Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/6c48f1-2037-40a0-b2e1-3cd33ff32743/1/4_kwa8YVwyCuQaTnJmPrupjvNXw.mft
File: 4_kwa8YVwyCuQaTnJmPrupjvNXw.mft (raw, json)
Hash identifier: 8bvhcjtCdUdXFs6F771LVCL9g2LvieC7FA4bz0j8NHY=
Subject key identifier: 80:C5:2A:9F:4C:A4:CD:A3:28:4C:FE:89:01:D6:20:8C:D1:DA:6C:C2
Authority key identifier: E3:F9:30:6B:C6:15:C3:20:AE:41:A4:E7:26:63:EB:BA:98:EF:35:7C
Certificate issuer: /CN=e3f9306bc615c320ae41a4e72663ebba98ef357c
Certificate serial: 0199221F0A0DC85AE9CFE871C4E0DEEBA316
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4_kwa8YVwyCuQaTnJmPrupjvNXw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/6c48f1-2037-40a0-b2e1-3cd33ff32743/1/4_kwa8YVwyCuQaTnJmPrupjvNXw.mft
Manifest number: 0737
Signing time: Sun 07 Sep 2025 03:01:23 +0000
Manifest this update: Sun 07 Sep 2025 03:01:23 +0000
Manifest next update: Mon 08 Sep 2025 03:01:23 +0000
Files and hashes: 1: 4_kwa8YVwyCuQaTnJmPrupjvNXw.crl (hash: ZcIGguwq+QK6HLHPnUPID0oc4AJqsapp4vsjmE/X7YQ=)
2: mi-PdoixQ3I_3wWH1iuFXc_7uM0.roa (hash: 3baxx8ZqUep3q30dtKKaBrzl+eIHjNNA1Tcak9rfOIs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/6c48f1-2037-40a0-b2e1-3cd33ff32743/1/4_kwa8YVwyCuQaTnJmPrupjvNXw.crl
rsync://rpki.ripe.net/repository/DEFAULT/54/6c48f1-2037-40a0-b2e1-3cd33ff32743/1/4_kwa8YVwyCuQaTnJmPrupjvNXw.mft
rsync://rpki.ripe.net/repository/DEFAULT/4_kwa8YVwyCuQaTnJmPrupjvNXw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 03:01:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:1f:0a:0d:c8:5a:e9:cf:e8:71:c4:e0:de:eb:a3:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e3f9306bc615c320ae41a4e72663ebba98ef357c
Validity
Not Before: Sep 7 03:01:23 2025 GMT
Not After : Sep 8 03:01:23 2025 GMT
Subject: CN=80c52a9f4ca4cda3284cfe8901d6208cd1da6cc2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:0b:68:83:70:eb:74:a1:42:e5:1e:ff:09:34:
6e:36:16:4f:01:d0:cb:32:6d:d4:5c:e8:1f:49:a6:
81:13:62:24:3b:11:3d:90:6f:a5:8e:8d:7f:61:d6:
f5:73:a9:2f:cf:35:f8:a9:e3:e5:09:49:0e:43:47:
6e:3f:57:b1:8b:00:80:7e:01:e5:bf:7c:a7:f7:2a:
b6:66:be:48:82:0b:92:cc:bc:79:28:68:e6:f1:51:
78:81:09:1e:82:6b:56:c7:67:2b:3e:d5:11:d5:21:
32:1f:26:19:f2:75:db:6a:66:24:5a:c5:ae:48:89:
1d:6c:01:ce:9f:5e:5f:7f:9a:0b:c0:58:8c:8a:54:
3c:e6:ec:7d:59:9b:2a:1f:5b:7e:52:52:e8:cd:33:
f1:36:d0:72:4d:7d:2d:10:ea:4e:cf:8f:06:84:36:
84:ba:ee:61:50:21:a7:9c:ea:5c:b0:b4:ae:a8:ce:
26:c3:4f:46:78:b9:a9:85:93:7a:a1:76:09:4c:18:
05:83:5a:0b:c6:f4:92:4f:d3:51:00:5b:0e:f6:14:
7a:5d:73:be:5b:20:38:d2:db:36:b3:8f:c8:79:fb:
f5:e1:81:14:f0:93:04:94:0f:13:b9:59:3c:f2:53:
0a:c1:0d:b0:6e:49:5c:56:ff:1d:93:29:dd:da:8a:
11:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:C5:2A:9F:4C:A4:CD:A3:28:4C:FE:89:01:D6:20:8C:D1:DA:6C:C2
X509v3 Authority Key Identifier:
keyid:E3:F9:30:6B:C6:15:C3:20:AE:41:A4:E7:26:63:EB:BA:98:EF:35:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4_kwa8YVwyCuQaTnJmPrupjvNXw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/6c48f1-2037-40a0-b2e1-3cd33ff32743/1/4_kwa8YVwyCuQaTnJmPrupjvNXw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/6c48f1-2037-40a0-b2e1-3cd33ff32743/1/4_kwa8YVwyCuQaTnJmPrupjvNXw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:05:cb:43:98:f9:86:ab:53:d3:95:d8:20:6c:11:49:de:61:
95:5c:29:ca:b3:73:ad:f4:f5:37:cb:a6:13:30:3c:24:3c:3e:
9c:b4:c7:85:1c:df:c7:5a:07:c6:84:c7:9f:86:47:84:ce:38:
eb:8d:7b:20:97:25:87:28:2f:f5:36:32:80:ca:96:10:93:2c:
4b:29:0c:38:75:d1:6a:61:c3:bd:ce:87:49:60:10:4c:a1:24:
e5:13:7f:16:8b:41:c9:48:20:0b:0e:53:06:5b:85:d1:f5:a8:
c9:dc:dd:cf:07:4d:01:30:7a:38:02:4a:c5:cf:c6:6a:1e:05:
2b:37:dd:ba:2f:28:95:7d:80:f4:a6:66:8c:82:3d:46:fb:f9:
74:2c:cd:d6:ee:da:f2:3e:cf:96:66:85:0b:6a:47:9c:18:ec:
42:72:3f:a3:13:54:4f:19:5e:39:89:9d:5f:53:20:94:f8:35:
13:aa:47:55:97:57:fa:ce:c2:c6:8a:98:f7:4a:48:6d:99:c9:
c3:59:95:70:93:22:8e:e4:be:14:1f:8a:06:d4:95:8d:ec:5f:
88:9c:37:87:20:72:51:12:84:9b:c3:dd:cd:36:19:8e:ef:00:
ac:66:7a:1c:4a:28:51:31:84:d4:88:cb:03:c3:80:d9:94:aa:
9c:39:00:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 10:13:32 2025 by rpki-client