Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/19bd8a-c6f1-42e2-8460-cdab19a3fdeb/1/4zTsOTRI2DvxUV9JZ6RICY5V-0M.mft
File: 4zTsOTRI2DvxUV9JZ6RICY5V-0M.mft (raw, json)
Hash identifier: 7ACjeDkMWbihazYp1DDaIfBciNAKTDh409NcHOg5uug=
Subject key identifier: AE:21:EE:33:A3:FC:E1:B3:F0:B2:CC:46:78:56:5F:3C:B6:A0:FD:B5
Authority key identifier: E3:34:EC:39:34:48:D8:3B:F1:51:5F:49:67:A4:48:09:8E:55:FB:43
Certificate issuer: /CN=e334ec393448d83bf1515f4967a448098e55fb43
Certificate serial: 019923D5F9C1CEF78BEB64A239C828AF25DD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4zTsOTRI2DvxUV9JZ6RICY5V-0M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/95/19bd8a-c6f1-42e2-8460-cdab19a3fdeb/1/4zTsOTRI2DvxUV9JZ6RICY5V-0M.mft
Manifest number: 1671
Signing time: Sun 07 Sep 2025 11:00:49 +0000
Manifest this update: Sun 07 Sep 2025 11:00:49 +0000
Manifest next update: Mon 08 Sep 2025 11:00:49 +0000
Files and hashes: 1: 3i7bDwmXfkGeboYerA9gz4okFig.roa (hash: fWhHLCsrKiodDbQX5MlZg8yk8IDQZFwIAhXPpQk2VnY=)
2: 4zTsOTRI2DvxUV9JZ6RICY5V-0M.crl (hash: dD7dk3HX6Q07NQt/1xD3SD3yEw9fPg/P6JkPt/MnsjU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/95/19bd8a-c6f1-42e2-8460-cdab19a3fdeb/1/4zTsOTRI2DvxUV9JZ6RICY5V-0M.crl
rsync://rpki.ripe.net/repository/DEFAULT/95/19bd8a-c6f1-42e2-8460-cdab19a3fdeb/1/4zTsOTRI2DvxUV9JZ6RICY5V-0M.mft
rsync://rpki.ripe.net/repository/DEFAULT/4zTsOTRI2DvxUV9JZ6RICY5V-0M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 07:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:23:d5:f9:c1:ce:f7:8b:eb:64:a2:39:c8:28:af:25:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e334ec393448d83bf1515f4967a448098e55fb43
Validity
Not Before: Sep 7 11:00:49 2025 GMT
Not After : Sep 8 11:00:49 2025 GMT
Subject: CN=ae21ee33a3fce1b3f0b2cc4678565f3cb6a0fdb5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:13:2c:e1:c7:e4:36:e0:e8:3f:26:90:4a:83:
52:83:9e:2a:ce:1e:17:eb:53:b1:68:65:03:af:c2:
7d:58:c4:d8:aa:fd:3d:90:37:22:c7:32:a7:16:92:
5e:ae:d6:b9:36:0a:57:c1:32:96:05:21:36:dd:24:
b8:2c:93:b2:b6:cd:46:0d:38:06:9a:e2:4e:3e:95:
86:d9:97:b8:8c:64:67:51:ae:68:b9:ca:17:97:31:
34:ae:2d:be:e1:2f:c1:5f:3d:d3:9f:e5:bd:0e:33:
dd:c3:15:eb:f7:ea:4d:06:91:0b:1d:de:a0:f8:b3:
c3:e2:10:7f:b7:4c:25:b7:16:20:c8:ce:13:84:5a:
37:24:2e:c5:2b:27:40:64:c7:75:46:de:b9:4a:d0:
9d:01:c4:89:e7:d5:c8:3e:42:ef:b5:80:df:f6:4b:
66:6a:41:4b:ac:cb:b4:c0:d0:a0:2c:61:49:83:96:
73:49:09:f5:b3:2e:81:87:26:b1:74:a5:49:a4:74:
ef:e4:4e:bb:bd:71:4f:6f:43:ad:d9:1f:3f:1e:8d:
33:ed:25:46:8d:9b:64:f1:b2:91:cc:f9:3a:8d:d6:
a6:00:86:95:d1:4a:dc:c2:75:e1:1e:23:32:92:32:
d5:ec:80:98:8e:92:aa:34:e9:33:62:d0:47:64:18:
3e:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:21:EE:33:A3:FC:E1:B3:F0:B2:CC:46:78:56:5F:3C:B6:A0:FD:B5
X509v3 Authority Key Identifier:
keyid:E3:34:EC:39:34:48:D8:3B:F1:51:5F:49:67:A4:48:09:8E:55:FB:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4zTsOTRI2DvxUV9JZ6RICY5V-0M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/19bd8a-c6f1-42e2-8460-cdab19a3fdeb/1/4zTsOTRI2DvxUV9JZ6RICY5V-0M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/95/19bd8a-c6f1-42e2-8460-cdab19a3fdeb/1/4zTsOTRI2DvxUV9JZ6RICY5V-0M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:c0:5e:40:1d:ca:45:32:65:55:e8:8d:76:35:0a:76:e5:38:
4e:8a:8e:ec:89:6b:45:15:da:29:6d:12:9e:e9:6d:84:2d:19:
48:e7:79:f0:13:4a:b7:64:9d:82:7b:9a:bd:f2:ed:47:86:ee:
65:21:e3:95:fe:ad:4a:e0:c2:35:40:b5:dc:b4:de:78:a3:f9:
96:be:f2:4d:99:58:68:c3:0f:ae:fa:f9:c4:35:2e:ff:1b:63:
df:f2:98:8a:d5:0e:fa:05:a0:0a:ee:fb:9d:37:83:d3:43:df:
6b:69:bd:e2:34:ad:6f:28:94:c5:5e:64:b4:99:76:5e:01:5e:
a7:e9:92:e7:21:12:8a:2e:96:6a:ee:73:ff:31:3c:1d:b4:fa:
5b:c7:72:16:4e:7e:a3:a2:c8:d9:1d:f1:3b:10:2f:c6:24:c4:
48:c8:cc:94:8a:c1:34:57:82:97:0c:93:71:14:96:4a:6a:56:
b7:0f:73:34:b2:43:f1:11:63:b5:40:92:54:2d:cd:80:6a:75:
65:ca:6c:72:48:bb:85:69:fe:f4:65:f7:bf:f7:e0:27:3c:78:
ea:77:bb:85:21:0c:a6:c3:e7:be:e0:ac:e9:26:f6:2d:b1:a1:
1e:1b:1e:92:19:2c:77:d6:e9:c5:a9:6a:12:c3:04:9c:38:25:
58:60:a0:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 14:47:43 2025 by rpki-client