Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/659d27-bbb5-49f4-8fd1-c264b75b6b78/1/4rRpKpKR8sZ7VswV2k0xASAjAXc.mft
File: 4rRpKpKR8sZ7VswV2k0xASAjAXc.mft (raw, json)
Hash identifier: cKg9JysSK+57IRamSNLuOqRafqKntIfTC4d0gBazgKA=
Subject key identifier: D0:2B:9C:5C:6D:CF:CE:A3:F6:42:DA:84:F8:62:6A:8A:26:5B:0C:0D
Authority key identifier: E2:B4:69:2A:92:91:F2:C6:7B:56:CC:15:DA:4D:31:01:20:23:01:77
Certificate issuer: /CN=e2b4692a9291f2c67b56cc15da4d310120230177
Certificate serial: 019873E3EEFDB831FE421E58B3903D0EAE3D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4rRpKpKR8sZ7VswV2k0xASAjAXc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/659d27-bbb5-49f4-8fd1-c264b75b6b78/1/4rRpKpKR8sZ7VswV2k0xASAjAXc.mft
Manifest number: 027A
Signing time: Mon 04 Aug 2025 07:02:54 +0000
Manifest this update: Mon 04 Aug 2025 07:02:54 +0000
Manifest next update: Tue 05 Aug 2025 07:02:54 +0000
Files and hashes: 1: 4NCyaBU3y3IsV-tIz8ykBHkjQrA.roa (hash: 6MR/wTh/d3g4brX5BBFxl1tdarfWH7geP5gRFSxNByI=)
2: 4rRpKpKR8sZ7VswV2k0xASAjAXc.crl (hash: HbuXmkgTQ2qeF760FsJgm5A+WyOALgKYt/TinGOEiWw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/659d27-bbb5-49f4-8fd1-c264b75b6b78/1/4rRpKpKR8sZ7VswV2k0xASAjAXc.crl
rsync://rpki.ripe.net/repository/DEFAULT/cd/659d27-bbb5-49f4-8fd1-c264b75b6b78/1/4rRpKpKR8sZ7VswV2k0xASAjAXc.mft
rsync://rpki.ripe.net/repository/DEFAULT/4rRpKpKR8sZ7VswV2k0xASAjAXc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:73:e3:ee:fd:b8:31:fe:42:1e:58:b3:90:3d:0e:ae:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e2b4692a9291f2c67b56cc15da4d310120230177
Validity
Not Before: Aug 4 07:02:54 2025 GMT
Not After : Aug 5 07:02:54 2025 GMT
Subject: CN=d02b9c5c6dcfcea3f642da84f8626a8a265b0c0d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:69:a2:3d:c8:3a:5c:a7:76:24:8b:09:e4:e5:
a8:ea:0f:b2:54:a7:de:88:cb:76:8a:72:60:31:18:
93:c5:17:76:06:f7:04:21:ca:7f:ca:10:eb:44:5b:
9d:64:58:40:90:19:12:b1:38:e0:90:e1:20:84:3a:
40:45:59:6f:5b:c2:cb:37:aa:39:d8:ba:d1:44:b7:
3a:5b:57:db:07:a0:73:f8:86:60:ee:85:c1:3c:b2:
46:4e:84:c1:58:e3:e6:0b:dc:d4:18:a3:e6:5d:86:
c5:0e:b8:e2:29:04:c0:ef:e3:4f:16:cb:20:74:0c:
aa:67:d1:8d:6c:89:f1:d3:ae:3a:27:dd:82:71:36:
6e:fe:a4:71:17:6c:6d:0b:dc:8b:be:c3:9c:99:ad:
18:dc:11:d1:ba:1e:d7:93:f7:75:25:85:b7:52:7f:
28:14:c6:fe:c3:44:38:df:60:46:b9:dd:49:0b:90:
6e:31:50:3e:7c:16:85:11:cc:df:1c:c8:5f:5e:a0:
57:33:f7:83:d7:ab:b6:bb:fd:6c:03:4e:e1:f6:04:
7e:86:64:26:dc:d8:7c:36:45:f2:24:86:e4:11:14:
0c:b3:5a:d0:ff:f2:fb:22:7b:ed:71:5e:31:d6:7d:
46:b0:3c:4d:81:3a:97:4a:6e:eb:7c:fa:74:be:13:
a3:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:2B:9C:5C:6D:CF:CE:A3:F6:42:DA:84:F8:62:6A:8A:26:5B:0C:0D
X509v3 Authority Key Identifier:
keyid:E2:B4:69:2A:92:91:F2:C6:7B:56:CC:15:DA:4D:31:01:20:23:01:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4rRpKpKR8sZ7VswV2k0xASAjAXc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/659d27-bbb5-49f4-8fd1-c264b75b6b78/1/4rRpKpKR8sZ7VswV2k0xASAjAXc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/659d27-bbb5-49f4-8fd1-c264b75b6b78/1/4rRpKpKR8sZ7VswV2k0xASAjAXc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:e5:4b:c6:36:c6:0f:e7:ca:a8:48:c6:31:96:73:4c:03:51:
6d:d5:8b:c3:8b:53:49:f8:17:bf:1a:18:dd:d4:5e:92:45:e2:
73:9b:dc:af:bf:97:75:fe:af:ba:07:b2:7d:43:5e:18:a0:d0:
11:ac:bf:d8:6e:51:15:28:89:04:d1:db:fb:fe:c8:22:ec:76:
50:21:e4:3e:93:22:86:4a:65:83:56:af:0e:e0:73:81:43:38:
2e:14:61:f7:86:05:ae:d4:bc:8b:47:8b:eb:df:5b:34:ac:06:
97:6c:43:60:9e:63:59:09:4f:b4:54:8c:37:9e:e5:44:9e:a8:
2c:9f:6c:c6:38:90:f7:a3:82:91:9f:8c:8b:84:0f:43:c1:65:
40:05:38:dd:fa:90:1c:ed:46:1c:48:61:f9:a0:54:6b:f6:08:
ae:bb:e3:99:ef:64:86:78:a8:39:22:78:62:56:48:76:85:74:
f7:56:69:99:92:67:9a:f1:0c:68:67:ad:7b:4c:67:ea:2f:9a:
70:3f:92:e8:93:03:8d:3f:8a:d4:d2:9e:26:2a:67:e3:49:ec:
69:6d:6c:72:42:7f:5d:28:33:ed:6b:60:fa:54:70:1e:48:63:
3e:79:93:d3:da:bd:5f:9a:55:3c:6d:51:91:68:be:36:a4:4d:
af:2a:e0:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 10:59:00 2025 by rpki-client