
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/051035-200d-41e8-adf1-d33f08f3a48d/1/4hEKzOM6yFARyowi0gAWZuRbk3c.mft
File: 4hEKzOM6yFARyowi0gAWZuRbk3c.mft (raw, json)
Hash identifier: qBDDaa449VEfZh4uYWQlvW9+IHQWfTFjLXsppKXfDrM=
Subject key identifier: 3B:B1:2D:BE:78:CF:C0:B2:29:D4:BE:AB:7E:DA:7D:5D:F9:20:4E:56
Authority key identifier: E2:11:0A:CC:E3:3A:C8:50:11:CA:8C:22:D2:00:16:66:E4:5B:93:77
Certificate issuer: /CN=e2110acce33ac85011ca8c22d2001666e45b9377
Certificate serial: 019934248B89266D31D95824568CD220108B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4hEKzOM6yFARyowi0gAWZuRbk3c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/051035-200d-41e8-adf1-d33f08f3a48d/1/4hEKzOM6yFARyowi0gAWZuRbk3c.mft
Manifest number: 1688
Signing time: Wed 10 Sep 2025 15:00:34 +0000
Manifest this update: Wed 10 Sep 2025 15:00:34 +0000
Manifest next update: Thu 11 Sep 2025 15:00:34 +0000
Files and hashes: 1: 4hEKzOM6yFARyowi0gAWZuRbk3c.crl (hash: +sa2/msxsNlBsPotrPJ/REa4B9daAscbtDa1Lkgt4C0=)
2: 6fR_eS1-S-5XOCu6-_w9WFRAsnM.roa (hash: QrWF8qdwleA9HW7Gs5bTLxZ2kKrxxkYNg+tfhj45HxE=)
3: EeuiVBHDBppbMbvhnK9cVO-GWuY.roa (hash: RibVRzvF2zG1KnABcO1H1cwM+0LZwhWIJrVmfB+N9ZY=)
4: JMkLxoa9gyb522lPudXUln-VtH8.roa (hash: HGRLs3/3xdKBB32Jm7MzBkeAQwnme0p6aKkTVOkrnLU=)
5: UdT52qeUwfKz4cUKsNmdkQLdPTw.roa (hash: Kck1eebPn1LOtIjWwJSFOCY1FX3byBpP9hqNzAg6lBY=)
6: feh72HR-_mrzGLz7VSpEFnXqaJo.roa (hash: LwnQ+vMA051C/u4c2Kzemun4LSgaDWuT73rcQZC4pSM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/04/051035-200d-41e8-adf1-d33f08f3a48d/1/4hEKzOM6yFARyowi0gAWZuRbk3c.crl
rsync://rpki.ripe.net/repository/DEFAULT/04/051035-200d-41e8-adf1-d33f08f3a48d/1/4hEKzOM6yFARyowi0gAWZuRbk3c.mft
rsync://rpki.ripe.net/repository/DEFAULT/4hEKzOM6yFARyowi0gAWZuRbk3c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 11 Sep 2025 11:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:34:24:8b:89:26:6d:31:d9:58:24:56:8c:d2:20:10:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e2110acce33ac85011ca8c22d2001666e45b9377
Validity
Not Before: Sep 10 15:00:34 2025 GMT
Not After : Sep 11 15:00:34 2025 GMT
Subject: CN=3bb12dbe78cfc0b229d4beab7eda7d5df9204e56
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:84:a2:e7:67:c1:c8:13:87:ea:68:2f:83:5d:
79:a2:73:bf:46:6b:22:52:51:d8:b2:d3:9e:02:57:
b3:a0:76:a9:d7:93:b3:c4:4e:50:5c:f9:93:3a:c5:
a5:b0:e5:f7:89:10:6a:c2:8e:d4:8f:ad:e9:e1:e8:
f6:40:cc:f1:16:fd:d6:c4:3d:91:b9:5e:51:88:c0:
a8:13:58:2d:d9:71:e1:b5:9a:0e:fc:39:5f:5e:8a:
d7:11:35:dd:43:d7:a0:8c:fd:23:d7:05:1d:e2:a4:
c4:cb:c5:b6:45:73:3d:11:c4:b4:2f:b7:b3:4c:99:
f9:45:73:6a:95:ad:5a:a2:42:be:da:d3:03:ac:5d:
94:84:c4:ea:2a:9a:02:85:ff:eb:16:2f:43:9d:8e:
18:89:fd:34:d7:11:6c:87:95:0e:11:fe:9f:c0:fa:
d7:78:64:e5:5b:7c:4a:db:29:81:db:d2:1f:d9:45:
a1:1d:ec:42:6d:a9:c7:b8:9b:8d:20:7a:04:29:c0:
aa:87:88:1e:b4:7e:70:8e:55:a5:db:be:1e:df:fa:
8f:df:cf:c9:1f:e6:35:3e:fb:91:a4:12:f2:a1:f8:
da:6b:7a:57:58:51:55:a9:26:d8:3c:2f:4e:e2:49:
8f:56:14:6a:92:3c:5c:bb:b6:da:f2:19:f7:3b:c3:
84:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:B1:2D:BE:78:CF:C0:B2:29:D4:BE:AB:7E:DA:7D:5D:F9:20:4E:56
X509v3 Authority Key Identifier:
keyid:E2:11:0A:CC:E3:3A:C8:50:11:CA:8C:22:D2:00:16:66:E4:5B:93:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4hEKzOM6yFARyowi0gAWZuRbk3c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/051035-200d-41e8-adf1-d33f08f3a48d/1/4hEKzOM6yFARyowi0gAWZuRbk3c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/04/051035-200d-41e8-adf1-d33f08f3a48d/1/4hEKzOM6yFARyowi0gAWZuRbk3c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
76:e4:65:bb:40:bd:f5:73:63:da:39:fa:bc:8a:c5:e2:7d:ea:
93:56:31:a8:0d:a4:2d:5a:62:40:4c:56:0a:3f:57:a8:fe:29:
91:ed:e4:d2:1c:e3:76:83:e0:8e:fb:5f:81:b3:9d:4f:fd:a4:
7e:02:ff:48:5b:98:4f:ec:57:8a:1b:6f:76:44:2a:f6:a2:30:
3d:6f:32:f9:fe:78:81:b2:2f:01:1d:36:e0:c7:5a:b1:a0:62:
61:e5:55:e4:0b:01:c0:8d:05:9f:79:db:7e:33:aa:81:37:c1:
dc:c3:57:e8:47:07:63:45:69:39:01:0a:c8:29:c8:30:2e:2a:
d0:a4:a0:83:14:13:e8:4b:92:a3:e5:9a:e0:a7:43:d6:24:0c:
8d:c9:b6:c7:c6:ff:3b:86:13:20:01:fa:1a:7d:87:de:d5:79:
e4:4b:a6:2a:e3:b4:c8:78:bb:04:49:37:6d:46:0a:d2:c5:79:
95:b0:94:f9:41:26:50:36:0c:9a:fa:4f:cd:e6:3d:88:d5:67:
99:e5:44:4e:37:03:e2:d1:36:8a:70:fb:39:c9:c8:da:a6:3a:
b3:1a:00:fe:bf:ba:7f:d2:3b:17:bc:50:09:99:9c:00:f8:6d:
2b:cc:26:81:6d:4a:ed:ae:14:2a:a2:a3:5b:d0:38:06:b7:d0:
82:50:1c:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 10 19:02:11 2025 by rpki-client