Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/6e43b9-c6a7-4d51-8061-06c8bb374a58/1/4GU20rF8RcF1c58zExGb4hnTMaw.mft
File: 4GU20rF8RcF1c58zExGb4hnTMaw.mft (raw, json)
Hash identifier: XS88oWnlmEYPgds8/um6J7hdiOFBN+qa/d6prJQP9CU=
Subject key identifier: 72:A3:92:EF:C7:B1:79:25:A3:E7:55:87:94:2C:9E:1F:52:A6:EF:87
Authority key identifier: E0:65:36:D2:B1:7C:45:C1:75:73:9F:33:13:11:9B:E2:19:D3:31:AC
Certificate issuer: /CN=e06536d2b17c45c175739f3313119be219d331ac
Certificate serial: 01984A40ECEAF5D74836F524A93A8C655C4E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4GU20rF8RcF1c58zExGb4hnTMaw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/6e43b9-c6a7-4d51-8061-06c8bb374a58/1/4GU20rF8RcF1c58zExGb4hnTMaw.mft
Manifest number: 1411
Signing time: Sun 27 Jul 2025 05:00:25 +0000
Manifest this update: Sun 27 Jul 2025 05:00:25 +0000
Manifest next update: Mon 28 Jul 2025 05:00:25 +0000
Files and hashes: 1: 4GU20rF8RcF1c58zExGb4hnTMaw.crl (hash: YbSdTaIcHNBiU6q86YaxtCRzwsZg98hzZwZzXIutgo4=)
2: UI1__jiZeKmutEsj1q3GQDM4G-M.roa (hash: 9sMXrW5behwUEYOSItq82zCqNDvrla3Ktrtlxw/s2dc=)
3: XYSwDgEDu2AsDXqJSeXTfFwYkMs.roa (hash: 4IZPclZa/Ab6eD/hUighnjIphAqh1KKYEqn+pFsOdrg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/6e43b9-c6a7-4d51-8061-06c8bb374a58/1/4GU20rF8RcF1c58zExGb4hnTMaw.crl
rsync://rpki.ripe.net/repository/DEFAULT/33/6e43b9-c6a7-4d51-8061-06c8bb374a58/1/4GU20rF8RcF1c58zExGb4hnTMaw.mft
rsync://rpki.ripe.net/repository/DEFAULT/4GU20rF8RcF1c58zExGb4hnTMaw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4a:40:ec:ea:f5:d7:48:36:f5:24:a9:3a:8c:65:5c:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e06536d2b17c45c175739f3313119be219d331ac
Validity
Not Before: Jul 27 05:00:25 2025 GMT
Not After : Jul 28 05:00:25 2025 GMT
Subject: CN=72a392efc7b17925a3e75587942c9e1f52a6ef87
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:5a:4a:fd:ad:b5:55:81:0c:17:50:aa:92:16:
73:ab:84:4c:ae:ca:40:22:a3:cc:e0:0f:7f:17:aa:
7a:6c:de:3a:e1:3c:d3:ac:87:e5:25:78:e3:55:c3:
cc:5e:3f:04:59:35:09:21:84:65:4d:a7:fe:23:bb:
d8:82:b3:54:09:e2:61:b1:c5:60:b1:a9:10:35:ec:
02:0d:37:22:53:ee:4e:ae:ca:c9:85:3c:7a:73:d2:
62:87:d4:27:a8:ec:20:ab:f5:71:77:04:47:30:0c:
ec:56:4e:8d:b6:87:c9:e2:02:cc:97:82:27:74:16:
c7:fd:af:2e:90:0b:a4:23:b7:04:ae:82:fd:06:ec:
55:5a:e5:0f:e7:8c:ac:59:ac:9b:92:c2:25:91:a3:
90:65:4e:df:eb:20:68:7f:80:da:24:d0:69:91:91:
e8:36:da:34:06:51:ed:af:53:ab:14:95:39:ad:f1:
f1:50:78:0e:6e:4d:ad:8e:3c:3b:aa:3b:93:fd:25:
17:6e:f9:9e:65:e5:00:98:66:44:1b:bc:bf:3d:ed:
2e:5c:56:59:08:bd:c9:4c:4c:93:47:16:d4:c8:05:
a2:38:88:f1:17:0f:73:52:f0:31:a6:36:49:84:98:
e1:69:1e:88:5a:58:08:d6:16:69:f0:e7:47:09:40:
1c:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:A3:92:EF:C7:B1:79:25:A3:E7:55:87:94:2C:9E:1F:52:A6:EF:87
X509v3 Authority Key Identifier:
keyid:E0:65:36:D2:B1:7C:45:C1:75:73:9F:33:13:11:9B:E2:19:D3:31:AC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4GU20rF8RcF1c58zExGb4hnTMaw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/6e43b9-c6a7-4d51-8061-06c8bb374a58/1/4GU20rF8RcF1c58zExGb4hnTMaw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/6e43b9-c6a7-4d51-8061-06c8bb374a58/1/4GU20rF8RcF1c58zExGb4hnTMaw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:16:e1:d3:0d:1d:da:fc:40:13:c5:a3:3d:d2:10:59:5f:98:
df:76:b0:0f:03:25:90:b4:8c:b9:23:02:bf:89:fe:7d:c8:20:
8f:d9:10:cb:12:57:27:00:24:97:89:f0:a9:6f:a5:ab:ce:c6:
5b:66:64:c2:9d:a1:ad:b6:be:46:81:7b:fd:f1:ee:26:57:62:
60:54:da:39:1f:90:99:22:0d:00:38:98:73:9b:a8:96:a2:19:
e9:94:83:0b:a0:d6:6f:02:a1:01:0c:d8:9e:0e:4d:69:02:5c:
a3:f6:ee:f9:a1:0e:37:90:b0:19:72:c6:94:d5:cb:38:e1:e4:
ca:03:b6:48:80:e5:4a:17:6e:4e:d0:b6:f5:0c:0f:0d:26:58:
88:4d:ad:eb:8a:d2:b0:5f:57:ca:79:65:ed:ce:0b:9a:2e:ed:
06:0f:fc:96:75:8a:9f:1d:f6:d9:76:4e:e4:32:a6:d7:fa:1f:
e8:da:09:b8:cc:3e:ac:db:ad:7c:db:f2:73:b7:96:c6:7d:59:
9b:61:dd:0d:d7:37:86:fc:63:69:53:62:3b:34:45:90:9a:b9:
11:90:02:97:1c:3d:22:10:b1:33:7a:d0:93:1f:fc:6a:4a:71:
ab:06:2f:2a:6c:7c:fb:f8:62:20:df:dc:de:b1:e7:16:a6:35:
48:61:e6:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 10:32:19 2025 by rpki-client