Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/523a93-8bbd-44ac-88bd-4e7bca55f821/1/4a7RSE6W5L95k-m4Z7NMNNaorjY.mft
File: 4a7RSE6W5L95k-m4Z7NMNNaorjY.mft (raw, json)
Hash identifier: e6WgfPOVmaxIBLcFFW3BRDuRQBmr97dvXNXf8pXl/kc=
Subject key identifier: 78:B6:62:72:74:A1:B8:EA:9E:91:C9:A0:FE:52:EF:EA:A2:42:42:55
Authority key identifier: E1:AE:D1:48:4E:96:E4:BF:79:93:E9:B8:67:B3:4C:34:D6:A8:AE:36
Certificate issuer: /CN=e1aed1484e96e4bf7993e9b867b34c34d6a8ae36
Certificate serial: 019935A594E3CA66B5E98BB123CF0B3A3FAC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4a7RSE6W5L95k-m4Z7NMNNaorjY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/523a93-8bbd-44ac-88bd-4e7bca55f821/1/4a7RSE6W5L95k-m4Z7NMNNaorjY.mft
Manifest number: 0D33
Signing time: Wed 10 Sep 2025 22:01:07 +0000
Manifest this update: Wed 10 Sep 2025 22:01:07 +0000
Manifest next update: Thu 11 Sep 2025 22:01:07 +0000
Files and hashes: 1: 4a7RSE6W5L95k-m4Z7NMNNaorjY.crl (hash: kM3HpzfkI5UwNEH7F+DD3OYa+Ds6KKW8o6pbbOFB7ws=)
2: 7e4XWoTxR_4GFJNbOkXvGvD-gG4.roa (hash: 4YXw3iLwYdL9YkiJ0wB5yVfXs/BwnpG21A305csfmtA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/523a93-8bbd-44ac-88bd-4e7bca55f821/1/4a7RSE6W5L95k-m4Z7NMNNaorjY.crl
rsync://rpki.ripe.net/repository/DEFAULT/64/523a93-8bbd-44ac-88bd-4e7bca55f821/1/4a7RSE6W5L95k-m4Z7NMNNaorjY.mft
rsync://rpki.ripe.net/repository/DEFAULT/4a7RSE6W5L95k-m4Z7NMNNaorjY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 11 Sep 2025 20:00:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:35:a5:94:e3:ca:66:b5:e9:8b:b1:23:cf:0b:3a:3f:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e1aed1484e96e4bf7993e9b867b34c34d6a8ae36
Validity
Not Before: Sep 10 22:01:07 2025 GMT
Not After : Sep 11 22:01:07 2025 GMT
Subject: CN=78b6627274a1b8ea9e91c9a0fe52efeaa2424255
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:8f:e2:5e:fe:bf:97:1f:f4:62:f7:7e:0c:f8:
9c:4f:c5:8b:96:f3:23:ba:d3:b0:01:42:be:f2:2d:
7e:b3:ac:f0:94:a4:b5:88:87:f9:27:5e:4a:b5:bb:
c2:7f:ea:3c:7b:ae:52:25:a4:91:11:e1:53:cc:5d:
14:0a:f5:70:c0:40:aa:77:92:87:60:36:8d:4f:a8:
24:ba:2a:27:74:c6:bb:3b:97:e9:46:6b:21:75:42:
0f:fb:6f:a3:e8:c4:2f:18:e1:61:d4:f7:52:fb:a3:
b4:38:11:e9:a7:7a:89:7b:b8:02:ff:8e:b4:d2:41:
b3:c1:9a:ad:17:26:a8:e0:8d:a3:06:5c:47:c9:ee:
50:88:c9:5e:1f:7d:5a:09:96:81:42:58:84:86:ee:
6b:e8:f4:55:33:27:01:5a:8e:bf:90:1e:6e:a8:e8:
42:ca:ac:d1:ea:7a:76:33:ed:46:15:42:e2:68:34:
39:cc:86:c0:f3:f6:9a:83:96:f5:1d:f7:14:f5:d2:
a2:e5:5e:a0:e2:88:f9:68:f7:30:38:04:c8:63:f0:
42:48:94:94:d1:5f:92:f4:6f:d1:9f:14:8f:14:03:
60:f9:e4:82:f1:70:9c:64:e8:0c:b1:d5:e3:43:f5:
e3:f4:f4:4a:e3:75:c0:8e:5b:74:79:d0:b7:d8:2d:
3e:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:B6:62:72:74:A1:B8:EA:9E:91:C9:A0:FE:52:EF:EA:A2:42:42:55
X509v3 Authority Key Identifier:
keyid:E1:AE:D1:48:4E:96:E4:BF:79:93:E9:B8:67:B3:4C:34:D6:A8:AE:36
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a7RSE6W5L95k-m4Z7NMNNaorjY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/523a93-8bbd-44ac-88bd-4e7bca55f821/1/4a7RSE6W5L95k-m4Z7NMNNaorjY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/523a93-8bbd-44ac-88bd-4e7bca55f821/1/4a7RSE6W5L95k-m4Z7NMNNaorjY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
90:72:3e:1a:dc:f3:56:15:bd:81:ed:82:23:62:d6:ff:80:90:
3e:e9:e0:88:63:d4:ed:8e:cc:5e:a0:7e:a2:7f:6e:c4:c9:e1:
89:99:85:73:17:e3:18:e1:63:79:a4:c4:b6:86:d8:50:5a:92:
ef:71:92:71:19:52:56:17:d7:84:ae:7b:58:cd:46:52:60:52:
97:08:48:30:b8:13:0f:f5:ef:3f:21:8f:c2:7d:2c:e2:0e:4b:
3f:16:57:b0:ae:5e:b7:48:cc:53:19:ce:a0:a6:d2:6f:b5:d7:
df:a7:95:dc:51:1c:d3:0a:95:a6:8a:87:de:bf:55:f9:f9:05:
d8:87:7a:b7:6f:f2:11:02:28:99:0e:f2:72:47:fc:ff:fc:5d:
f0:e9:de:83:ce:2a:ab:1f:65:b9:46:92:26:8c:54:10:5e:20:
11:29:c7:9d:16:a5:bd:a0:8d:31:87:51:e7:5a:7b:92:7d:67:
2b:da:97:86:18:36:66:a9:fd:cd:4c:99:73:ec:96:7e:21:7e:
4c:1a:83:bd:01:c1:a5:24:ce:64:69:23:1a:48:0b:95:7c:2e:
e8:3d:58:0c:f4:35:d8:7d:8b:dd:95:d5:9b:36:16:19:10:2c:
b1:0a:4f:4c:3e:92:87:6a:7f:53:2c:3c:93:08:98:11:54:3c:
cd:75:05:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 11 06:13:06 2025 by rpki-client