Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/e4ccbb-fd61-4fc4-aabd-a1883c8b1fe4/1/4uTP5HrtUexxqnX1NhibrW6GLes.mft
File: 4uTP5HrtUexxqnX1NhibrW6GLes.mft (raw, json)
Hash identifier: i/8PQmi84rg05nO3K/BZiu1PWmOJYpPgVd77+R23R54=
Subject key identifier: D1:90:D1:96:93:5F:94:0F:DB:9F:41:BA:10:E2:81:77:01:52:C8:A3
Authority key identifier: E2:E4:CF:E4:7A:ED:51:EC:71:AA:75:F5:36:18:9B:AD:6E:86:2D:EB
Certificate issuer: /CN=e2e4cfe47aed51ec71aa75f536189bad6e862deb
Certificate serial: 019845F6CADDCE8AAA5E863204347CBB0908
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4uTP5HrtUexxqnX1NhibrW6GLes.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/e4ccbb-fd61-4fc4-aabd-a1883c8b1fe4/1/4uTP5HrtUexxqnX1NhibrW6GLes.mft
Manifest number: 09A4
Signing time: Sat 26 Jul 2025 09:00:58 +0000
Manifest this update: Sat 26 Jul 2025 09:00:58 +0000
Manifest next update: Sun 27 Jul 2025 09:00:58 +0000
Files and hashes: 1: 4uTP5HrtUexxqnX1NhibrW6GLes.crl (hash: IspSGzlDLoGtqaUUYHBwjbOeDkcqEHQx438MDUg2tdM=)
2: QOPe1cLW7EaWSDo3eq_hBQK39Wo.roa (hash: N6OU5OMUXPa8ri34/Wuotfq2VOjXlYSfy+37I0hPZzM=)
3: qswjHcqLBQY9Z2nmcWTR62TphaY.roa (hash: p4pPSzszW4Gf4Jz9O3n/L0PF3Vv3naASMu8aongMgFA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/e4ccbb-fd61-4fc4-aabd-a1883c8b1fe4/1/4uTP5HrtUexxqnX1NhibrW6GLes.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/e4ccbb-fd61-4fc4-aabd-a1883c8b1fe4/1/4uTP5HrtUexxqnX1NhibrW6GLes.mft
rsync://rpki.ripe.net/repository/DEFAULT/4uTP5HrtUexxqnX1NhibrW6GLes.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 06:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:45:f6:ca:dd:ce:8a:aa:5e:86:32:04:34:7c:bb:09:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e2e4cfe47aed51ec71aa75f536189bad6e862deb
Validity
Not Before: Jul 26 09:00:58 2025 GMT
Not After : Jul 27 09:00:58 2025 GMT
Subject: CN=d190d196935f940fdb9f41ba10e281770152c8a3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:95:48:28:a3:fe:3d:2c:ef:cb:3c:fa:1b:25:
ec:ad:b7:c6:74:d6:ed:b5:25:31:36:23:6d:40:e5:
f4:33:9c:3f:e2:e3:d2:e0:c7:c0:2f:9a:45:ef:8a:
15:f0:c5:be:19:60:c6:15:43:7a:7d:27:0d:8a:bc:
77:7f:95:f2:b8:f7:b4:01:26:96:63:fc:6f:1d:54:
1c:90:0b:3d:e7:75:ee:e7:d3:3f:e2:af:30:33:a2:
ab:63:f8:11:0e:8b:80:b0:b3:38:1b:54:60:fa:8d:
e1:71:e8:ba:ef:0c:c0:7f:c7:1c:4c:b9:9f:0e:54:
bf:15:0b:d8:23:33:f7:45:11:ea:e0:43:40:8e:68:
e9:2c:37:9b:a6:3a:ba:ae:ae:56:c2:79:7a:44:7b:
8c:05:56:43:a7:4c:6c:25:0c:b1:97:28:54:93:56:
ba:a7:59:25:5c:bc:9c:d0:22:0e:88:41:12:00:b8:
8b:fa:53:29:ed:39:63:e8:8a:3f:41:0a:30:8b:3c:
71:ca:f4:0f:fe:0b:4c:ba:e9:c1:31:da:e0:df:3f:
b4:17:17:8d:95:fc:77:d5:e1:db:57:e4:f7:2a:2d:
02:62:27:84:7e:d6:fb:1e:0e:a5:aa:f1:6b:50:b0:
e6:38:4a:ed:88:6e:00:f9:07:fa:c7:a6:08:51:a3:
80:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:90:D1:96:93:5F:94:0F:DB:9F:41:BA:10:E2:81:77:01:52:C8:A3
X509v3 Authority Key Identifier:
keyid:E2:E4:CF:E4:7A:ED:51:EC:71:AA:75:F5:36:18:9B:AD:6E:86:2D:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4uTP5HrtUexxqnX1NhibrW6GLes.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/e4ccbb-fd61-4fc4-aabd-a1883c8b1fe4/1/4uTP5HrtUexxqnX1NhibrW6GLes.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/e4ccbb-fd61-4fc4-aabd-a1883c8b1fe4/1/4uTP5HrtUexxqnX1NhibrW6GLes.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:50:49:37:b0:46:f6:2b:f4:ce:1a:85:86:17:4a:fe:46:e8:
81:1e:16:39:6c:6e:eb:84:af:4e:e8:49:fc:10:89:64:f6:5c:
9b:b3:13:b2:46:a2:67:2f:50:50:97:57:8a:1f:e0:ef:d1:96:
f7:4c:3e:af:0b:96:56:11:1a:3a:53:25:34:bf:d7:39:d1:92:
b9:2d:52:02:9a:14:48:7a:b1:b3:9d:50:af:27:72:d4:33:0c:
66:06:05:fd:da:9d:6d:0a:92:ec:24:c6:dc:63:a2:b6:d0:00:
69:26:82:ee:42:8a:e1:9c:9e:58:0b:45:a5:3e:b2:4d:8b:eb:
b1:57:64:f2:7b:cd:3c:09:6f:82:c4:cc:49:8c:74:f1:03:00:
dd:d3:1d:bb:b5:3d:32:68:c2:b8:87:d5:47:0c:59:fc:0b:16:
92:06:77:4e:01:34:79:bb:f2:fb:1e:58:71:83:1c:ed:c7:86:
6c:07:12:92:f1:cf:f6:ab:2d:bd:03:9e:1c:b5:ef:63:d1:a3:
26:54:6e:57:9e:60:da:79:73:e0:67:a5:08:44:b3:73:19:65:
88:ad:da:86:cc:a1:02:9f:35:b6:a3:a6:8d:1a:2b:63:84:87:
56:9d:da:08:98:1c:aa:b8:58:39:21:cf:cf:a2:3e:de:ca:30:
63:96:50:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 14:47:21 2025 by rpki-client