Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/5ea4b4-9ed7-444e-86bf-2eb0af3ac781/1/4zjNaBHc4u1PQmFDw_yEV7G0NLs.mft
File: 4zjNaBHc4u1PQmFDw_yEV7G0NLs.mft (raw, json)
Hash identifier: BpRia8Hm04SwVEtSr3rmKBkKLrBfq+cXWpO47LnB97I=
Subject key identifier: C8:DF:82:7D:F9:10:16:EE:31:EB:03:86:6D:8A:9D:25:39:0F:CD:3F
Authority key identifier: E3:38:CD:68:11:DC:E2:ED:4F:42:61:43:C3:FC:84:57:B1:B4:34:BB
Certificate issuer: /CN=e338cd6811dce2ed4f426143c3fc8457b1b434bb
Certificate serial: 019923D5B77196C72AAB03FF61C1BB1EE9FD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4zjNaBHc4u1PQmFDw_yEV7G0NLs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/5ea4b4-9ed7-444e-86bf-2eb0af3ac781/1/4zjNaBHc4u1PQmFDw_yEV7G0NLs.mft
Manifest number: 1671
Signing time: Sun 07 Sep 2025 11:00:32 +0000
Manifest this update: Sun 07 Sep 2025 11:00:32 +0000
Manifest next update: Mon 08 Sep 2025 11:00:32 +0000
Files and hashes: 1: 4zjNaBHc4u1PQmFDw_yEV7G0NLs.crl (hash: sYnJnYTJ8o78h+Ld3Asqwb2Id98q52tjvZgRD67QJII=)
2: MCauzdzhAV-eC2FQCIe1KmEfC3E.roa (hash: qyelRqdJ6kSMtNhACvHl/U5TJ8kn8s3czDwjuibAJCM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/5ea4b4-9ed7-444e-86bf-2eb0af3ac781/1/4zjNaBHc4u1PQmFDw_yEV7G0NLs.crl
rsync://rpki.ripe.net/repository/DEFAULT/27/5ea4b4-9ed7-444e-86bf-2eb0af3ac781/1/4zjNaBHc4u1PQmFDw_yEV7G0NLs.mft
rsync://rpki.ripe.net/repository/DEFAULT/4zjNaBHc4u1PQmFDw_yEV7G0NLs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 07:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:23:d5:b7:71:96:c7:2a:ab:03:ff:61:c1:bb:1e:e9:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e338cd6811dce2ed4f426143c3fc8457b1b434bb
Validity
Not Before: Sep 7 11:00:32 2025 GMT
Not After : Sep 8 11:00:32 2025 GMT
Subject: CN=c8df827df91016ee31eb03866d8a9d25390fcd3f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:a8:10:4c:3c:78:ae:c6:1d:00:8d:de:2e:88:
10:ea:cb:39:ff:09:80:ae:99:d5:34:3f:10:8b:b0:
4b:a1:56:bf:c3:ce:8d:0c:b1:94:ea:a4:4c:88:39:
b5:55:c0:db:20:b3:28:2f:a6:10:e4:75:f2:15:a7:
f0:a3:ff:ed:be:73:47:e5:88:c9:ba:85:09:9c:05:
e5:9f:31:dc:d5:e5:9d:b9:82:67:7d:2b:a8:fc:2c:
e3:37:ee:fc:54:e8:0f:e3:53:f8:93:25:33:86:26:
95:61:2e:fe:b8:ec:a5:80:80:cb:11:3b:62:1c:71:
d2:01:45:3b:f8:91:cb:cc:ea:d2:7f:36:77:40:5f:
05:76:69:15:d7:b6:9b:9b:0b:a4:b8:20:bf:ca:6b:
68:55:32:2e:f4:0f:b3:a5:f7:e1:01:f0:2b:40:e3:
fd:f6:3c:cc:ca:25:86:f8:73:8b:c2:21:d2:bd:ba:
4e:8a:ae:a7:29:de:72:32:8e:27:47:43:c5:f7:0a:
ac:36:e7:fa:99:b8:17:89:cc:9f:bd:df:10:fa:5f:
69:c7:50:97:12:f3:39:93:72:66:a7:78:78:ce:13:
8e:19:d8:ba:2c:4f:46:d6:cd:b1:c9:57:89:55:22:
36:a5:d2:a5:43:6b:d4:60:5d:3c:ac:80:07:fd:1f:
8f:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:DF:82:7D:F9:10:16:EE:31:EB:03:86:6D:8A:9D:25:39:0F:CD:3F
X509v3 Authority Key Identifier:
keyid:E3:38:CD:68:11:DC:E2:ED:4F:42:61:43:C3:FC:84:57:B1:B4:34:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4zjNaBHc4u1PQmFDw_yEV7G0NLs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/5ea4b4-9ed7-444e-86bf-2eb0af3ac781/1/4zjNaBHc4u1PQmFDw_yEV7G0NLs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/5ea4b4-9ed7-444e-86bf-2eb0af3ac781/1/4zjNaBHc4u1PQmFDw_yEV7G0NLs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a5:9d:c8:be:2d:b3:d0:d5:e9:ca:48:e1:a2:5f:9e:9c:19:eb:
0f:6f:75:40:1a:24:60:21:61:48:81:38:74:ba:4c:aa:4e:86:
7d:6b:5a:41:f5:68:6b:07:9e:1e:3a:24:8f:e1:0f:cb:6d:4d:
81:6d:3c:3e:b4:a8:20:fd:41:33:c9:d8:8d:43:27:2b:bf:6f:
a9:4d:5d:67:ac:95:5c:0a:40:e4:22:89:d1:5e:ed:8e:cf:dc:
15:e2:dd:a8:0d:ef:8f:e0:1f:65:c4:64:e2:86:e0:fc:8c:59:
00:14:e3:8c:a9:42:28:9d:eb:c8:90:88:07:73:df:6c:d4:92:
d3:a9:72:46:21:ed:36:89:21:2e:7b:70:7b:e7:24:6a:a9:88:
0e:4e:8f:fe:0a:2e:44:9d:46:0d:53:39:e4:11:09:f7:0e:b3:
30:4c:2f:ae:c4:d0:6b:6c:f3:05:9c:22:07:e8:5c:a4:f5:14:
81:d6:3f:c4:00:cd:12:c0:52:c8:d5:6b:77:58:bf:32:15:74:
a9:e0:34:fc:01:f7:0d:fe:56:02:54:cc:7a:f0:57:b9:f1:99:
5f:8b:38:3f:25:6b:3e:9a:43:4c:33:2a:77:a5:1c:1c:29:0c:
1f:16:86:df:6e:c3:7d:e2:95:76:e1:e1:8a:a0:cb:e4:46:c7:
6c:43:f6:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 13:53:48 2025 by rpki-client