Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/54be58-4175-407a-bc37-cc26d4316142/1/4hTrNaNf1IiGBwO3mQuBcK8XkS8.mft
File: 4hTrNaNf1IiGBwO3mQuBcK8XkS8.mft (raw, json)
Hash identifier: g7cs3PhxmRh5/M+Xxpg6qhpMYv4nMQwJ/zuX92bzCxk=
Subject key identifier: 24:E4:10:E4:BF:1D:C4:8B:F0:F5:57:C6:69:C4:95:BA:62:92:E8:D4
Authority key identifier: E2:14:EB:35:A3:5F:D4:88:86:07:03:B7:99:0B:81:70:AF:17:91:2F
Certificate issuer: /CN=e214eb35a35fd488860703b7990b8170af17912f
Certificate serial: 01992CD8F5197C3BE643EB8271FCA218B2BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4hTrNaNf1IiGBwO3mQuBcK8XkS8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/54be58-4175-407a-bc37-cc26d4316142/1/4hTrNaNf1IiGBwO3mQuBcK8XkS8.mft
Manifest number: 08B5
Signing time: Tue 09 Sep 2025 05:00:40 +0000
Manifest this update: Tue 09 Sep 2025 05:00:40 +0000
Manifest next update: Wed 10 Sep 2025 05:00:40 +0000
Files and hashes: 1: 4hTrNaNf1IiGBwO3mQuBcK8XkS8.crl (hash: Rqt1KD3QwVcu8tljraiLpO0dXFQDAlMprLZP5JpuJg0=)
2: wxwsQanfQy5790A813fRANF-qCc.roa (hash: bJCA9RXeZ9EZ2+fSpx3hkdts4SbbKPXcBRLWj1SMUSM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0a/54be58-4175-407a-bc37-cc26d4316142/1/4hTrNaNf1IiGBwO3mQuBcK8XkS8.crl
rsync://rpki.ripe.net/repository/DEFAULT/0a/54be58-4175-407a-bc37-cc26d4316142/1/4hTrNaNf1IiGBwO3mQuBcK8XkS8.mft
rsync://rpki.ripe.net/repository/DEFAULT/4hTrNaNf1IiGBwO3mQuBcK8XkS8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 10 Sep 2025 05:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:2c:d8:f5:19:7c:3b:e6:43:eb:82:71:fc:a2:18:b2:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e214eb35a35fd488860703b7990b8170af17912f
Validity
Not Before: Sep 9 05:00:40 2025 GMT
Not After : Sep 10 05:00:40 2025 GMT
Subject: CN=24e410e4bf1dc48bf0f557c669c495ba6292e8d4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:bb:3c:f1:bf:cb:3a:93:d1:92:12:2a:a2:44:
b8:c3:ce:bf:82:f3:02:9e:3f:18:10:5e:70:00:ea:
7a:c9:d4:31:3c:c6:66:8f:8f:96:88:fd:56:0e:d3:
d8:c2:3d:a9:41:b3:00:50:3e:e4:42:72:f2:9e:88:
18:6c:d6:32:f6:6b:8b:07:3d:ef:1a:9f:29:c3:59:
2e:62:40:1d:11:79:bc:6e:41:c4:88:e9:c6:e3:d0:
29:33:8a:b4:9b:f8:8f:18:85:67:18:4d:0d:1c:a9:
f1:e2:14:09:5d:9d:7f:72:5c:fe:bf:ce:09:88:03:
89:4f:d8:f9:be:3c:28:78:b6:7f:b5:32:23:13:b1:
3a:40:a0:26:92:ef:06:e3:95:2b:88:28:16:be:3f:
95:34:b7:59:76:72:3f:20:7a:a9:0f:3e:96:78:51:
af:c8:22:db:59:52:ec:d3:8a:ba:59:ba:8b:bc:fe:
c2:58:f5:0d:b6:06:c9:9c:08:38:fa:7f:ca:12:a7:
9d:f1:65:70:d6:3b:dd:af:01:49:24:d3:18:60:70:
f2:71:58:c5:7e:20:c7:c0:1c:37:20:ae:95:76:27:
23:bf:4c:04:64:a2:67:1c:36:e6:d2:2f:ff:d4:0b:
b9:dd:f4:a8:9a:9b:4f:c7:38:32:5c:8e:45:97:fc:
b9:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:E4:10:E4:BF:1D:C4:8B:F0:F5:57:C6:69:C4:95:BA:62:92:E8:D4
X509v3 Authority Key Identifier:
keyid:E2:14:EB:35:A3:5F:D4:88:86:07:03:B7:99:0B:81:70:AF:17:91:2F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4hTrNaNf1IiGBwO3mQuBcK8XkS8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/54be58-4175-407a-bc37-cc26d4316142/1/4hTrNaNf1IiGBwO3mQuBcK8XkS8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/54be58-4175-407a-bc37-cc26d4316142/1/4hTrNaNf1IiGBwO3mQuBcK8XkS8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:01:ed:07:98:37:c9:3c:a7:41:fa:64:c4:4b:9e:ce:66:1d:
61:3c:50:66:05:ee:9e:78:d7:0c:4e:1e:09:26:4e:cd:3d:93:
ff:a1:ac:91:21:e1:ce:97:da:eb:82:2d:14:47:93:d0:6b:a3:
e0:f8:79:2c:54:48:bb:17:a4:82:73:f8:05:87:4e:86:72:7e:
b4:1d:f7:67:f4:0a:b0:52:99:f1:b6:b7:c7:ad:b2:21:70:7b:
30:bf:79:54:3f:07:e6:c0:6c:b6:f9:db:bd:3a:fa:6b:a6:ab:
d9:25:2e:ac:3e:7c:98:58:ec:33:4c:7d:65:57:6a:10:8d:07:
d7:77:12:e0:99:f1:0a:f6:03:cb:b0:8b:4e:1d:ec:39:da:db:
93:ea:de:cf:db:5a:fb:53:97:4a:a4:54:2e:e5:59:53:07:08:
65:c9:09:41:aa:29:15:18:5a:9f:01:66:43:dd:c6:24:7c:32:
5c:6b:bd:c6:9a:72:8f:61:17:26:8b:05:65:4f:1d:54:a4:f4:
8b:14:b2:67:a7:c9:82:dd:6d:85:37:70:b2:34:ae:0b:f9:e3:
87:bc:51:24:8f:03:74:ba:3b:19:42:93:f5:31:b3:5a:a1:b2:
81:c1:c1:2f:2b:d1:8e:2e:3f:cc:d5:af:f8:99:a7:c5:52:29:
dd:e8:04:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 9 10:14:48 2025 by rpki-client