Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/4d2928-c636-40c0-9c9b-7990e3d1ddaa/1/4r7xjk9w0I3z-zD-5QfltakZb5k.mft
File: 4r7xjk9w0I3z-zD-5QfltakZb5k.mft (raw, json)
Hash identifier: O3IKxB4Neb1/nJgZTKdSvxdW8uuQoXrFb9+rjrnGgnA=
Subject key identifier: 92:63:74:9A:B2:B1:D1:9B:C4:1F:4E:9E:64:BB:E9:98:22:DB:EB:0C
Authority key identifier: E2:BE:F1:8E:4F:70:D0:8D:F3:FB:30:FE:E5:07:E5:B5:A9:19:6F:99
Certificate issuer: /CN=e2bef18e4f70d08df3fb30fee507e5b5a9196f99
Certificate serial: 01983428C84AE93EB5D229DD0C551E04206C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4r7xjk9w0I3z-zD-5QfltakZb5k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/4d2928-c636-40c0-9c9b-7990e3d1ddaa/1/4r7xjk9w0I3z-zD-5QfltakZb5k.mft
Manifest number: 085B
Signing time: Tue 22 Jul 2025 22:02:24 +0000
Manifest this update: Tue 22 Jul 2025 22:02:24 +0000
Manifest next update: Wed 23 Jul 2025 22:02:24 +0000
Files and hashes: 1: 4r7xjk9w0I3z-zD-5QfltakZb5k.crl (hash: GOekwpGbds18nlF4guin6waG+yo5Uq9nZI5oYtxCD3g=)
2: MiW57nOg30xLDqZY9OOUVNFKZQY.roa (hash: 2YBiQuBVr6rbcdD+nTl7ci5JjnWlTA1kLFdMgjGPElQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/4d2928-c636-40c0-9c9b-7990e3d1ddaa/1/4r7xjk9w0I3z-zD-5QfltakZb5k.crl
rsync://rpki.ripe.net/repository/DEFAULT/e3/4d2928-c636-40c0-9c9b-7990e3d1ddaa/1/4r7xjk9w0I3z-zD-5QfltakZb5k.mft
rsync://rpki.ripe.net/repository/DEFAULT/4r7xjk9w0I3z-zD-5QfltakZb5k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Jul 2025 22:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:34:28:c8:4a:e9:3e:b5:d2:29:dd:0c:55:1e:04:20:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e2bef18e4f70d08df3fb30fee507e5b5a9196f99
Validity
Not Before: Jul 22 22:02:24 2025 GMT
Not After : Jul 23 22:02:24 2025 GMT
Subject: CN=9263749ab2b1d19bc41f4e9e64bbe99822dbeb0c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:56:61:19:a2:cb:23:b8:b9:bc:2e:7a:cf:4a:
88:48:b4:d4:bd:b9:7e:06:76:0a:9f:83:5d:45:60:
24:b0:28:7e:be:b1:a9:8d:b2:4d:13:14:4e:4c:01:
07:f2:7a:9c:6e:30:b0:4f:8c:9a:d2:db:6c:49:15:
7a:93:ae:73:9f:8e:a5:dc:10:8c:a8:4b:9c:64:b4:
f2:6f:8a:5e:4d:20:4a:bc:2d:c9:f1:0d:fc:26:83:
3a:86:b0:78:68:a6:8e:f0:25:7e:37:e6:f5:9b:7e:
f1:4b:45:f0:8e:62:be:a6:83:71:26:b3:8a:d2:07:
0d:9a:67:ad:85:1c:8e:d4:40:d9:7f:35:ab:b7:49:
b2:f8:71:f2:b7:bf:95:d5:e1:11:a8:7d:09:7a:a9:
49:20:00:a9:5d:94:8e:2b:a2:8c:21:11:af:b2:7b:
d0:44:d7:ba:16:54:eb:c6:b2:3d:eb:cb:ac:51:be:
63:94:ef:0d:3f:36:c3:49:47:bc:51:8c:5d:95:cd:
73:dc:72:9a:08:9e:a1:1d:ca:47:47:8b:2e:c8:44:
cb:14:8d:a2:31:8b:a1:dc:f1:1f:bb:31:9e:1e:b1:
69:c9:bd:06:90:7d:c0:b6:e7:d9:b3:a6:14:d0:71:
b1:f1:30:a2:5f:19:d1:22:e7:f5:e7:f5:12:ea:36:
b1:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:63:74:9A:B2:B1:D1:9B:C4:1F:4E:9E:64:BB:E9:98:22:DB:EB:0C
X509v3 Authority Key Identifier:
keyid:E2:BE:F1:8E:4F:70:D0:8D:F3:FB:30:FE:E5:07:E5:B5:A9:19:6F:99
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4r7xjk9w0I3z-zD-5QfltakZb5k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/4d2928-c636-40c0-9c9b-7990e3d1ddaa/1/4r7xjk9w0I3z-zD-5QfltakZb5k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/4d2928-c636-40c0-9c9b-7990e3d1ddaa/1/4r7xjk9w0I3z-zD-5QfltakZb5k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a7:97:cb:e2:2a:d1:8e:be:1f:df:37:4f:76:fa:46:7c:5f:ee:
63:b1:06:07:12:c3:cd:ce:a6:e9:c8:ac:01:e2:80:97:a7:f0:
f6:d8:3b:eb:1f:1a:23:23:47:3b:91:a7:57:63:b4:6d:f6:75:
b7:12:2d:f2:da:95:71:a4:95:65:71:9f:5b:60:5f:9f:b3:0a:
ec:4f:87:b0:c8:a9:ad:62:a5:61:1e:b7:71:4e:4f:3d:3c:5c:
eb:aa:87:7b:ed:c7:af:e6:38:83:5e:6d:12:0b:22:cd:c0:41:
f5:d7:52:df:8e:f0:1a:c6:2c:5f:3e:b8:ad:3e:8f:f7:9c:e1:
11:de:ef:e4:1d:08:fc:d7:6f:5f:3e:56:89:eb:83:f1:6b:71:
ac:0a:f5:ac:75:ea:b0:1f:c7:57:d5:e0:f3:7b:27:2c:f2:eb:
18:cf:80:71:46:07:5c:40:63:fa:4d:3a:2d:b3:f1:af:9e:ef:
64:b1:fc:a1:95:32:ca:1c:77:7c:5c:0e:4a:50:8e:31:05:12:
5e:0b:d5:08:20:87:ed:1b:a7:3d:4d:4b:c1:a5:6d:10:58:a2:
02:79:fe:e1:80:47:e7:25:77:9b:11:5f:9b:8e:f7:f8:8b:9c:
49:e1:26:cb:f2:10:58:40:cb:42:40:67:0e:e8:4d:b0:44:82:
3c:0e:2e:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 23 05:27:51 2025 by rpki-client