Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/8f90a5-c878-4dd4-b2db-4e5861187c4f/1/4f9iX0oY0E1ZCludc7JVGkNbcXI.mft
File: 4f9iX0oY0E1ZCludc7JVGkNbcXI.mft (raw, json)
Hash identifier: c3gs9/x42012ndTRxR5wjAH27+yIBAXpDMKUE1Z3VJ4=
Subject key identifier: 74:61:D1:82:C0:32:8E:2C:A1:BF:9F:FD:36:A9:72:55:EF:5D:BE:D1
Authority key identifier: E1:FF:62:5F:4A:18:D0:4D:59:0A:5B:9D:73:B2:55:1A:43:5B:71:72
Certificate issuer: /CN=e1ff625f4a18d04d590a5b9d73b2551a435b7172
Certificate serial: 01992DB4F4526A010D809AAF7E9B78A813F4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4f9iX0oY0E1ZCludc7JVGkNbcXI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/8f90a5-c878-4dd4-b2db-4e5861187c4f/1/4f9iX0oY0E1ZCludc7JVGkNbcXI.mft
Manifest number: 1035
Signing time: Tue 09 Sep 2025 09:00:57 +0000
Manifest this update: Tue 09 Sep 2025 09:00:57 +0000
Manifest next update: Wed 10 Sep 2025 09:00:57 +0000
Files and hashes: 1: 4f9iX0oY0E1ZCludc7JVGkNbcXI.crl (hash: rdXTGoMPRsSJlCuNA20PxqKB25TwFRolFjG4xRukxBU=)
2: v-UIauQZjW8hDMdx3w3tSE6IDRc.roa (hash: uCYTkmd7Ahc37aZdyBrq8T1Px2W2MX7+A97XE/19qf0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/8f90a5-c878-4dd4-b2db-4e5861187c4f/1/4f9iX0oY0E1ZCludc7JVGkNbcXI.crl
rsync://rpki.ripe.net/repository/DEFAULT/54/8f90a5-c878-4dd4-b2db-4e5861187c4f/1/4f9iX0oY0E1ZCludc7JVGkNbcXI.mft
rsync://rpki.ripe.net/repository/DEFAULT/4f9iX0oY0E1ZCludc7JVGkNbcXI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 10 Sep 2025 09:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:2d:b4:f4:52:6a:01:0d:80:9a:af:7e:9b:78:a8:13:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e1ff625f4a18d04d590a5b9d73b2551a435b7172
Validity
Not Before: Sep 9 09:00:57 2025 GMT
Not After : Sep 10 09:00:57 2025 GMT
Subject: CN=7461d182c0328e2ca1bf9ffd36a97255ef5dbed1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fb:e1:bd:96:b2:36:08:d5:35:f3:69:9d:ed:d7:
6a:63:33:1c:ff:3d:5b:a0:8d:57:6d:c2:73:f0:2b:
11:69:3b:8a:81:13:bd:f0:bb:20:0e:16:ad:3c:8b:
e0:92:26:1c:0d:74:bf:88:48:26:f0:0c:1a:d5:8d:
40:cd:fd:49:03:9c:4b:30:79:3c:42:7b:be:4f:43:
4e:ee:9e:a3:c4:2d:a4:be:d4:d8:62:b3:be:04:b3:
93:06:91:6a:04:81:58:9f:83:5c:b6:f4:57:fe:ea:
78:af:66:34:34:02:fa:0c:07:03:70:a2:62:34:71:
bc:90:52:66:30:dd:31:02:d3:20:9b:04:a2:3e:5d:
38:ea:c2:97:fc:b6:fd:66:ce:fd:55:e1:ed:09:f9:
08:38:6c:db:16:1b:a9:b6:37:ca:54:6e:fa:f2:7c:
3a:e3:9b:49:f1:47:91:01:b0:9d:58:a1:b1:83:04:
e2:6f:7e:5a:e1:b1:c8:be:e1:09:b8:d9:72:1f:ed:
71:0a:c7:9f:7a:ae:6e:34:5d:9a:05:b1:46:48:c7:
cc:71:a1:c5:b9:be:4e:16:06:ce:4a:88:11:3e:de:
b4:44:98:55:02:22:bd:a1:f2:3b:72:cd:30:55:77:
de:d5:cc:80:58:5a:d9:e6:bd:c7:2b:9b:f6:ce:f9:
72:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:61:D1:82:C0:32:8E:2C:A1:BF:9F:FD:36:A9:72:55:EF:5D:BE:D1
X509v3 Authority Key Identifier:
keyid:E1:FF:62:5F:4A:18:D0:4D:59:0A:5B:9D:73:B2:55:1A:43:5B:71:72
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f9iX0oY0E1ZCludc7JVGkNbcXI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/8f90a5-c878-4dd4-b2db-4e5861187c4f/1/4f9iX0oY0E1ZCludc7JVGkNbcXI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/8f90a5-c878-4dd4-b2db-4e5861187c4f/1/4f9iX0oY0E1ZCludc7JVGkNbcXI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:dd:f4:3c:8a:9c:fc:c9:ae:14:af:01:5a:76:bd:ab:49:d9:
4a:4f:5d:e2:c3:3b:1d:52:5d:8e:9d:b5:37:19:a4:c2:13:86:
a8:6a:de:aa:e5:f0:e1:0b:4e:b4:92:6d:c4:d3:90:6e:50:27:
d7:2c:e6:75:89:33:e6:ed:38:9b:37:99:87:df:c0:66:9c:00:
1e:85:d2:42:ec:d6:67:68:e1:51:9d:49:fe:63:fb:bd:eb:f7:
bc:bf:5f:59:ee:0c:d8:ad:a6:ff:85:57:2f:71:58:57:14:1a:
d6:30:ed:b8:04:8a:b3:ee:5a:45:e4:75:c9:02:c6:61:77:f3:
27:c9:6d:98:ae:a7:0f:89:cc:45:fc:65:45:2a:44:35:ba:41:
dc:56:59:72:de:57:f5:f9:15:2a:7f:93:8e:ee:07:39:07:b6:
85:dd:a1:f2:b9:da:81:62:21:d3:b2:51:4d:f9:cd:44:b9:44:
96:19:d9:09:14:8f:e1:1d:e7:d2:cb:d7:0d:0b:17:4a:ba:c4:
b7:11:25:bf:8d:54:f7:7d:91:91:dd:01:1e:3b:aa:35:5f:77:
ea:71:62:dc:ff:ae:d7:a8:44:ce:76:9a:6b:99:3e:39:20:27:
65:bf:6c:73:69:4e:11:5c:80:b7:38:12:93:24:c1:f7:29:02:
44:51:37:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 9 19:18:16 2025 by rpki-client