Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/f9f8fa-2988-445c-be94-913575c58f4a/1/4aWhf1DBNbGFHOwsdrD9cPncx54.mft
File: 4aWhf1DBNbGFHOwsdrD9cPncx54.mft (raw, json)
Hash identifier: ePMHIRsnd07XZi/9ZfEj7QHbhwk3Lk6RWbzIZDG+eks=
Subject key identifier: 1F:AF:27:27:0B:55:38:01:F5:2E:9A:F9:CB:31:E4:35:98:0B:C8:76
Authority key identifier: E1:A5:A1:7F:50:C1:35:B1:85:1C:EC:2C:76:B0:FD:70:F9:DC:C7:9E
Certificate issuer: /CN=e1a5a17f50c135b1851cec2c76b0fd70f9dcc79e
Certificate serial: 01984964ECA280555D61C693A8843860F5FA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4aWhf1DBNbGFHOwsdrD9cPncx54.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/f9f8fa-2988-445c-be94-913575c58f4a/1/4aWhf1DBNbGFHOwsdrD9cPncx54.mft
Manifest number: 047B
Signing time: Sun 27 Jul 2025 01:00:07 +0000
Manifest this update: Sun 27 Jul 2025 01:00:07 +0000
Manifest next update: Mon 28 Jul 2025 01:00:07 +0000
Files and hashes: 1: 4aWhf1DBNbGFHOwsdrD9cPncx54.crl (hash: GGRgeNINbOPNtMkuQllbCUwb4Ivw7XWOXggUwFgj3lA=)
2: hfRFZKITz5hu-gPvGNJloOjkOMc.roa (hash: D3UvYF9mG8nUIanHUFk48MzJyJwGvptN1rrytDvh8Eo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/82/f9f8fa-2988-445c-be94-913575c58f4a/1/4aWhf1DBNbGFHOwsdrD9cPncx54.crl
rsync://rpki.ripe.net/repository/DEFAULT/82/f9f8fa-2988-445c-be94-913575c58f4a/1/4aWhf1DBNbGFHOwsdrD9cPncx54.mft
rsync://rpki.ripe.net/repository/DEFAULT/4aWhf1DBNbGFHOwsdrD9cPncx54.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 00:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:49:64:ec:a2:80:55:5d:61:c6:93:a8:84:38:60:f5:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e1a5a17f50c135b1851cec2c76b0fd70f9dcc79e
Validity
Not Before: Jul 27 01:00:07 2025 GMT
Not After : Jul 28 01:00:07 2025 GMT
Subject: CN=1faf27270b553801f52e9af9cb31e435980bc876
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:f1:d1:8b:c8:ba:73:4e:ff:92:e5:17:b8:73:
59:2c:02:d7:ed:53:85:13:5c:fe:82:8b:6e:9e:28:
1c:57:2f:75:06:bf:f6:a1:f4:a4:96:86:b2:5f:95:
fa:a1:0a:8b:9d:ee:81:5a:26:0e:07:8d:c7:7c:8c:
55:ca:9e:4f:6d:53:f4:4d:ec:ff:e5:ea:16:90:00:
82:b6:3b:3f:f4:36:4e:f3:13:55:df:e7:07:a6:17:
77:5d:0c:0a:71:84:1d:5b:24:e6:0e:ab:0e:33:e0:
36:26:73:5c:de:8e:ef:65:a0:42:51:c8:41:45:81:
58:63:7c:da:b8:65:01:6f:c3:54:a4:85:a6:17:5d:
5b:8b:92:64:bc:65:55:50:f6:69:bb:5d:9c:34:da:
42:80:73:ef:7c:6a:6b:97:24:1f:da:e0:12:56:70:
35:00:0d:76:12:49:3a:78:5c:c3:46:e6:5a:dd:ab:
91:9e:d6:c2:aa:b9:88:c0:02:20:7c:17:cc:65:7b:
08:e6:57:24:3a:20:ab:3d:48:c1:22:37:2d:98:35:
c6:5a:5e:72:6e:e4:5b:70:be:f9:fa:d2:09:73:66:
f1:38:64:87:77:c8:30:06:fa:89:8e:d1:c2:01:e3:
cd:96:38:f6:fb:f3:65:46:a3:f9:a3:46:99:ed:30:
0d:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:AF:27:27:0B:55:38:01:F5:2E:9A:F9:CB:31:E4:35:98:0B:C8:76
X509v3 Authority Key Identifier:
keyid:E1:A5:A1:7F:50:C1:35:B1:85:1C:EC:2C:76:B0:FD:70:F9:DC:C7:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4aWhf1DBNbGFHOwsdrD9cPncx54.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/f9f8fa-2988-445c-be94-913575c58f4a/1/4aWhf1DBNbGFHOwsdrD9cPncx54.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/82/f9f8fa-2988-445c-be94-913575c58f4a/1/4aWhf1DBNbGFHOwsdrD9cPncx54.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:3a:a5:b6:5a:c2:7f:d2:e4:d8:5d:d9:7e:17:c7:8e:79:1c:
03:7a:03:ec:03:5f:74:52:34:92:f9:9a:0c:ae:f8:01:ff:68:
bd:76:ba:35:d9:2a:9c:f7:17:06:17:fb:1e:91:bf:f8:51:91:
c1:cd:d6:4c:bc:00:dc:01:1d:7d:1f:d6:1e:f4:83:2b:56:c0:
6e:eb:08:26:f8:e3:43:ab:54:01:b2:a4:1c:a4:ce:ad:c4:84:
ef:53:d6:8e:a0:fc:ea:4d:70:ff:15:3b:91:3b:9c:85:04:2d:
ce:f5:f2:d8:8f:5d:56:9d:d3:ff:94:12:0b:e0:51:50:c5:54:
6e:40:a3:98:a4:17:3b:df:78:51:82:0e:9c:a1:90:7f:90:d5:
6c:71:57:ab:a5:c4:c6:2e:4d:b1:19:36:df:cb:1b:c4:e4:13:
b8:eb:0d:0a:46:86:3c:2f:d2:8f:6b:80:16:2b:b7:13:c8:01:
62:ab:20:1d:c4:d7:1c:b7:a8:55:6f:84:46:ab:cf:05:01:21:
80:1c:f5:e3:c6:57:4d:ad:37:1f:61:83:44:fd:04:4b:a7:59:
21:97:c3:7a:1f:8e:8c:d5:79:8b:7b:a6:09:5a:ff:14:59:fa:
4b:e2:d4:63:d0:67:4b:ab:7a:c8:32:8f:b6:42:d7:dc:73:61:
f8:b4:10:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 09:38:28 2025 by rpki-client