Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/f09759-6ceb-4754-bbe5-3b9e3c53bab0/1/4trBUISDJfD3JYcGT4q6N8X_N5A.mft
File: 4trBUISDJfD3JYcGT4q6N8X_N5A.mft (raw, json)
Hash identifier: UvcPa3HZDagDE/4k4srLd7NXNKcc0OasxFdhNEH90EE=
Subject key identifier: AE:B9:C3:98:D3:6F:F0:85:C0:8F:C6:29:1C:52:B9:A0:BC:36:3A:CE
Authority key identifier: E2:DA:C1:50:84:83:25:F0:F7:25:87:06:4F:8A:BA:37:C5:FF:37:90
Certificate issuer: /CN=e2dac150848325f0f72587064f8aba37c5ff3790
Certificate serial: 019849D3708BF7C714C8C7BA1BBB6ADA83BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4trBUISDJfD3JYcGT4q6N8X_N5A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/f09759-6ceb-4754-bbe5-3b9e3c53bab0/1/4trBUISDJfD3JYcGT4q6N8X_N5A.mft
Manifest number: 11E8
Signing time: Sun 27 Jul 2025 03:00:50 +0000
Manifest this update: Sun 27 Jul 2025 03:00:50 +0000
Manifest next update: Mon 28 Jul 2025 03:00:50 +0000
Files and hashes: 1: 1tSvH4RNSu7UD2qtT1EWm04Zry4.roa (hash: q0ebmJQY13NuleI4G7DugHjqGoG1SUVW7Ik+sEsmL8w=)
2: 4trBUISDJfD3JYcGT4q6N8X_N5A.crl (hash: 7nYcfEidRcNWkFenbtR2gxbuGMDtZUYoSzx4HEZtcL8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a8/f09759-6ceb-4754-bbe5-3b9e3c53bab0/1/4trBUISDJfD3JYcGT4q6N8X_N5A.crl
rsync://rpki.ripe.net/repository/DEFAULT/a8/f09759-6ceb-4754-bbe5-3b9e3c53bab0/1/4trBUISDJfD3JYcGT4q6N8X_N5A.mft
rsync://rpki.ripe.net/repository/DEFAULT/4trBUISDJfD3JYcGT4q6N8X_N5A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 00:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:49:d3:70:8b:f7:c7:14:c8:c7:ba:1b:bb:6a:da:83:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e2dac150848325f0f72587064f8aba37c5ff3790
Validity
Not Before: Jul 27 03:00:50 2025 GMT
Not After : Jul 28 03:00:50 2025 GMT
Subject: CN=aeb9c398d36ff085c08fc6291c52b9a0bc363ace
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:15:96:57:12:25:f0:96:26:6e:90:53:f3:96:
14:76:b9:49:22:e9:82:84:44:dc:d5:30:d8:fc:1c:
fb:27:3c:b6:a4:71:b0:a9:3a:39:d8:38:ca:67:6d:
c9:f1:95:c8:8b:7d:17:bc:1a:2e:2e:53:d6:e3:94:
d4:89:58:04:77:59:82:5a:48:c0:3d:1a:7d:78:4a:
97:b8:62:1b:48:d3:2d:7d:0b:f8:95:7a:1f:bf:ba:
3e:a4:9e:e9:b8:90:96:8c:66:4b:53:8a:b0:ed:4c:
72:bb:d3:1d:95:67:b8:4d:e7:83:c1:4c:6a:e9:8a:
f8:95:83:a5:b9:4d:15:5f:51:ae:f1:61:55:c7:3b:
02:d9:33:4a:25:b3:f3:d7:1f:bc:4b:ba:4b:d3:15:
04:59:7c:ad:df:51:b3:23:16:76:66:74:72:74:c2:
18:39:14:d6:00:b4:75:4c:bc:f5:e8:11:a5:25:b6:
d3:55:a6:bc:07:fe:e4:17:cf:78:84:57:be:b5:13:
fe:03:b5:85:03:7a:6d:a1:55:fd:91:15:80:26:f0:
5e:31:00:27:62:ae:0f:dc:98:9e:2c:56:a9:81:17:
3c:1d:8b:d7:aa:eb:af:f4:be:62:0b:0a:71:5e:20:
90:a9:c3:3a:c0:82:9f:e2:a8:1a:ca:dc:e6:fa:cc:
9c:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:B9:C3:98:D3:6F:F0:85:C0:8F:C6:29:1C:52:B9:A0:BC:36:3A:CE
X509v3 Authority Key Identifier:
keyid:E2:DA:C1:50:84:83:25:F0:F7:25:87:06:4F:8A:BA:37:C5:FF:37:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4trBUISDJfD3JYcGT4q6N8X_N5A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/f09759-6ceb-4754-bbe5-3b9e3c53bab0/1/4trBUISDJfD3JYcGT4q6N8X_N5A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/f09759-6ceb-4754-bbe5-3b9e3c53bab0/1/4trBUISDJfD3JYcGT4q6N8X_N5A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:3c:3d:03:f8:51:29:e9:37:41:61:8a:79:ec:20:f1:2d:e2:
f4:45:f3:f2:7e:14:a1:26:97:e0:27:ac:16:77:75:fb:73:55:
f0:73:fb:08:43:6e:54:ff:a0:5a:54:6b:2a:e9:1b:d1:0c:22:
70:f3:8a:76:07:e7:88:cd:cf:db:73:22:b4:31:76:65:6f:ef:
49:68:35:56:08:b4:b8:32:38:a3:b3:c0:1d:0d:41:3a:38:09:
c1:3b:ea:5f:bd:87:62:6e:05:3f:13:76:f4:ca:5f:fe:b4:ec:
a7:26:ea:4a:c7:63:bd:cf:7e:f2:1c:ab:f4:36:fb:1c:af:b7:
3c:f3:da:b9:a1:52:a3:47:7c:e3:d4:ed:f1:0f:7b:eb:84:fe:
4a:f1:f5:55:ff:b8:e5:78:2a:f7:35:8f:90:83:67:22:a2:cf:
43:62:9b:a4:72:6e:c5:d4:74:62:3d:13:9c:d0:ee:d3:01:4b:
12:63:ac:90:48:e0:7a:d6:d4:e6:1f:e9:7f:fd:19:55:03:21:
90:4b:0d:92:dd:70:14:4b:69:9b:89:b1:73:49:35:c9:be:ae:
b7:97:de:12:93:88:67:57:e9:42:79:28:94:42:70:f3:c2:d8:
9d:10:56:fe:ca:ad:b4:60:f2:95:4e:a6:22:16:85:fc:68:d3:
87:8e:aa:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 07:14:46 2025 by rpki-client