Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/6ec943-70e2-4335-84fe-c79d4eeb5ad6/1/4kCgJeDmGkTZPkqAHjiIsm570kE.mft
File: 4kCgJeDmGkTZPkqAHjiIsm570kE.mft (raw, json)
Hash identifier: toVaeE0AnMqb3BRmHQxw/+dRloyuXXEMTDY9m6HlJYU=
Subject key identifier: 5E:D5:C3:FF:8D:E9:26:99:C2:FD:5C:07:CB:1D:65:0B:9D:F9:1A:E2
Authority key identifier: E2:40:A0:25:E0:E6:1A:44:D9:3E:4A:80:1E:38:88:B2:6E:7B:D2:41
Certificate issuer: /CN=e240a025e0e61a44d93e4a801e3888b26e7bd241
Certificate serial: 0199307ECDFE2965E7E1FDF6EBB55EBB0EBC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4kCgJeDmGkTZPkqAHjiIsm570kE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/6ec943-70e2-4335-84fe-c79d4eeb5ad6/1/4kCgJeDmGkTZPkqAHjiIsm570kE.mft
Manifest number: 167B
Signing time: Tue 09 Sep 2025 22:00:40 +0000
Manifest this update: Tue 09 Sep 2025 22:00:40 +0000
Manifest next update: Wed 10 Sep 2025 22:00:40 +0000
Files and hashes: 1: 4kCgJeDmGkTZPkqAHjiIsm570kE.crl (hash: C/dorDg6xpvX4k/noSXqtO0jFMKN5EzNuOXKoPa33w0=)
2: K7SH4zYCXr-cp1q6N2Mp-Gdj1PU.roa (hash: fOTEXpl4gYkXzMjvkhlooQdp3U8U0Z9lMps20TcryK0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/6ec943-70e2-4335-84fe-c79d4eeb5ad6/1/4kCgJeDmGkTZPkqAHjiIsm570kE.crl
rsync://rpki.ripe.net/repository/DEFAULT/1a/6ec943-70e2-4335-84fe-c79d4eeb5ad6/1/4kCgJeDmGkTZPkqAHjiIsm570kE.mft
rsync://rpki.ripe.net/repository/DEFAULT/4kCgJeDmGkTZPkqAHjiIsm570kE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 10 Sep 2025 21:45:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:30:7e:cd:fe:29:65:e7:e1:fd:f6:eb:b5:5e:bb:0e:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e240a025e0e61a44d93e4a801e3888b26e7bd241
Validity
Not Before: Sep 9 22:00:40 2025 GMT
Not After : Sep 10 22:00:40 2025 GMT
Subject: CN=5ed5c3ff8de92699c2fd5c07cb1d650b9df91ae2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:96:5e:1d:32:bb:da:18:87:be:75:ee:f9:d3:
b1:a5:03:37:52:e7:7c:af:42:ca:4d:9c:97:11:9b:
92:f3:b8:96:16:d3:31:92:57:cf:f5:7f:bb:5d:ec:
9d:79:c9:01:48:e2:b8:8c:d6:50:56:3c:27:90:e3:
57:11:dd:e5:d3:7b:f7:ed:b7:0a:f5:26:ff:04:f3:
4e:1b:25:9c:2f:b5:72:5b:ca:0c:53:a1:ee:77:93:
93:ab:b6:a1:c4:76:13:ea:5b:03:fb:45:08:81:10:
b5:97:77:db:96:e0:7c:94:b6:d5:9a:5e:21:10:95:
e7:c6:d3:9f:f9:35:17:c6:fd:86:d6:91:87:91:d2:
5f:af:2b:d8:dc:4a:cd:2a:bc:4a:3a:4f:ef:34:78:
6a:34:3c:7c:fa:60:3e:ab:60:f7:87:4d:83:9f:4e:
8b:c4:86:ac:20:8a:e6:0b:3f:32:10:77:2e:8d:ef:
bb:15:81:dc:06:9b:88:ae:59:7b:a2:61:7e:4d:f8:
a9:9d:20:2e:01:8c:f9:a6:e9:98:8f:98:11:60:82:
61:d9:ac:e4:7e:bd:47:b3:27:9d:25:1f:0d:d9:81:
47:9c:a4:9d:39:e2:c6:07:d6:15:43:59:8e:12:41:
e2:5d:56:69:5c:15:a4:01:2a:fe:ea:df:a4:e6:64:
2e:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:D5:C3:FF:8D:E9:26:99:C2:FD:5C:07:CB:1D:65:0B:9D:F9:1A:E2
X509v3 Authority Key Identifier:
keyid:E2:40:A0:25:E0:E6:1A:44:D9:3E:4A:80:1E:38:88:B2:6E:7B:D2:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4kCgJeDmGkTZPkqAHjiIsm570kE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/6ec943-70e2-4335-84fe-c79d4eeb5ad6/1/4kCgJeDmGkTZPkqAHjiIsm570kE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/6ec943-70e2-4335-84fe-c79d4eeb5ad6/1/4kCgJeDmGkTZPkqAHjiIsm570kE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:6b:3a:e7:d5:64:51:a8:b9:0f:55:e7:3a:cb:ed:38:04:ac:
70:b7:57:8a:8e:92:c3:7c:12:75:20:ed:be:27:be:1a:20:45:
71:ae:9a:ca:a6:4e:5e:ca:e5:eb:01:f3:58:2a:b6:b8:79:00:
58:3b:09:9d:25:1a:59:b8:f4:2f:9c:38:3d:b1:2a:be:41:e8:
7a:85:8a:2b:f4:54:2f:b3:16:9c:3b:dc:66:64:a5:9b:90:e3:
01:53:ac:11:34:1e:42:64:3b:63:36:cb:5d:9d:7d:7d:48:6d:
59:a9:98:1f:4f:92:01:68:03:06:97:f1:dc:62:b1:f9:30:ef:
26:d6:0c:d7:7a:1d:69:34:7a:a2:6f:fe:46:27:24:26:3d:f0:
74:6e:bb:15:cd:6e:7c:8e:d5:49:37:2c:43:78:a6:c2:b3:1a:
6f:1a:dc:43:04:73:e3:59:58:23:df:53:3c:14:41:b2:55:23:
49:4f:2b:6b:a9:33:24:1b:30:31:a5:58:56:9b:c2:aa:43:cc:
da:9c:a4:7c:1a:29:30:7d:b5:b4:6d:a2:6f:67:2a:7a:22:9c:
36:4d:8c:3b:87:3c:13:8a:1b:7a:ff:ff:45:6b:46:f3:97:c9:
8e:c4:f7:2c:de:25:09:61:7b:e0:da:0c:aa:2a:f4:a5:4b:77:
c8:60:7c:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 10 03:34:16 2025 by rpki-client