Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/06db38-9886-4d70-8904-27cab0a60264/1/4ZAOVZbAg3SX8RiUELHtIqzbfhM.mft
File: 4ZAOVZbAg3SX8RiUELHtIqzbfhM.mft (raw, json)
Hash identifier: GFzyzJhTZKgePKGDUvXonLnHG5b7uHDqD5XOyhxOPrU=
Subject key identifier: 65:31:A6:14:0B:8A:F2:5D:ED:F5:B0:BF:12:26:AB:99:6E:B3:EB:9E
Authority key identifier: E1:90:0E:55:96:C0:83:74:97:F1:18:94:10:B1:ED:22:AC:DB:7E:13
Certificate issuer: /CN=e1900e5596c0837497f1189410b1ed22acdb7e13
Certificate serial: 0199356DF7EA76C8F42FB82AE4DDC74E6E2B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4ZAOVZbAg3SX8RiUELHtIqzbfhM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/06db38-9886-4d70-8904-27cab0a60264/1/4ZAOVZbAg3SX8RiUELHtIqzbfhM.mft
Manifest number: 0B95
Signing time: Wed 10 Sep 2025 21:00:23 +0000
Manifest this update: Wed 10 Sep 2025 21:00:23 +0000
Manifest next update: Thu 11 Sep 2025 21:00:23 +0000
Files and hashes: 1: 4ZAOVZbAg3SX8RiUELHtIqzbfhM.crl (hash: eqAjegRx6v6HBdJocsf3ZIvVzEDAObBa9qYFgn+Ixrg=)
2: 8jfWRZ1NLj1bjkrxzRMG9yYupLo.roa (hash: 89HNIKxmIWfFBZvw0N2AfHWlUXDjHZG4VVH2GueEE+4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/82/06db38-9886-4d70-8904-27cab0a60264/1/4ZAOVZbAg3SX8RiUELHtIqzbfhM.crl
rsync://rpki.ripe.net/repository/DEFAULT/82/06db38-9886-4d70-8904-27cab0a60264/1/4ZAOVZbAg3SX8RiUELHtIqzbfhM.mft
rsync://rpki.ripe.net/repository/DEFAULT/4ZAOVZbAg3SX8RiUELHtIqzbfhM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 11 Sep 2025 20:00:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:35:6d:f7:ea:76:c8:f4:2f:b8:2a:e4:dd:c7:4e:6e:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e1900e5596c0837497f1189410b1ed22acdb7e13
Validity
Not Before: Sep 10 21:00:23 2025 GMT
Not After : Sep 11 21:00:23 2025 GMT
Subject: CN=6531a6140b8af25dedf5b0bf1226ab996eb3eb9e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:1f:ba:ef:47:c6:ba:93:e7:36:24:33:1e:12:
e7:eb:6f:5a:de:cd:c2:31:a7:65:e4:ce:b4:54:a3:
0b:16:6c:34:a7:0f:17:10:a3:81:3d:2c:7b:66:47:
da:14:df:ab:fe:0a:be:57:05:3e:94:3a:59:41:f7:
ce:d4:ea:c9:a3:af:23:b3:3c:5a:36:94:88:55:60:
6a:d1:d5:47:54:8b:bc:0b:89:08:c3:52:20:d7:35:
c7:4e:ad:65:96:6f:5c:f1:90:70:bb:14:08:5e:22:
e1:b9:6c:f6:dd:1b:72:80:8d:81:dc:f5:1e:f3:a2:
74:89:c5:89:40:f4:81:db:a6:88:20:5d:c3:86:71:
1b:9f:bb:9f:b8:fd:74:5f:bf:96:82:8d:16:52:6f:
36:70:44:25:f1:87:8d:94:9d:30:0c:f9:b2:19:6c:
d4:e5:0c:d9:50:7d:c2:77:ad:1b:18:5b:ce:4f:de:
02:6a:cc:29:bf:99:0a:ba:ee:a1:9f:69:4d:42:fd:
02:af:23:75:75:1c:ea:96:13:a2:95:d5:1e:71:4f:
89:a8:70:c6:a7:97:cb:82:19:ab:90:af:e3:b0:51:
27:7f:d5:d7:63:ea:d6:5f:b0:91:97:15:80:ee:c9:
4b:00:30:37:5a:43:58:f6:0d:b1:3c:3b:86:9a:13:
43:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:31:A6:14:0B:8A:F2:5D:ED:F5:B0:BF:12:26:AB:99:6E:B3:EB:9E
X509v3 Authority Key Identifier:
keyid:E1:90:0E:55:96:C0:83:74:97:F1:18:94:10:B1:ED:22:AC:DB:7E:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4ZAOVZbAg3SX8RiUELHtIqzbfhM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/06db38-9886-4d70-8904-27cab0a60264/1/4ZAOVZbAg3SX8RiUELHtIqzbfhM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/82/06db38-9886-4d70-8904-27cab0a60264/1/4ZAOVZbAg3SX8RiUELHtIqzbfhM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:6f:1e:4e:40:be:c4:f9:e9:50:e3:a2:4d:60:42:dd:3a:fb:
89:45:3f:80:ec:26:f8:74:fc:84:a9:57:1b:3a:06:20:34:9d:
a7:44:ad:d4:46:f1:4a:31:87:58:a2:65:76:c5:2b:d6:10:57:
3c:c3:76:a4:d6:1f:9b:4e:55:5b:87:1d:42:cc:20:ec:70:62:
e9:9b:85:bd:86:88:84:0c:5a:31:de:fe:1d:ba:93:72:dc:c4:
6b:1e:44:4c:3b:dd:5f:92:22:48:83:9d:f5:01:87:e7:7c:37:
c1:bb:ee:45:5d:55:ce:f7:77:e8:c9:bb:96:aa:d3:58:92:b8:
d1:39:65:73:2d:34:4e:44:e1:af:3d:35:04:89:87:d2:00:bd:
61:b9:41:98:97:32:8d:e7:13:20:ae:44:86:db:d9:87:a7:56:
3e:9d:31:cc:ef:c9:ed:33:6f:56:9c:70:6f:3e:65:e2:bc:7f:
98:65:98:c1:86:68:15:4a:94:5e:38:43:bf:30:f2:ea:c4:12:
47:d9:1b:67:44:32:ee:41:93:87:e3:99:43:67:4d:54:94:3f:
8f:17:45:2e:a7:94:90:da:a0:cc:5c:f0:b5:82:3b:31:fc:ac:
c3:da:ae:c0:64:c1:e4:98:e7:0d:d2:7e:14:84:03:4a:71:63:
87:41:27:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 10 23:06:56 2025 by rpki-client