Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/8042bf-71ba-4fbd-9e17-447edc4f9af6/1/4uj1a8H1AQKRaBvC2MAvmsv3FKA.mft
File: 4uj1a8H1AQKRaBvC2MAvmsv3FKA.mft (raw, json)
Hash identifier: A+UgmtSDkR8WWPz8GRstdy5bGiEl5fYAC3cocZZeBss=
Subject key identifier: 42:A2:04:0A:71:A6:20:14:CB:1D:94:34:A6:2A:34:15:D2:FA:36:8C
Authority key identifier: E2:E8:F5:6B:C1:F5:01:02:91:68:1B:C2:D8:C0:2F:9A:CB:F7:14:A0
Certificate issuer: /CN=e2e8f56bc1f5010291681bc2d8c02f9acbf714a0
Certificate serial: 019A24AEB80D89C018091A5E9E251104BD20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4uj1a8H1AQKRaBvC2MAvmsv3FKA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/8042bf-71ba-4fbd-9e17-447edc4f9af6/1/4uj1a8H1AQKRaBvC2MAvmsv3FKA.mft
Manifest number: 1708
Signing time: Mon 27 Oct 2025 08:00:21 +0000
Manifest this update: Mon 27 Oct 2025 08:00:21 +0000
Manifest next update: Tue 28 Oct 2025 08:00:21 +0000
Files and hashes: 1: 4uj1a8H1AQKRaBvC2MAvmsv3FKA.crl (hash: A8NPDOD3EAO8kc3B9FhetRh9qEGc5CXUMvCvu9dBDOE=)
2: 69Gg052Fvx4I2Fe4cFxkAgmaw8U.roa (hash: 4OJvsk33eSq4Pcms3ZWUp5ICc5rvGRU0gr/rstfeV/0=)
3: M0_KB7YWngkVytRrWSYysj7YJLA.roa (hash: Wx2mA+u5jzHoEfTRzsY0nX3Oe/9sdMOBfbPWiWl5Xlc=)
4: V0Sp0TtSbp08bch-dMvX-f8oa2o.roa (hash: JjHFR/Br8lLNxd0wBIShn4KBf2iV68ca7V3XI/Bh6Lc=)
5: w2HliW1FxAoWboCzBC57HQK_5M4.roa (hash: 1o/6TghmsgYeou6D438p0wdWpOeCHDeKRbg9VK0Bxfs=)
6: z5K__5uwKXFTzaD79qKBdTd2bJI.roa (hash: Cp/izXCB0pUAYpj87c/lOI2duT2TX+EDfDIWds1Fqng=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/8042bf-71ba-4fbd-9e17-447edc4f9af6/1/4uj1a8H1AQKRaBvC2MAvmsv3FKA.crl
rsync://rpki.ripe.net/repository/DEFAULT/30/8042bf-71ba-4fbd-9e17-447edc4f9af6/1/4uj1a8H1AQKRaBvC2MAvmsv3FKA.mft
rsync://rpki.ripe.net/repository/DEFAULT/4uj1a8H1AQKRaBvC2MAvmsv3FKA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Oct 2025 08:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:24:ae:b8:0d:89:c0:18:09:1a:5e:9e:25:11:04:bd:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e2e8f56bc1f5010291681bc2d8c02f9acbf714a0
Validity
Not Before: Oct 27 08:00:21 2025 GMT
Not After : Oct 28 08:00:21 2025 GMT
Subject: CN=42a2040a71a62014cb1d9434a62a3415d2fa368c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:40:04:41:91:d0:c0:03:9d:5f:b5:23:06:96:
5e:ef:52:75:53:37:b2:0c:9b:33:f6:51:ed:e3:4e:
69:36:a5:aa:52:4b:72:7a:12:20:c7:66:5c:7e:5e:
68:bf:07:f7:c9:c9:66:9f:09:13:4f:fe:48:20:c1:
5d:61:15:28:78:94:9c:eb:f3:3c:3b:f2:77:d5:3b:
00:68:35:40:70:c9:78:b8:e4:5e:03:8e:43:c9:99:
9b:e3:32:6d:32:7d:e1:f7:03:a7:c6:9c:f5:af:32:
8c:10:74:6f:c9:55:cb:99:de:03:bf:91:7f:94:9e:
bd:0c:a2:de:59:1a:e3:35:59:58:77:3c:fe:b8:88:
c3:1d:76:8a:24:8c:e6:1f:dd:52:ee:f8:33:bf:b2:
1f:6a:9c:2f:c8:28:f7:70:08:d1:d9:72:aa:54:86:
60:4f:e6:1a:33:71:a3:8f:75:9a:5d:3d:2b:c2:d7:
4c:53:a0:9e:8b:77:48:fd:8e:cc:b1:2c:14:5a:fd:
8d:b7:ec:01:09:ea:69:74:03:13:48:d0:40:a0:57:
66:3a:6d:d3:ca:d7:1a:40:e2:fc:4a:8a:69:92:75:
76:2c:91:14:e8:7b:21:40:ed:c9:73:aa:cd:38:e6:
d8:e8:55:46:fe:ab:11:3c:4b:56:fa:3a:de:77:64:
ff:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:A2:04:0A:71:A6:20:14:CB:1D:94:34:A6:2A:34:15:D2:FA:36:8C
X509v3 Authority Key Identifier:
keyid:E2:E8:F5:6B:C1:F5:01:02:91:68:1B:C2:D8:C0:2F:9A:CB:F7:14:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4uj1a8H1AQKRaBvC2MAvmsv3FKA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/8042bf-71ba-4fbd-9e17-447edc4f9af6/1/4uj1a8H1AQKRaBvC2MAvmsv3FKA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/8042bf-71ba-4fbd-9e17-447edc4f9af6/1/4uj1a8H1AQKRaBvC2MAvmsv3FKA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:95:b0:d4:d8:3a:aa:f6:00:50:65:12:d2:47:8b:8d:f8:86:
43:d1:28:1f:69:11:61:ce:8e:7d:b9:be:d6:3f:23:f9:a1:0a:
7a:93:97:b3:0d:59:ef:80:c0:d1:87:fb:a8:4a:91:85:0e:b6:
0a:4f:71:2e:11:9e:27:6d:01:42:6d:1d:54:98:1c:3f:5d:76:
a2:2d:d8:e4:61:72:7c:4a:70:d6:80:f6:a0:66:ba:72:50:02:
78:89:88:14:e8:ca:9d:76:62:ca:73:42:c8:a2:f4:8d:66:ab:
9e:71:ff:8b:31:31:e7:1b:f8:65:d3:49:11:a0:54:45:0a:d9:
09:81:0a:37:36:53:d0:92:b2:72:c0:19:fd:b8:ce:de:ff:fd:
04:b0:88:ff:3f:0d:6c:bc:d9:9d:f2:89:36:35:af:86:f8:0b:
a5:78:08:1a:ed:0e:b5:f3:0b:04:84:48:44:a4:fe:18:14:30:
86:6b:dd:f9:58:16:71:31:e0:49:89:be:c6:00:aa:39:bb:d9:
4c:4c:47:1d:89:59:41:bf:fa:48:fe:71:55:cb:dd:45:dc:5d:
3a:0a:ad:8b:32:b1:ee:e7:48:35:82:e0:70:f2:65:3a:33:42:
fb:f4:57:69:9b:57:30:32:29:be:42:dc:24:9e:95:a5:4c:63:
e0:3e:25:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 27 15:01:55 2025 by rpki-client