Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/c8900c-f3d2-457c-b38b-6d7650ca3d04/1/4oqGzL9We9migv3fdfC39VQiItI.mft
File: 4oqGzL9We9migv3fdfC39VQiItI.mft (raw, json)
Hash identifier: oFncUKB1N76MPI5q40lWtI8qzIXYzdpg83kcm9jX3FM=
Subject key identifier: 2F:41:21:10:4C:C0:D8:41:BA:EB:A7:7F:C9:32:68:C4:14:BB:6C:36
Authority key identifier: E2:8A:86:CC:BF:56:7B:D9:A2:82:FD:DF:75:F0:B7:F5:54:22:22:D2
Certificate issuer: /CN=e28a86ccbf567bd9a282fddf75f0b7f5542222d2
Certificate serial: 0198654A769AA449373BE83EDD2170AD4F4C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4oqGzL9We9migv3fdfC39VQiItI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/c8900c-f3d2-457c-b38b-6d7650ca3d04/1/4oqGzL9We9migv3fdfC39VQiItI.mft
Manifest number: 05C5
Signing time: Fri 01 Aug 2025 11:00:35 +0000
Manifest this update: Fri 01 Aug 2025 11:00:35 +0000
Manifest next update: Sat 02 Aug 2025 11:00:35 +0000
Files and hashes: 1: 4oqGzL9We9migv3fdfC39VQiItI.crl (hash: 2CBhK0CmvLhNylXsaifeCqJKCUvTp2P5tGWl5icEqKA=)
2: YqAFoc5kTd7Z4_KKDQIoEbzTXXs.roa (hash: 5bYNmgtpiY7zEyVHWvNikpnw6RjJjGyTau2g1VZIDwA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/c8900c-f3d2-457c-b38b-6d7650ca3d04/1/4oqGzL9We9migv3fdfC39VQiItI.crl
rsync://rpki.ripe.net/repository/DEFAULT/a3/c8900c-f3d2-457c-b38b-6d7650ca3d04/1/4oqGzL9We9migv3fdfC39VQiItI.mft
rsync://rpki.ripe.net/repository/DEFAULT/4oqGzL9We9migv3fdfC39VQiItI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 02 Aug 2025 11:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:65:4a:76:9a:a4:49:37:3b:e8:3e:dd:21:70:ad:4f:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e28a86ccbf567bd9a282fddf75f0b7f5542222d2
Validity
Not Before: Aug 1 11:00:35 2025 GMT
Not After : Aug 2 11:00:35 2025 GMT
Subject: CN=2f4121104cc0d841baeba77fc93268c414bb6c36
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:85:23:7a:ea:25:b7:0a:e2:de:b2:2c:15:5f:
0f:3c:8e:5b:d0:91:9f:27:55:00:93:92:b6:98:1a:
7b:2e:65:88:f4:f1:d7:c9:f3:1d:dc:11:3f:74:c5:
b8:fb:d1:1b:33:6c:9d:6a:75:97:eb:c6:07:0d:e6:
71:dd:04:a9:b0:5a:2b:a8:1e:79:c2:ad:92:0d:33:
bf:4f:d9:59:14:cf:9f:11:e4:ce:c5:fb:cd:0b:a7:
d1:cd:f0:e0:10:43:5d:4d:ce:d1:51:7c:8c:15:30:
da:81:5c:e4:aa:40:63:33:0a:b5:05:87:eb:ec:b3:
56:75:80:ca:36:dc:c4:1d:da:6a:cc:7b:ab:0c:c8:
db:36:71:96:0e:e6:d8:68:26:cb:b6:81:82:33:07:
bd:22:79:d0:35:85:09:9e:7d:db:36:b5:bc:a3:1e:
22:99:7f:fe:90:66:9e:d5:5d:23:74:7b:68:3d:83:
6f:f0:c9:d6:50:91:e8:df:30:77:ef:a7:4e:fc:ef:
da:5d:e3:d6:ce:4e:b6:f5:a5:7a:cb:77:cd:d1:1f:
a6:f0:5a:43:7c:1c:e5:88:55:1b:99:9e:21:e0:e2:
98:b7:96:a9:40:17:b7:12:48:7a:57:b2:bb:e6:29:
7e:09:46:98:7f:0f:c6:de:07:97:43:be:5c:89:77:
98:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:41:21:10:4C:C0:D8:41:BA:EB:A7:7F:C9:32:68:C4:14:BB:6C:36
X509v3 Authority Key Identifier:
keyid:E2:8A:86:CC:BF:56:7B:D9:A2:82:FD:DF:75:F0:B7:F5:54:22:22:D2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4oqGzL9We9migv3fdfC39VQiItI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/c8900c-f3d2-457c-b38b-6d7650ca3d04/1/4oqGzL9We9migv3fdfC39VQiItI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/c8900c-f3d2-457c-b38b-6d7650ca3d04/1/4oqGzL9We9migv3fdfC39VQiItI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:41:d7:34:03:fe:c1:0e:69:8b:c7:58:51:a7:40:2f:94:1b:
c5:8f:cf:c3:48:c3:ec:67:88:d3:6b:c2:1d:7f:92:af:1b:00:
85:9d:57:36:63:f5:81:16:7b:8e:b4:bd:62:b0:6a:c6:e8:0d:
84:85:91:b1:2c:52:ce:60:0f:5d:a8:08:c7:c5:65:1b:31:3e:
0e:a6:63:a2:39:d8:df:27:1a:dc:5c:17:22:81:6e:65:14:ee:
73:50:f2:8c:c0:a6:aa:b1:ae:3c:1f:e2:16:f3:72:2e:c8:89:
69:1c:e8:52:d5:86:d2:3d:e2:c1:24:ac:d1:56:a3:5c:6e:ba:
37:23:68:ba:b7:8c:ff:56:a3:f5:01:77:0a:1b:80:0f:60:cd:
8d:8f:4d:a8:b1:56:11:03:54:62:8a:b9:20:ec:fe:a3:19:96:
98:ac:8d:ff:4e:73:17:1f:98:d0:fe:8c:6f:5e:36:77:e3:21:
c2:68:f7:ef:88:60:c6:66:26:ab:11:94:d6:b5:ef:8d:cc:21:
2d:5c:3c:24:70:ab:ac:e7:bc:17:47:72:08:05:3b:95:73:21:
07:ad:d8:d3:7d:d8:8b:0c:9d:63:98:15:32:e0:53:a8:b9:c1:
6c:87:4a:6b:60:a3:d7:11:31:04:3d:66:6d:c6:66:70:68:cc:
9e:dd:db:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 1 18:09:53 2025 by rpki-client