Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/d2e826-5acb-47d6-92a4-43bb19f2e53b/1/s4WUFGIC4vbDRWsGlv8YVi8bn4E.mft
File: s4WUFGIC4vbDRWsGlv8YVi8bn4E.mft (raw, json)
Hash identifier: dPtuGwCjq8LAffSB2DaIfUoWTNpja2fI6z5GQnamo5w=
Subject key identifier: A6:98:F1:6B:8A:67:03:57:24:F1:B1:0C:0A:69:2E:76:92:98:C7:5A
Authority key identifier: B3:85:94:14:62:02:E2:F6:C3:45:6B:06:96:FF:18:56:2F:1B:9F:81
Certificate issuer: /CN=b38594146202e2f6c3456b0696ff18562f1b9f81
Certificate serial: 019874192B1EA76E14B97B500D4B4E4E80BD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s4WUFGIC4vbDRWsGlv8YVi8bn4E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/d2e826-5acb-47d6-92a4-43bb19f2e53b/1/s4WUFGIC4vbDRWsGlv8YVi8bn4E.mft
Manifest number: 09A0
Signing time: Mon 04 Aug 2025 08:01:03 +0000
Manifest this update: Mon 04 Aug 2025 08:01:03 +0000
Manifest next update: Tue 05 Aug 2025 08:01:03 +0000
Files and hashes: 1: IcIyZXTtvGCVT7kmzm3an6XI4Ds.roa (hash: 9+rlboX5YqLY2xGwqsRBQUwcIF0ZyOqFrf8SvNh+rfQ=)
2: s4WUFGIC4vbDRWsGlv8YVi8bn4E.crl (hash: OgVhY6VgSje9qwpUKxHZsoZ9DmtRFXTpggKqGfG+HUs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/d2e826-5acb-47d6-92a4-43bb19f2e53b/1/s4WUFGIC4vbDRWsGlv8YVi8bn4E.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/d2e826-5acb-47d6-92a4-43bb19f2e53b/1/s4WUFGIC4vbDRWsGlv8YVi8bn4E.mft
rsync://rpki.ripe.net/repository/DEFAULT/s4WUFGIC4vbDRWsGlv8YVi8bn4E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 08:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:74:19:2b:1e:a7:6e:14:b9:7b:50:0d:4b:4e:4e:80:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b38594146202e2f6c3456b0696ff18562f1b9f81
Validity
Not Before: Aug 4 08:01:03 2025 GMT
Not After : Aug 5 08:01:03 2025 GMT
Subject: CN=a698f16b8a67035724f1b10c0a692e769298c75a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:69:44:4d:6b:cb:ce:73:1b:a4:03:4d:34:7f:
d4:70:20:88:d1:a9:b3:15:7c:b1:1e:cc:ae:ef:07:
fc:31:a4:c1:3d:13:21:26:47:6b:c3:3c:5b:49:2c:
0c:a2:5e:c1:dd:28:4a:57:b1:76:b2:45:f4:4f:b4:
3a:c5:f1:e5:87:73:57:7c:bf:3c:6d:85:d6:21:25:
d6:3d:51:62:47:91:14:46:9e:99:54:f2:8f:d2:28:
54:cc:8b:e7:7d:97:94:b5:55:58:d4:ea:ae:c6:ee:
68:db:75:14:91:49:03:eb:a8:db:a2:c0:b2:ad:f7:
5e:67:ef:a2:a1:83:88:2d:06:bd:15:8f:31:10:b9:
6f:b2:95:bf:f0:4e:4a:4c:93:82:42:96:d5:1f:fe:
f2:df:8f:d8:5a:f8:59:55:1c:6a:6a:8c:e8:0c:bc:
73:7b:e2:c6:2a:49:a9:57:3b:81:06:fd:8b:c5:e0:
2d:54:2d:9b:af:5b:10:6b:f6:5e:e7:e6:dd:f9:99:
8f:15:5a:7c:9b:ea:67:d4:88:8e:d8:36:a6:b2:90:
16:25:ac:80:81:78:7d:13:d8:a2:ea:94:13:df:fd:
73:3d:91:d3:8d:db:61:bf:e1:6a:c8:9d:22:19:1e:
fe:82:85:ce:e8:cf:99:45:8f:2d:34:4b:6d:82:12:
ba:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:98:F1:6B:8A:67:03:57:24:F1:B1:0C:0A:69:2E:76:92:98:C7:5A
X509v3 Authority Key Identifier:
keyid:B3:85:94:14:62:02:E2:F6:C3:45:6B:06:96:FF:18:56:2F:1B:9F:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s4WUFGIC4vbDRWsGlv8YVi8bn4E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/d2e826-5acb-47d6-92a4-43bb19f2e53b/1/s4WUFGIC4vbDRWsGlv8YVi8bn4E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/d2e826-5acb-47d6-92a4-43bb19f2e53b/1/s4WUFGIC4vbDRWsGlv8YVi8bn4E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:6e:aa:22:44:38:9e:c5:8d:f1:7f:65:69:a8:cf:37:17:c7:
a3:2e:f3:ad:83:87:29:fa:79:43:ee:c0:eb:d7:b6:63:76:28:
67:0f:df:50:9a:e5:45:50:20:dd:c4:9d:8b:b6:54:7e:e6:ea:
2a:84:b6:8a:a4:a9:96:44:71:2b:d4:3c:f2:79:06:30:eb:fc:
b9:08:fd:cf:12:84:d1:28:3f:fd:e5:41:d5:37:86:eb:69:8a:
8a:09:4d:1a:24:19:fc:be:fc:4c:e2:73:8c:6a:e1:3a:df:ec:
91:73:de:74:26:27:a0:17:4a:e3:3e:99:06:35:c3:1a:d4:50:
68:de:5a:8c:49:26:f8:4b:ce:85:1b:63:81:17:9d:2e:d9:f8:
a2:dd:5c:fe:71:6e:4c:ab:82:2c:46:3a:ea:aa:84:9c:e4:6c:
b3:64:a1:16:65:e1:3a:2e:fc:a9:6a:02:2f:cd:bc:f2:f4:f5:
db:c0:1d:07:f7:32:c9:2e:bc:61:1b:da:db:28:a4:30:4b:e2:
4e:dc:ff:8c:c0:3c:21:ed:84:96:4b:d4:06:90:47:9a:ba:4f:
8c:ce:f7:86:e6:5a:63:70:02:ab:81:6a:48:2a:7a:3b:e9:98:
14:d9:22:f9:3c:17:49:8c:78:c1:6e:6c:07:b7:25:f1:ee:9d:
29:76:36:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 13:59:57 2025 by rpki-client