Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/f9f8fa-2988-445c-be94-913575c58f4a/1/4aWhf1DBNbGFHOwsdrD9cPncx54.mft
File: 4aWhf1DBNbGFHOwsdrD9cPncx54.mft (raw, json)
Hash identifier: MGMx0DJkBN/XtjR6Z9BBkCKTNxt0iNvr7k86CcqviOw=
Subject key identifier: 49:2D:45:43:99:70:91:2A:35:BC:90:13:0D:56:5D:69:70:95:79:36
Authority key identifier: E1:A5:A1:7F:50:C1:35:B1:85:1C:EC:2C:76:B0:FD:70:F9:DC:C7:9E
Certificate issuer: /CN=e1a5a17f50c135b1851cec2c76b0fd70f9dcc79e
Certificate serial: 019935016F6FEF70E1726D7833ACA66A14F0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4aWhf1DBNbGFHOwsdrD9cPncx54.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/f9f8fa-2988-445c-be94-913575c58f4a/1/4aWhf1DBNbGFHOwsdrD9cPncx54.mft
Manifest number: 04F5
Signing time: Wed 10 Sep 2025 19:01:50 +0000
Manifest this update: Wed 10 Sep 2025 19:01:50 +0000
Manifest next update: Thu 11 Sep 2025 19:01:50 +0000
Files and hashes: 1: 4aWhf1DBNbGFHOwsdrD9cPncx54.crl (hash: P2EBcHdd6PZIl2Vs25Jl/WFY0oQBBdIdNoMUX01lR8s=)
2: hfRFZKITz5hu-gPvGNJloOjkOMc.roa (hash: D3UvYF9mG8nUIanHUFk48MzJyJwGvptN1rrytDvh8Eo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/82/f9f8fa-2988-445c-be94-913575c58f4a/1/4aWhf1DBNbGFHOwsdrD9cPncx54.crl
rsync://rpki.ripe.net/repository/DEFAULT/82/f9f8fa-2988-445c-be94-913575c58f4a/1/4aWhf1DBNbGFHOwsdrD9cPncx54.mft
rsync://rpki.ripe.net/repository/DEFAULT/4aWhf1DBNbGFHOwsdrD9cPncx54.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 11 Sep 2025 19:01:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:35:01:6f:6f:ef:70:e1:72:6d:78:33:ac:a6:6a:14:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e1a5a17f50c135b1851cec2c76b0fd70f9dcc79e
Validity
Not Before: Sep 10 19:01:50 2025 GMT
Not After : Sep 11 19:01:50 2025 GMT
Subject: CN=492d45439970912a35bc90130d565d6970957936
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:88:7d:a1:63:d4:5d:a1:40:37:3f:5c:87:25:
a8:ac:f6:95:9b:dc:6a:16:c0:d7:f1:e3:7a:4c:b8:
6e:f8:2b:6e:a8:1c:9c:05:5a:46:23:f9:5d:f1:c5:
cf:3c:2b:8c:bc:ad:51:79:ec:79:08:97:f8:bf:31:
4d:ea:19:a9:cd:de:dc:ea:10:0f:3a:25:ae:41:4d:
16:49:e3:08:7f:7e:5e:dd:a2:5a:19:29:0d:c1:30:
62:38:58:f0:e5:c1:09:73:b5:d4:b9:08:57:1d:1f:
c3:c1:2c:82:48:5a:28:82:07:c9:2b:b4:56:67:cc:
e3:65:03:d8:3d:3f:72:97:54:63:d6:2f:d0:8e:e1:
7d:e4:1c:45:d4:56:ff:cb:e0:3b:69:da:03:3d:95:
c8:7f:34:77:ee:05:81:50:71:9e:82:41:e3:e2:ca:
31:a2:49:8c:04:2f:9b:f8:b3:32:05:e8:42:a1:c2:
ed:dd:d2:f8:6b:27:35:c2:dd:0c:f5:0c:76:72:92:
67:45:c5:2b:bc:9a:b9:73:2d:5a:c5:13:45:ff:93:
cb:5f:1d:0c:d9:a8:cd:43:ab:6b:72:7d:55:36:fc:
bb:25:cc:d5:f5:a3:7d:da:f2:09:5b:db:d4:b5:9a:
ee:fb:27:e5:ea:07:8a:4a:6c:26:0c:1b:46:f8:91:
be:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:2D:45:43:99:70:91:2A:35:BC:90:13:0D:56:5D:69:70:95:79:36
X509v3 Authority Key Identifier:
keyid:E1:A5:A1:7F:50:C1:35:B1:85:1C:EC:2C:76:B0:FD:70:F9:DC:C7:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4aWhf1DBNbGFHOwsdrD9cPncx54.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/f9f8fa-2988-445c-be94-913575c58f4a/1/4aWhf1DBNbGFHOwsdrD9cPncx54.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/82/f9f8fa-2988-445c-be94-913575c58f4a/1/4aWhf1DBNbGFHOwsdrD9cPncx54.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
99:91:e3:eb:3b:9b:18:17:c0:c9:89:08:14:bc:c8:73:ec:7a:
fb:5b:51:96:b1:0f:e0:86:e1:93:af:e6:d4:7c:3c:52:7c:32:
fc:ed:08:cc:c8:d5:a9:75:bb:3c:ef:1b:20:fa:44:2d:20:fe:
2f:12:21:f4:23:9f:91:d0:a5:46:ba:a8:21:ef:4f:f3:29:9e:
ed:4c:64:f3:af:c9:89:63:78:70:d0:bb:6d:49:dd:e5:d1:87:
ed:ee:64:a5:f8:f0:01:5c:c2:e5:69:9e:c3:9b:d7:12:91:ea:
17:4c:16:77:d7:11:66:9a:9d:80:b4:79:eb:6d:c2:6c:2d:91:
62:37:b1:c2:9d:93:ea:97:6d:79:94:9b:5a:46:50:2c:57:56:
34:dc:0b:31:7f:c1:50:5e:23:ba:0b:1a:21:94:51:89:1a:61:
1e:18:22:5d:ee:4e:0e:d9:ed:c9:a3:7f:c7:cf:60:d1:6a:d8:
2b:ee:9f:ff:87:54:93:3b:cb:da:24:3f:72:90:a8:a2:de:20:
cc:63:f4:e9:d6:e6:fb:85:a1:11:e7:9b:f9:1a:60:d6:d9:33:
57:19:fc:bc:27:6f:3e:f4:99:f2:e8:ff:93:4e:f3:f1:30:fe:
4c:34:e6:46:02:4e:9e:f8:e5:c2:26:51:12:0b:da:9f:5a:b1:
22:c3:03:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 10 22:46:45 2025 by rpki-client