Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/9b87d4-e0f9-423d-af9d-de9e27ebb25d/1/4RlTX6w_pId5V5vOj8O0At7yy0Q.mft
File: 4RlTX6w_pId5V5vOj8O0At7yy0Q.mft (raw, json)
Hash identifier: PzwZz0/mSgfkcWJG7tZ+Qzi1aBnbWfvuBFcmEFPRdXI=
Subject key identifier: 7E:0D:0C:74:E5:3E:15:71:CF:C1:DD:D8:AD:00:36:94:B6:F9:EA:50
Authority key identifier: E1:19:53:5F:AC:3F:A4:87:79:57:9B:CE:8F:C3:B4:02:DE:F2:CB:44
Certificate issuer: /CN=e119535fac3fa48779579bce8fc3b402def2cb44
Certificate serial: 0198496608445CBDB6C53C8F656994980848
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4RlTX6w_pId5V5vOj8O0At7yy0Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/9b87d4-e0f9-423d-af9d-de9e27ebb25d/1/4RlTX6w_pId5V5vOj8O0At7yy0Q.mft
Manifest number: 05D8
Signing time: Sun 27 Jul 2025 01:01:20 +0000
Manifest this update: Sun 27 Jul 2025 01:01:20 +0000
Manifest next update: Mon 28 Jul 2025 01:01:20 +0000
Files and hashes: 1: 4RlTX6w_pId5V5vOj8O0At7yy0Q.crl (hash: cJgGfxVStzXwYs6sgQCY+qcV1IJqPqXkaxh0JGZGmbg=)
2: soe--L3Zv3Ab_c4ax7SKPcclEEk.roa (hash: EM4MaU25MU3aJWehslBE3y3dfKuyrb7A7eUnc8kofN8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/9b87d4-e0f9-423d-af9d-de9e27ebb25d/1/4RlTX6w_pId5V5vOj8O0At7yy0Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/f2/9b87d4-e0f9-423d-af9d-de9e27ebb25d/1/4RlTX6w_pId5V5vOj8O0At7yy0Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/4RlTX6w_pId5V5vOj8O0At7yy0Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 01:01:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:49:66:08:44:5c:bd:b6:c5:3c:8f:65:69:94:98:08:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e119535fac3fa48779579bce8fc3b402def2cb44
Validity
Not Before: Jul 27 01:01:20 2025 GMT
Not After : Jul 28 01:01:20 2025 GMT
Subject: CN=7e0d0c74e53e1571cfc1ddd8ad003694b6f9ea50
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:e2:e3:88:6f:c8:f2:c9:df:f0:3a:d3:b7:e1:
a2:c5:14:a8:ea:db:2f:6f:93:5f:a6:44:8a:41:85:
1c:3b:79:c5:2d:f8:76:84:21:ce:74:ba:99:7f:6b:
33:25:37:c0:21:2d:f7:21:1a:7a:f4:29:01:49:db:
76:42:42:6f:b4:10:2a:7b:4e:da:5f:de:27:c2:34:
0c:cb:e0:d8:f5:77:41:d9:18:78:4e:6b:f9:18:f4:
d3:5b:bd:ca:c5:c4:8c:99:c1:43:5e:89:d1:12:97:
07:ca:bd:40:5f:ea:58:b7:09:22:16:58:9a:61:33:
41:d1:f4:a3:ba:24:dd:42:44:af:9f:21:e3:b6:a0:
6e:d9:0e:15:c1:bd:18:87:c8:e4:df:d1:26:4e:92:
f9:ee:b7:91:80:f9:7b:9f:16:be:3f:ad:5c:63:fa:
7d:48:01:d9:ff:1f:b5:ba:ab:ad:9a:89:b9:0c:56:
ae:0d:13:4f:1f:e3:e5:2a:d1:75:2a:dc:fe:4c:a2:
be:29:e3:3b:69:0b:d1:82:11:0b:c8:9a:dd:a9:0a:
2d:b6:fb:ed:27:61:c6:a0:44:8a:47:15:d8:02:1d:
48:f2:21:fc:db:b5:7a:b4:d1:5b:ad:0d:20:81:c8:
17:91:fd:12:3c:29:9e:08:70:53:97:2c:b0:16:b0:
41:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:0D:0C:74:E5:3E:15:71:CF:C1:DD:D8:AD:00:36:94:B6:F9:EA:50
X509v3 Authority Key Identifier:
keyid:E1:19:53:5F:AC:3F:A4:87:79:57:9B:CE:8F:C3:B4:02:DE:F2:CB:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4RlTX6w_pId5V5vOj8O0At7yy0Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/9b87d4-e0f9-423d-af9d-de9e27ebb25d/1/4RlTX6w_pId5V5vOj8O0At7yy0Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/9b87d4-e0f9-423d-af9d-de9e27ebb25d/1/4RlTX6w_pId5V5vOj8O0At7yy0Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:fe:52:b8:fc:d6:f6:a5:9a:8c:b1:ce:03:53:cc:42:7b:e0:
16:96:e1:f7:86:d1:a4:3a:19:2b:7c:ae:a5:7d:2b:e2:24:21:
cf:23:b6:30:bd:70:67:ad:98:e7:1d:39:67:75:21:8f:01:16:
fe:10:bf:1b:ea:82:bb:0c:d9:5a:e7:75:45:2a:e2:1d:e5:6d:
01:db:78:5a:9d:f2:77:45:05:5c:70:47:e2:8c:3f:3f:c4:80:
c9:00:07:1b:9e:ab:34:ec:ff:5f:49:c7:28:ef:6c:9d:17:46:
fe:26:65:22:81:20:87:35:3c:fe:44:56:90:46:e3:4d:e8:29:
4b:1a:1d:48:73:e1:a2:d5:2d:ae:77:62:80:65:fa:5e:c2:e7:
0e:37:16:dd:b2:ca:6f:12:29:ff:b9:7f:c0:cb:26:60:4e:97:
ee:b2:ea:11:e7:a5:72:3d:b2:64:a0:70:c4:a0:d2:04:df:4b:
11:08:26:bc:27:42:51:1b:9c:e3:15:42:f1:83:8b:fb:5f:65:
10:c4:63:d6:0e:1b:1a:42:d5:5b:a7:a4:09:71:d5:a3:d8:aa:
d8:70:4a:52:65:58:7b:7f:39:df:8d:4f:7f:0b:fc:ad:b1:d7:
ae:6f:c8:55:3a:58:8d:ab:2e:f0:be:4b:ae:aa:e7:ea:31:bb:
5b:b4:7d:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 10:29:52 2025 by rpki-client