Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/4291a2-03a9-4195-b1a7-3f40547e52d1/1/s4slrXyWWJ5KjKpfpIksxN_Me1M.mft
File: s4slrXyWWJ5KjKpfpIksxN_Me1M.mft (raw, json)
Hash identifier: 7TPhfvQBk0VZmVWZYEmCY5K0mxXgWj5/o6K8kiG+BOY=
Subject key identifier: 11:E5:1F:F9:52:60:43:91:D7:F5:64:4B:68:DA:2C:7E:B6:7C:25:3A
Authority key identifier: B3:8B:25:AD:7C:96:58:9E:4A:8C:AA:5F:A4:89:2C:C4:DF:CC:7B:53
Certificate issuer: /CN=b38b25ad7c96589e4a8caa5fa4892cc4dfcc7b53
Certificate serial: 01989FDF28309B8D9F12F138F15A356FB206
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s4slrXyWWJ5KjKpfpIksxN_Me1M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/4291a2-03a9-4195-b1a7-3f40547e52d1/1/s4slrXyWWJ5KjKpfpIksxN_Me1M.mft
Manifest number: 162E
Signing time: Tue 12 Aug 2025 20:00:58 +0000
Manifest this update: Tue 12 Aug 2025 20:00:58 +0000
Manifest next update: Wed 13 Aug 2025 20:00:58 +0000
Files and hashes: 1: JJG6lSZApZVFWCoCMzoaHnqrdjA.roa (hash: /ZXBf7GoIevwDbia6b3jjdIqB98IB5pgV+PKh4AI8CE=)
2: s4slrXyWWJ5KjKpfpIksxN_Me1M.crl (hash: hH7D2GpiiSx5NzgXvN0dM1FC6kVWXZEz1SFom27iQiQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/4291a2-03a9-4195-b1a7-3f40547e52d1/1/s4slrXyWWJ5KjKpfpIksxN_Me1M.crl
rsync://rpki.ripe.net/repository/DEFAULT/e7/4291a2-03a9-4195-b1a7-3f40547e52d1/1/s4slrXyWWJ5KjKpfpIksxN_Me1M.mft
rsync://rpki.ripe.net/repository/DEFAULT/s4slrXyWWJ5KjKpfpIksxN_Me1M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 Aug 2025 20:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:9f:df:28:30:9b:8d:9f:12:f1:38:f1:5a:35:6f:b2:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b38b25ad7c96589e4a8caa5fa4892cc4dfcc7b53
Validity
Not Before: Aug 12 20:00:58 2025 GMT
Not After : Aug 13 20:00:58 2025 GMT
Subject: CN=11e51ff952604391d7f5644b68da2c7eb67c253a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:94:f1:c0:66:64:bd:0f:31:5e:ec:91:88:89:
bd:7a:df:3c:a8:22:2a:31:d4:97:48:96:b2:4f:82:
0c:f0:44:48:b8:6e:17:ea:3a:73:11:09:bf:d9:73:
ff:df:c8:fd:b9:ac:61:9d:09:1c:98:a0:8e:34:56:
01:82:b1:eb:a0:80:6c:1b:63:cc:c1:19:c2:a5:62:
07:59:52:cf:36:c9:d9:b9:de:65:f1:28:04:f2:2b:
f9:db:97:3a:c9:6d:b9:d6:a8:52:64:f9:43:3f:9a:
df:54:2a:94:2c:c5:57:fd:f0:fc:e2:76:14:99:c3:
e9:61:a2:f7:9c:95:17:88:0b:0d:d1:4f:60:59:e8:
0c:86:59:39:85:9b:71:11:14:8c:eb:02:00:0e:57:
8a:20:2c:81:8e:30:f2:f6:ea:2d:79:8e:82:40:19:
9c:db:01:2c:54:ab:f7:d3:62:5c:d5:0d:7f:77:6c:
60:50:ff:01:78:4a:4d:2c:d7:25:7e:29:9d:2b:62:
57:2b:53:6f:78:47:e1:cd:3f:74:eb:57:10:dc:82:
ae:ce:34:a7:65:14:2d:d0:2d:c9:2e:0c:23:94:1c:
79:5b:54:66:c5:76:27:9c:5b:e4:94:ed:84:93:bd:
80:c8:e1:67:42:e1:66:ca:6c:28:35:45:f0:81:64:
9c:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:E5:1F:F9:52:60:43:91:D7:F5:64:4B:68:DA:2C:7E:B6:7C:25:3A
X509v3 Authority Key Identifier:
keyid:B3:8B:25:AD:7C:96:58:9E:4A:8C:AA:5F:A4:89:2C:C4:DF:CC:7B:53
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s4slrXyWWJ5KjKpfpIksxN_Me1M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/4291a2-03a9-4195-b1a7-3f40547e52d1/1/s4slrXyWWJ5KjKpfpIksxN_Me1M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/4291a2-03a9-4195-b1a7-3f40547e52d1/1/s4slrXyWWJ5KjKpfpIksxN_Me1M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:d4:2c:6c:87:42:fa:a3:a7:39:00:ca:35:95:c9:33:c8:27:
86:0a:45:14:6b:34:0b:47:78:57:57:55:9f:15:26:85:86:b9:
c4:45:51:9c:ce:f5:f1:a1:3c:6b:30:4e:65:ac:2a:90:62:b9:
c6:c6:79:25:9c:5a:18:ef:0e:ec:2d:28:a3:7e:d0:c7:24:d6:
be:0c:cd:58:f8:f3:8b:be:c9:cc:8a:cd:14:ab:d8:34:16:1a:
f6:4e:c4:1d:c3:58:43:69:ef:9d:e0:cb:e2:0f:3d:09:95:9f:
c3:25:8c:11:77:c3:14:1f:3c:78:81:46:9a:f0:9b:8d:0a:b8:
d5:46:ea:c0:fc:b8:2d:42:f5:81:1a:a1:1d:cf:5b:b3:44:f4:
a7:7d:c4:c1:79:e9:54:3f:be:24:22:6e:8e:52:3f:13:f0:2e:
ef:00:7b:06:d6:43:d6:5a:02:97:0b:cd:dd:f6:c0:b2:7b:71:
e1:47:a6:41:3d:a4:d1:b7:d2:22:d1:cb:4d:18:c0:a8:7c:c1:
1a:29:a9:53:8b:20:49:c4:79:49:1a:5e:1c:9c:96:67:dd:cc:
53:4d:5b:00:19:9f:7b:61:ad:90:ac:1a:c7:c3:9d:13:d6:24:
9c:c7:4b:eb:1b:9a:3d:37:70:66:5f:2c:e8:73:23:98:90:8b:
ff:dd:62:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 13 05:28:36 2025 by rpki-client