Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9d/968a85-01d3-4b0c-b920-66cbf876ab3e/1/4B8Zbdft0RMdAiD9t3cSJiG7ve8.mft
File: 4B8Zbdft0RMdAiD9t3cSJiG7ve8.mft (raw, json)
Hash identifier: +lNB6/uztzIog1ViW4t/c1WIp/dScftxtAyVl5SWkBE=
Subject key identifier: 8C:E9:AC:4D:1B:98:7C:05:9C:C4:9E:20:D5:BC:8A:0C:E3:29:05:A6
Authority key identifier: E0:1F:19:6D:D7:ED:D1:13:1D:02:20:FD:B7:77:12:26:21:BB:BD:EF
Certificate issuer: /CN=e01f196dd7edd1131d0220fdb777122621bbbdef
Certificate serial: 01987A524BBB1C0D9CAC1A7D970B2135730E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4B8Zbdft0RMdAiD9t3cSJiG7ve8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9d/968a85-01d3-4b0c-b920-66cbf876ab3e/1/4B8Zbdft0RMdAiD9t3cSJiG7ve8.mft
Manifest number: 0B2D
Signing time: Tue 05 Aug 2025 13:01:10 +0000
Manifest this update: Tue 05 Aug 2025 13:01:10 +0000
Manifest next update: Wed 06 Aug 2025 13:01:10 +0000
Files and hashes: 1: 4B8Zbdft0RMdAiD9t3cSJiG7ve8.crl (hash: bkndqoEahTWQ6sIqluJ+Bs4EAneNG/ZqWjbOjuIivbc=)
2: 4ea1dMd4wRgTBo1jIMebmZZJLM4.roa (hash: s7rnybcZ+EzxkGbEPGLzvVlVM7bMx+c1GhcuJyz67VI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9d/968a85-01d3-4b0c-b920-66cbf876ab3e/1/4B8Zbdft0RMdAiD9t3cSJiG7ve8.crl
rsync://rpki.ripe.net/repository/DEFAULT/9d/968a85-01d3-4b0c-b920-66cbf876ab3e/1/4B8Zbdft0RMdAiD9t3cSJiG7ve8.mft
rsync://rpki.ripe.net/repository/DEFAULT/4B8Zbdft0RMdAiD9t3cSJiG7ve8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 Aug 2025 13:01:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7a:52:4b:bb:1c:0d:9c:ac:1a:7d:97:0b:21:35:73:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e01f196dd7edd1131d0220fdb777122621bbbdef
Validity
Not Before: Aug 5 13:01:10 2025 GMT
Not After : Aug 6 13:01:10 2025 GMT
Subject: CN=8ce9ac4d1b987c059cc49e20d5bc8a0ce32905a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:0e:13:41:c1:e2:8e:6f:51:96:53:52:94:55:
19:82:23:54:e8:bc:c3:88:7c:4a:e8:b5:45:9d:4f:
8d:f7:ac:2f:cd:aa:41:28:73:a7:ac:cc:c3:0c:5d:
d8:96:65:9f:e6:07:ab:3b:92:4f:73:45:78:ec:b0:
60:14:2c:54:a0:43:49:99:5e:9a:f5:fa:56:41:c4:
f2:71:45:a5:54:c6:ad:b7:30:f2:38:ca:13:75:c0:
58:17:e4:1a:5a:9b:c6:bf:ac:66:52:31:0f:8b:e5:
ce:e1:91:46:47:77:c5:3a:89:63:4f:9f:20:28:a3:
01:14:c1:8d:7d:11:89:88:2d:94:86:3f:a9:a1:5e:
1e:f1:5a:ec:25:34:4e:c7:61:93:8f:94:83:67:44:
f3:ac:51:5c:bf:b0:85:f1:fc:67:6e:cb:79:dd:47:
69:ee:70:a0:9f:16:aa:20:95:72:d6:8d:28:4c:ab:
91:ac:57:5d:0d:e2:4a:75:74:1f:19:1b:dc:ce:c8:
43:00:a8:eb:93:21:b3:2c:8f:93:89:2b:c3:7a:35:
6f:32:dc:48:2f:f5:6c:7c:02:5e:83:f0:a4:53:86:
fe:94:0a:51:4e:54:28:19:56:e8:75:0f:f5:c1:3a:
26:bc:93:ff:de:a0:4e:40:0a:d7:12:25:9d:9c:07:
2e:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:E9:AC:4D:1B:98:7C:05:9C:C4:9E:20:D5:BC:8A:0C:E3:29:05:A6
X509v3 Authority Key Identifier:
keyid:E0:1F:19:6D:D7:ED:D1:13:1D:02:20:FD:B7:77:12:26:21:BB:BD:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4B8Zbdft0RMdAiD9t3cSJiG7ve8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/968a85-01d3-4b0c-b920-66cbf876ab3e/1/4B8Zbdft0RMdAiD9t3cSJiG7ve8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/968a85-01d3-4b0c-b920-66cbf876ab3e/1/4B8Zbdft0RMdAiD9t3cSJiG7ve8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:ab:a1:68:0d:eb:3b:91:e9:0f:40:ab:b7:a3:09:5f:27:1e:
9a:72:cc:9c:e5:92:7a:d2:1c:c8:37:f8:ae:52:55:5b:40:1b:
d4:61:27:e5:61:65:a2:ff:a2:bd:d6:68:60:f7:9f:d9:cc:96:
71:07:dc:16:34:fb:45:a4:71:3a:7a:76:55:00:c9:ed:c2:ec:
4f:0e:24:1c:83:03:06:40:69:47:4c:fb:ad:05:0e:f2:b3:95:
41:be:5d:c7:7e:23:61:8e:9c:38:13:72:9d:93:f6:d5:7c:8f:
db:f0:11:6f:8a:f6:53:b4:73:35:e2:2c:f6:14:d2:25:57:16:
15:fc:a7:07:10:b7:96:cc:3a:3a:84:60:e1:b9:fb:b8:f0:d6:
08:aa:e8:c1:a8:6d:d9:43:86:b9:2c:e8:a7:61:4c:c3:66:cc:
ef:99:9d:7c:f6:93:13:73:f7:7e:1a:1c:41:37:05:eb:5e:e4:
a6:19:cf:01:2f:e7:8d:7e:20:8b:b9:71:27:7e:4d:f2:1a:80:
26:6b:96:f2:cb:0e:55:7f:8e:c9:21:4e:40:7f:b4:cc:37:8c:
80:7f:76:54:59:7e:81:16:26:9b:77:89:f5:40:8e:1a:ee:f3:
8c:5f:b1:78:80:b2:d0:1d:e8:3a:3a:61:cd:d7:c4:26:e6:7d:
70:31:28:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 5 20:20:22 2025 by rpki-client