GMT
Not After : Aug 12 00:00:28 2025 GMT
Subject: CN=8185cb040257b012cbe2f0d15aed0c3bbe0dbd37
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:03:a6:21:b7:0f:6a:89:03:8d:03:ec:69:8e:
de:df:e5:aa:87:2c:71:b0:19:3c:02:91:36:94:ba:
ba:26:a7:63:5e:f4:8d:df:64:f5:65:32:f6:40:47:
51:72:71:42:83:8c:f3:b4:0a:2e:be:6c:7d:b5:f5:
f7:24:4d:e7:51:98:03:a7:6c:5d:83:3b:02:43:a3:
fb:23:92:ce:9d:b7:3b:95:f2:80:81:a7:6c:6d:73:
f8:fa:86:8d:c9:8c:f1:54:e1:67:dd:01:f4:0d:2e:
d8:00:80:49:6f:3e:71:ed:85:a4:98:da:6f:0f:19:
ef:ae:ed:bc:c8:37:f8:df:fe:37:2a:dc:de:61:99:
ee:a0:9c:ab:c4:30:b5:8e:09:73:79:cc:cc:d2:b3:
1a:a3:90:df:35:06:4b:96:c1:4e:42:fb:14:e5:d6:
18:2d:fc:80:3d:8c:9e:aa:2d:d8:eb:64:04:57:7f:
e7:77:ed:7e:26:9a:de:9b:ed:ad:1c:e0:7b:63:38:
27:0f:d3:a2:64:59:e9:74:56:75:98:68:c0:f7:24:
0e:a9:3e:f7:58:a0:ef:21:7e:5c:0c:69:4d:90:69:
1a:7d:a2:d0:4a:0b:93:d9:28:35:3b:04:77:34:79:
d4:0d:48:2b:5b:37:51:0a:9d:49:ad:3d:80:85:bd:
15:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:85:CB:04:02:57:B0:12:CB:E2:F0:D1:5A:ED:0C:3B:BE:0D:BD:37
X509v3 Authority Key Identifier:
keyid:E1:1C:E6:B7:DD:9A:6A:C0:B3:24:BA:5A:D8:73:B0:AF:46:A3:92:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4Rzmt92aasCzJLpa2HOwr0ajktQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/61db4e-3efc-462d-ab1f-e590e6b4cd0e/1/4Rzmt92aasCzJLpa2HOwr0ajktQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/61db4e-3efc-462d-ab1f-e590e6b4cd0e/1/4Rzmt92aasCzJLpa2HOwr0ajktQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b0:32:cd:0a:f4:c0:f5:ba:4c:a5:81:db:d2:44:2c:4b:2c:ca:
39:c1:61:75:2f:16:dd:a1:12:80:a0:e2:db:5a:ce:a7:e4:c0:
29:d3:80:cd:16:f1:1b:a4:f0:17:a5:4f:df:dc:c3:ed:1b:5c:
53:84:88:70:0a:cb:3e:47:45:6f:72:97:85:d2:c4:16:a5:1f:
a4:0a:6d:5e:b1:9e:af:a0:ee:af:24:97:37:f8:51:05:ef:92:
90:66:da:19:2e:80:87:75:48:bb:23:e3:00:8f:ea:56:07:5d:
52:42:60:f6:79:2c:3f:ba:17:f3:96:1b:fa:0c:72:a4:c1:12:
2b:db:8b:75:35:8d:8c:f6:c2:51:43:c6:51:9a:35:74:96:44:
d1:21:3b:a0:48:08:fe:bc:8f:16:ed:af:60:77:16:4b:8a:29:
92:a1:5f:f4:b6:2f:0a:3e:b6:7b:38:ca:18:46:4a:06:43:2a:
29:d4:70:76:27:d3:a5:10:98:66:c3:79:40:76:cb:6e:fc:f7:
e9:8d:8a:10:66:c1:5a:59:9e:d3:4f:ad:11:98:d2:21:c5:be:
16:6d:bf:1a:72:fd:5e:86:84:d5:25:95:9b:ca:2c:91:16:c6:
18:ea:1d:2a:1c:fb:27:3d:be:ba:06:11:27:01:e3:12:21:db:
a2:4b:3b:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 11 07:24:29 2025 by rpki-client