Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/d16e3e-eb09-4fb9-9081-bd3e7adde8de/1/4g44BaG09bYc_nMBDoOMLw0ltEs.mft
File: 4g44BaG09bYc_nMBDoOMLw0ltEs.mft (raw, json)
Hash identifier: Dn8ElVzCJlPqqTt5jvIzDwDnVWFD9WGxduKvrBSAwDU=
Subject key identifier: 5C:09:38:F2:6A:09:77:A4:21:93:B6:4D:66:25:20:8D:1D:33:F1:28
Authority key identifier: E2:0E:38:05:A1:B4:F5:B6:1C:FE:73:01:0E:83:8C:2F:0D:25:B4:4B
Certificate issuer: /CN=e20e3805a1b4f5b61cfe73010e838c2f0d25b44b
Certificate serial: 019841AC8BF5B2438CE48051873F13BAD82A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4g44BaG09bYc_nMBDoOMLw0ltEs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/d16e3e-eb09-4fb9-9081-bd3e7adde8de/1/4g44BaG09bYc_nMBDoOMLw0ltEs.mft
Manifest number: 0D0F
Signing time: Fri 25 Jul 2025 13:01:23 +0000
Manifest this update: Fri 25 Jul 2025 13:01:23 +0000
Manifest next update: Sat 26 Jul 2025 13:01:23 +0000
Files and hashes: 1: 4g44BaG09bYc_nMBDoOMLw0ltEs.crl (hash: nSFf8Wz/6Y3AIQ/CkYuaXesoh0PRqsp1+o9C0mMnrsY=)
2: BD04oGhJezcKgfhBVSPLxiCwx-U.roa (hash: 6BJW9GRsg9XqwBDaRIKZatrd81rOIFw+haS77P869vM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/d16e3e-eb09-4fb9-9081-bd3e7adde8de/1/4g44BaG09bYc_nMBDoOMLw0ltEs.crl
rsync://rpki.ripe.net/repository/DEFAULT/ab/d16e3e-eb09-4fb9-9081-bd3e7adde8de/1/4g44BaG09bYc_nMBDoOMLw0ltEs.mft
rsync://rpki.ripe.net/repository/DEFAULT/4g44BaG09bYc_nMBDoOMLw0ltEs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Jul 2025 08:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:41:ac:8b:f5:b2:43:8c:e4:80:51:87:3f:13:ba:d8:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e20e3805a1b4f5b61cfe73010e838c2f0d25b44b
Validity
Not Before: Jul 25 13:01:23 2025 GMT
Not After : Jul 26 13:01:23 2025 GMT
Subject: CN=5c0938f26a0977a42193b64d6625208d1d33f128
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f6:42:0a:64:95:cb:71:0f:a8:bc:9a:8a:7e:ce:
1e:3a:ca:0f:dd:53:0e:66:35:20:fd:47:32:8e:29:
59:b6:2d:34:1b:b9:a7:6f:64:a9:36:d7:10:5c:05:
b6:4a:e6:ef:77:24:67:c9:77:20:a4:03:53:22:a1:
08:89:bb:c9:38:ce:3a:60:6e:15:c9:6c:03:99:2b:
ef:f6:fd:f2:27:ce:bb:ae:41:29:39:ba:47:57:83:
3c:39:61:27:93:8d:7e:2e:56:ec:42:2f:e8:0a:b1:
51:a1:3b:2a:be:93:f9:b2:7e:c5:b0:d9:e5:f5:55:
4b:78:d6:46:32:5d:f2:7d:f0:6f:3f:65:d9:7c:44:
72:9d:24:a1:6c:af:6b:8c:4c:a0:22:f5:12:41:3f:
69:55:b9:cd:a9:9d:99:29:0a:ef:63:db:b3:d0:9a:
dc:ec:35:94:a4:3c:b4:8a:cd:58:58:cc:6e:8d:c4:
87:97:1a:3e:42:e0:94:3e:ad:b0:69:10:b4:2d:44:
06:21:60:4b:38:6c:91:96:d4:7a:a8:c8:6b:bc:b2:
b8:37:37:de:04:39:b4:f5:2e:10:2a:d3:f4:82:dc:
3f:5f:a9:65:ef:bc:cc:43:1d:1b:0b:80:f0:d3:fc:
e3:ca:8e:cf:59:5e:f3:07:f8:79:e3:b3:97:1b:fd:
6e:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:09:38:F2:6A:09:77:A4:21:93:B6:4D:66:25:20:8D:1D:33:F1:28
X509v3 Authority Key Identifier:
keyid:E2:0E:38:05:A1:B4:F5:B6:1C:FE:73:01:0E:83:8C:2F:0D:25:B4:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4g44BaG09bYc_nMBDoOMLw0ltEs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/d16e3e-eb09-4fb9-9081-bd3e7adde8de/1/4g44BaG09bYc_nMBDoOMLw0ltEs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/d16e3e-eb09-4fb9-9081-bd3e7adde8de/1/4g44BaG09bYc_nMBDoOMLw0ltEs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9e:54:4f:71:57:38:7c:fa:e2:ff:ca:e9:65:25:51:07:23:52:
05:ef:dd:d6:55:64:ed:44:55:3b:70:35:c2:52:36:3b:9d:f8:
48:cc:fb:5e:53:02:44:b5:fa:e2:4c:81:3b:96:ae:84:81:f9:
7d:04:0e:c4:52:ec:37:5a:9a:04:ac:ab:a4:f8:6d:5d:d1:2c:
9b:96:45:53:81:5a:88:85:06:1e:1d:72:b8:3d:4e:24:51:76:
e3:cf:c0:0e:0d:9a:8a:59:ca:00:79:d5:2e:e9:be:5e:fc:fd:
c4:5f:ed:5c:a6:b3:0a:c1:17:45:8d:2e:a1:b9:48:62:5a:a3:
4c:43:9c:58:d6:9b:0c:e3:1d:44:50:ad:c4:d1:c8:2c:fd:26:
86:b1:c4:66:83:a8:98:4d:fd:cb:eb:07:6f:b1:03:4d:ea:ee:
46:26:dd:20:6c:00:e3:1d:dc:cb:8d:af:3b:93:18:2e:70:6a:
2b:18:f9:c6:ee:d6:05:0a:0a:89:ed:25:ee:af:fb:c4:bf:be:
17:e0:7a:4b:95:51:2c:d2:1f:75:68:01:b3:ec:0a:1c:07:40:
6b:f8:f0:c2:03:b4:f9:71:5c:c3:f3:98:d8:92:45:cb:82:fd:
68:a8:b5:7e:fb:65:37:bb:29:81:7c:1d:92:b6:93:bf:c1:7e:
ea:7b:7b:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 25 15:27:57 2025 by rpki-client