Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/9b87d5-3b6b-426e-b3ce-3d0cd986190f/1/4Bqj7_R1sBC95BVPO9R0OnwLrlU.mft
File: 4Bqj7_R1sBC95BVPO9R0OnwLrlU.mft (raw, json)
Hash identifier: qY6x70FTpRH2xJ/7MnIuWDMAWX1LbhFqiuA6uNjRBrk=
Subject key identifier: D3:41:7C:E7:22:AE:DB:05:B0:FC:45:8A:7C:9A:66:24:DC:40:E0:64
Authority key identifier: E0:1A:A3:EF:F4:75:B0:10:BD:E4:15:4F:3B:D4:74:3A:7C:0B:AE:55
Certificate issuer: /CN=e01aa3eff475b010bde4154f3bd4743a7c0bae55
Certificate serial: 01992FDA7A7E2444D0DD0A4A8E71DB744DFD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4Bqj7_R1sBC95BVPO9R0OnwLrlU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/9b87d5-3b6b-426e-b3ce-3d0cd986190f/1/4Bqj7_R1sBC95BVPO9R0OnwLrlU.mft
Manifest number: 0AA5
Signing time: Tue 09 Sep 2025 19:01:11 +0000
Manifest this update: Tue 09 Sep 2025 19:01:11 +0000
Manifest next update: Wed 10 Sep 2025 19:01:11 +0000
Files and hashes: 1: 4Bqj7_R1sBC95BVPO9R0OnwLrlU.crl (hash: xKy+bOzYgPegMCPAAdq0MNzhVPwQWFQxeRIPqCyDLPg=)
2: p_9inuYDdp5y0a2pR7IT5FJWxkA.roa (hash: w2ZioVdUL3h+FykybnCF+ZnIIFFr6zWJMlYabfFURBc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/9b87d5-3b6b-426e-b3ce-3d0cd986190f/1/4Bqj7_R1sBC95BVPO9R0OnwLrlU.crl
rsync://rpki.ripe.net/repository/DEFAULT/c5/9b87d5-3b6b-426e-b3ce-3d0cd986190f/1/4Bqj7_R1sBC95BVPO9R0OnwLrlU.mft
rsync://rpki.ripe.net/repository/DEFAULT/4Bqj7_R1sBC95BVPO9R0OnwLrlU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 10 Sep 2025 17:00:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:2f:da:7a:7e:24:44:d0:dd:0a:4a:8e:71:db:74:4d:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e01aa3eff475b010bde4154f3bd4743a7c0bae55
Validity
Not Before: Sep 9 19:01:11 2025 GMT
Not After : Sep 10 19:01:11 2025 GMT
Subject: CN=d3417ce722aedb05b0fc458a7c9a6624dc40e064
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:03:d2:9f:d3:40:01:66:0a:40:02:0d:6d:9e:
72:85:a6:f7:d9:d9:9f:aa:a4:17:ff:b1:65:8f:3b:
04:c1:72:65:8e:2b:0a:84:3c:aa:fd:44:58:9e:bc:
4c:36:b2:85:b8:60:7d:d0:15:8c:6d:bf:08:59:8e:
df:af:90:67:f9:7b:ab:53:6a:7c:e4:23:b0:04:fd:
1b:d3:df:e6:5a:15:fa:6e:45:6e:f3:ac:5a:30:26:
76:70:f9:70:19:3e:e0:3f:94:f9:8c:00:ef:9b:f3:
08:cf:44:62:62:4d:c4:73:44:06:e9:f1:06:16:b0:
46:fc:b9:20:73:6c:28:80:33:05:a2:a5:94:c3:69:
29:2a:2e:8e:f2:87:a8:07:a0:0a:e1:85:8b:1d:82:
74:ac:92:cc:8c:2b:6b:3f:96:02:2d:9e:b0:77:6d:
a8:88:fd:8b:fe:77:ed:e1:f8:9b:cb:a1:63:82:3d:
31:0c:16:04:a5:55:32:e9:e1:90:dd:17:80:ad:c7:
b6:dd:63:c3:c6:8e:a4:aa:4c:0e:f7:ac:8a:f2:2c:
94:ef:ec:cb:d6:9a:80:55:09:9a:16:77:08:0e:43:
1b:30:71:8e:ad:55:ce:1b:d8:40:cf:8a:7a:27:b3:
14:4f:f2:1e:82:aa:bb:56:fd:d0:74:1e:25:70:99:
24:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:41:7C:E7:22:AE:DB:05:B0:FC:45:8A:7C:9A:66:24:DC:40:E0:64
X509v3 Authority Key Identifier:
keyid:E0:1A:A3:EF:F4:75:B0:10:BD:E4:15:4F:3B:D4:74:3A:7C:0B:AE:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4Bqj7_R1sBC95BVPO9R0OnwLrlU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/9b87d5-3b6b-426e-b3ce-3d0cd986190f/1/4Bqj7_R1sBC95BVPO9R0OnwLrlU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/9b87d5-3b6b-426e-b3ce-3d0cd986190f/1/4Bqj7_R1sBC95BVPO9R0OnwLrlU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:4c:c7:ec:9e:3c:b5:da:0a:01:8f:88:ea:38:0d:ed:f9:30:
0e:0a:98:57:5f:c8:ed:20:01:c6:5b:cd:16:67:a5:34:64:59:
c1:a3:19:f1:f0:c0:5b:07:34:1c:72:1f:aa:a3:d8:88:9a:1f:
08:8e:af:bc:55:24:83:41:01:78:05:b6:19:89:34:b1:c9:9d:
da:b4:c9:41:ab:07:44:81:24:40:1f:ae:55:ad:02:4d:7b:f9:
74:43:ee:a9:5e:52:0e:07:ce:a9:70:9e:9a:00:80:38:a0:34:
4d:62:1b:4a:8e:fe:25:9b:66:d1:c5:eb:e2:95:ad:22:6f:7e:
d8:60:1e:16:2b:bc:8c:bf:ac:3e:a7:e9:3a:36:31:b2:f4:e3:
63:89:7c:0e:e5:8c:b0:d2:54:82:e3:42:b7:49:c7:04:ac:9e:
77:4f:37:55:46:77:df:84:86:1b:4e:94:d7:e8:9e:1c:90:97:
96:4b:7f:53:2f:c3:dc:77:46:63:2e:57:20:9f:f9:ff:32:74:
dd:ff:32:0e:48:44:7b:3a:1f:0c:35:5a:fb:ac:16:93:c4:45:
c0:3b:28:8a:6b:ca:f5:de:a1:19:ed:45:9e:89:bb:51:23:3f:
bc:87:9b:15:76:d0:16:1b:34:d0:df:5c:09:ad:92:d2:fc:44:
e1:c7:24:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 9 20:37:58 2025 by rpki-client