Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/e34cd5-011a-404a-9ad5-93b578d18c8c/1/4RUdSJs2aUGSrL_KpeC7RvyeW-A.mft
File: 4RUdSJs2aUGSrL_KpeC7RvyeW-A.mft (raw, json)
Hash identifier: bjBwO4yCzF+ifu+kx41RCYG/FTElC1hP0PY855/Kkaw=
Subject key identifier: AA:75:0A:C4:17:46:17:5F:07:BF:96:D5:0B:FB:A0:CF:C3:4A:B5:01
Authority key identifier: E1:15:1D:48:9B:36:69:41:92:AC:BF:CA:A5:E0:BB:46:FC:9E:5B:E0
Certificate issuer: /CN=e1151d489b36694192acbfcaa5e0bb46fc9e5be0
Certificate serial: 019923A0980C85E5F55AC48DE888E84CE879
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4RUdSJs2aUGSrL_KpeC7RvyeW-A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/e34cd5-011a-404a-9ad5-93b578d18c8c/1/4RUdSJs2aUGSrL_KpeC7RvyeW-A.mft
Manifest number: 069D
Signing time: Sun 07 Sep 2025 10:02:31 +0000
Manifest this update: Sun 07 Sep 2025 10:02:31 +0000
Manifest next update: Mon 08 Sep 2025 10:02:31 +0000
Files and hashes: 1: 4RUdSJs2aUGSrL_KpeC7RvyeW-A.crl (hash: 7MPIfj32FqQ1essc6TMgM2qejD+oO0Tymv2h03pl9Pc=)
2: HYom0-kciwsBpHtG02N8IppZ_kA.roa (hash: gd8Ptnlp+eybQYq2eGs8Iys0wttljsxiJW6GYdz0ar4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/e34cd5-011a-404a-9ad5-93b578d18c8c/1/4RUdSJs2aUGSrL_KpeC7RvyeW-A.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/e34cd5-011a-404a-9ad5-93b578d18c8c/1/4RUdSJs2aUGSrL_KpeC7RvyeW-A.mft
rsync://rpki.ripe.net/repository/DEFAULT/4RUdSJs2aUGSrL_KpeC7RvyeW-A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:23:a0:98:0c:85:e5:f5:5a:c4:8d:e8:88:e8:4c:e8:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e1151d489b36694192acbfcaa5e0bb46fc9e5be0
Validity
Not Before: Sep 7 10:02:31 2025 GMT
Not After : Sep 8 10:02:31 2025 GMT
Subject: CN=aa750ac41746175f07bf96d50bfba0cfc34ab501
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:78:be:c1:bb:64:31:50:83:e8:15:73:77:cc:
18:f0:97:35:45:32:51:65:14:d9:86:0a:58:0d:7f:
ae:b0:51:f2:94:6a:03:48:71:40:3c:7b:ab:e4:8e:
1d:95:4e:64:4a:67:60:65:43:82:f8:3c:b4:2a:2d:
43:fe:f8:6c:a5:f1:10:26:6d:2d:f7:2d:44:8e:42:
7e:ec:ec:ec:68:78:da:9f:bc:a7:76:a2:dd:31:38:
33:43:9c:0c:8f:35:37:39:85:ab:9f:9a:5a:4b:73:
11:f1:37:7d:7d:4f:09:6f:a5:a2:09:42:07:09:ee:
23:34:80:aa:35:e2:19:e1:bd:f0:fa:c4:c8:c0:a2:
a6:eb:3b:0a:19:53:6f:69:7a:df:7a:69:9c:88:5e:
87:90:b0:b9:21:07:f0:84:03:17:c4:be:72:66:97:
8f:46:bd:11:fc:d6:01:5f:bd:47:a4:dd:6e:74:c7:
ef:b6:ff:30:6a:1b:8c:c9:c7:1d:5a:c6:52:f8:3e:
61:b1:bc:bf:f9:bf:12:e8:fe:b6:2e:9e:78:08:49:
ca:f3:ed:b1:15:41:fe:2d:34:f1:6b:f9:7e:5a:99:
64:fd:c0:d8:4c:a5:1b:12:63:ba:73:a6:7b:88:6d:
8f:00:cf:a4:30:1c:14:06:ee:f6:71:ed:d4:23:47:
58:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:75:0A:C4:17:46:17:5F:07:BF:96:D5:0B:FB:A0:CF:C3:4A:B5:01
X509v3 Authority Key Identifier:
keyid:E1:15:1D:48:9B:36:69:41:92:AC:BF:CA:A5:E0:BB:46:FC:9E:5B:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4RUdSJs2aUGSrL_KpeC7RvyeW-A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/e34cd5-011a-404a-9ad5-93b578d18c8c/1/4RUdSJs2aUGSrL_KpeC7RvyeW-A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/e34cd5-011a-404a-9ad5-93b578d18c8c/1/4RUdSJs2aUGSrL_KpeC7RvyeW-A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:d2:e3:d6:1d:45:16:2b:0a:00:64:28:c9:de:db:25:e9:81:
b4:ce:96:a5:ce:c8:dd:3b:fc:02:16:5b:e6:62:10:5b:0a:81:
eb:3d:ba:20:11:31:d9:7a:a1:20:60:e6:50:ad:e2:65:f3:93:
ac:0f:6c:4a:be:82:06:5a:69:cb:87:18:99:85:b6:3f:5f:02:
03:6d:a8:d3:c4:ea:97:d3:3d:41:fc:b6:d2:27:8d:90:a4:bf:
f3:cf:66:96:a5:9a:5c:29:84:11:b5:24:85:91:0c:58:98:29:
3c:2e:20:96:d2:66:ea:23:c7:9f:be:77:57:24:bf:a2:ea:10:
8b:2c:c7:da:45:6f:fe:a9:2d:a3:ca:5f:bf:f9:19:d7:01:3e:
7d:84:e2:c8:4f:1b:e7:c5:9c:70:af:e6:ee:65:ce:43:5e:03:
f3:f6:f3:e2:fd:7c:3b:b5:50:aa:f9:02:6d:9c:54:99:ed:13:
29:22:74:7d:22:60:61:2a:6f:38:78:e5:ff:c0:fa:87:24:fe:
2a:1b:fa:55:c8:2c:fb:7d:0a:d8:1d:c2:4c:80:18:58:b1:f7:
97:ec:87:4a:a1:66:26:a0:5b:f6:d0:d6:b8:86:52:16:92:b4:
a1:21:e0:b5:33:29:02:af:5b:83:7c:ab:e7:1c:f2:df:17:15:
40:3e:35:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 11:27:27 2025 by rpki-client