Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/9d960f-a59a-435c-ae92-1ca739bb00cc/1/4gjsufNMH7w_NYlxCrPjSfxilcw.mft
File: 4gjsufNMH7w_NYlxCrPjSfxilcw.mft (raw, json)
Hash identifier: eCzuZ3PE2vjVo28JlZwZW+bjWFs/kvedJ/vHj6K8a0g=
Subject key identifier: 53:56:AF:1A:42:3A:99:9D:66:D8:D2:4F:6C:9E:85:F9:0D:3A:D3:B4
Authority key identifier: E2:08:EC:B9:F3:4C:1F:BC:3F:35:89:71:0A:B3:E3:49:FC:62:95:CC
Certificate issuer: /CN=e208ecb9f34c1fbc3f3589710ab3e349fc6295cc
Certificate serial: 01984A413F8A70498FDE94193406EBC3B52B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4gjsufNMH7w_NYlxCrPjSfxilcw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/9d960f-a59a-435c-ae92-1ca739bb00cc/1/4gjsufNMH7w_NYlxCrPjSfxilcw.mft
Manifest number: 1195
Signing time: Sun 27 Jul 2025 05:00:46 +0000
Manifest this update: Sun 27 Jul 2025 05:00:46 +0000
Manifest next update: Mon 28 Jul 2025 05:00:46 +0000
Files and hashes: 1: 39GioKK3WEGVHUJnnBWLgIR7aNY.roa (hash: 3gqoQOG5P9GOvXCGTNdrghx/0+bSTD9OjFYFlfXtSYU=)
2: 4gjsufNMH7w_NYlxCrPjSfxilcw.crl (hash: JOQ069w/qhybKMwcSCG9KDjPEEq6Q+W3JR6ogjis+m4=)
3: TAZ0gc-5c5t3h8t0iwa-eHM3o3c.roa (hash: Xr3qy5kR4VkDonVYgHy7lT3Fh2h3GWbp6XrLzLyjUKY=)
4: kPsQz3rZGj0NaY5zaOwAOAGfhzw.roa (hash: t4mIO0DzkdS2UrnCzo5GKYBcHXxNS07JIm04JWEYKII=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/9d960f-a59a-435c-ae92-1ca739bb00cc/1/4gjsufNMH7w_NYlxCrPjSfxilcw.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/9d960f-a59a-435c-ae92-1ca739bb00cc/1/4gjsufNMH7w_NYlxCrPjSfxilcw.mft
rsync://rpki.ripe.net/repository/DEFAULT/4gjsufNMH7w_NYlxCrPjSfxilcw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 00:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4a:41:3f:8a:70:49:8f:de:94:19:34:06:eb:c3:b5:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e208ecb9f34c1fbc3f3589710ab3e349fc6295cc
Validity
Not Before: Jul 27 05:00:46 2025 GMT
Not After : Jul 28 05:00:46 2025 GMT
Subject: CN=5356af1a423a999d66d8d24f6c9e85f90d3ad3b4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:8b:11:ac:f8:56:d9:6f:5a:3c:4e:4c:45:05:
34:eb:4d:56:73:92:d2:7a:3d:aa:52:6b:5c:87:5a:
85:2a:4d:d3:0c:b0:61:88:05:e6:54:2c:d8:e0:95:
38:4b:95:da:b4:18:8a:e8:34:f7:ce:2c:27:1c:dd:
c9:a4:13:34:fb:1e:27:27:f7:ed:90:ee:05:53:c9:
38:93:61:ce:50:70:2b:b9:8d:f6:cb:49:f9:57:53:
43:af:0e:23:6d:fd:46:45:0f:01:06:46:90:22:76:
d5:ff:5f:59:33:02:c3:5e:84:9c:fc:ac:3b:cc:c6:
36:a1:a7:cf:9f:b2:48:44:14:c1:cf:12:6b:33:9e:
fb:84:4b:1b:4d:41:55:36:9c:2a:c9:8e:f9:c1:58:
7b:f4:79:b9:e2:b1:98:95:1f:c7:c1:bb:36:6f:3e:
12:58:20:2b:a4:e9:b9:e9:09:4e:fb:53:6a:98:c8:
ea:b4:1a:05:95:56:6c:e9:4d:33:dc:03:37:6a:53:
20:4a:fb:42:00:09:83:ed:48:ab:fd:6b:3b:72:4a:
a0:e4:e0:9d:e0:f4:37:72:1d:e2:cb:21:17:11:0a:
75:6e:fb:4a:eb:90:fc:6d:85:49:bf:7c:17:75:1e:
9b:3a:d9:8b:74:b4:c0:1f:e4:d0:46:3f:0f:e1:fd:
33:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:56:AF:1A:42:3A:99:9D:66:D8:D2:4F:6C:9E:85:F9:0D:3A:D3:B4
X509v3 Authority Key Identifier:
keyid:E2:08:EC:B9:F3:4C:1F:BC:3F:35:89:71:0A:B3:E3:49:FC:62:95:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4gjsufNMH7w_NYlxCrPjSfxilcw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/9d960f-a59a-435c-ae92-1ca739bb00cc/1/4gjsufNMH7w_NYlxCrPjSfxilcw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/9d960f-a59a-435c-ae92-1ca739bb00cc/1/4gjsufNMH7w_NYlxCrPjSfxilcw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:bd:15:64:3d:20:74:a0:3e:37:30:6a:42:29:f6:43:8f:1a:
62:5e:8d:58:8b:65:a1:16:8e:fc:78:ce:a3:90:47:06:4d:91:
23:30:68:d8:58:02:0e:2a:f5:51:36:4d:c5:41:8c:a1:ab:ca:
5e:54:3c:c9:9a:b1:15:9b:37:f9:4b:7f:5b:c7:c5:8a:9c:55:
86:3c:d5:89:93:5b:66:81:65:4e:e7:80:df:30:69:44:4e:a1:
71:2e:67:23:19:de:3c:ce:41:ff:3a:ec:f3:b6:8d:c2:49:c2:
79:0d:f4:a9:de:cd:29:b4:4f:43:29:2a:e7:78:45:f9:de:20:
8b:2b:f5:cb:f9:e0:81:85:cd:5b:e6:69:de:5e:67:bf:dc:4d:
86:b5:66:7a:50:d0:55:87:50:89:1b:f7:69:a5:1d:ce:cf:ac:
99:18:53:6e:8f:0f:57:a9:ac:59:ad:d1:79:f7:97:9d:12:14:
76:af:d9:65:f8:3f:fa:6d:a7:56:d2:10:5b:9a:c6:a1:10:b8:
63:ad:2f:b2:fc:0a:1a:f5:8f:5d:85:85:96:9a:09:db:51:e1:
e5:f8:cb:45:e1:45:03:76:59:0a:b5:70:3a:a4:79:72:f1:b4:
fe:a9:bc:b0:22:9d:8b:24:de:11:eb:4b:24:f3:64:8b:26:58:
33:05:7e:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 07:56:37 2025 by rpki-client