Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/68569f-96cf-45e3-9dab-2ea52896bae1/1/4q9q9tGZ8R7LpDVVEOmbficatUA.mft
File: 4q9q9tGZ8R7LpDVVEOmbficatUA.mft (raw, json)
Hash identifier: jS8EVmVpx92zoBRDViPTYGuVZO8bWSZ4ZRLxslaDfc4=
Subject key identifier: 63:A2:83:35:61:FA:9C:5F:69:59:52:40:9D:B2:C0:C3:46:AA:0B:D9
Authority key identifier: E2:AF:6A:F6:D1:99:F1:1E:CB:A4:35:55:10:E9:9B:7E:27:1A:B5:40
Certificate issuer: /CN=e2af6af6d199f11ecba4355510e99b7e271ab540
Certificate serial: 019921B2388D6B3F6A7E457934FE8DA6AC2F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4q9q9tGZ8R7LpDVVEOmbficatUA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/68569f-96cf-45e3-9dab-2ea52896bae1/1/4q9q9tGZ8R7LpDVVEOmbficatUA.mft
Manifest number: 01A7
Signing time: Sun 07 Sep 2025 01:02:31 +0000
Manifest this update: Sun 07 Sep 2025 01:02:31 +0000
Manifest next update: Mon 08 Sep 2025 01:02:31 +0000
Files and hashes: 1: 4q9q9tGZ8R7LpDVVEOmbficatUA.crl (hash: l1fJQMIn7RpooJ955od40/YPymHRiK/qmVdrD8eEiYI=)
2: C-s3qmcWvVMYI1a9KzViDKmJV5c.roa (hash: /bw45CjGjbfD9z7uFQfaYryXfUKu5UGOeYHJY32SaeY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/81/68569f-96cf-45e3-9dab-2ea52896bae1/1/4q9q9tGZ8R7LpDVVEOmbficatUA.crl
rsync://rpki.ripe.net/repository/DEFAULT/81/68569f-96cf-45e3-9dab-2ea52896bae1/1/4q9q9tGZ8R7LpDVVEOmbficatUA.mft
rsync://rpki.ripe.net/repository/DEFAULT/4q9q9tGZ8R7LpDVVEOmbficatUA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 01:02:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:21:b2:38:8d:6b:3f:6a:7e:45:79:34:fe:8d:a6:ac:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e2af6af6d199f11ecba4355510e99b7e271ab540
Validity
Not Before: Sep 7 01:02:31 2025 GMT
Not After : Sep 8 01:02:31 2025 GMT
Subject: CN=63a2833561fa9c5f695952409db2c0c346aa0bd9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:67:ab:5f:3a:a3:a1:43:00:2e:17:17:61:46:
0b:13:92:99:63:3d:fa:c7:d3:6b:49:5b:b6:5c:c2:
09:a2:3f:c1:6e:66:70:1c:21:74:35:68:4d:ff:79:
ae:d8:66:a6:d7:a7:47:ba:94:07:28:6f:39:fc:b8:
2b:6b:a6:f4:07:c2:ea:c8:97:75:59:0d:33:b1:50:
70:fb:98:03:e0:2c:36:21:cb:54:b7:ce:56:fc:f4:
46:a1:83:09:37:46:0b:aa:25:45:1d:0e:2e:0d:68:
41:98:19:cf:57:6c:d9:96:62:14:c5:7a:81:bf:28:
b3:b3:70:ff:76:98:55:78:ef:4c:de:8a:72:e1:1a:
15:99:14:3d:87:88:86:45:f6:7a:3c:7b:2f:10:d5:
9b:71:02:87:1b:33:75:bf:57:0b:06:69:e7:6b:30:
20:07:bd:80:3c:c1:f7:37:ff:8b:e4:87:43:3f:f8:
17:cd:21:36:e6:be:8c:dd:14:a4:e6:ca:88:3f:66:
c7:7c:3c:3a:0b:db:cc:cc:38:e0:8a:0b:93:d8:be:
82:a4:e2:2e:4b:df:3a:f3:ff:12:f7:59:39:2d:4c:
26:91:cb:f4:51:20:30:83:9f:a7:26:31:82:7b:9c:
0f:c6:97:6e:1a:23:ed:93:1a:de:93:0c:5d:e4:c8:
42:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:A2:83:35:61:FA:9C:5F:69:59:52:40:9D:B2:C0:C3:46:AA:0B:D9
X509v3 Authority Key Identifier:
keyid:E2:AF:6A:F6:D1:99:F1:1E:CB:A4:35:55:10:E9:9B:7E:27:1A:B5:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4q9q9tGZ8R7LpDVVEOmbficatUA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/68569f-96cf-45e3-9dab-2ea52896bae1/1/4q9q9tGZ8R7LpDVVEOmbficatUA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/68569f-96cf-45e3-9dab-2ea52896bae1/1/4q9q9tGZ8R7LpDVVEOmbficatUA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:df:18:d3:f4:19:dd:b1:f2:c1:a7:ce:44:b0:93:04:64:24:
3d:d9:ae:60:66:5d:3e:c7:b2:50:c9:5d:a3:e4:9b:b1:17:04:
d9:34:f0:aa:37:95:91:6f:2c:e2:6c:4d:04:7e:ad:a8:25:32:
7f:7c:cc:da:17:07:01:cf:eb:2e:37:fe:80:36:ee:71:a1:f1:
b3:25:d7:7a:73:af:43:8e:0a:ef:79:be:c0:ad:3f:d3:28:7d:
7f:b7:50:ab:53:4a:cf:e3:3e:9d:cf:53:f0:23:78:53:9e:54:
45:ff:02:29:85:33:56:dc:10:42:1a:31:9f:42:72:bc:46:ed:
c7:7a:09:9e:e4:67:55:87:8b:eb:62:a1:b9:63:87:51:65:c0:
e5:76:f3:62:a5:87:9f:1a:5e:6b:c6:34:9a:b3:22:9b:a3:b6:
d9:c4:c4:b7:54:ac:d2:50:0d:9e:75:55:ce:4c:d1:fd:44:ae:
64:7c:c1:13:73:42:59:c4:59:9a:46:51:3d:cb:a7:99:4b:91:
8d:14:bc:c5:0b:38:c9:4b:a1:8a:b6:72:86:2c:17:da:00:fb:
c5:bf:14:bc:ab:2b:8e:ec:e3:3e:21:77:ab:8d:f1:e6:3b:d4:
2a:2d:c3:bb:63:ef:57:f4:79:d7:a1:9a:c6:f3:3a:5f:18:58:
a3:46:ec:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 10:13:47 2025 by rpki-client