Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/d45469-0c7b-4410-bb5e-7dc528aa5d4e/1/4NXVYedu8lnEoC3zDzUGTe3t8tc.mft
File: 4NXVYedu8lnEoC3zDzUGTe3t8tc.mft (raw, json)
Hash identifier: XcSY4w0xDj/q7FSNCjiK0iU0/veq5MQwzw8UStycKzg=
Subject key identifier: 35:DE:88:D0:FD:3F:52:E5:44:F0:55:36:CF:AD:3A:F1:28:9D:A7:DF
Authority key identifier: E0:D5:D5:61:E7:6E:F2:59:C4:A0:2D:F3:0F:35:06:4D:ED:ED:F2:D7
Certificate issuer: /CN=e0d5d561e76ef259c4a02df30f35064dededf2d7
Certificate serial: 01984A0A2FFCB52A0E55EB1B138D8ED3722F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4NXVYedu8lnEoC3zDzUGTe3t8tc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/d45469-0c7b-4410-bb5e-7dc528aa5d4e/1/4NXVYedu8lnEoC3zDzUGTe3t8tc.mft
Manifest number: 04CD
Signing time: Sun 27 Jul 2025 04:00:38 +0000
Manifest this update: Sun 27 Jul 2025 04:00:38 +0000
Manifest next update: Mon 28 Jul 2025 04:00:38 +0000
Files and hashes: 1: 4NXVYedu8lnEoC3zDzUGTe3t8tc.crl (hash: ntJaG125JFGD7iBlaccLsIuhFAO6Y3ay/TlK70i00u0=)
2: 6pWip88KFCQlBaqpP5OAyYyKKL0.roa (hash: 2kxcH3Ha1RRmUiGnKMePTKTFBssB2qkinO67e/D6ssU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/23/d45469-0c7b-4410-bb5e-7dc528aa5d4e/1/4NXVYedu8lnEoC3zDzUGTe3t8tc.crl
rsync://rpki.ripe.net/repository/DEFAULT/23/d45469-0c7b-4410-bb5e-7dc528aa5d4e/1/4NXVYedu8lnEoC3zDzUGTe3t8tc.mft
rsync://rpki.ripe.net/repository/DEFAULT/4NXVYedu8lnEoC3zDzUGTe3t8tc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 20:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4a:0a:2f:fc:b5:2a:0e:55:eb:1b:13:8d:8e:d3:72:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e0d5d561e76ef259c4a02df30f35064dededf2d7
Validity
Not Before: Jul 27 04:00:38 2025 GMT
Not After : Jul 28 04:00:38 2025 GMT
Subject: CN=35de88d0fd3f52e544f05536cfad3af1289da7df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:db:06:cf:c0:50:26:b2:4a:31:00:f9:87:6b:
03:5a:cd:6b:1d:ad:72:04:8c:dd:c3:ff:d7:15:35:
5e:e3:5b:57:be:64:74:cd:c6:67:72:a7:13:59:ba:
31:6d:de:f7:4b:fd:0e:0f:98:14:f7:63:27:1b:70:
6e:dd:91:84:f1:ad:e7:e5:18:6f:25:fc:e8:22:c0:
ca:fa:7d:24:a1:b6:86:c9:21:8f:25:2c:ca:3e:3f:
11:95:e5:22:80:f3:23:2b:75:d8:79:85:88:6d:b1:
13:06:06:6d:60:a2:ed:ab:64:8f:e5:c5:bb:d0:83:
41:64:1a:88:44:73:bb:79:33:2e:42:66:31:b0:d2:
a2:68:9d:3a:34:40:eb:c3:be:4f:c3:92:86:f4:61:
65:07:03:82:49:4d:fc:2f:dd:cf:ff:2d:0c:fc:64:
c2:16:bf:3f:29:46:5d:59:ea:87:ff:c0:37:0c:72:
da:16:13:1a:1a:b6:4a:45:70:14:31:2a:bc:63:a4:
c6:59:e4:bb:ca:1c:8d:f4:da:73:94:e0:82:63:46:
1a:ee:fe:33:0e:24:13:d6:d0:62:20:9d:f8:9d:72:
a1:b4:29:f2:cb:46:0f:aa:16:e5:32:8b:e0:8d:dc:
0e:6b:4b:7d:4a:7d:3c:5e:73:ed:07:71:26:5c:1d:
03:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:DE:88:D0:FD:3F:52:E5:44:F0:55:36:CF:AD:3A:F1:28:9D:A7:DF
X509v3 Authority Key Identifier:
keyid:E0:D5:D5:61:E7:6E:F2:59:C4:A0:2D:F3:0F:35:06:4D:ED:ED:F2:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4NXVYedu8lnEoC3zDzUGTe3t8tc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/d45469-0c7b-4410-bb5e-7dc528aa5d4e/1/4NXVYedu8lnEoC3zDzUGTe3t8tc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/23/d45469-0c7b-4410-bb5e-7dc528aa5d4e/1/4NXVYedu8lnEoC3zDzUGTe3t8tc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:b9:e6:6c:5c:a0:57:e0:b3:16:cf:e5:b0:f7:19:f6:c9:e3:
ce:b6:fe:c0:5e:49:6e:89:9d:8f:aa:ee:b7:91:48:b7:58:43:
fc:56:81:bb:12:46:86:13:fb:9b:59:6e:b4:f1:11:58:34:fd:
8f:e2:bd:3d:ff:c4:35:8f:0f:a0:df:9e:2a:e7:ee:3c:7f:ba:
c3:2b:74:fe:58:76:4c:5b:9e:72:5c:78:dc:a7:1f:81:12:57:
45:ad:5c:f0:24:2b:9f:b0:5b:c4:dd:fd:e7:bf:14:fe:9d:a5:
85:2c:05:f5:3d:31:2f:b3:b2:c2:0c:0b:ec:c2:c9:ce:96:83:
9f:bb:ac:2a:35:66:d3:c1:17:d7:08:15:19:66:0d:12:67:5f:
7a:cb:a8:a3:9b:fe:e0:fa:af:fb:26:a9:04:c6:7e:6b:97:b9:
02:e1:ec:cd:5e:cc:35:8d:56:7e:46:22:3d:01:a9:ec:12:4b:
f8:ea:98:38:34:78:bc:d7:92:a9:d9:a9:ee:b9:86:60:6e:bf:
85:0d:25:b5:0d:25:76:50:d6:2a:38:c7:c8:c2:6a:68:f3:63:
f0:90:dd:d7:49:36:23:b5:27:9a:c7:59:7a:e5:80:47:44:3d:
d0:26:50:4e:27:73:9e:21:69:77:35:c9:e1:ec:9c:f4:b4:aa:
77:1c:f1:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 05:27:16 2025 by rpki-client