Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/55354e-bce7-4a5d-b561-9113fd7afd6c/1/4pDpzDt-Nj1ya9cCdQtT8psFCn0.mft
File: 4pDpzDt-Nj1ya9cCdQtT8psFCn0.mft (raw, json)
Hash identifier: TONqxCJy9nB0i1d5QAhkZLheStYoGzKInInrr7AnrfI=
Subject key identifier: C2:5A:A8:06:CC:92:4D:75:10:63:B5:C2:E1:09:E1:22:43:C5:D6:4E
Authority key identifier: E2:90:E9:CC:3B:7E:36:3D:72:6B:D7:02:75:0B:53:F2:9B:05:0A:7D
Certificate issuer: /CN=e290e9cc3b7e363d726bd702750b53f29b050a7d
Certificate serial: 019874195C25B341D6BD2D9F0533AF03C235
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4pDpzDt-Nj1ya9cCdQtT8psFCn0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/55354e-bce7-4a5d-b561-9113fd7afd6c/1/4pDpzDt-Nj1ya9cCdQtT8psFCn0.mft
Manifest number: 0ABA
Signing time: Mon 04 Aug 2025 08:01:15 +0000
Manifest this update: Mon 04 Aug 2025 08:01:15 +0000
Manifest next update: Tue 05 Aug 2025 08:01:15 +0000
Files and hashes: 1: 4pDpzDt-Nj1ya9cCdQtT8psFCn0.crl (hash: AQqIJwfZcMxMRRnFGOSun4T7dSUv4faQ2xE34BeSCdg=)
2: 5sj4OfjUHNqFx_j1Ef8g7Ypw6oo.roa (hash: Pny1CSiGEjtv4l10QsiP9fVNmh1agrbGLVUftiy6LQs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/55354e-bce7-4a5d-b561-9113fd7afd6c/1/4pDpzDt-Nj1ya9cCdQtT8psFCn0.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/55354e-bce7-4a5d-b561-9113fd7afd6c/1/4pDpzDt-Nj1ya9cCdQtT8psFCn0.mft
rsync://rpki.ripe.net/repository/DEFAULT/4pDpzDt-Nj1ya9cCdQtT8psFCn0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:74:19:5c:25:b3:41:d6:bd:2d:9f:05:33:af:03:c2:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e290e9cc3b7e363d726bd702750b53f29b050a7d
Validity
Not Before: Aug 4 08:01:15 2025 GMT
Not After : Aug 5 08:01:15 2025 GMT
Subject: CN=c25aa806cc924d751063b5c2e109e12243c5d64e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:8d:74:f6:8c:80:d4:33:14:14:24:16:d7:9b:
73:25:ab:aa:d8:df:d5:10:65:66:11:71:31:dd:64:
58:7c:4c:1a:0a:93:0b:d2:c4:8d:d5:d7:b8:a7:4a:
11:fd:4c:75:c4:c5:db:3c:2e:b9:27:fc:e8:9d:0b:
b3:a0:d5:09:c1:e9:c1:05:00:93:e9:f9:e2:f6:58:
5c:52:81:5e:73:89:10:7b:73:7c:61:af:da:16:6e:
65:88:a3:36:56:38:6b:1d:08:4d:8e:fb:86:dd:a7:
fd:29:dd:18:1b:aa:14:00:ef:43:59:fb:88:0d:a2:
78:a1:5b:69:6f:4c:b2:93:b4:0d:55:1b:90:46:d0:
34:38:5b:a6:6a:e0:f3:33:29:f6:ee:2e:05:59:04:
cd:20:91:b8:d2:99:5c:83:df:a4:5b:0a:e6:58:b5:
45:3e:3c:d7:06:3a:d0:21:a9:11:11:e8:10:a2:23:
c6:86:54:f1:b2:30:96:75:f3:ba:7d:3f:f5:5c:f2:
66:1b:29:0d:7f:94:a7:64:b1:d4:79:97:8b:7c:80:
e9:5b:1e:94:12:5e:55:d3:b3:66:dc:01:9c:25:93:
62:af:2a:c9:20:30:3a:69:5d:7a:39:5e:70:47:dd:
0a:38:b6:37:dd:ea:53:51:d7:68:28:7e:9d:c5:8e:
c3:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:5A:A8:06:CC:92:4D:75:10:63:B5:C2:E1:09:E1:22:43:C5:D6:4E
X509v3 Authority Key Identifier:
keyid:E2:90:E9:CC:3B:7E:36:3D:72:6B:D7:02:75:0B:53:F2:9B:05:0A:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4pDpzDt-Nj1ya9cCdQtT8psFCn0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/55354e-bce7-4a5d-b561-9113fd7afd6c/1/4pDpzDt-Nj1ya9cCdQtT8psFCn0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/55354e-bce7-4a5d-b561-9113fd7afd6c/1/4pDpzDt-Nj1ya9cCdQtT8psFCn0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:e6:57:64:9e:2d:18:96:b8:4a:42:38:cf:64:72:fd:aa:1c:
fc:be:a1:37:2a:e1:37:90:2f:75:11:1b:6b:4a:27:f8:ea:36:
8a:6a:02:49:39:b6:20:64:d6:f8:8e:bb:eb:8b:1e:a8:f7:55:
db:17:6f:d3:5a:05:5b:0a:f3:d8:85:a5:15:c4:36:ad:64:39:
a2:1b:37:1a:41:c1:71:fb:59:00:d9:29:d9:9a:d7:cf:ee:a8:
4f:1b:42:28:29:c0:d8:5a:45:df:24:9d:dd:bf:eb:a2:71:b7:
19:fe:38:ff:6e:04:7c:74:b6:80:44:2a:43:f8:4f:b3:5f:f3:
de:a7:fe:0a:d6:b4:69:37:11:5b:5d:36:4b:bb:a1:0c:ed:da:
c4:54:27:ab:73:a4:ad:23:7d:e7:3a:10:dd:7a:af:c6:28:c7:
3d:f4:e9:8c:23:d5:46:75:d4:24:f9:5d:e3:3a:96:93:d9:86:
b0:9b:d5:cf:1a:22:6b:e8:47:11:3b:6d:07:22:c2:33:7e:61:
79:b7:8c:05:5a:f1:1c:07:7d:cf:4a:2f:a7:b6:e0:5d:b8:87:
00:64:c0:82:c2:14:e1:8d:09:ae:2f:05:23:f6:32:18:40:5b:
99:ca:4e:3a:2e:28:dd:ae:37:41:53:16:93:57:cc:cd:77:28:
54:53:61:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:14:55 2025 by rpki-client