Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/6c0563-6a1c-4432-a58d-3b64cc336c79/1/4KACksKhBiuzKYCjxEP_84OkEAI.mft
File: 4KACksKhBiuzKYCjxEP_84OkEAI.mft (raw, json)
Hash identifier: 3B84NFkEZEgKRB0B8EA0NaXEwOxQIUwuBofnnd+lp4Q=
Subject key identifier: 54:28:88:42:89:3C:0A:B8:FC:2A:8B:F8:EB:BB:06:F1:5F:39:D1:90
Authority key identifier: E0:A0:02:92:C2:A1:06:2B:B3:29:80:A3:C4:43:FF:F3:83:A4:10:02
Certificate issuer: /CN=e0a00292c2a1062bb32980a3c443fff383a41002
Certificate serial: 01989600289AE2CD82D89C8394D3B9C51053
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4KACksKhBiuzKYCjxEP_84OkEAI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/6c0563-6a1c-4432-a58d-3b64cc336c79/1/4KACksKhBiuzKYCjxEP_84OkEAI.mft
Manifest number: 09E8
Signing time: Sun 10 Aug 2025 22:00:49 +0000
Manifest this update: Sun 10 Aug 2025 22:00:49 +0000
Manifest next update: Mon 11 Aug 2025 22:00:49 +0000
Files and hashes: 1: 4KACksKhBiuzKYCjxEP_84OkEAI.crl (hash: /6nPleptiY8PAf5+k0zRrMa5alPhY0+ogFVepmFDZ7U=)
2: mSKL5dZ-DfhQmd3vDgNujHfDeWQ.roa (hash: kM0tftmTBoswJU9/17L/nHsaIm00B47zHx/WZDRsoCQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/6c0563-6a1c-4432-a58d-3b64cc336c79/1/4KACksKhBiuzKYCjxEP_84OkEAI.crl
rsync://rpki.ripe.net/repository/DEFAULT/b3/6c0563-6a1c-4432-a58d-3b64cc336c79/1/4KACksKhBiuzKYCjxEP_84OkEAI.mft
rsync://rpki.ripe.net/repository/DEFAULT/4KACksKhBiuzKYCjxEP_84OkEAI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 11 Aug 2025 22:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:96:00:28:9a:e2:cd:82:d8:9c:83:94:d3:b9:c5:10:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e0a00292c2a1062bb32980a3c443fff383a41002
Validity
Not Before: Aug 10 22:00:49 2025 GMT
Not After : Aug 11 22:00:49 2025 GMT
Subject: CN=54288842893c0ab8fc2a8bf8ebbb06f15f39d190
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:bb:fa:06:78:fb:be:be:31:f1:c4:46:d0:bf:
13:84:1a:16:ec:c6:e7:a3:b7:fe:1d:7c:51:71:4b:
01:58:29:a3:93:b8:68:6d:c2:02:4d:fa:8e:83:bd:
90:77:13:66:a3:c2:72:29:9e:58:b1:4c:d6:ee:7c:
1d:66:49:e3:29:2e:c9:1a:e2:18:ce:b3:37:c6:c6:
ab:57:f5:79:6e:89:e4:ea:84:b7:55:a0:5f:48:3b:
54:30:3e:e1:c1:89:1d:8f:32:e1:06:8f:59:97:70:
b6:5b:9a:74:d6:ac:bd:4d:72:7f:ba:8a:b9:d3:ed:
33:80:6f:d9:d3:1d:8a:bc:74:8e:f5:c6:01:2a:b5:
f6:58:0b:b6:e3:fd:7b:74:15:cf:63:54:66:10:c2:
f0:e3:a0:ac:78:71:8e:aa:c1:93:a1:c2:ce:f2:a1:
a4:3d:7d:b0:3a:55:55:9f:e5:16:2b:3a:33:a9:de:
68:5f:52:4d:b2:6f:dd:d9:58:a5:ec:6d:09:47:d1:
b0:62:7e:7c:3a:d2:e6:41:38:85:10:4b:4f:5a:b8:
f2:68:72:97:b5:bc:99:a3:f3:c1:4e:00:2a:0c:ee:
b1:6c:84:f3:67:b6:65:39:27:1e:ae:4a:83:fd:c0:
5b:01:a7:00:71:59:d1:3b:d6:82:a2:eb:64:ea:9c:
92:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:28:88:42:89:3C:0A:B8:FC:2A:8B:F8:EB:BB:06:F1:5F:39:D1:90
X509v3 Authority Key Identifier:
keyid:E0:A0:02:92:C2:A1:06:2B:B3:29:80:A3:C4:43:FF:F3:83:A4:10:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4KACksKhBiuzKYCjxEP_84OkEAI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/6c0563-6a1c-4432-a58d-3b64cc336c79/1/4KACksKhBiuzKYCjxEP_84OkEAI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/6c0563-6a1c-4432-a58d-3b64cc336c79/1/4KACksKhBiuzKYCjxEP_84OkEAI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:8f:89:96:5e:39:ed:c2:5b:b8:37:6a:19:ce:3e:63:0c:b0:
10:18:82:53:b6:94:11:e1:e0:45:38:ba:2c:83:58:9c:f5:d0:
61:a6:41:7b:29:db:3b:8c:f1:6b:5e:de:9a:2b:43:cd:17:b6:
e9:31:51:14:eb:ac:26:97:c3:5b:e0:14:cd:28:29:61:ac:98:
85:ca:73:cd:8e:44:39:e7:f4:54:8a:9c:dd:41:ae:5b:e1:f7:
90:2e:ff:80:0f:79:dc:80:f4:05:76:4e:79:ce:b7:d4:eb:05:
d2:0e:8f:85:87:71:b3:31:1e:4e:4b:b9:88:62:7d:ef:2e:f5:
81:3a:35:b5:8d:6e:9f:89:80:99:45:ba:e6:8f:ef:a3:c4:f6:
ae:77:17:84:2a:2e:10:93:38:41:0c:a9:47:c5:76:dd:fd:ea:
4d:69:a5:91:19:b8:1a:ec:7c:b3:c4:77:ef:e6:4b:d6:d2:f5:
f5:43:0b:a7:5f:a1:51:9e:72:f4:9a:aa:fb:5e:e5:25:38:27:
3f:6a:c0:b8:51:a3:5e:5a:f6:de:c7:0f:90:eb:aa:65:61:f7:
71:cc:63:92:68:0b:e4:c3:d7:4e:c1:e9:45:22:9a:3e:77:f3:
60:48:a4:c6:f3:02:17:99:bf:47:f6:b3:0c:fe:0d:eb:8e:47:
4a:6f:e9:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 11 07:24:44 2025 by rpki-client