Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/6b78a5-4c5c-4383-87fd-0cf74be303ff/1/4Z2wxbLZYQ71hul_uh_Kh1AG89o.mft
File: 4Z2wxbLZYQ71hul_uh_Kh1AG89o.mft (raw, json)
Hash identifier: JbMGfMY3uMa4ORolYvVCNx7f8NosbTbyzzTuqqvlj98=
Subject key identifier: D0:9A:FB:C2:AB:0C:C4:F0:7F:CB:09:3C:87:79:28:A9:7F:C5:7E:43
Authority key identifier: E1:9D:B0:C5:B2:D9:61:0E:F5:86:E9:7F:BA:1F:CA:87:50:06:F3:DA
Certificate issuer: /CN=e19db0c5b2d9610ef586e97fba1fca875006f3da
Certificate serial: 0198548D94BAE08A836EAA9BD289B3E97E80
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4Z2wxbLZYQ71hul_uh_Kh1AG89o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/6b78a5-4c5c-4383-87fd-0cf74be303ff/1/4Z2wxbLZYQ71hul_uh_Kh1AG89o.mft
Manifest number: 1137
Signing time: Tue 29 Jul 2025 05:00:21 +0000
Manifest this update: Tue 29 Jul 2025 05:00:21 +0000
Manifest next update: Wed 30 Jul 2025 05:00:21 +0000
Files and hashes: 1: 4Z2wxbLZYQ71hul_uh_Kh1AG89o.crl (hash: 5DSeLVoLwRbBIsrPO0W/XgRE/Uy+cK9zpDUqYNNnBvo=)
2: WX9ifdPc509PIWH1MshzaQ9gKs4.roa (hash: N2NEfXL50JrESYal+4AtaFkCctqevfpLSA3CNFTMaFM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/6b78a5-4c5c-4383-87fd-0cf74be303ff/1/4Z2wxbLZYQ71hul_uh_Kh1AG89o.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/6b78a5-4c5c-4383-87fd-0cf74be303ff/1/4Z2wxbLZYQ71hul_uh_Kh1AG89o.mft
rsync://rpki.ripe.net/repository/DEFAULT/4Z2wxbLZYQ71hul_uh_Kh1AG89o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Jul 2025 05:00:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:54:8d:94:ba:e0:8a:83:6e:aa:9b:d2:89:b3:e9:7e:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e19db0c5b2d9610ef586e97fba1fca875006f3da
Validity
Not Before: Jul 29 05:00:21 2025 GMT
Not After : Jul 30 05:00:21 2025 GMT
Subject: CN=d09afbc2ab0cc4f07fcb093c877928a97fc57e43
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:7f:56:47:76:bb:fb:06:ef:65:1c:b3:59:75:
ea:e8:99:3e:25:c8:47:e8:63:78:99:e9:1e:54:d4:
5b:1f:5d:68:e1:f2:be:23:f3:b6:a6:0e:4c:d6:00:
59:7f:e4:57:d0:d9:33:86:00:72:8f:c4:68:03:81:
e3:a2:92:76:1b:43:93:23:82:3f:bb:1c:16:ea:e8:
12:81:15:43:9a:6b:1e:b8:2d:4d:fc:10:1f:56:ba:
8a:cd:47:9b:aa:5d:43:7b:69:6c:b2:0d:dd:04:91:
9b:21:9d:5c:24:c4:13:6b:27:78:29:cb:83:ba:a7:
63:7f:7f:75:c5:74:9f:82:e6:7a:fb:68:68:23:9b:
20:11:00:a6:80:3a:91:aa:03:6b:2c:68:90:f5:b6:
05:66:e9:21:f8:6d:e1:b2:37:ab:0b:e7:63:39:58:
58:ee:1c:bf:82:73:b1:ef:99:dd:c1:f5:6f:f5:de:
51:87:06:84:da:c7:7f:cb:cc:4e:d7:ec:ab:07:6e:
31:c1:c2:ad:3f:07:2f:94:70:7a:06:93:79:e8:e2:
83:d4:cc:29:84:6c:ee:73:ea:f0:14:12:46:9f:23:
03:f7:f8:97:38:d5:25:c6:8e:79:d8:cc:0e:08:95:
3c:5f:f2:53:ef:e8:8a:49:dc:fc:bf:df:41:a4:f1:
1d:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:9A:FB:C2:AB:0C:C4:F0:7F:CB:09:3C:87:79:28:A9:7F:C5:7E:43
X509v3 Authority Key Identifier:
keyid:E1:9D:B0:C5:B2:D9:61:0E:F5:86:E9:7F:BA:1F:CA:87:50:06:F3:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4Z2wxbLZYQ71hul_uh_Kh1AG89o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/6b78a5-4c5c-4383-87fd-0cf74be303ff/1/4Z2wxbLZYQ71hul_uh_Kh1AG89o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/6b78a5-4c5c-4383-87fd-0cf74be303ff/1/4Z2wxbLZYQ71hul_uh_Kh1AG89o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:0e:36:70:d9:45:31:20:bb:a3:76:ce:09:4b:aa:f2:ca:cd:
71:b7:24:da:af:62:01:45:9d:2f:b1:da:ac:67:c4:16:39:7a:
b6:80:6d:1b:7a:fe:3c:da:f7:4a:b0:c4:0b:e5:c9:ed:5e:73:
5c:11:5c:f1:8c:85:b3:52:40:cd:d9:b4:87:2b:48:4f:eb:73:
c0:a5:b8:84:8f:e0:01:92:1b:b9:03:2e:ad:66:22:17:e4:43:
cd:fd:e5:c6:a3:cf:5b:96:36:85:26:b2:58:db:99:2a:5a:b9:
d1:78:a4:fe:12:3d:ee:31:e6:ad:7f:14:d4:4a:82:53:6c:b4:
b1:ad:0b:27:75:ab:31:44:22:88:54:9f:1f:56:48:f0:dc:a4:
f5:3d:fa:d4:9a:0b:bf:b9:e2:c8:3d:6c:2b:41:00:69:94:97:
c0:e3:fe:7e:42:1c:40:ea:e2:e9:38:05:a0:65:2a:df:cb:0c:
b4:18:85:41:5a:24:47:d7:77:dc:c1:84:35:d4:cf:e2:bf:0b:
05:dc:7f:6b:b9:3d:32:df:be:ab:ed:f0:90:c0:63:11:86:93:
81:fb:66:f2:85:72:bd:9a:e4:79:b9:be:35:2e:d8:d9:63:1c:
56:53:77:40:f5:b7:e0:c0:53:76:c1:9e:f5:20:8a:cc:27:6d:
7e:b4:88:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 29 11:16:23 2025 by rpki-client