Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/d21da4-f65b-4531-976a-8ec0604e6929/1/4aMjVGSEIgy0AgYzgPQBY2kmKs8.mft
File: 4aMjVGSEIgy0AgYzgPQBY2kmKs8.mft (raw, json)
Hash identifier: HmJitIiwMl+PdWTQL9UmWa1wr+prx1ZQ4EsJql2gyIo=
Subject key identifier: 8A:EA:96:00:CB:89:3D:1C:4D:C9:25:F0:07:86:64:56:B2:2D:29:AD
Authority key identifier: E1:A3:23:54:64:84:22:0C:B4:02:06:33:80:F4:01:63:69:26:2A:CF
Certificate issuer: /CN=e1a323546484220cb402063380f4016369262acf
Certificate serial: 0199228CB79A9AFEC07BC70833473EC38559
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4aMjVGSEIgy0AgYzgPQBY2kmKs8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/d21da4-f65b-4531-976a-8ec0604e6929/1/4aMjVGSEIgy0AgYzgPQBY2kmKs8.mft
Manifest number: 09B5
Signing time: Sun 07 Sep 2025 05:01:11 +0000
Manifest this update: Sun 07 Sep 2025 05:01:11 +0000
Manifest next update: Mon 08 Sep 2025 05:01:11 +0000
Files and hashes: 1: 4aMjVGSEIgy0AgYzgPQBY2kmKs8.crl (hash: Ay4lWBPxhwqW+5dCBI+7AoAjmiQrtP4P+FUoBSGGUUQ=)
2: oLxnPDOjx34zqrjQ27ju_ZuWYV4.roa (hash: aFW6lgXJpeg0bmQI7iZHPliZcmK0ToNkD5OYtI2CIQI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/d21da4-f65b-4531-976a-8ec0604e6929/1/4aMjVGSEIgy0AgYzgPQBY2kmKs8.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/d21da4-f65b-4531-976a-8ec0604e6929/1/4aMjVGSEIgy0AgYzgPQBY2kmKs8.mft
rsync://rpki.ripe.net/repository/DEFAULT/4aMjVGSEIgy0AgYzgPQBY2kmKs8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:8c:b7:9a:9a:fe:c0:7b:c7:08:33:47:3e:c3:85:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e1a323546484220cb402063380f4016369262acf
Validity
Not Before: Sep 7 05:01:11 2025 GMT
Not After : Sep 8 05:01:11 2025 GMT
Subject: CN=8aea9600cb893d1c4dc925f007866456b22d29ad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:90:11:84:29:b7:3a:a2:51:dd:ae:16:de:6e:
a6:71:a1:07:05:7d:85:8b:c1:57:d6:81:e4:af:a1:
ea:28:03:b5:09:2f:5b:91:d3:4a:c4:a1:fb:60:41:
92:f4:02:0a:d6:ab:ea:69:18:5a:37:2d:2c:f9:be:
ad:e5:79:ca:12:0b:ec:91:6c:ec:76:92:ee:ba:b5:
27:08:cb:ff:15:cc:94:4a:51:0e:74:9c:88:91:a6:
f4:b5:c5:ff:e0:8a:c9:7e:51:6d:f7:61:80:c6:b6:
ee:e4:a0:88:43:85:61:1c:b5:9d:55:e1:8c:93:3d:
08:3a:51:74:87:c7:28:3a:8c:dd:b6:de:d5:75:07:
39:fe:7d:16:fb:2b:bc:3a:30:67:fd:9a:e5:b0:49:
30:1b:ca:fc:cc:6f:9e:25:1f:e7:6a:97:8f:3d:95:
66:25:b8:7f:51:8b:14:31:84:43:f6:06:f9:3f:a2:
0c:8d:8e:e3:99:2f:6f:2f:5d:da:8d:f7:f6:12:f7:
df:24:d7:72:e6:01:89:9a:6f:01:b6:51:6b:e1:80:
c9:73:4f:da:d9:74:f6:cb:39:92:58:f0:d5:ac:c9:
d1:5d:3d:ea:96:70:b6:3c:75:a3:88:49:6e:d4:5a:
2f:6a:71:b1:28:ea:2e:2e:9f:bc:cd:80:b9:16:c1:
98:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:EA:96:00:CB:89:3D:1C:4D:C9:25:F0:07:86:64:56:B2:2D:29:AD
X509v3 Authority Key Identifier:
keyid:E1:A3:23:54:64:84:22:0C:B4:02:06:33:80:F4:01:63:69:26:2A:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4aMjVGSEIgy0AgYzgPQBY2kmKs8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/d21da4-f65b-4531-976a-8ec0604e6929/1/4aMjVGSEIgy0AgYzgPQBY2kmKs8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/d21da4-f65b-4531-976a-8ec0604e6929/1/4aMjVGSEIgy0AgYzgPQBY2kmKs8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:28:2d:73:dc:13:ef:e7:dd:bd:7f:13:91:bb:44:94:f6:e4:
56:7c:03:9a:53:4f:e9:e4:95:7c:c8:fc:99:86:67:be:b7:75:
cb:d4:91:da:56:3d:8d:23:ad:fd:59:f3:14:4e:41:e4:38:bf:
57:0e:49:38:bf:e4:79:48:da:44:0f:e3:2e:31:ac:c8:69:6a:
62:0b:12:16:6b:23:da:d0:28:fd:31:ec:2c:a0:7b:11:71:4e:
6d:92:4a:87:91:0b:18:a4:da:5b:90:f9:be:cb:21:3b:87:f3:
c4:cf:ad:4f:33:76:1e:1e:43:1d:4d:82:9c:19:3b:68:7f:f6:
5a:5a:8f:f7:e2:92:21:81:3a:48:5e:79:66:05:3a:dd:0f:16:
43:39:06:cb:58:62:16:52:a4:dd:7c:44:0f:fd:dd:b9:6a:9e:
0d:5c:e9:43:73:fa:1e:00:96:67:2c:e7:db:8f:52:7c:dc:58:
40:e5:69:77:8e:f0:49:4b:f2:c1:41:f4:18:1e:84:e5:c9:db:
20:27:7f:53:e6:b0:12:ef:86:a6:d6:c0:7b:25:19:45:8a:c8:
9e:7a:eb:a4:0f:21:a8:a3:b4:9d:04:bf:fd:73:1b:3e:03:a3:
4b:8c:fa:fb:e0:96:78:ad:ac:35:63:6f:5e:e1:d7:7e:36:1a:
02:93:2d:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 10:07:39 2025 by rpki-client