Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/bfe262-877b-4045-b684-e0f078e7643d/1/40oXw13BfkPndPgjda_VDzPFNqQ.mft
File: 40oXw13BfkPndPgjda_VDzPFNqQ.mft (raw, json)
Hash identifier: grJ2cWfm09BHhpSn2rIHVHQ9ZpV0a56ZPKE18u4S8cA=
Subject key identifier: C4:87:8C:21:12:0B:5B:19:9F:DE:71:8D:16:0C:6B:35:A9:21:CB:81
Authority key identifier: E3:4A:17:C3:5D:C1:7E:43:E7:74:F8:23:75:AF:D5:0F:33:C5:36:A4
Certificate issuer: /CN=e34a17c35dc17e43e774f82375afd50f33c536a4
Certificate serial: 01984A09D1ACFA141FD310B25D6F44024C7E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/40oXw13BfkPndPgjda_VDzPFNqQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/bfe262-877b-4045-b684-e0f078e7643d/1/40oXw13BfkPndPgjda_VDzPFNqQ.mft
Manifest number: 0E8C
Signing time: Sun 27 Jul 2025 04:00:14 +0000
Manifest this update: Sun 27 Jul 2025 04:00:14 +0000
Manifest next update: Mon 28 Jul 2025 04:00:14 +0000
Files and hashes: 1: 13zsYUD0hA67z1BODvjquGKoT_E.roa (hash: MKw8FhdsNVau1tjrdAX7ReUxGObo82luQsljT5owYXc=)
2: 40oXw13BfkPndPgjda_VDzPFNqQ.crl (hash: Xh7SfJrNiVnRjfANHQZVXU17ncV5fQXaFuBFtGDzupM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/bfe262-877b-4045-b684-e0f078e7643d/1/40oXw13BfkPndPgjda_VDzPFNqQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/e3/bfe262-877b-4045-b684-e0f078e7643d/1/40oXw13BfkPndPgjda_VDzPFNqQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/40oXw13BfkPndPgjda_VDzPFNqQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 00:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4a:09:d1:ac:fa:14:1f:d3:10:b2:5d:6f:44:02:4c:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e34a17c35dc17e43e774f82375afd50f33c536a4
Validity
Not Before: Jul 27 04:00:14 2025 GMT
Not After : Jul 28 04:00:14 2025 GMT
Subject: CN=c4878c21120b5b199fde718d160c6b35a921cb81
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:ea:fc:fd:4e:d5:53:5e:06:06:8c:05:e8:a9:
89:23:5c:d4:61:23:83:b1:c5:d8:bd:25:69:f1:c2:
cf:9e:7b:fc:e8:05:52:1e:c3:30:d3:73:d2:b5:17:
1e:0f:0b:3b:98:62:9b:7b:10:71:c6:48:31:d3:87:
bc:25:de:f0:90:e1:16:ec:f0:49:5c:eb:fa:e5:34:
2a:97:d3:aa:c4:f6:37:0b:f5:df:57:e5:cb:b1:4f:
eb:ea:97:8b:44:af:8c:00:c2:5a:3b:68:54:29:4e:
18:31:e5:24:0e:6b:5d:5e:35:c4:f1:cd:e5:13:b3:
94:3c:af:59:af:fd:cc:08:bb:8c:05:33:b8:df:c3:
fb:d7:d1:c1:f2:e7:75:e9:60:4a:d8:80:a6:06:62:
fa:88:b3:f9:cb:82:88:54:6d:82:b2:9b:f6:b7:d1:
ca:67:40:e1:e6:ba:95:f8:36:08:e7:15:c5:07:14:
bb:89:05:b9:92:b3:67:7d:ed:40:84:de:0c:5b:b3:
c4:c0:5f:3b:dd:81:88:3b:27:93:33:5c:1d:19:54:
76:5d:2c:2c:5a:b8:d6:2d:83:d4:f3:c9:47:c1:0f:
70:c3:3d:fc:31:53:00:24:8f:ce:67:61:1f:0e:0b:
27:36:a2:b7:08:8e:21:e5:21:63:8c:14:23:55:c5:
2e:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:87:8C:21:12:0B:5B:19:9F:DE:71:8D:16:0C:6B:35:A9:21:CB:81
X509v3 Authority Key Identifier:
keyid:E3:4A:17:C3:5D:C1:7E:43:E7:74:F8:23:75:AF:D5:0F:33:C5:36:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/40oXw13BfkPndPgjda_VDzPFNqQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/bfe262-877b-4045-b684-e0f078e7643d/1/40oXw13BfkPndPgjda_VDzPFNqQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/bfe262-877b-4045-b684-e0f078e7643d/1/40oXw13BfkPndPgjda_VDzPFNqQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:6f:ca:b9:9d:2d:a6:e8:91:0f:75:2b:2e:49:c6:3c:ca:45:
90:6f:56:6c:ee:db:c6:0c:a9:fb:05:58:74:c4:3c:31:68:b1:
ed:03:26:a8:f9:18:5a:ea:68:90:3f:be:5e:a9:a8:36:6d:5f:
34:fe:96:48:50:21:40:ff:93:ad:c9:15:e7:04:7b:6a:88:f5:
14:8a:ba:3f:8e:05:7f:1b:15:30:23:34:40:69:77:8c:1e:ab:
ca:47:27:1c:29:0c:18:29:c2:4f:42:68:72:83:01:61:0b:08:
c0:50:ae:9a:10:05:74:64:42:cc:26:ed:28:c0:4b:c7:f5:3a:
8d:ad:14:43:b9:5b:d2:ad:59:70:ea:a0:48:b2:97:8d:b3:65:
44:c5:ca:03:30:c8:d8:73:e5:d3:92:9c:62:f8:4c:8a:8e:24:
14:94:af:ce:5e:0f:82:2e:23:ab:ff:77:33:d1:1c:81:e3:ca:
1a:2f:17:d1:a3:4e:f9:f3:fa:04:74:f6:6e:ad:2b:7a:25:d2:
97:06:0f:be:9d:20:8c:2d:52:76:53:43:07:84:48:25:0f:4b:
ba:86:4e:f1:7c:52:f2:d6:8e:59:78:4b:41:06:ca:da:b3:9f:
96:b1:5c:58:06:ea:9a:ef:5b:f3:f6:cf:cf:f5:75:29:10:e5:
ad:0e:84:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 08:45:22 2025 by rpki-client