Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/ee42bb-1e49-4c21-a4d6-ec287e1d37e5/1/4xYxgkfSEYQfliCpoRMAEN20hvI.mft
File: 4xYxgkfSEYQfliCpoRMAEN20hvI.mft (raw, json)
Hash identifier: Lf7PFyj2tvaRSra9YOZ/8XRUuscMF/mHkXyxUukTCEg=
Subject key identifier: 4D:49:89:63:F5:1F:0D:AD:C0:C8:4C:52:BD:2B:76:15:EC:FF:5A:30
Authority key identifier: E3:16:31:82:47:D2:11:84:1F:96:20:A9:A1:13:00:10:DD:B4:86:F2
Certificate issuer: /CN=e316318247d211841f9620a9a1130010ddb486f2
Certificate serial: 01991BE63B4CF9ECCC3368727D3BC8E73826
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4xYxgkfSEYQfliCpoRMAEN20hvI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/ee42bb-1e49-4c21-a4d6-ec287e1d37e5/1/4xYxgkfSEYQfliCpoRMAEN20hvI.mft
Manifest number: 0E8E
Signing time: Fri 05 Sep 2025 22:01:37 +0000
Manifest this update: Fri 05 Sep 2025 22:01:37 +0000
Manifest next update: Sat 06 Sep 2025 22:01:37 +0000
Files and hashes: 1: 4xYxgkfSEYQfliCpoRMAEN20hvI.crl (hash: w40Ao9QvN6atuSOQekm+YcZDrw2pYzXf/ON8/YN7TkI=)
2: OPoJJXIKKrWhudAq1xiuARrS1H4.roa (hash: sQTnuyk1NVfltmH/ouY0am8WUGDv6HXMop3KtZ2xXJo=)
3: Y0KH9jUtOdTdVzzVwvfGtDjZxIU.roa (hash: ECg0/VJoY6yBxbdarx1o6Xry+PkavLOkwZaMHO8CBps=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/ee42bb-1e49-4c21-a4d6-ec287e1d37e5/1/4xYxgkfSEYQfliCpoRMAEN20hvI.crl
rsync://rpki.ripe.net/repository/DEFAULT/99/ee42bb-1e49-4c21-a4d6-ec287e1d37e5/1/4xYxgkfSEYQfliCpoRMAEN20hvI.mft
rsync://rpki.ripe.net/repository/DEFAULT/4xYxgkfSEYQfliCpoRMAEN20hvI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 06 Sep 2025 17:17:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:1b:e6:3b:4c:f9:ec:cc:33:68:72:7d:3b:c8:e7:38:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e316318247d211841f9620a9a1130010ddb486f2
Validity
Not Before: Sep 5 22:01:37 2025 GMT
Not After : Sep 6 22:01:37 2025 GMT
Subject: CN=4d498963f51f0dadc0c84c52bd2b7615ecff5a30
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:be:5a:7d:e9:04:d1:9d:c2:ee:c1:c0:7f:9d:
1d:43:13:5a:e4:68:08:36:28:65:74:bf:43:7c:8e:
7d:b9:a3:c2:ad:c6:b8:4b:6a:da:d1:73:4a:dc:ea:
00:6f:f9:ea:0c:8d:01:1f:4e:2c:fd:f4:32:f3:d5:
d7:cd:72:98:08:ac:53:9f:b9:64:6d:71:05:d6:9f:
9a:38:37:c1:01:e7:7e:7b:7e:f1:73:c0:9a:c9:14:
d9:e7:f4:6c:68:63:6d:d0:7d:d1:fe:de:39:56:e0:
8c:c7:05:61:f5:4a:b2:90:e2:db:df:c6:fd:db:40:
7d:12:97:23:4d:d1:dd:4a:1e:4f:10:c2:a7:b2:c9:
5c:e2:c0:08:36:b0:c7:2d:2b:c6:61:e9:ba:cc:1c:
e0:85:96:25:81:60:df:c4:10:9a:1c:37:29:31:77:
fa:a1:b3:37:c5:1b:d0:35:94:24:3a:c2:db:1d:38:
1f:c5:9f:1c:aa:f2:df:c3:ad:b8:f8:5b:d7:28:d1:
5f:7f:d4:ba:f3:b4:3e:a3:09:24:63:84:4d:7c:f0:
07:b7:e3:88:18:b7:ca:14:02:d2:db:f9:6a:00:ba:
ef:cd:5b:e5:3b:cb:7a:9c:87:16:bb:bc:46:a7:5f:
7a:17:af:b6:25:4c:81:a4:38:4b:84:7a:05:ae:bb:
49:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:49:89:63:F5:1F:0D:AD:C0:C8:4C:52:BD:2B:76:15:EC:FF:5A:30
X509v3 Authority Key Identifier:
keyid:E3:16:31:82:47:D2:11:84:1F:96:20:A9:A1:13:00:10:DD:B4:86:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4xYxgkfSEYQfliCpoRMAEN20hvI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/ee42bb-1e49-4c21-a4d6-ec287e1d37e5/1/4xYxgkfSEYQfliCpoRMAEN20hvI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/ee42bb-1e49-4c21-a4d6-ec287e1d37e5/1/4xYxgkfSEYQfliCpoRMAEN20hvI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:de:fe:e9:20:d1:b0:fb:e7:a9:8a:5e:35:ec:09:0e:50:7a:
ae:02:bc:15:66:41:0e:5c:21:c3:46:5b:f4:ab:99:bf:97:7f:
d9:b4:3a:52:12:b5:f9:7d:58:87:ff:8c:3c:4a:42:92:e3:64:
5c:f7:fa:cb:ae:1e:19:f9:dc:ec:01:6d:0b:eb:39:75:af:fb:
d3:3c:e9:62:ab:8d:66:2c:70:57:af:e0:f6:9f:6d:35:c5:5b:
53:27:f1:44:77:5f:aa:80:ab:6c:a4:df:5b:12:2d:36:a9:e0:
f2:07:25:17:0b:60:0c:7d:db:df:68:9f:5b:68:43:5a:1f:50:
d9:81:d8:bc:50:2a:25:73:9c:77:00:21:5a:fc:ba:2d:6c:a6:
39:0d:13:ce:c8:7d:9a:51:66:38:93:cc:79:17:f7:46:9f:33:
71:b7:37:41:c4:91:08:d6:1c:c3:18:43:31:97:9c:0a:ed:fa:
9a:ea:15:bb:2b:25:7f:ba:49:1a:4d:2c:61:4c:79:c9:24:d7:
2f:20:b9:80:65:56:37:01:b2:23:38:78:85:ed:89:86:1c:50:
90:53:c1:b7:b0:79:03:f1:9e:3b:79:4d:26:ca:de:c0:23:e9:
6c:76:ec:65:93:c8:c4:24:cc:35:f4:27:b3:0b:c4:d1:7a:50:
91:0c:4e:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 6 02:48:07 2025 by rpki-client