Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/908070-fd94-4a75-9872-31c733197073/1/4fR8EaOjyuBqGShgqWxQU-wEtdw.mft
File: 4fR8EaOjyuBqGShgqWxQU-wEtdw.mft (raw, json)
Hash identifier: MH1NZy3NXsyOT+8DxuEI3pxfGztRmFN/18F2liRdy1M=
Subject key identifier: 3D:5A:DA:95:C8:0A:9F:C7:74:33:92:3B:50:DB:60:5D:66:78:F7:FE
Authority key identifier: E1:F4:7C:11:A3:A3:CA:E0:6A:19:28:60:A9:6C:50:53:EC:04:B5:DC
Certificate issuer: /CN=e1f47c11a3a3cae06a192860a96c5053ec04b5dc
Certificate serial: 01984AE59E956B38568640C2DC10F0A47313
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4fR8EaOjyuBqGShgqWxQU-wEtdw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/908070-fd94-4a75-9872-31c733197073/1/4fR8EaOjyuBqGShgqWxQU-wEtdw.mft
Manifest number: 1312
Signing time: Sun 27 Jul 2025 08:00:18 +0000
Manifest this update: Sun 27 Jul 2025 08:00:18 +0000
Manifest next update: Mon 28 Jul 2025 08:00:18 +0000
Files and hashes: 1: 1-HjAvExmkGaxksSqn85_Dy6VvJM.roa (hash: 8D5kTAs24JEFoR1NyKeFUo+R/Y6CsZUzK26/NpwtHaw=)
2: 4fR8EaOjyuBqGShgqWxQU-wEtdw.crl (hash: OSPF+B3OqBHnu9zulnLrS5OaR2ta4LTulLXS18PGe4g=)
3: UBam_LF0XAef-2xohQdZlRl7HBg.roa (hash: 7WO0S2f70pIralvylysZjQGv/GwrHdv9TmJ840KoDXo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/908070-fd94-4a75-9872-31c733197073/1/4fR8EaOjyuBqGShgqWxQU-wEtdw.crl
rsync://rpki.ripe.net/repository/DEFAULT/14/908070-fd94-4a75-9872-31c733197073/1/4fR8EaOjyuBqGShgqWxQU-wEtdw.mft
rsync://rpki.ripe.net/repository/DEFAULT/4fR8EaOjyuBqGShgqWxQU-wEtdw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4a:e5:9e:95:6b:38:56:86:40:c2:dc:10:f0:a4:73:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e1f47c11a3a3cae06a192860a96c5053ec04b5dc
Validity
Not Before: Jul 27 08:00:18 2025 GMT
Not After : Jul 28 08:00:18 2025 GMT
Subject: CN=3d5ada95c80a9fc77433923b50db605d6678f7fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:e0:4e:88:da:77:aa:be:73:04:90:87:fd:92:
b0:73:f5:00:0d:88:be:9f:d6:10:c8:3a:89:4d:2d:
b5:c2:5f:33:de:50:95:1d:43:19:ea:ff:b1:0f:c3:
be:ca:cf:f5:71:fa:12:47:db:ee:1a:de:84:74:29:
a1:84:bd:53:21:40:fe:5d:c5:e5:47:1e:20:1d:ea:
b4:c2:88:53:22:f8:1a:03:c0:75:3c:c8:da:a4:17:
35:e9:30:91:4a:a1:72:79:51:f5:20:9c:e4:5a:e0:
b6:d2:76:c6:14:a3:f7:74:06:07:97:51:e9:7f:1d:
ed:b7:8b:fa:9f:49:76:8b:a8:e7:aa:e8:2a:5a:3b:
81:29:1f:21:9e:ed:63:39:1d:62:cd:79:2c:d0:24:
21:d2:ba:e2:bc:de:93:55:94:90:c3:39:7b:bf:38:
4b:42:f7:81:79:06:50:ea:04:a6:06:0a:a2:2d:43:
40:5b:d9:40:4e:2a:1a:82:6f:e4:89:39:fd:e4:50:
b0:c7:f1:43:0b:95:db:eb:0c:b1:e3:5f:2c:09:bd:
5a:7e:f7:08:89:b0:33:d3:84:9e:42:31:df:62:a5:
56:b8:ce:d0:f3:ed:95:6f:49:c5:fa:00:d0:25:a9:
e4:04:fd:67:90:e8:7c:46:eb:3f:1c:a2:11:99:98:
53:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:5A:DA:95:C8:0A:9F:C7:74:33:92:3B:50:DB:60:5D:66:78:F7:FE
X509v3 Authority Key Identifier:
keyid:E1:F4:7C:11:A3:A3:CA:E0:6A:19:28:60:A9:6C:50:53:EC:04:B5:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4fR8EaOjyuBqGShgqWxQU-wEtdw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/908070-fd94-4a75-9872-31c733197073/1/4fR8EaOjyuBqGShgqWxQU-wEtdw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/908070-fd94-4a75-9872-31c733197073/1/4fR8EaOjyuBqGShgqWxQU-wEtdw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ba:f5:4e:7c:71:ed:39:b2:54:94:b7:ba:5e:09:50:05:70:2d:
2a:fc:85:02:44:d5:b4:f2:b8:65:24:e5:d7:c5:cf:79:22:1f:
fa:ef:da:b1:ca:93:9f:00:14:65:ae:fe:31:4b:5b:bf:60:e7:
52:59:62:26:fb:33:5c:57:34:8e:e9:bb:8a:a8:b4:c9:59:e1:
aa:01:68:68:82:8d:a3:4b:9e:67:b1:ef:94:ee:30:7e:e3:b7:
07:3a:a1:c2:e2:27:7c:7f:a4:82:05:62:c4:a6:1a:31:66:e2:
12:f6:e0:86:ad:1c:de:2e:51:9c:2a:6a:63:f4:e7:c4:94:2a:
51:06:7c:6f:5f:ff:6a:6c:cd:dc:76:67:ce:c2:46:5f:69:8c:
f1:35:ca:a6:22:4c:21:12:fb:3d:a9:e0:35:52:29:ae:86:da:
f6:85:53:64:80:d3:a3:b8:d1:10:0c:80:67:e4:9f:ff:55:c3:
a1:23:cb:b9:94:09:e0:85:25:78:3e:69:95:94:0d:47:f4:2d:
f4:ce:18:8b:92:6d:66:11:77:51:d9:eb:25:f0:ae:0e:17:31:
28:f7:93:32:b8:05:73:c8:d9:1d:47:f0:ee:e3:5f:77:08:a1:
88:2f:84:b4:0f:cd:9f:aa:79:a2:1d:b2:19:3b:92:8e:95:80:
af:da:fa:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 12:25:57 2025 by rpki-client