Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/d520c4-deb4-438b-93bf-768f3d6ee19e/1/4Genud52frl9tk5RZHhJRjO9VOo.mft
File: 4Genud52frl9tk5RZHhJRjO9VOo.mft (raw, json)
Hash identifier: pZdg3QpFK189vyc3AP8HQSvAweNYsnjIfOxcFMEnLnM=
Subject key identifier: 97:05:D9:C9:4D:C3:E0:2A:D1:C4:86:61:C4:DC:47:75:4F:3D:CF:60
Authority key identifier: E0:67:A7:B9:DE:76:7E:B9:7D:B6:4E:51:64:78:49:46:33:BD:54:EA
Certificate issuer: /CN=e067a7b9de767eb97db64e516478494633bd54ea
Certificate serial: 019844E3C2DEFFA724F3543C15A906848DB2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4Genud52frl9tk5RZHhJRjO9VOo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/d520c4-deb4-438b-93bf-768f3d6ee19e/1/4Genud52frl9tk5RZHhJRjO9VOo.mft
Manifest number: 0BFF
Signing time: Sat 26 Jul 2025 04:00:33 +0000
Manifest this update: Sat 26 Jul 2025 04:00:33 +0000
Manifest next update: Sun 27 Jul 2025 04:00:33 +0000
Files and hashes: 1: 4Genud52frl9tk5RZHhJRjO9VOo.crl (hash: 0PsKOy0A/bea00enps50Tw6+B63TGW3loZsSvPgUXa4=)
2: DQo4EErqs46yA4QIpyLHGlOprVU.roa (hash: jpEUtUNk7NIqvU0XQCmCZgYXNkApAZ2zVdQgWdhDGWc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/d520c4-deb4-438b-93bf-768f3d6ee19e/1/4Genud52frl9tk5RZHhJRjO9VOo.crl
rsync://rpki.ripe.net/repository/DEFAULT/2f/d520c4-deb4-438b-93bf-768f3d6ee19e/1/4Genud52frl9tk5RZHhJRjO9VOo.mft
rsync://rpki.ripe.net/repository/DEFAULT/4Genud52frl9tk5RZHhJRjO9VOo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 02:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:44:e3:c2:de:ff:a7:24:f3:54:3c:15:a9:06:84:8d:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e067a7b9de767eb97db64e516478494633bd54ea
Validity
Not Before: Jul 26 04:00:33 2025 GMT
Not After : Jul 27 04:00:33 2025 GMT
Subject: CN=9705d9c94dc3e02ad1c48661c4dc47754f3dcf60
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:5e:4a:1c:92:c9:6b:57:df:5c:7e:a3:78:aa:
1a:a8:0f:63:18:3a:0c:cc:26:b6:46:7e:4f:19:c5:
6b:6a:07:b6:e1:f4:28:ce:35:88:f4:6b:13:27:ee:
bc:50:47:e0:2d:4a:d8:65:a3:ad:3a:eb:ed:44:18:
ac:0a:5f:cb:53:d8:fc:a7:a3:0a:1b:52:9b:8e:99:
8c:d2:dd:a6:c1:67:0f:a5:3a:61:63:0d:9d:fd:19:
11:17:ab:f5:72:31:1f:16:89:2e:39:d2:8e:b9:0a:
92:3e:4e:94:75:4c:61:9d:06:5f:a9:3f:05:54:ca:
b1:c3:08:ef:27:ff:06:c1:71:30:bf:5d:ec:49:e4:
10:28:14:9e:d0:d9:a4:8c:16:f0:cd:67:3f:db:25:
b6:1f:70:8f:0e:f6:82:ba:7a:e4:a0:f9:6c:3e:89:
57:db:12:e1:c4:be:53:38:89:f6:61:ca:81:7a:9e:
8f:f2:a6:b8:13:4f:55:63:91:18:5f:81:a5:55:20:
15:a1:c1:4c:00:41:e7:50:05:ad:e9:38:19:75:c2:
cc:eb:9f:6c:66:27:5c:94:98:53:58:6d:27:b2:e0:
4c:f9:99:f6:d4:ba:20:c8:b9:a5:2d:b1:af:ca:02:
a4:8f:94:08:6f:4c:f9:ad:e3:5a:4c:b7:a7:47:14:
f1:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:05:D9:C9:4D:C3:E0:2A:D1:C4:86:61:C4:DC:47:75:4F:3D:CF:60
X509v3 Authority Key Identifier:
keyid:E0:67:A7:B9:DE:76:7E:B9:7D:B6:4E:51:64:78:49:46:33:BD:54:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4Genud52frl9tk5RZHhJRjO9VOo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/d520c4-deb4-438b-93bf-768f3d6ee19e/1/4Genud52frl9tk5RZHhJRjO9VOo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/d520c4-deb4-438b-93bf-768f3d6ee19e/1/4Genud52frl9tk5RZHhJRjO9VOo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:be:4d:ce:a5:cc:cb:4f:62:ec:b1:43:35:ad:84:95:cd:e3:
29:39:6d:aa:d1:7b:53:c5:55:67:c0:32:e6:d1:1a:41:72:52:
fc:3c:67:cd:67:0b:5e:d6:1e:dc:12:8b:9f:27:2e:52:b0:b8:
e8:66:64:a7:4e:2e:83:e1:33:a7:2c:a8:8f:67:3a:f5:dd:4c:
87:ac:4e:5c:3d:66:85:32:b1:e9:ee:d8:f4:27:78:aa:97:05:
f8:2a:dc:a2:e0:f2:69:e2:70:79:da:62:32:94:dc:15:29:72:
b2:64:1e:24:e6:b1:ee:6c:58:00:d3:7d:bc:0a:c2:bd:07:21:
2a:3c:c7:99:94:be:62:22:b2:bc:58:98:14:95:35:fe:7c:33:
ab:b7:f8:11:c5:aa:20:f4:1c:9e:c9:30:c3:49:c9:55:fe:6f:
e8:96:f5:4a:12:62:f5:62:15:48:3b:3f:41:aa:3a:7d:a7:f3:
f3:4d:dd:eb:cd:0b:24:5b:74:57:b5:c1:c7:fc:2e:e6:d1:39:
01:98:25:17:86:a8:4f:24:74:50:08:7a:d9:9a:c1:18:54:32:
60:82:d5:0b:1b:45:d7:ff:b4:8b:dd:c4:a0:bc:17:5d:c7:9a:
d2:a2:37:ca:0a:a9:da:a9:d6:94:95:71:9d:74:69:4c:34:57:
03:d1:f9:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 11:33:00 2025 by rpki-client