Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/11af42-d3ed-43cd-8274-742dc0c970c0/1/4crcikIcHyLx4pBMz9u87F2-GxE.mft
File: 4crcikIcHyLx4pBMz9u87F2-GxE.mft (raw, json)
Hash identifier: h/F9LgMeFmqEKWbzFRntM9+N+Qs4/IO33GaLbBKo5F0=
Subject key identifier: 4D:2C:0C:69:9E:A0:8D:A2:73:E9:24:F8:79:E9:21:E6:19:BB:73:10
Authority key identifier: E1:CA:DC:8A:42:1C:1F:22:F1:E2:90:4C:CF:DB:BC:EC:5D:BE:1B:11
Certificate issuer: /CN=e1cadc8a421c1f22f1e2904ccfdbbcec5dbe1b11
Certificate serial: 019921B0CE416003DF59E8BB2A5630104350
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4crcikIcHyLx4pBMz9u87F2-GxE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/11af42-d3ed-43cd-8274-742dc0c970c0/1/4crcikIcHyLx4pBMz9u87F2-GxE.mft
Manifest number: 1678
Signing time: Sun 07 Sep 2025 01:00:59 +0000
Manifest this update: Sun 07 Sep 2025 01:00:59 +0000
Manifest next update: Mon 08 Sep 2025 01:00:59 +0000
Files and hashes: 1: 4crcikIcHyLx4pBMz9u87F2-GxE.crl (hash: 9ZdSJsMdTK/n9NlL1XKJEBnx3WOkB05T3xb1r1EQEws=)
2: K9PLN0Mx9KSVfAUc7Qjw_86sv3Y.roa (hash: nvtEhmdyAuZ8hz+uRdNqZ/FXffGTJmzBafh4IY6I77s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/11af42-d3ed-43cd-8274-742dc0c970c0/1/4crcikIcHyLx4pBMz9u87F2-GxE.crl
rsync://rpki.ripe.net/repository/DEFAULT/c2/11af42-d3ed-43cd-8274-742dc0c970c0/1/4crcikIcHyLx4pBMz9u87F2-GxE.mft
rsync://rpki.ripe.net/repository/DEFAULT/4crcikIcHyLx4pBMz9u87F2-GxE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 01:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:21:b0:ce:41:60:03:df:59:e8:bb:2a:56:30:10:43:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e1cadc8a421c1f22f1e2904ccfdbbcec5dbe1b11
Validity
Not Before: Sep 7 01:00:59 2025 GMT
Not After : Sep 8 01:00:59 2025 GMT
Subject: CN=4d2c0c699ea08da273e924f879e921e619bb7310
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:3f:67:05:89:0c:bb:09:b9:8c:81:3c:03:45:
70:05:39:fc:6b:c4:70:ee:8d:d9:68:dc:23:42:3b:
d7:6f:09:90:dc:ef:0f:d6:8b:f3:80:eb:9b:b3:1d:
6d:21:2c:cb:01:ce:bc:0c:4e:cb:56:f0:ce:3a:b2:
7c:85:a7:a7:ff:05:d9:00:6b:da:2c:49:e9:70:d4:
58:67:8d:49:c5:15:4f:a6:52:82:3a:29:74:9c:13:
39:5c:66:af:a0:03:da:c0:c5:3d:ee:75:b3:fb:78:
8c:73:01:5b:65:43:a0:35:56:30:4d:e6:d9:09:64:
dc:69:30:c2:ab:78:b9:1e:e8:74:e0:44:d7:a1:9f:
cd:38:96:16:1e:ae:bd:9e:88:6b:25:55:a8:e8:44:
8c:ce:d0:c2:08:1b:fb:55:df:87:49:34:77:f4:5d:
b3:1d:06:cd:a7:05:ba:8d:6d:75:41:0f:bf:b0:26:
2f:d7:e4:f8:e1:61:7f:02:7c:6b:0c:4e:f7:b8:74:
3c:2a:96:90:65:29:7f:9a:dd:a1:a8:35:92:f9:e2:
8b:5c:25:61:a8:a2:f9:cf:a1:10:94:f8:85:89:be:
f9:ec:29:b2:e3:e9:61:93:78:80:7b:6e:5e:26:5a:
2a:65:1d:64:2c:29:f2:3b:95:78:a0:bf:bd:60:f2:
55:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:2C:0C:69:9E:A0:8D:A2:73:E9:24:F8:79:E9:21:E6:19:BB:73:10
X509v3 Authority Key Identifier:
keyid:E1:CA:DC:8A:42:1C:1F:22:F1:E2:90:4C:CF:DB:BC:EC:5D:BE:1B:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4crcikIcHyLx4pBMz9u87F2-GxE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/11af42-d3ed-43cd-8274-742dc0c970c0/1/4crcikIcHyLx4pBMz9u87F2-GxE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/11af42-d3ed-43cd-8274-742dc0c970c0/1/4crcikIcHyLx4pBMz9u87F2-GxE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a5:30:6f:c2:eb:ad:98:9f:54:c7:84:ab:fd:70:5c:d2:45:14:
aa:e6:0a:2f:87:2f:6e:b3:96:1c:f1:e4:b1:39:b8:ed:95:d7:
61:e0:4d:e3:e8:02:38:93:c8:bf:07:f5:26:9e:be:00:3f:3f:
6b:48:2f:b5:1b:3c:11:4d:2f:9d:76:62:e1:7f:69:23:8c:65:
36:55:b5:47:e4:ea:b3:4d:32:76:19:4c:22:67:c5:8d:14:2e:
81:83:f8:7a:73:97:5e:f5:c4:eb:29:cf:d4:2a:1c:2b:48:b0:
4f:8b:2a:69:c6:0d:24:c8:2b:74:a3:dd:6f:6c:6e:84:05:32:
60:9b:6f:c9:58:fd:4d:14:d1:20:71:d8:b6:46:45:21:f2:f5:
09:ea:0e:b2:b2:62:f0:49:59:00:d8:08:3c:3e:b3:4f:29:d1:
a8:98:28:3e:43:54:87:f3:58:54:9c:9f:ea:cb:dd:e3:42:45:
7a:29:0b:35:bf:b7:31:3e:fa:35:75:46:d1:22:19:a6:1f:5d:
8b:a0:1b:ef:35:1e:87:a2:30:a2:7a:7e:5c:1a:f0:1d:60:80:
d1:23:c4:67:9f:cf:23:55:1c:b1:dc:f2:33:18:39:d3:82:ff:
13:22:44:2f:3b:c4:fe:93:c7:a2:17:ee:5f:e0:78:fd:3e:17:
19:94:0d:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 10:13:34 2025 by rpki-client