Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/f77c5b-19b2-4bc1-8faa-10b0211d96fc/1/4KE7ki7n67muzeGacNDiW3d1DQI.mft
File: 4KE7ki7n67muzeGacNDiW3d1DQI.mft (raw, json)
Hash identifier: IoN15ubt/Z8Q0YWgdvUrg73DxTs7PTX5/J1JfwTNedw=
Subject key identifier: 82:11:0D:44:1A:D9:58:B0:30:51:EA:66:10:2E:B2:2B:2F:63:D0:EC
Authority key identifier: E0:A1:3B:92:2E:E7:EB:B9:AE:CD:E1:9A:70:D0:E2:5B:77:75:0D:02
Certificate issuer: /CN=e0a13b922ee7ebb9aecde19a70d0e25b77750d02
Certificate serial: 0199233142E89FA4522B4E40C3388AF6ED96
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4KE7ki7n67muzeGacNDiW3d1DQI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/f77c5b-19b2-4bc1-8faa-10b0211d96fc/1/4KE7ki7n67muzeGacNDiW3d1DQI.mft
Manifest number: 0C65
Signing time: Sun 07 Sep 2025 08:00:54 +0000
Manifest this update: Sun 07 Sep 2025 08:00:54 +0000
Manifest next update: Mon 08 Sep 2025 08:00:54 +0000
Files and hashes: 1: 4KE7ki7n67muzeGacNDiW3d1DQI.crl (hash: PexLXeYy7bmN/wfZSdTMpd7svtGrOTm6tYjy5WvO0gk=)
2: Y8AXUYDP-qGUFi9hzn6P0gBawaM.roa (hash: PbgeAgI/Sj2ZS05Cb4sm9ySYZjOm8LnX+ij5E01wZBw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/f77c5b-19b2-4bc1-8faa-10b0211d96fc/1/4KE7ki7n67muzeGacNDiW3d1DQI.crl
rsync://rpki.ripe.net/repository/DEFAULT/31/f77c5b-19b2-4bc1-8faa-10b0211d96fc/1/4KE7ki7n67muzeGacNDiW3d1DQI.mft
rsync://rpki.ripe.net/repository/DEFAULT/4KE7ki7n67muzeGacNDiW3d1DQI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:23:31:42:e8:9f:a4:52:2b:4e:40:c3:38:8a:f6:ed:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e0a13b922ee7ebb9aecde19a70d0e25b77750d02
Validity
Not Before: Sep 7 08:00:54 2025 GMT
Not After : Sep 8 08:00:54 2025 GMT
Subject: CN=82110d441ad958b03051ea66102eb22b2f63d0ec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:d7:fe:cb:e2:4b:42:c0:f7:3c:f8:d8:e9:73:
da:5f:06:3a:41:d8:09:37:bc:c8:b0:eb:e7:d1:bf:
c5:f1:89:ee:27:59:88:eb:37:3b:a8:eb:0b:fd:11:
f2:9b:87:93:45:b2:eb:20:6e:13:a5:62:1d:0f:d4:
03:37:16:6d:95:b8:1a:e7:0c:a9:55:38:94:95:e5:
6f:eb:e7:1c:0e:b0:ba:bf:ca:21:8a:75:fe:a6:35:
29:9c:f8:f2:46:04:a9:ac:a4:7b:f5:58:24:aa:da:
19:fd:48:a2:38:e6:60:a1:1f:b7:ec:67:6f:ea:8a:
36:d0:d4:6c:76:21:92:8f:d0:0d:4c:f5:77:06:6a:
36:c8:03:1c:af:89:79:e1:b2:a2:87:7b:6d:c3:d1:
f7:a2:65:cf:f0:28:07:ad:d6:01:10:46:40:38:e2:
54:48:a4:b8:75:f7:80:23:28:21:62:4f:53:f3:cb:
7a:73:33:57:59:67:68:25:ab:a7:74:66:82:0f:fe:
67:5e:e0:ce:bd:ad:36:2b:be:d9:fe:dd:05:15:ca:
31:b0:71:6f:80:1d:c5:f3:84:02:2f:84:10:96:6f:
27:22:5b:da:df:c6:c4:31:13:4c:96:96:e7:93:a4:
ee:fa:9c:7a:83:e6:ea:c3:42:2c:29:1b:30:97:6c:
ec:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:11:0D:44:1A:D9:58:B0:30:51:EA:66:10:2E:B2:2B:2F:63:D0:EC
X509v3 Authority Key Identifier:
keyid:E0:A1:3B:92:2E:E7:EB:B9:AE:CD:E1:9A:70:D0:E2:5B:77:75:0D:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4KE7ki7n67muzeGacNDiW3d1DQI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/f77c5b-19b2-4bc1-8faa-10b0211d96fc/1/4KE7ki7n67muzeGacNDiW3d1DQI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/f77c5b-19b2-4bc1-8faa-10b0211d96fc/1/4KE7ki7n67muzeGacNDiW3d1DQI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:6e:68:6c:e2:de:2b:09:82:d6:3e:9c:5a:a0:12:b9:06:df:
8f:f4:99:5e:5a:4a:34:0d:97:27:21:9c:2b:aa:0b:69:89:7a:
a5:fe:d1:94:93:c5:6e:79:5b:86:da:76:4d:64:25:a9:bd:6d:
3e:81:b7:64:75:c3:cb:55:3d:1b:a8:81:49:4b:11:bd:20:40:
e8:6d:b8:bb:7f:9f:4e:78:3d:aa:08:e3:78:10:5f:00:67:10:
98:af:7c:15:16:1d:3d:cf:15:39:ee:a7:e1:11:73:b0:ad:7f:
90:a8:d2:e1:fc:58:19:cb:43:51:f9:1a:42:44:73:02:66:ac:
a0:05:d9:f6:1f:38:f8:26:dc:48:0b:6d:2a:cf:fc:72:b1:f2:
0a:19:16:24:ce:cc:92:7c:22:d3:b7:92:87:ed:39:65:91:67:
19:c0:34:01:df:f1:c6:b1:c4:f1:b7:ee:28:48:8e:3e:12:d9:
8e:1c:f4:d9:84:e5:5a:dc:24:f9:29:f8:4e:07:ef:f2:58:b9:
e5:b4:aa:0d:7e:bc:59:9e:b7:4d:ab:7e:6c:76:b8:65:d6:a8:
bb:40:3d:ab:ff:18:1a:c9:43:60:a9:e7:4e:86:f7:1f:01:40:
55:31:37:21:99:e0:ea:30:08:d2:8a:9a:52:3c:f8:d8:a0:f8:
16:b8:ae:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 10:15:14 2025 by rpki-client