Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/e8f727-cb23-43ce-85d2-d48b7d2624db/1/4wEfCFnQaghJdfTovStVZxDdjDA.mft
File: 4wEfCFnQaghJdfTovStVZxDdjDA.mft (raw, json)
Hash identifier: ephpWCLTFNy6IU/0Ma8YLHyRcHQZMQJMKUvWx5D0eYY=
Subject key identifier: 5A:87:76:EA:34:A3:55:E1:52:00:0D:08:E1:43:5D:18:B6:6B:51:71
Authority key identifier: E3:01:1F:08:59:D0:6A:08:49:75:F4:E8:BD:2B:55:67:10:DD:8C:30
Certificate issuer: /CN=e3011f0859d06a084975f4e8bd2b556710dd8c30
Certificate serial: 01993191C93414E120A30809596EF76AFA36
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4wEfCFnQaghJdfTovStVZxDdjDA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/e8f727-cb23-43ce-85d2-d48b7d2624db/1/4wEfCFnQaghJdfTovStVZxDdjDA.mft
Manifest number: 1103
Signing time: Wed 10 Sep 2025 03:01:01 +0000
Manifest this update: Wed 10 Sep 2025 03:01:01 +0000
Manifest next update: Thu 11 Sep 2025 03:01:01 +0000
Files and hashes: 1: 4wEfCFnQaghJdfTovStVZxDdjDA.crl (hash: z8Aq9EKjzPYjs4nolVjuzF0UOELhUNOEYcrIJntvNKQ=)
2: y5czNixkNluft47-krcqIbdqVD0.roa (hash: AmEHJkAG0oDmal6HjQJOOd7Nfm7cgEA//96C9SqFxV0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/e8f727-cb23-43ce-85d2-d48b7d2624db/1/4wEfCFnQaghJdfTovStVZxDdjDA.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/e8f727-cb23-43ce-85d2-d48b7d2624db/1/4wEfCFnQaghJdfTovStVZxDdjDA.mft
rsync://rpki.ripe.net/repository/DEFAULT/4wEfCFnQaghJdfTovStVZxDdjDA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 11 Sep 2025 02:00:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:31:91:c9:34:14:e1:20:a3:08:09:59:6e:f7:6a:fa:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e3011f0859d06a084975f4e8bd2b556710dd8c30
Validity
Not Before: Sep 10 03:01:01 2025 GMT
Not After : Sep 11 03:01:01 2025 GMT
Subject: CN=5a8776ea34a355e152000d08e1435d18b66b5171
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:41:24:f8:0a:6a:4e:ae:e9:05:7e:87:af:9c:
60:e2:62:5f:17:9c:cc:36:fc:2a:ae:33:b2:28:71:
c3:7c:95:6b:15:49:81:1b:5a:78:0e:bb:ea:b5:d7:
6c:f9:4e:98:7c:4d:a0:dd:52:4c:0b:c0:55:b4:de:
82:fa:82:58:12:33:c9:1b:88:93:b4:6b:59:b7:be:
63:26:14:53:a3:1e:64:b4:c5:8d:87:27:1f:4b:fa:
03:69:e3:60:4b:7c:97:5b:63:4e:95:0e:29:7f:a8:
cd:35:75:f2:0a:62:a0:33:92:b8:f9:52:ee:c7:4c:
45:30:64:5e:3d:2f:6e:9e:75:33:60:20:d4:98:f2:
c1:33:e6:2b:f8:39:ae:0f:e0:c6:ee:58:b7:d5:06:
00:91:3a:d5:b7:95:d2:32:01:49:ef:8b:4d:d5:f5:
91:84:83:64:6e:01:03:cb:29:d6:91:60:ac:cc:d7:
c2:de:fe:d3:83:1f:23:45:ff:dd:63:2d:6a:c6:ea:
cd:05:a6:26:4f:23:7d:a2:50:75:1b:3f:da:68:e2:
a5:e8:4f:56:a1:cc:7d:d7:d4:fc:db:3f:85:31:fc:
a5:db:bc:4e:33:fd:61:33:dc:19:af:e8:2f:b0:fc:
8e:ce:67:1d:29:b0:f2:d5:0c:9d:ea:f4:c9:3e:40:
c9:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:87:76:EA:34:A3:55:E1:52:00:0D:08:E1:43:5D:18:B6:6B:51:71
X509v3 Authority Key Identifier:
keyid:E3:01:1F:08:59:D0:6A:08:49:75:F4:E8:BD:2B:55:67:10:DD:8C:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4wEfCFnQaghJdfTovStVZxDdjDA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/e8f727-cb23-43ce-85d2-d48b7d2624db/1/4wEfCFnQaghJdfTovStVZxDdjDA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/e8f727-cb23-43ce-85d2-d48b7d2624db/1/4wEfCFnQaghJdfTovStVZxDdjDA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:18:50:4c:ae:ae:40:1d:57:1a:0c:8e:a3:3a:9d:68:b0:7c:
e0:9b:a2:aa:48:f2:b4:62:2e:0c:ca:0a:5d:4b:81:3d:74:c3:
ef:59:74:a2:e8:60:37:f9:b5:96:83:f4:1c:a4:63:a1:99:4a:
01:14:78:f8:7c:30:19:57:31:95:b6:5a:88:21:a8:67:55:36:
36:bc:70:b4:9d:17:7f:89:19:1e:80:3c:2a:5c:0e:10:57:30:
3a:8d:4d:7e:6d:fa:b2:54:84:0c:f7:d6:16:ca:f2:74:04:8f:
63:dc:32:53:42:a9:2e:a0:cd:df:d4:5e:d9:c6:52:cc:db:fa:
ca:b6:af:23:fd:9f:02:dc:c0:ff:a2:6b:ce:74:7c:03:12:f3:
e1:23:f2:55:e6:4d:76:4e:1c:02:34:72:e1:9d:7f:6f:7d:94:
8f:2f:b4:87:7f:ef:c8:52:b6:e4:6d:54:0c:3f:03:75:5b:7f:
66:d0:6f:51:c7:4a:3e:a7:f9:61:66:80:7d:46:55:a1:36:f4:
83:4b:e5:50:42:91:99:c5:c8:bd:26:61:08:04:8c:0e:5d:9d:
2c:98:88:db:c6:ec:08:07:b0:87:23:0f:93:05:e6:b6:3c:d5:
1b:34:d6:35:81:8f:e0:ed:71:36:b1:90:57:1f:71:9e:de:0b:
c2:25:d2:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 10 10:53:04 2025 by rpki-client