Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/e6efcf-e5d9-49f0-b11f-d52fdc9e8287/1/4br5DtE9F1RSz15aFjKnlL8fTJo.mft
File: 4br5DtE9F1RSz15aFjKnlL8fTJo.mft (raw, json)
Hash identifier: 4RGumstXHUUMGhbUzA/0/9lEGKstBtmgQUih2Jxc/oU=
Subject key identifier: C9:49:A8:E9:3D:61:6A:53:5A:85:37:D5:74:93:04:5B:52:56:E5:88
Authority key identifier: E1:BA:F9:0E:D1:3D:17:54:52:CF:5E:5A:16:32:A7:94:BF:1F:4C:9A
Certificate issuer: /CN=e1baf90ed13d175452cf5e5a1632a794bf1f4c9a
Certificate serial: 019923A0227CC21AB9BE34E242F751ED31E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4br5DtE9F1RSz15aFjKnlL8fTJo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/e6efcf-e5d9-49f0-b11f-d52fdc9e8287/1/4br5DtE9F1RSz15aFjKnlL8fTJo.mft
Manifest number: 1673
Signing time: Sun 07 Sep 2025 10:02:00 +0000
Manifest this update: Sun 07 Sep 2025 10:02:00 +0000
Manifest next update: Mon 08 Sep 2025 10:02:00 +0000
Files and hashes: 1: 4br5DtE9F1RSz15aFjKnlL8fTJo.crl (hash: 8mxHqNT5D0U7/s+bMYe2tPepnJsKGTmtD/FclWOxk+M=)
2: Tli-MNBliT4GZ0SuL6-kYDFipSs.roa (hash: tAZBpKtmJpVB7wLzYFodx1oVBHeaFLGJGQEpb9KD5qs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/e6efcf-e5d9-49f0-b11f-d52fdc9e8287/1/4br5DtE9F1RSz15aFjKnlL8fTJo.crl
rsync://rpki.ripe.net/repository/DEFAULT/64/e6efcf-e5d9-49f0-b11f-d52fdc9e8287/1/4br5DtE9F1RSz15aFjKnlL8fTJo.mft
rsync://rpki.ripe.net/repository/DEFAULT/4br5DtE9F1RSz15aFjKnlL8fTJo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 07:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:23:a0:22:7c:c2:1a:b9:be:34:e2:42:f7:51:ed:31:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e1baf90ed13d175452cf5e5a1632a794bf1f4c9a
Validity
Not Before: Sep 7 10:02:00 2025 GMT
Not After : Sep 8 10:02:00 2025 GMT
Subject: CN=c949a8e93d616a535a8537d57493045b5256e588
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:6d:43:dc:e4:34:33:22:9c:bb:bf:22:a4:c2:
be:36:b0:0f:ed:7b:51:ac:d4:84:dd:85:8e:89:06:
da:73:c7:de:8b:3c:c0:51:b8:1f:83:3f:45:39:87:
89:30:ba:8e:4c:ab:d4:0f:68:28:4f:0d:dc:93:55:
c1:a7:f7:7f:b9:ab:c1:b8:35:b6:65:dc:bb:fb:64:
45:1e:d8:c1:86:bc:8b:55:f9:b7:bc:8f:ea:ea:87:
00:7a:c8:af:16:cf:44:02:5c:6a:0a:52:c1:6b:69:
b9:06:13:db:a0:b2:e4:d7:04:c6:92:5a:07:aa:e4:
a3:50:6f:bc:57:91:f0:7b:64:e1:eb:cb:d2:90:49:
50:fb:9f:7d:b9:4e:3a:87:dc:3e:51:52:92:0b:25:
8c:91:f9:49:6a:28:20:e9:b2:78:f6:ca:d5:e5:32:
ef:54:9d:c4:9f:75:0e:6a:c2:e1:ea:ec:74:a9:23:
54:a7:21:bd:60:28:0a:95:d3:58:40:3d:d6:eb:41:
be:ae:5c:79:35:25:4a:df:b8:52:3f:b1:8f:57:b0:
07:64:31:96:26:f3:ee:2a:ac:a1:59:d5:5d:5a:71:
33:72:b6:ec:51:a1:a9:a9:33:a9:93:58:cc:4c:39:
e1:97:19:15:67:be:63:df:52:50:b7:54:5b:9c:e2:
b7:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:49:A8:E9:3D:61:6A:53:5A:85:37:D5:74:93:04:5B:52:56:E5:88
X509v3 Authority Key Identifier:
keyid:E1:BA:F9:0E:D1:3D:17:54:52:CF:5E:5A:16:32:A7:94:BF:1F:4C:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4br5DtE9F1RSz15aFjKnlL8fTJo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/e6efcf-e5d9-49f0-b11f-d52fdc9e8287/1/4br5DtE9F1RSz15aFjKnlL8fTJo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/e6efcf-e5d9-49f0-b11f-d52fdc9e8287/1/4br5DtE9F1RSz15aFjKnlL8fTJo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ae:53:a2:9c:09:9c:62:67:24:ba:00:44:e9:2b:95:b0:6e:32:
40:f4:9e:f7:97:86:c5:ca:ca:0d:25:6a:70:08:23:77:e1:02:
b6:f5:d4:1d:56:38:80:70:a5:f9:c1:ec:69:28:b4:9c:0a:f6:
94:d4:b3:cd:2e:5f:12:8e:3e:a7:a4:43:ad:9e:28:f6:9a:fd:
2d:79:8f:08:dd:43:23:d8:c2:1e:40:12:5a:70:79:f6:b3:ab:
fe:89:c2:8c:e5:a5:56:b1:54:f4:8d:dd:c6:a5:e6:cf:f6:7d:
da:0e:59:2c:1d:35:d5:23:d3:1c:3a:cc:48:37:ba:26:68:19:
43:31:06:64:e6:c9:79:35:7e:48:80:d5:eb:ee:97:41:15:6c:
33:32:54:f3:ca:50:e0:0a:15:28:93:ca:6e:d7:06:c3:ed:e6:
df:2d:e7:8d:2d:78:53:23:08:b7:52:99:5a:ab:b4:4a:43:76:
18:f1:46:ab:50:b3:e6:63:99:d9:cb:c7:c4:e7:86:65:8d:da:
14:54:c8:69:5a:1a:49:62:dd:05:64:45:2a:0d:64:11:70:2c:
d7:09:41:73:0a:a1:34:9a:5d:f9:7a:43:44:37:44:77:15:3b:
23:ff:83:3b:18:d6:aa:93:4f:19:9a:4a:e0:1b:5f:a4:84:c0:
a2:b3:1d:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 13:46:42 2025 by rpki-client