Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/0167eb-0d16-4cc1-8047-142fcacd7a49/1/4xVK21ou2ZnPHbnBJxsiCdrTRJ4.mft
File: 4xVK21ou2ZnPHbnBJxsiCdrTRJ4.mft (raw, json)
Hash identifier: 2z+y4IkFK/ABqKoQpItXhKUh/V2BluoOyS/3KIj4Q1o=
Subject key identifier: A9:A1:D3:44:B4:43:E7:A3:6D:C8:B8:6C:63:0F:D1:21:94:31:75:E2
Authority key identifier: E3:15:4A:DB:5A:2E:D9:99:CF:1D:B9:C1:27:1B:22:09:DA:D3:44:9E
Certificate issuer: /CN=e3154adb5a2ed999cf1db9c1271b2209dad3449e
Certificate serial: 0198485329D77F78E958FC2503CBD5DCD0A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4xVK21ou2ZnPHbnBJxsiCdrTRJ4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/0167eb-0d16-4cc1-8047-142fcacd7a49/1/4xVK21ou2ZnPHbnBJxsiCdrTRJ4.mft
Manifest number: 1494
Signing time: Sat 26 Jul 2025 20:01:06 +0000
Manifest this update: Sat 26 Jul 2025 20:01:06 +0000
Manifest next update: Sun 27 Jul 2025 20:01:06 +0000
Files and hashes: 1: 4xVK21ou2ZnPHbnBJxsiCdrTRJ4.crl (hash: 29Wy/eYwyTZGlDIy2cUMXl/LGNHMmgnCwtQrgP+Pn80=)
2: YKk_IxXaH7sfK7_gRS3093UyRYo.roa (hash: COs47LOLhU2xn+3tfczoJAT+wVHUvoY7/hZnsmTjtwc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/23/0167eb-0d16-4cc1-8047-142fcacd7a49/1/4xVK21ou2ZnPHbnBJxsiCdrTRJ4.crl
rsync://rpki.ripe.net/repository/DEFAULT/23/0167eb-0d16-4cc1-8047-142fcacd7a49/1/4xVK21ou2ZnPHbnBJxsiCdrTRJ4.mft
rsync://rpki.ripe.net/repository/DEFAULT/4xVK21ou2ZnPHbnBJxsiCdrTRJ4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 20:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:48:53:29:d7:7f:78:e9:58:fc:25:03:cb:d5:dc:d0:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e3154adb5a2ed999cf1db9c1271b2209dad3449e
Validity
Not Before: Jul 26 20:01:06 2025 GMT
Not After : Jul 27 20:01:06 2025 GMT
Subject: CN=a9a1d344b443e7a36dc8b86c630fd121943175e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:27:df:e9:8a:4f:23:a9:68:18:45:38:c5:17:
59:78:1e:5c:65:09:02:c1:50:d0:7c:f9:94:e2:66:
94:59:b8:57:51:ee:c9:9e:f2:a9:13:5a:95:2d:68:
bc:33:63:0d:b0:f5:96:c3:c5:02:6f:54:eb:c0:59:
6d:26:c2:09:01:00:ce:d6:09:aa:10:15:75:4b:4c:
9a:d2:4d:24:c5:a1:99:70:b0:59:4f:48:02:09:87:
80:4e:f8:e2:c7:a7:4f:30:b9:11:f8:48:1c:bf:e3:
be:5d:21:81:6c:19:e4:6b:2b:b1:07:ab:87:59:08:
0d:d1:76:0d:95:d0:09:8e:9d:93:bb:df:e8:c4:16:
93:79:a9:79:7d:44:b9:c6:ca:09:b7:33:22:b2:e0:
cb:cd:01:9a:8c:34:99:58:73:e9:01:4f:bc:78:12:
1d:e0:e6:dd:87:8a:2c:80:25:4b:bf:c2:3b:d1:8f:
e2:b5:9d:4c:0d:30:62:f7:6f:70:d7:e3:71:b8:3b:
6c:b1:9b:e4:3b:5c:b3:0e:51:7d:8c:54:0e:b3:b8:
59:8a:05:89:b1:b3:8c:72:47:c3:05:63:7e:f1:84:
03:7c:96:ed:9c:c2:86:3c:88:13:99:56:a4:28:fe:
02:e9:70:79:1b:ec:5c:af:ff:eb:79:50:6e:3f:7e:
e0:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:A1:D3:44:B4:43:E7:A3:6D:C8:B8:6C:63:0F:D1:21:94:31:75:E2
X509v3 Authority Key Identifier:
keyid:E3:15:4A:DB:5A:2E:D9:99:CF:1D:B9:C1:27:1B:22:09:DA:D3:44:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4xVK21ou2ZnPHbnBJxsiCdrTRJ4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/0167eb-0d16-4cc1-8047-142fcacd7a49/1/4xVK21ou2ZnPHbnBJxsiCdrTRJ4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/23/0167eb-0d16-4cc1-8047-142fcacd7a49/1/4xVK21ou2ZnPHbnBJxsiCdrTRJ4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a5:29:54:23:74:90:14:f5:06:2a:15:54:80:f3:56:b7:a7:ab:
83:77:37:3b:a0:d7:ec:5d:f2:85:d0:c3:4e:ef:06:96:eb:ae:
73:ee:c1:51:fc:4f:0a:0b:78:22:74:14:14:12:1d:b8:22:57:
cb:2e:7e:34:e1:ae:bf:9f:a8:d1:e0:1e:2f:07:89:17:7a:fa:
61:34:77:d7:4f:04:90:d4:f4:bb:a4:32:57:61:be:e9:23:3b:
67:b0:f4:0d:14:74:9b:cc:3f:54:09:d9:66:6d:ce:f6:61:70:
99:43:5b:2f:10:b3:2d:9a:96:a1:6b:73:07:20:d6:b6:3b:32:
94:8d:6d:7b:a6:95:e9:6b:1e:b5:9c:14:17:fa:0f:e4:54:eb:
18:73:42:23:42:f7:80:4e:08:17:af:d8:b8:cc:ee:53:24:07:
44:19:23:4a:cb:05:6f:cc:dc:d4:e3:0c:b8:ea:07:ff:b5:fa:
b2:6f:38:22:ce:e8:ae:80:3c:6a:9e:f0:87:90:c5:70:32:ab:
3f:e2:f6:79:02:9d:76:f3:ce:86:b1:3a:64:19:59:8d:2c:74:
ae:e1:d1:49:58:e9:e1:65:45:95:f0:2d:b7:18:ff:8e:94:7c:
62:b2:96:43:40:26:5f:d6:65:4a:2c:91:2b:20:7d:df:55:9d:
e4:76:2f:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 05:12:26 2025 by rpki-client