Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/e7d1a9-ac76-4a9f-b175-47c10a5ce534/1/4S9k9_aXqptumYLAt2u3hCEzh2o.mft
File: 4S9k9_aXqptumYLAt2u3hCEzh2o.mft (raw, json)
Hash identifier: /vNlna/hlGpnu9PXikIi+UdwqEnSLZ2w1b6sZzvhVmo=
Subject key identifier: 44:2C:01:A1:2B:73:93:4C:C6:50:B9:05:01:62:25:BA:36:22:BB:86
Authority key identifier: E1:2F:64:F7:F6:97:AA:9B:6E:99:82:C0:B7:6B:B7:84:21:33:87:6A
Certificate issuer: /CN=e12f64f7f697aa9b6e9982c0b76bb7842133876a
Certificate serial: 0198462D08AB4B9D59DA705CD7AB1D994D3A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4S9k9_aXqptumYLAt2u3hCEzh2o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/e7d1a9-ac76-4a9f-b175-47c10a5ce534/1/4S9k9_aXqptumYLAt2u3hCEzh2o.mft
Manifest number: 095A
Signing time: Sat 26 Jul 2025 10:00:13 +0000
Manifest this update: Sat 26 Jul 2025 10:00:13 +0000
Manifest next update: Sun 27 Jul 2025 10:00:13 +0000
Files and hashes: 1: 4S9k9_aXqptumYLAt2u3hCEzh2o.crl (hash: pT+1FMVOyUDiHG9LQ8UMkUVD84X6PDGlu99W4yFaJaw=)
2: mhXII1TmoI3urvchZmrd238HnqI.roa (hash: ymkQlbzHXOVaEGzGKdRpU2whYkKkdIgkhGPuabVJPyU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/e7d1a9-ac76-4a9f-b175-47c10a5ce534/1/4S9k9_aXqptumYLAt2u3hCEzh2o.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/e7d1a9-ac76-4a9f-b175-47c10a5ce534/1/4S9k9_aXqptumYLAt2u3hCEzh2o.mft
rsync://rpki.ripe.net/repository/DEFAULT/4S9k9_aXqptumYLAt2u3hCEzh2o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 10:00:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:46:2d:08:ab:4b:9d:59:da:70:5c:d7:ab:1d:99:4d:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e12f64f7f697aa9b6e9982c0b76bb7842133876a
Validity
Not Before: Jul 26 10:00:13 2025 GMT
Not After : Jul 27 10:00:13 2025 GMT
Subject: CN=442c01a12b73934cc650b905016225ba3622bb86
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:1a:de:76:ed:67:72:98:7c:1a:1f:69:99:74:
27:67:d4:8a:70:a5:80:12:e0:b0:a7:13:48:de:8d:
8e:f3:c5:53:40:2f:83:93:fd:cb:33:06:9f:21:e4:
f8:10:5f:96:d5:2f:07:8f:d8:a7:89:7d:00:90:44:
3d:23:7a:50:97:6e:b4:ea:da:62:cd:95:a0:fe:6f:
c7:71:73:8c:61:ca:43:82:49:fe:9a:10:f0:97:95:
9a:9e:83:85:09:ef:81:4e:60:ce:9f:46:12:8e:ee:
c0:7e:39:11:11:2f:a7:e3:d0:07:ec:c8:bd:1e:05:
77:9c:51:50:78:31:70:6b:36:58:bc:d9:e6:33:50:
78:c3:53:80:75:25:78:d2:aa:4b:78:60:64:ec:e6:
3c:1b:98:c2:18:ce:77:ec:2a:d6:81:32:e9:05:ea:
94:38:b9:17:e0:de:ca:3b:41:fa:5f:b2:30:dd:32:
a3:86:32:92:f8:84:41:c1:f3:6f:95:1d:cf:12:bd:
a3:00:b5:14:30:9a:4e:da:1c:04:db:34:a6:14:f3:
5f:60:ff:fb:6b:ab:d9:61:8c:1c:90:c0:7f:6b:a5:
da:55:7c:58:87:15:65:32:8e:43:e5:c6:a8:74:ee:
ea:0e:4b:8d:de:6d:ca:f1:32:b7:0d:40:6d:e7:b1:
37:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:2C:01:A1:2B:73:93:4C:C6:50:B9:05:01:62:25:BA:36:22:BB:86
X509v3 Authority Key Identifier:
keyid:E1:2F:64:F7:F6:97:AA:9B:6E:99:82:C0:B7:6B:B7:84:21:33:87:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4S9k9_aXqptumYLAt2u3hCEzh2o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/e7d1a9-ac76-4a9f-b175-47c10a5ce534/1/4S9k9_aXqptumYLAt2u3hCEzh2o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/e7d1a9-ac76-4a9f-b175-47c10a5ce534/1/4S9k9_aXqptumYLAt2u3hCEzh2o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:39:71:3e:de:89:b6:15:3f:43:ba:46:7f:d5:e0:7d:43:b8:
1e:5a:bc:d2:32:a1:7c:b9:35:d3:22:d5:14:4a:7d:de:14:d1:
92:a4:2c:56:13:7d:1a:f1:73:c2:16:90:28:9f:ca:7a:3d:5e:
77:da:6f:10:2c:40:99:37:d1:04:e0:2c:2f:bb:7d:97:27:0a:
2d:e9:5e:8b:c0:22:d5:ff:d1:92:89:5e:44:88:dc:ec:5a:f9:
ab:db:d8:68:4b:cc:38:83:16:e3:d2:e7:f0:f0:ab:81:93:ce:
66:92:f4:23:8d:a1:93:9b:8d:f5:ea:c3:df:13:91:97:76:c1:
de:55:d3:d1:52:c9:6c:2e:4e:a1:61:02:79:c7:fe:97:e3:87:
04:a2:c9:fd:14:e1:e9:15:96:db:ff:30:99:aa:f2:d9:31:d0:
f8:6a:29:4b:83:84:4a:1d:6c:27:c4:b9:b7:46:3f:e9:a2:de:
2c:cd:7c:21:de:e5:76:6b:dd:85:49:bb:81:8e:1d:9a:2c:31:
b6:9a:2e:cc:a8:42:07:f1:1a:c4:08:1d:ed:94:37:a5:ab:1a:
9c:26:9a:ea:2b:04:eb:44:3f:5c:26:70:0d:f4:03:03:89:fe:
f1:f0:39:54:25:a0:5b:9d:6f:a4:2e:eb:ec:6e:2d:d7:04:a9:
fb:d7:6d:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 20:09:41 2025 by rpki-client