Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/130fff-97e3-4ac0-bdcd-5fdc87e6d2a0/1/4XoaYiSN-HkTPAc61WKtA6K5L9w.mft
File: 4XoaYiSN-HkTPAc61WKtA6K5L9w.mft (raw, json)
Hash identifier: CWJyC7B54KRASGHafW1BphNnM97/rXIAUFzjZQ/glj8=
Subject key identifier: EB:C5:F4:E0:DC:4C:D8:3F:D5:50:1F:DD:E1:A1:04:79:53:63:3F:3A
Authority key identifier: E1:7A:1A:62:24:8D:F8:79:13:3C:07:3A:D5:62:AD:03:A2:B9:2F:DC
Certificate issuer: /CN=e17a1a62248df879133c073ad562ad03a2b92fdc
Certificate serial: 01993123769E67620E1D8D1431997D8C8BA4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4XoaYiSN-HkTPAc61WKtA6K5L9w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/130fff-97e3-4ac0-bdcd-5fdc87e6d2a0/1/4XoaYiSN-HkTPAc61WKtA6K5L9w.mft
Manifest number: 08E0
Signing time: Wed 10 Sep 2025 01:00:31 +0000
Manifest this update: Wed 10 Sep 2025 01:00:31 +0000
Manifest next update: Thu 11 Sep 2025 01:00:31 +0000
Files and hashes: 1: 4XoaYiSN-HkTPAc61WKtA6K5L9w.crl (hash: WzE/YxQVvSabi5w8lvgdyi/69IHukQh1Dk0I2b0ha1M=)
2: _ecSdeBMKXEKm7Pk8dXVwJd7vU0.roa (hash: CVsEd1l4ktAB6C0fXHQFN4p7fWEDkI6je8kKrze6YQo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/130fff-97e3-4ac0-bdcd-5fdc87e6d2a0/1/4XoaYiSN-HkTPAc61WKtA6K5L9w.crl
rsync://rpki.ripe.net/repository/DEFAULT/ab/130fff-97e3-4ac0-bdcd-5fdc87e6d2a0/1/4XoaYiSN-HkTPAc61WKtA6K5L9w.mft
rsync://rpki.ripe.net/repository/DEFAULT/4XoaYiSN-HkTPAc61WKtA6K5L9w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 10 Sep 2025 21:45:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:31:23:76:9e:67:62:0e:1d:8d:14:31:99:7d:8c:8b:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e17a1a62248df879133c073ad562ad03a2b92fdc
Validity
Not Before: Sep 10 01:00:31 2025 GMT
Not After : Sep 11 01:00:31 2025 GMT
Subject: CN=ebc5f4e0dc4cd83fd5501fdde1a1047953633f3a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:14:99:83:64:3b:12:22:a8:c2:42:3d:99:0a:
a3:d7:ef:13:76:44:a5:73:33:97:bf:21:fc:ce:eb:
a6:8f:06:f3:00:93:8c:d8:c3:c0:63:4b:ac:06:6d:
50:9a:21:d5:80:81:ee:94:ac:29:35:31:cd:41:9d:
46:45:39:4e:f6:87:e3:09:dd:4c:09:57:36:10:f4:
e1:f7:68:0f:c5:0d:d3:2b:2c:b5:40:1a:5b:13:91:
30:50:f6:af:26:f2:4b:91:4d:83:6a:74:5e:25:71:
21:31:6c:88:1f:c7:c7:21:68:d5:4b:66:bc:a2:3e:
f6:1b:27:bf:e7:7a:ff:32:d4:92:d1:fc:f6:5d:c9:
b9:98:57:f8:c9:37:7e:a9:ef:12:05:37:e0:02:c4:
79:56:ae:2d:10:95:c9:89:f9:96:a0:4d:62:80:c9:
c2:d8:24:82:52:99:07:81:35:62:ec:bf:8b:88:d0:
e9:07:8a:8b:6c:1c:6d:c0:21:4d:4a:04:3e:c4:0a:
95:31:76:06:31:dd:68:c8:2a:8e:a7:6b:a5:46:72:
b5:d8:56:98:34:33:57:cd:9d:8f:58:59:be:b9:99:
fa:aa:be:20:91:6f:66:d7:8c:37:93:b6:88:29:a1:
3c:61:e4:64:7e:1a:52:82:e8:fc:cb:fc:f5:c7:6a:
46:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:C5:F4:E0:DC:4C:D8:3F:D5:50:1F:DD:E1:A1:04:79:53:63:3F:3A
X509v3 Authority Key Identifier:
keyid:E1:7A:1A:62:24:8D:F8:79:13:3C:07:3A:D5:62:AD:03:A2:B9:2F:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4XoaYiSN-HkTPAc61WKtA6K5L9w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/130fff-97e3-4ac0-bdcd-5fdc87e6d2a0/1/4XoaYiSN-HkTPAc61WKtA6K5L9w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/130fff-97e3-4ac0-bdcd-5fdc87e6d2a0/1/4XoaYiSN-HkTPAc61WKtA6K5L9w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:9e:bf:21:2c:0b:87:85:a7:17:cb:8a:38:47:6a:4c:54:22:
19:10:16:a7:4e:52:f7:9c:39:e8:59:92:1f:d9:4b:bb:14:6c:
f6:17:8b:8f:1b:10:88:e2:60:49:60:94:b0:d3:ff:7d:af:c4:
f6:b4:3a:c6:23:12:4e:b6:b9:f7:88:88:1e:e2:1c:ed:5c:9b:
e0:57:ba:94:cc:a9:93:a5:ca:43:8f:02:b7:17:17:43:4e:d3:
ce:89:36:45:ca:53:b4:e3:7c:78:48:bb:1d:c0:f2:05:96:1e:
1d:46:9e:de:c8:99:3b:6c:8e:ec:57:36:cc:2c:5f:6a:ce:0b:
38:eb:74:f4:4c:2f:ae:1e:f5:13:11:ff:c9:87:9d:a4:5d:67:
5c:5a:af:80:35:e9:48:0b:1e:e6:3d:5f:50:02:25:b8:6b:48:
a8:c5:14:69:6a:09:57:7c:46:ac:02:88:88:89:06:ee:e1:41:
0f:6e:00:05:a1:4a:27:8a:22:d0:60:64:97:58:6d:95:fe:15:
af:c4:28:1e:ac:f7:a8:b5:21:12:a0:e0:2b:f1:ec:66:50:3a:
87:b9:66:cb:ec:9d:fa:c1:06:64:6c:6c:da:1a:a8:97:2d:1d:
b8:4b:ea:76:61:3e:0e:c3:40:1d:a1:51:cc:57:f8:46:a6:61:
9b:d6:9a:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 10 03:36:51 2025 by rpki-client