Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/4a2e97-2570-478b-b9bc-5ebb6378009e/1/4pLIx3m27W7ecqjPEUkO9tep6SE.mft
File: 4pLIx3m27W7ecqjPEUkO9tep6SE.mft (raw, json)
Hash identifier: q052K32hauCsS1talKSphdPSlw9qGJT/uJzdDYrbg6c=
Subject key identifier: 94:93:B4:81:71:90:16:A6:78:92:62:8E:36:DE:31:7C:51:DC:60:10
Authority key identifier: E2:92:C8:C7:79:B6:ED:6E:DE:72:A8:CF:11:49:0E:F6:D7:A9:E9:21
Certificate issuer: /CN=e292c8c779b6ed6ede72a8cf11490ef6d7a9e921
Certificate serial: 01984A416CFA468DE861FA46062D9495AD9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4pLIx3m27W7ecqjPEUkO9tep6SE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/4a2e97-2570-478b-b9bc-5ebb6378009e/1/4pLIx3m27W7ecqjPEUkO9tep6SE.mft
Manifest number: 0596
Signing time: Sun 27 Jul 2025 05:00:58 +0000
Manifest this update: Sun 27 Jul 2025 05:00:58 +0000
Manifest next update: Mon 28 Jul 2025 05:00:58 +0000
Files and hashes: 1: 4pLIx3m27W7ecqjPEUkO9tep6SE.crl (hash: tuFrgLhDFsHC+jo3wwi0G7mJnHc75P0o4H9aaIknlgg=)
2: LbRLSCZgNjKQ4NVrLzk4GRKtgYY.roa (hash: /kAcDTHsuQOYOXcr8j8Fv03Ys7En4o0Y+S9NpXp7/Jw=)
3: pxY6_rBQcn3iz82XldYnkJz45JM.roa (hash: YOl0UxNW+xdGkU9HEm/QZ7M3QuxM2oQJBlY7pjYmG24=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/4a2e97-2570-478b-b9bc-5ebb6378009e/1/4pLIx3m27W7ecqjPEUkO9tep6SE.crl
rsync://rpki.ripe.net/repository/DEFAULT/b4/4a2e97-2570-478b-b9bc-5ebb6378009e/1/4pLIx3m27W7ecqjPEUkO9tep6SE.mft
rsync://rpki.ripe.net/repository/DEFAULT/4pLIx3m27W7ecqjPEUkO9tep6SE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 00:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4a:41:6c:fa:46:8d:e8:61:fa:46:06:2d:94:95:ad:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e292c8c779b6ed6ede72a8cf11490ef6d7a9e921
Validity
Not Before: Jul 27 05:00:58 2025 GMT
Not After : Jul 28 05:00:58 2025 GMT
Subject: CN=9493b481719016a67892628e36de317c51dc6010
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:be:a5:e4:89:8a:34:85:2e:c3:55:0d:b9:2d:
58:dc:6f:b4:59:ce:4c:b4:b9:80:cf:1e:99:70:65:
6f:23:f4:30:e8:b5:58:7d:11:c9:35:91:48:3f:76:
4a:d9:4a:1e:06:27:95:ac:90:e8:13:cf:65:be:5b:
84:c2:9d:a7:81:cf:fa:bd:cf:74:eb:1b:48:57:1a:
ca:8a:c9:d4:22:85:53:ac:54:55:ce:20:8c:50:d0:
0f:48:17:8b:1c:67:42:fd:ec:3d:6e:bf:0f:a4:ff:
85:e9:15:9d:e2:95:40:ca:bc:4a:bd:25:59:9f:92:
a0:e8:3b:ae:fa:92:99:24:b0:6e:28:df:f4:65:92:
2d:73:a5:62:93:2a:27:58:b7:c6:c5:28:b9:c1:a2:
d9:1d:b7:dc:db:de:a9:d5:db:c7:55:1f:ed:e6:49:
5a:02:58:d6:1b:97:63:77:77:e4:07:e3:f7:99:8b:
cd:25:d9:9a:7e:da:7d:3a:a3:a2:73:38:ea:94:8c:
6f:b6:be:32:a7:b9:4f:47:31:dc:1e:e8:68:6c:71:
37:d5:24:7e:27:eb:00:13:97:f4:aa:ef:bc:c1:a0:
ee:02:69:71:42:ec:53:2c:97:07:27:f4:16:d6:e8:
7f:ed:0b:91:cd:56:28:8d:1f:8c:90:98:da:37:df:
be:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:93:B4:81:71:90:16:A6:78:92:62:8E:36:DE:31:7C:51:DC:60:10
X509v3 Authority Key Identifier:
keyid:E2:92:C8:C7:79:B6:ED:6E:DE:72:A8:CF:11:49:0E:F6:D7:A9:E9:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4pLIx3m27W7ecqjPEUkO9tep6SE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/4a2e97-2570-478b-b9bc-5ebb6378009e/1/4pLIx3m27W7ecqjPEUkO9tep6SE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/4a2e97-2570-478b-b9bc-5ebb6378009e/1/4pLIx3m27W7ecqjPEUkO9tep6SE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:50:69:99:16:bb:f7:a3:92:ff:26:a0:2e:12:d9:30:f5:ea:
a2:45:fe:c4:a0:e0:aa:f1:e7:2e:e2:c7:f5:e5:5d:94:8c:80:
12:55:11:cd:71:3c:ba:b0:b0:ad:dc:a8:cb:8b:bc:f5:b5:ad:
76:89:34:e5:f7:42:9d:2c:b9:e8:85:20:6c:df:d2:b7:47:ed:
9b:31:cc:4b:6d:a8:23:e8:56:5c:eb:84:99:a0:98:be:b1:01:
e4:81:7b:b2:9d:7f:ef:24:59:76:0d:cd:42:7b:8b:ea:09:be:
78:3a:14:85:c4:2e:01:b6:ce:00:40:40:2f:b6:de:4a:55:6c:
40:86:de:c0:5f:7f:94:09:86:5c:6f:50:87:5f:22:64:fb:58:
47:ae:a5:21:99:19:9a:0e:15:67:79:73:05:b0:fd:8b:19:6e:
72:be:39:f6:08:20:f9:d3:55:76:3a:29:be:cc:f4:3c:84:61:
97:f7:d4:7e:09:6f:49:9c:c2:79:1f:9f:d6:30:50:2f:fe:c3:
b1:50:c6:6a:c5:c7:da:d7:b9:91:ea:58:d6:7c:ea:5b:9f:05:
c2:db:7d:75:5a:c0:65:f7:bd:b1:86:e8:6f:2a:9f:ff:76:d1:
7e:87:ac:a0:4b:65:5d:11:01:e8:47:fa:46:a5:fe:d5:7b:bc:
77:f0:e6:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 08:44:36 2025 by rpki-client