Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/523a93-8bbd-44ac-88bd-4e7bca55f821/1/4a7RSE6W5L95k-m4Z7NMNNaorjY.mft
File: 4a7RSE6W5L95k-m4Z7NMNNaorjY.mft (raw, json)
Hash identifier: yMQZGKJVq32TV3qLe1fNGvpwNoGOac+5LPtyDDGYWag=
Subject key identifier: 2A:08:E9:0F:93:84:44:99:2F:39:B7:31:9D:44:2E:07:CC:68:26:3E
Authority key identifier: E1:AE:D1:48:4E:96:E4:BF:79:93:E9:B8:67:B3:4C:34:D6:A8:AE:36
Certificate issuer: /CN=e1aed1484e96e4bf7993e9b867b34c34d6a8ae36
Certificate serial: 01984A09F7548E055208A4F9C5055055EB63
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4a7RSE6W5L95k-m4Z7NMNNaorjY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/523a93-8bbd-44ac-88bd-4e7bca55f821/1/4a7RSE6W5L95k-m4Z7NMNNaorjY.mft
Manifest number: 0CB9
Signing time: Sun 27 Jul 2025 04:00:23 +0000
Manifest this update: Sun 27 Jul 2025 04:00:23 +0000
Manifest next update: Mon 28 Jul 2025 04:00:23 +0000
Files and hashes: 1: 4a7RSE6W5L95k-m4Z7NMNNaorjY.crl (hash: Xm6Vu2hQA2RnTun60ONmMI6eJ0qytqKsUJG2q9TKFQ4=)
2: 7e4XWoTxR_4GFJNbOkXvGvD-gG4.roa (hash: 4YXw3iLwYdL9YkiJ0wB5yVfXs/BwnpG21A305csfmtA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/523a93-8bbd-44ac-88bd-4e7bca55f821/1/4a7RSE6W5L95k-m4Z7NMNNaorjY.crl
rsync://rpki.ripe.net/repository/DEFAULT/64/523a93-8bbd-44ac-88bd-4e7bca55f821/1/4a7RSE6W5L95k-m4Z7NMNNaorjY.mft
rsync://rpki.ripe.net/repository/DEFAULT/4a7RSE6W5L95k-m4Z7NMNNaorjY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 00:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4a:09:f7:54:8e:05:52:08:a4:f9:c5:05:50:55:eb:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e1aed1484e96e4bf7993e9b867b34c34d6a8ae36
Validity
Not Before: Jul 27 04:00:23 2025 GMT
Not After : Jul 28 04:00:23 2025 GMT
Subject: CN=2a08e90f938444992f39b7319d442e07cc68263e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:6b:77:c4:65:df:3c:a9:92:a3:2c:f8:7a:17:
68:b3:6a:1e:70:ce:b6:87:f8:07:5c:58:61:26:ba:
08:0b:3a:80:7a:dd:00:c4:7e:7e:5b:b5:eb:67:0d:
83:89:fc:d1:5c:a8:93:f9:e8:12:a2:5c:50:d5:9f:
83:e7:03:89:d2:23:16:fe:38:f1:a3:50:22:26:88:
e0:04:c7:2b:7d:39:2e:4f:59:94:00:38:f9:c4:4d:
47:54:d7:a5:b7:b8:64:fc:05:86:e4:42:8c:db:da:
16:73:59:59:9e:b5:e1:c5:ca:b3:f5:fb:67:c9:9d:
9d:98:54:0f:65:dc:0f:fb:e6:e2:67:1e:e5:03:f3:
75:9d:df:fe:81:64:74:ae:32:96:c8:20:fd:e7:01:
cd:6d:69:17:04:8b:20:89:7c:c3:54:3e:32:84:80:
be:21:0a:6d:b9:fe:80:79:c7:ea:08:ad:6d:9f:c2:
38:c5:1c:bd:cb:5e:3d:64:fa:db:59:a4:9b:af:4c:
f8:59:d3:90:74:f9:a7:47:d8:a3:10:3a:db:d9:9a:
6c:10:b1:13:32:83:87:67:20:35:2f:f2:db:41:6d:
c7:bd:a0:53:5e:b9:5f:ef:e0:f4:b1:59:38:67:ec:
69:17:97:98:63:8f:fb:15:ef:84:9c:37:a9:dd:6d:
c3:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:08:E9:0F:93:84:44:99:2F:39:B7:31:9D:44:2E:07:CC:68:26:3E
X509v3 Authority Key Identifier:
keyid:E1:AE:D1:48:4E:96:E4:BF:79:93:E9:B8:67:B3:4C:34:D6:A8:AE:36
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a7RSE6W5L95k-m4Z7NMNNaorjY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/523a93-8bbd-44ac-88bd-4e7bca55f821/1/4a7RSE6W5L95k-m4Z7NMNNaorjY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/523a93-8bbd-44ac-88bd-4e7bca55f821/1/4a7RSE6W5L95k-m4Z7NMNNaorjY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:5e:57:09:e6:f4:29:c9:59:09:21:40:b4:73:db:b1:f2:11:
62:69:17:e3:a2:bf:03:17:2d:ca:b0:9f:f7:31:db:93:9f:c7:
be:d5:9f:5e:33:1f:f2:74:31:43:dc:9c:a9:af:01:c3:27:12:
13:02:30:04:e7:d8:8c:a4:06:a6:49:12:f8:ae:27:c7:2d:22:
7b:f3:2a:f9:43:62:15:59:98:83:33:33:f2:db:46:30:83:b2:
b9:f0:e1:5d:6b:02:dd:50:bc:a7:92:29:fc:75:64:1c:dc:17:
44:f4:18:c5:ca:58:62:f1:7f:aa:e1:b1:66:3c:3f:ca:c6:98:
b3:35:c8:ba:b0:5a:06:37:50:b7:3b:33:45:fa:03:2f:15:de:
fe:89:b5:91:2b:f6:b3:13:a8:05:29:75:be:9a:91:97:c9:2f:
de:0e:4c:88:bc:3b:3e:b9:a4:47:3d:fb:9f:53:62:1a:83:da:
95:5d:6e:57:ef:38:39:ea:cf:e6:88:20:15:7b:0d:f9:1c:1b:
c3:a5:c6:e8:05:23:5d:b0:72:2c:58:95:94:1f:3d:12:90:45:
77:c5:a9:d0:a4:4d:77:e1:2d:a3:75:d8:66:a9:63:39:1e:14:
54:9b:bc:11:01:4b:de:8a:c9:4e:ca:30:ed:84:ac:53:02:29:
b7:a4:3b:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 08:41:40 2025 by rpki-client