Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/b80000-0609-488f-a34a-2ca626cfed45/1/c4DHWfVY-ca-iN0iakOdmcnqzww.mft
File: c4DHWfVY-ca-iN0iakOdmcnqzww.mft (raw, json)
Hash identifier: gYtu7vIoSNe/wUjzZZwGls43admvhRUch74sg1BN6Yw=
Subject key identifier: E8:B3:58:63:FE:D0:D3:74:6D:79:F8:48:7F:2D:C6:57:ED:63:C0:1F
Authority key identifier: 73:80:C7:59:F5:58:F9:C6:BE:88:DD:22:6A:43:9D:99:C9:EA:CF:0C
Certificate issuer: /CN=7380c759f558f9c6be88dd226a439d99c9eacf0c
Certificate serial: 019896A6107489989626E2A580AD1B8A4C23
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/c4DHWfVY-ca-iN0iakOdmcnqzww.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/b80000-0609-488f-a34a-2ca626cfed45/1/c4DHWfVY-ca-iN0iakOdmcnqzww.mft
Manifest number: 0D5A
Signing time: Mon 11 Aug 2025 01:02:02 +0000
Manifest this update: Mon 11 Aug 2025 01:02:02 +0000
Manifest next update: Tue 12 Aug 2025 01:02:02 +0000
Files and hashes: 1: RBq_sIlJapW_qBhhOYs3cfjmb6g.roa (hash: fg25CTdh4wWfSSlLDFZZPAEIB6IEQNMofjk6UtMoVYc=)
2: c4DHWfVY-ca-iN0iakOdmcnqzww.crl (hash: v6VkDfQU5gFhts+6LKUVQfJXuS0xLBwBZvZdxoxpqOI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/b80000-0609-488f-a34a-2ca626cfed45/1/c4DHWfVY-ca-iN0iakOdmcnqzww.crl
rsync://rpki.ripe.net/repository/DEFAULT/e2/b80000-0609-488f-a34a-2ca626cfed45/1/c4DHWfVY-ca-iN0iakOdmcnqzww.mft
rsync://rpki.ripe.net/repository/DEFAULT/c4DHWfVY-ca-iN0iakOdmcnqzww.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 12 Aug 2025 01:02:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:96:a6:10:74:89:98:96:26:e2:a5:80:ad:1b:8a:4c:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7380c759f558f9c6be88dd226a439d99c9eacf0c
Validity
Not Before: Aug 11 01:02:02 2025 GMT
Not After : Aug 12 01:02:02 2025 GMT
Subject: CN=e8b35863fed0d3746d79f8487f2dc657ed63c01f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:fd:f0:ed:70:cd:c2:3c:32:4d:32:4a:4c:c8:
2f:99:9d:fa:56:0f:c2:82:a3:cc:6e:fe:a2:81:10:
85:a5:43:45:26:40:73:5d:99:b9:e4:08:c6:5f:ca:
d3:47:be:43:20:c9:5e:e3:ae:68:0d:95:f6:f2:e3:
88:06:6e:6d:8a:61:52:ec:07:e6:a5:11:8b:24:b0:
95:8d:38:87:f5:a4:87:49:64:39:8e:f7:b6:37:f5:
d3:d9:f3:85:e6:01:b6:c4:08:20:b6:80:b2:24:5b:
93:a6:6c:c7:67:26:a1:e6:ff:d4:7e:c7:59:0f:7f:
ce:f8:a7:66:ed:15:62:be:a4:70:fe:b3:e3:89:32:
f0:be:ba:ef:bd:e2:32:74:d2:6e:e7:74:da:ea:7b:
4b:20:e5:e7:d8:a6:76:ef:60:a5:e3:41:49:d7:aa:
58:2f:e7:31:00:87:eb:a6:e2:79:c5:7d:f5:5b:c2:
fb:fd:5c:ec:e3:b9:0f:76:51:b1:49:06:ad:62:8d:
9c:31:b8:76:fe:0d:84:f5:0e:56:7d:5d:c4:09:5b:
70:15:cb:66:16:9e:1d:b2:61:b8:87:ef:d9:95:3d:
08:13:c1:d9:b5:e0:30:f9:54:32:74:46:65:10:af:
82:99:cb:9a:86:7f:9a:a9:e7:9e:a3:3a:26:d7:21:
47:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:B3:58:63:FE:D0:D3:74:6D:79:F8:48:7F:2D:C6:57:ED:63:C0:1F
X509v3 Authority Key Identifier:
keyid:73:80:C7:59:F5:58:F9:C6:BE:88:DD:22:6A:43:9D:99:C9:EA:CF:0C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4DHWfVY-ca-iN0iakOdmcnqzww.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/b80000-0609-488f-a34a-2ca626cfed45/1/c4DHWfVY-ca-iN0iakOdmcnqzww.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/b80000-0609-488f-a34a-2ca626cfed45/1/c4DHWfVY-ca-iN0iakOdmcnqzww.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:b4:c6:33:b0:35:94:e6:01:1d:da:ad:ed:5e:30:60:a4:0c:
f8:81:ca:5b:d2:fd:5a:0b:2f:ed:53:7f:13:bc:f4:2a:15:aa:
5a:38:b8:57:1b:8d:33:56:c4:e8:bf:28:c5:72:d8:31:d2:11:
75:c2:38:a5:9d:1f:e1:f4:88:f6:08:16:10:37:e0:2a:f8:7b:
9a:43:d7:65:56:8d:07:4d:4f:df:b9:9a:c4:c2:74:3b:b8:e4:
e3:60:7b:07:1e:b9:3b:87:f8:5a:0b:ed:34:54:01:08:c4:2d:
dc:8a:13:de:59:66:14:f2:db:0a:ce:53:d8:06:bd:e4:ca:27:
a0:1a:d4:00:a3:a1:b3:85:28:52:6d:07:52:f5:fa:61:1a:e8:
8d:02:44:6e:d5:1c:b6:a7:06:e1:93:09:fa:10:74:d1:a6:81:
3f:84:a5:3a:c1:40:19:72:73:ac:43:ad:a8:2c:ed:be:d0:98:
c2:90:e2:65:a6:f5:45:d4:4f:45:3a:a3:77:8f:fb:6e:50:16:
df:40:e7:8b:c9:43:8d:1b:70:e8:3c:71:54:17:ae:f4:f1:2f:
44:c5:38:b1:d3:7d:12:bf:50:78:1d:e4:24:0d:3e:d3:13:fc:
3c:30:91:c2:44:49:4b:b7:19:04:a7:4c:46:47:f5:17:21:83:
ee:e4:63:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 11 07:46:57 2025 by rpki-client