
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/45d3f3-7eca-4c14-aaf7-15b39134c41e/1/4cg4iRtR4GfqLr-aRNloAUhWLpY.mft
File: 4cg4iRtR4GfqLr-aRNloAUhWLpY.mft (raw, json)
Hash identifier: Ra8QHDqbB4DkJyM5jWouwfGBPrlQZ+Wzjagt9rrUQyA=
Subject key identifier: F0:16:87:1B:4D:34:33:58:E0:BF:67:A9:E2:18:33:E8:41:EB:05:99
Authority key identifier: E1:C8:38:89:1B:51:E0:67:EA:2E:BF:9A:44:D9:68:01:48:56:2E:96
Certificate issuer: /CN=e1c838891b51e067ea2ebf9a44d9680148562e96
Certificate serial: 019848893EA62AC5537BE67A5D57BB3499B0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4cg4iRtR4GfqLr-aRNloAUhWLpY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/45d3f3-7eca-4c14-aaf7-15b39134c41e/1/4cg4iRtR4GfqLr-aRNloAUhWLpY.mft
Manifest number: 0F28
Signing time: Sat 26 Jul 2025 21:00:10 +0000
Manifest this update: Sat 26 Jul 2025 21:00:10 +0000
Manifest next update: Sun 27 Jul 2025 21:00:10 +0000
Files and hashes: 1: 4cg4iRtR4GfqLr-aRNloAUhWLpY.crl (hash: J2lfQ+uZ5B/OCBtzCAUoGt8xqfBfdTAs6NkJZHKk9AA=)
2: bmdi-xlLqO-hV5jpMLaaLmUh0MY.roa (hash: fx7rUOLjdEuqg3ZsveozXFH6Izun+R1RWfyBZEftQT4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/45d3f3-7eca-4c14-aaf7-15b39134c41e/1/4cg4iRtR4GfqLr-aRNloAUhWLpY.crl
rsync://rpki.ripe.net/repository/DEFAULT/b1/45d3f3-7eca-4c14-aaf7-15b39134c41e/1/4cg4iRtR4GfqLr-aRNloAUhWLpY.mft
rsync://rpki.ripe.net/repository/DEFAULT/4cg4iRtR4GfqLr-aRNloAUhWLpY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 15:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:48:89:3e:a6:2a:c5:53:7b:e6:7a:5d:57:bb:34:99:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e1c838891b51e067ea2ebf9a44d9680148562e96
Validity
Not Before: Jul 26 21:00:10 2025 GMT
Not After : Jul 27 21:00:10 2025 GMT
Subject: CN=f016871b4d343358e0bf67a9e21833e841eb0599
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:0b:b6:0a:11:35:d3:e5:1c:cc:5d:7a:67:83:
4d:6e:87:88:fb:06:f7:59:be:49:e0:a0:09:4a:64:
d3:6b:40:91:33:0f:52:c4:d7:0f:e0:7f:46:a2:27:
a3:6f:8d:61:83:07:46:4a:cb:8a:bc:26:a9:63:27:
df:b7:d5:f9:5b:e3:85:7b:d3:76:4e:13:96:ec:82:
df:1f:bf:d8:bb:bb:fc:94:6a:bb:86:63:80:46:a6:
82:fc:14:f7:b9:26:63:2e:c5:a4:9e:ec:6d:c3:c8:
63:96:27:df:14:87:56:13:1b:0e:82:6a:38:ce:bb:
5a:c4:83:0a:e6:13:a7:b8:15:1d:f6:a9:6c:59:1a:
c1:fc:79:19:a2:e7:c9:db:83:22:7e:1d:c7:c3:54:
19:8b:89:74:b4:15:50:7e:4c:2b:7d:eb:ee:da:ad:
1d:99:ba:3f:fe:8b:31:c0:32:14:9c:d7:ca:c6:11:
ad:bc:b5:43:82:46:c2:6c:95:d1:aa:6e:ae:a7:90:
8c:ee:b8:07:df:30:53:1f:3a:55:ce:86:ef:92:01:
68:ed:23:8d:0a:81:cf:c4:b4:a3:af:1f:8d:ee:40:
0b:90:69:34:a4:03:ec:04:57:de:42:2b:99:5f:ce:
5c:c0:51:37:c9:a7:a7:7f:e2:85:47:00:e0:1b:b1:
54:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:16:87:1B:4D:34:33:58:E0:BF:67:A9:E2:18:33:E8:41:EB:05:99
X509v3 Authority Key Identifier:
keyid:E1:C8:38:89:1B:51:E0:67:EA:2E:BF:9A:44:D9:68:01:48:56:2E:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4cg4iRtR4GfqLr-aRNloAUhWLpY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/45d3f3-7eca-4c14-aaf7-15b39134c41e/1/4cg4iRtR4GfqLr-aRNloAUhWLpY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/45d3f3-7eca-4c14-aaf7-15b39134c41e/1/4cg4iRtR4GfqLr-aRNloAUhWLpY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b4:4d:ef:8c:c1:4f:41:19:59:3b:2c:3e:5e:4c:3f:6e:f0:07:
9a:43:5b:de:02:f9:9b:19:cf:cd:3d:4c:c2:f6:96:4d:4d:4d:
94:37:c8:c0:72:6b:2f:5e:a8:0f:23:d6:c3:ff:2d:74:f1:1c:
45:08:62:ad:cc:ee:59:02:1d:83:b7:2c:18:7e:fc:e3:3b:1d:
d1:0d:19:a1:0c:72:b3:0f:81:9e:ea:ae:70:e2:cc:26:a9:7e:
d8:41:b0:3a:79:7c:a0:a8:37:9f:3c:a8:de:37:26:c1:38:0c:
ef:d3:ad:0e:ab:1f:3a:29:96:19:56:56:14:51:39:56:f1:7a:
8e:76:7b:30:dc:e4:a6:57:87:f6:6f:e4:a4:32:f0:0c:9f:a1:
05:2e:43:d3:1b:9c:36:a3:0f:69:cd:8d:79:d0:23:c6:da:a6:
ef:6a:95:a3:35:5f:30:70:d4:8c:bc:47:aa:f8:7b:55:0d:fa:
79:dd:a2:65:bf:34:16:99:4a:19:41:39:5d:59:aa:2e:ba:2e:
ea:21:65:e8:8d:67:c1:bf:d3:cb:44:ba:5b:0e:70:7c:6f:6b:
80:ed:6d:88:b0:7b:fc:5a:6d:5d:2b:70:1b:23:b3:9e:56:cb:
82:7b:1c:c1:58:f8:f1:a2:2c:8c:33:d0:23:c9:51:ee:65:e8:
73:18:43:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 23:56:42 2025 by rpki-client