Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/69a209-fa57-43f0-bbc2-7507e819a795/1/4x2iugV-mlSmFw8lf_l4VtyX4Gg.mft
File: 4x2iugV-mlSmFw8lf_l4VtyX4Gg.mft (raw, json)
Hash identifier: H2AisKkhPtzyS+xwAAQLbvtiwxeM9D3UzzHLfvOhXxk=
Subject key identifier: E8:61:32:78:94:CE:34:A7:BC:F7:FF:7D:9E:CE:93:05:C8:F4:20:C9
Authority key identifier: E3:1D:A2:BA:05:7E:9A:54:A6:17:0F:25:7F:F9:78:56:DC:97:E0:68
Certificate issuer: /CN=e31da2ba057e9a54a6170f257ff97856dc97e068
Certificate serial: 019922C333158B009E57558F3DC2BCE0DC6F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4x2iugV-mlSmFw8lf_l4VtyX4Gg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/69a209-fa57-43f0-bbc2-7507e819a795/1/4x2iugV-mlSmFw8lf_l4VtyX4Gg.mft
Manifest number: 1671
Signing time: Sun 07 Sep 2025 06:00:41 +0000
Manifest this update: Sun 07 Sep 2025 06:00:41 +0000
Manifest next update: Mon 08 Sep 2025 06:00:41 +0000
Files and hashes: 1: 4x2iugV-mlSmFw8lf_l4VtyX4Gg.crl (hash: fVvYQz2W8uemTXA7bOoH3orajfgSEXKTX5beY/9Hhog=)
2: lQLxDvgdpM5wdztERCLsc3tCNwY.roa (hash: Tk0E6nuunIdfuPSYgglnezBIWaLfJtMK/AmMDpED9vM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/69a209-fa57-43f0-bbc2-7507e819a795/1/4x2iugV-mlSmFw8lf_l4VtyX4Gg.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/69a209-fa57-43f0-bbc2-7507e819a795/1/4x2iugV-mlSmFw8lf_l4VtyX4Gg.mft
rsync://rpki.ripe.net/repository/DEFAULT/4x2iugV-mlSmFw8lf_l4VtyX4Gg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:c3:33:15:8b:00:9e:57:55:8f:3d:c2:bc:e0:dc:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e31da2ba057e9a54a6170f257ff97856dc97e068
Validity
Not Before: Sep 7 06:00:41 2025 GMT
Not After : Sep 8 06:00:41 2025 GMT
Subject: CN=e861327894ce34a7bcf7ff7d9ece9305c8f420c9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:cb:57:9e:a7:92:ca:5f:59:cd:0a:c4:20:57:
12:76:f3:ff:11:70:18:57:fb:fc:6d:f4:7f:6f:de:
1d:07:b1:01:f4:14:45:40:b6:d0:6e:a9:b2:2b:db:
30:bd:ea:5e:f9:c7:da:87:46:a4:3d:8e:90:98:a3:
a3:55:1a:76:38:7e:13:5c:b9:cf:42:e4:b0:a9:64:
80:f8:da:02:0a:d3:b2:94:6a:c3:22:fc:00:75:df:
94:3f:c5:15:53:e8:e5:c2:f9:e1:11:a5:47:a0:57:
71:8d:2f:a7:7f:f1:10:53:55:da:4b:66:49:77:43:
55:b3:c9:9b:50:69:ea:5d:27:f0:40:97:e8:6d:13:
3d:bd:40:db:cd:e4:05:d1:08:42:2f:41:a9:9d:c1:
02:3d:33:e8:7e:23:a3:07:f5:ae:bc:dd:25:66:4e:
24:26:3d:e3:14:29:b7:85:5d:06:ed:1a:91:f8:80:
ae:77:22:26:ca:59:1a:39:fa:3b:97:f8:0d:26:c5:
05:ab:6e:55:26:60:59:95:01:4f:22:4d:ed:84:91:
5b:33:3f:97:e1:bd:9d:b8:35:f6:33:d9:c3:e2:e3:
83:06:38:65:ff:c5:89:53:a7:a1:46:29:af:aa:f8:
b0:fd:4a:7c:7b:5b:86:7e:42:24:6c:67:49:ae:3a:
62:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:61:32:78:94:CE:34:A7:BC:F7:FF:7D:9E:CE:93:05:C8:F4:20:C9
X509v3 Authority Key Identifier:
keyid:E3:1D:A2:BA:05:7E:9A:54:A6:17:0F:25:7F:F9:78:56:DC:97:E0:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4x2iugV-mlSmFw8lf_l4VtyX4Gg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/69a209-fa57-43f0-bbc2-7507e819a795/1/4x2iugV-mlSmFw8lf_l4VtyX4Gg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/69a209-fa57-43f0-bbc2-7507e819a795/1/4x2iugV-mlSmFw8lf_l4VtyX4Gg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:24:ee:3c:83:39:04:80:68:3a:1b:46:31:fa:09:ce:a5:da:
6d:da:1f:75:7b:6a:0c:bd:2e:db:7f:53:00:35:b2:ae:d1:96:
0b:6c:b0:97:b1:d3:2c:fa:8e:87:b2:e6:f5:92:af:bd:61:1c:
f8:58:91:6f:f0:ef:48:f8:c6:39:81:64:68:64:93:f9:ef:67:
72:eb:67:53:8e:bc:a2:54:03:c2:82:95:5e:ac:12:e0:92:e7:
42:2d:34:8b:43:93:a2:4a:22:02:09:55:df:c8:ac:da:43:0a:
c0:92:47:d4:d3:12:c0:2c:08:dc:ee:fb:43:77:03:1c:1b:d2:
48:01:92:fb:0b:54:3d:d8:05:13:10:4d:32:da:b3:99:a7:3b:
9c:aa:98:44:62:42:c3:25:77:2d:66:6f:4f:a4:9b:37:68:93:
7f:d9:d8:9f:79:04:ee:6b:bc:d3:08:08:45:fb:c0:9d:1b:6a:
52:fa:38:e3:4e:80:65:15:98:fc:3a:5d:2b:8d:59:31:1b:e6:
9c:46:8a:67:08:5a:4b:96:c0:36:12:a5:68:17:2f:75:df:54:
e8:7f:2b:39:44:b7:70:76:3a:76:72:4e:d2:80:62:2c:3f:12:
70:79:c3:a2:9d:03:e6:b4:2e:cc:aa:d2:2f:b5:31:e1:ca:d6:
79:e3:d8:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 09:58:27 2025 by rpki-client