Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/d31e5f-0f52-4623-867a-543d6182e294/1/4rHi5MUIxsepi2WYUodFyBP60x0.mft
File: 4rHi5MUIxsepi2WYUodFyBP60x0.mft (raw, json)
Hash identifier: 8782bIRY9NzeawYyp6lY/vrVKxClOghvJ/AiotHiDMA=
Subject key identifier: 62:48:02:6C:3E:06:A5:38:D1:94:E7:47:20:36:2D:D9:3D:78:2E:14
Authority key identifier: E2:B1:E2:E4:C5:08:C6:C7:A9:8B:65:98:52:87:45:C8:13:FA:D3:1D
Certificate issuer: /CN=e2b1e2e4c508c6c7a98b6598528745c813fad31d
Certificate serial: 0199356E84F07C2B4F53B27C5D333FF2413A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4rHi5MUIxsepi2WYUodFyBP60x0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/d31e5f-0f52-4623-867a-543d6182e294/1/4rHi5MUIxsepi2WYUodFyBP60x0.mft
Manifest number: 1680
Signing time: Wed 10 Sep 2025 21:00:59 +0000
Manifest this update: Wed 10 Sep 2025 21:00:59 +0000
Manifest next update: Thu 11 Sep 2025 21:00:59 +0000
Files and hashes: 1: 4rHi5MUIxsepi2WYUodFyBP60x0.crl (hash: 5PQxiaRMuXMV77Vcuggz9GP7BmmkmKYqlYlLEdTNCxI=)
2: 883carP1hhWb3_MmiKGn80hphf0.roa (hash: cPZWjDagkqb5tEO5wfwI807e/U08AzhpwxGlaqpcxgI=)
3: AnftS6a3tNRTfwARV2obSQtU-1Q.roa (hash: 1O5FkUYkHZKrQKTSneyG+jslWvu7oIHqq1i+yTKMvxI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7d/d31e5f-0f52-4623-867a-543d6182e294/1/4rHi5MUIxsepi2WYUodFyBP60x0.crl
rsync://rpki.ripe.net/repository/DEFAULT/7d/d31e5f-0f52-4623-867a-543d6182e294/1/4rHi5MUIxsepi2WYUodFyBP60x0.mft
rsync://rpki.ripe.net/repository/DEFAULT/4rHi5MUIxsepi2WYUodFyBP60x0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 11 Sep 2025 20:00:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:35:6e:84:f0:7c:2b:4f:53:b2:7c:5d:33:3f:f2:41:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e2b1e2e4c508c6c7a98b6598528745c813fad31d
Validity
Not Before: Sep 10 21:00:59 2025 GMT
Not After : Sep 11 21:00:59 2025 GMT
Subject: CN=6248026c3e06a538d194e74720362dd93d782e14
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:c0:5d:04:de:78:49:ba:e9:83:dd:c5:3b:bb:
e2:ec:85:37:4f:4c:11:ae:1b:0c:2b:ab:9f:0a:59:
a5:57:fd:54:22:3a:be:0a:58:f6:ff:69:d5:c5:74:
a5:0a:17:46:3c:22:1d:80:7f:41:cf:e9:e0:7d:75:
79:6f:23:99:75:d0:6b:47:07:27:b6:57:f9:15:52:
0b:73:94:71:f2:0a:ee:14:82:c0:00:c1:96:8f:73:
f8:bf:ec:98:30:2b:81:d2:f0:31:34:ab:5c:9c:90:
3c:0b:7b:87:bc:af:ef:d1:db:4b:bc:b4:ae:54:bb:
43:0c:02:a1:43:ff:d4:5d:84:ff:78:dc:94:b1:3d:
da:5d:29:69:f3:2f:ba:21:d0:fc:d7:cc:4d:af:1d:
51:04:e8:96:04:a6:94:99:7b:be:c4:42:5e:86:81:
7c:69:9a:67:38:05:0f:a4:e9:2a:c9:fb:06:4b:60:
98:5e:ef:57:e1:e7:cb:06:1a:c9:2c:0c:d1:55:c9:
2e:f1:04:23:63:05:39:56:52:09:1f:fd:c9:d3:4b:
54:35:50:36:b0:6d:dc:79:79:cd:16:a0:f7:a0:2b:
44:4e:66:4c:cc:1d:08:50:29:96:64:47:d2:36:26:
e7:ed:42:a8:f0:b2:61:31:40:78:c3:87:19:e7:77:
96:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:48:02:6C:3E:06:A5:38:D1:94:E7:47:20:36:2D:D9:3D:78:2E:14
X509v3 Authority Key Identifier:
keyid:E2:B1:E2:E4:C5:08:C6:C7:A9:8B:65:98:52:87:45:C8:13:FA:D3:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4rHi5MUIxsepi2WYUodFyBP60x0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/d31e5f-0f52-4623-867a-543d6182e294/1/4rHi5MUIxsepi2WYUodFyBP60x0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/d31e5f-0f52-4623-867a-543d6182e294/1/4rHi5MUIxsepi2WYUodFyBP60x0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:97:5e:04:d1:24:e3:9d:aa:0f:cf:6a:65:af:e0:4d:28:b0:
11:69:a1:0d:34:7c:6f:75:cc:06:13:42:89:11:05:db:62:af:
b4:f1:57:b1:9e:bd:a0:c1:ae:f1:3e:45:8d:6d:68:54:a2:e4:
e7:85:02:c3:dd:62:b2:96:1c:6a:69:39:2c:70:f1:ec:47:dc:
6c:07:c4:a3:83:86:b3:ee:56:b0:95:40:09:99:11:57:22:e8:
c6:4f:b4:a7:16:07:aa:1b:8e:8d:a9:39:40:d6:59:58:c7:b2:
cd:f0:d4:4d:f3:19:07:a4:0a:61:f4:8a:c8:64:68:35:30:c2:
8e:b2:3f:7b:a2:53:5b:e4:10:95:d6:16:14:e0:9f:9c:01:67:
1a:f3:13:80:f0:ed:ad:0d:c3:48:ed:1e:6b:0f:2d:40:c8:21:
f2:37:cd:53:a1:3e:d1:1d:1f:da:5a:24:47:6d:60:1d:b6:3e:
4c:64:46:06:fb:95:93:bb:10:ee:39:f6:65:99:da:46:b4:42:
e9:7d:49:9e:02:6f:c0:7c:12:93:91:1c:98:05:4a:4a:c9:f1:
a9:1a:fb:3c:4b:8f:b4:d6:e3:bd:b1:05:98:fb:3d:d3:83:38:
25:d2:d7:0c:c3:ad:e2:04:a8:c1:85:35:5b:98:22:f4:87:9d:
b6:b2:b8:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 10 22:55:55 2025 by rpki-client