Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/ec2ccc-8cbd-4bef-941d-c615f9910ffc/1/4BtODyogHPQwBI4kgWSzLt30Pa4.mft
File: 4BtODyogHPQwBI4kgWSzLt30Pa4.mft (raw, json)
Hash identifier: 5Hq3fHalf+82zirUjSP7E9uvFGHWBx/TMGahdOJY1s0=
Subject key identifier: BC:CD:4B:63:74:EF:37:8F:12:D8:CC:59:E2:93:E4:52:81:7B:89:9B
Authority key identifier: E0:1B:4E:0F:2A:20:1C:F4:30:04:8E:24:81:64:B3:2E:DD:F4:3D:AE
Certificate issuer: /CN=e01b4e0f2a201cf430048e248164b32eddf43dae
Certificate serial: 019897134E461FDB348949B0A16405415AC2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4BtODyogHPQwBI4kgWSzLt30Pa4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/ec2ccc-8cbd-4bef-941d-c615f9910ffc/1/4BtODyogHPQwBI4kgWSzLt30Pa4.mft
Manifest number: CE
Signing time: Mon 11 Aug 2025 03:01:21 +0000
Manifest this update: Mon 11 Aug 2025 03:01:21 +0000
Manifest next update: Tue 12 Aug 2025 03:01:21 +0000
Files and hashes: 1: 4BtODyogHPQwBI4kgWSzLt30Pa4.crl (hash: CT56xRwbcVCaCs/GTV4k6ZubfgFYkvndQ5h0LtFr7lU=)
2: KJS8V64pslKuMWFI7cvlulnThJM.roa (hash: TuhgricsSHQzRyANiX5wlopuZuXjn8vfdfEA+WHjVoM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/ec2ccc-8cbd-4bef-941d-c615f9910ffc/1/4BtODyogHPQwBI4kgWSzLt30Pa4.crl
rsync://rpki.ripe.net/repository/DEFAULT/e8/ec2ccc-8cbd-4bef-941d-c615f9910ffc/1/4BtODyogHPQwBI4kgWSzLt30Pa4.mft
rsync://rpki.ripe.net/repository/DEFAULT/4BtODyogHPQwBI4kgWSzLt30Pa4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 12 Aug 2025 02:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:97:13:4e:46:1f:db:34:89:49:b0:a1:64:05:41:5a:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e01b4e0f2a201cf430048e248164b32eddf43dae
Validity
Not Before: Aug 11 03:01:21 2025 GMT
Not After : Aug 12 03:01:21 2025 GMT
Subject: CN=bccd4b6374ef378f12d8cc59e293e452817b899b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:1a:9f:82:00:ae:31:64:30:51:e0:7b:b5:d8:
d5:09:27:0a:69:a6:7c:99:6b:7a:60:f2:63:60:86:
47:80:6f:a5:6d:8a:80:af:07:fb:b1:22:22:ca:22:
b8:03:d9:8b:4b:d9:08:4a:d0:7e:42:3b:ce:91:d0:
c8:4b:46:46:5a:5a:3b:12:cf:90:eb:7b:90:bb:f0:
59:b4:ac:4f:2d:1d:0e:b7:7a:df:b2:60:59:0d:b3:
18:66:f8:82:14:74:6f:67:26:cb:05:4b:4f:b8:7c:
64:c5:ac:ed:8f:c0:22:c2:51:64:c9:e5:52:58:d0:
bf:6c:14:a8:5f:eb:a9:90:d6:be:56:7b:32:60:2b:
74:61:a0:f2:00:95:01:31:90:de:e4:9e:e2:9c:5e:
3f:25:7b:81:72:b9:42:43:05:ec:44:48:27:26:6b:
1e:d0:da:6a:75:4f:35:f6:ce:36:69:91:e7:09:85:
0e:28:92:82:4d:87:0f:8b:eb:b6:f9:81:34:ab:f3:
35:62:b5:e4:3e:d0:aa:6d:5a:47:3e:43:87:e8:33:
39:c8:e3:50:42:b3:da:34:97:a5:68:59:c9:3f:37:
a3:f5:aa:41:41:f4:e6:77:43:85:5b:6c:38:d0:01:
b2:d9:45:03:63:07:62:96:d2:3b:e5:1e:4d:1c:53:
26:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:CD:4B:63:74:EF:37:8F:12:D8:CC:59:E2:93:E4:52:81:7B:89:9B
X509v3 Authority Key Identifier:
keyid:E0:1B:4E:0F:2A:20:1C:F4:30:04:8E:24:81:64:B3:2E:DD:F4:3D:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4BtODyogHPQwBI4kgWSzLt30Pa4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/ec2ccc-8cbd-4bef-941d-c615f9910ffc/1/4BtODyogHPQwBI4kgWSzLt30Pa4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/ec2ccc-8cbd-4bef-941d-c615f9910ffc/1/4BtODyogHPQwBI4kgWSzLt30Pa4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:c7:c5:a0:26:b4:7d:3c:be:83:56:50:9e:af:51:aa:b1:9c:
11:7d:24:29:0d:79:e9:61:ce:53:5d:63:b5:de:cd:6e:13:c9:
82:af:2c:ba:bb:f1:02:fb:f4:8b:63:46:83:04:44:5b:e3:f3:
b8:e5:a9:ca:b3:d3:60:ad:e2:40:23:a2:81:22:eb:9b:2f:c9:
e3:c7:2d:f7:35:38:c2:a1:76:68:bd:e9:68:36:2f:ed:7c:65:
d3:22:13:1e:27:4e:6f:c4:d9:45:5c:d9:62:3d:af:f2:95:8b:
3d:72:1c:e6:56:16:b9:6b:e7:60:01:08:f6:fe:3c:57:d0:97:
2f:ce:3d:e7:69:e9:da:2c:14:ac:0f:d8:06:a3:5b:e9:07:54:
4f:ed:da:70:7b:35:42:aa:76:83:88:8c:c2:50:16:b0:ce:ef:
3c:b0:3f:34:0c:b6:a3:23:1d:4b:56:27:36:3b:e0:2f:2a:36:
77:ee:8e:71:d1:75:87:72:3c:3d:53:3f:77:ff:5e:12:54:61:
4e:80:bb:ca:a3:58:14:0e:89:63:3f:39:20:d5:cc:be:f2:88:
be:85:58:7c:12:9e:f9:8e:a4:3b:43:6a:e2:d9:aa:f5:9f:26:
8c:cc:88:e3:36:82:f7:e1:0c:26:f8:3e:05:f3:85:53:92:e4:
53:9a:4f:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 11 07:47:11 2025 by rpki-client