Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/2de324-86c7-43d6-9df2-f8ae0dbc5df2/1/4NGoNmwhFZ8HlHipAwhD-_YGMbk.mft
File: 4NGoNmwhFZ8HlHipAwhD-_YGMbk.mft (raw, json)
Hash identifier: GEDIzfrDuglHGqmjev8y543mdsxgaUwwqaIQz/7OLn4=
Subject key identifier: DC:33:E2:DE:A6:C7:00:B8:E8:5B:42:18:0B:44:A9:24:C9:A8:27:E0
Authority key identifier: E0:D1:A8:36:6C:21:15:9F:07:94:78:A9:03:08:43:FB:F6:06:31:B9
Certificate issuer: /CN=e0d1a8366c21159f079478a9030843fbf60631b9
Certificate serial: 0199239FCFF16C5F7D6515A3D269D7120B55
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4NGoNmwhFZ8HlHipAwhD-_YGMbk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/2de324-86c7-43d6-9df2-f8ae0dbc5df2/1/4NGoNmwhFZ8HlHipAwhD-_YGMbk.mft
Manifest number: 1604
Signing time: Sun 07 Sep 2025 10:01:39 +0000
Manifest this update: Sun 07 Sep 2025 10:01:39 +0000
Manifest next update: Mon 08 Sep 2025 10:01:39 +0000
Files and hashes: 1: 4NGoNmwhFZ8HlHipAwhD-_YGMbk.crl (hash: adMs6SG4zowq9OOrGNmbpk9QUVzaI6FI8YeNzWCgfSk=)
2: X6zK_zIJEJ4ZvUFy-bZ0YYb3PXk.roa (hash: 73bfs58Aeh5k14l65MP0sPTsNd9XJmQVqU0en4/SkEQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/2de324-86c7-43d6-9df2-f8ae0dbc5df2/1/4NGoNmwhFZ8HlHipAwhD-_YGMbk.crl
rsync://rpki.ripe.net/repository/DEFAULT/69/2de324-86c7-43d6-9df2-f8ae0dbc5df2/1/4NGoNmwhFZ8HlHipAwhD-_YGMbk.mft
rsync://rpki.ripe.net/repository/DEFAULT/4NGoNmwhFZ8HlHipAwhD-_YGMbk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:23:9f:cf:f1:6c:5f:7d:65:15:a3:d2:69:d7:12:0b:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e0d1a8366c21159f079478a9030843fbf60631b9
Validity
Not Before: Sep 7 10:01:39 2025 GMT
Not After : Sep 8 10:01:39 2025 GMT
Subject: CN=dc33e2dea6c700b8e85b42180b44a924c9a827e0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:97:67:fc:60:4f:c4:24:7e:a0:6c:21:a2:72:
5c:60:1d:7c:45:83:0d:e4:2d:8b:86:d5:97:e7:de:
7b:7c:57:e4:00:14:06:42:79:74:9c:de:7b:fa:e6:
83:7f:29:50:62:cd:61:67:9b:ee:66:e6:9b:81:e9:
de:dc:3e:c1:02:77:07:2e:6f:df:ee:f5:c0:36:ad:
43:dc:4f:d3:30:d0:29:58:63:12:27:7b:8e:6e:cd:
da:75:32:9e:cb:0c:3d:8e:7f:5c:0b:67:0a:5a:03:
b4:84:e1:79:21:0f:0c:24:78:81:fb:98:96:01:fe:
95:a1:2d:31:66:26:96:50:2a:1f:af:86:58:c6:b3:
59:1d:81:90:70:6e:d5:25:05:d7:6c:4e:4a:e5:cc:
d3:9e:dd:44:1b:9a:ed:9c:2d:76:5d:bc:f0:a4:b6:
85:3b:d0:43:b7:0f:ed:c4:bc:f3:be:45:bd:47:f4:
26:a6:e6:28:83:22:cb:77:93:07:95:c1:c6:aa:99:
3a:25:79:97:1d:41:05:94:28:24:0d:4a:74:7e:2d:
3e:3a:6b:89:be:32:32:6a:93:72:6a:8f:cc:22:bb:
79:52:05:f4:1f:9b:bc:35:47:3f:00:17:fe:e1:f2:
0c:11:7d:19:bb:b2:0c:ff:ff:c2:67:fb:00:00:dc:
e3:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:33:E2:DE:A6:C7:00:B8:E8:5B:42:18:0B:44:A9:24:C9:A8:27:E0
X509v3 Authority Key Identifier:
keyid:E0:D1:A8:36:6C:21:15:9F:07:94:78:A9:03:08:43:FB:F6:06:31:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4NGoNmwhFZ8HlHipAwhD-_YGMbk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/2de324-86c7-43d6-9df2-f8ae0dbc5df2/1/4NGoNmwhFZ8HlHipAwhD-_YGMbk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/2de324-86c7-43d6-9df2-f8ae0dbc5df2/1/4NGoNmwhFZ8HlHipAwhD-_YGMbk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:0a:53:86:29:8a:16:1a:e1:3f:30:d9:e3:f6:7b:6f:27:0c:
28:34:5b:ba:ce:21:a6:3d:da:bb:13:dc:68:df:cf:a0:d3:40:
3a:da:14:e2:d4:bb:33:0e:a3:f1:5e:ac:d8:df:70:62:06:c4:
1c:38:2b:34:e9:7a:9d:e9:43:dc:c4:86:99:d4:16:ae:7f:10:
f1:6c:9d:3a:d5:b8:90:ed:88:57:1a:2d:a5:f7:0d:b7:a4:06:
bf:28:c5:b6:53:52:87:0b:ff:0a:8d:18:5b:ea:d3:7f:af:36:
f7:1d:c7:b4:08:b2:cf:5f:cf:b2:ce:d8:ff:c4:56:1c:86:79:
a7:a3:c8:25:7f:18:5c:96:97:0c:9a:37:4b:86:80:1c:72:30:
54:a7:9b:79:97:da:1c:ae:16:b5:83:13:2b:cc:11:bc:6b:56:
13:81:25:b8:28:b1:08:84:55:6c:fa:0e:54:68:64:c6:cf:07:
5f:98:af:e9:3c:33:2a:dd:e7:33:0e:bd:07:ec:77:6e:67:0d:
e9:f0:a5:ad:93:30:33:50:2f:6a:6b:3f:7f:7b:8e:38:dc:d0:
2a:85:a2:0c:ed:da:aa:4f:f9:32:58:37:7a:12:76:d3:61:63:
0f:68:a7:86:4d:4b:7d:35:5f:1e:e6:59:5f:d2:f9:4a:21:42:
33:49:da:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 11:25:43 2025 by rpki-client