Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/1750bd-47d6-4505-ab05-828197634976/1/4zgHQmp0h6CET99NelLw-5C9t9M.mft
File: 4zgHQmp0h6CET99NelLw-5C9t9M.mft (raw, json)
Hash identifier: 1X++vq8ltBgos/6AoP9VsORHnFw6Nc4+XReeCvn6HSo=
Subject key identifier: 76:17:B4:C0:D2:EE:42:0D:F9:8C:5D:2D:96:A1:87:F8:80:A9:53:A7
Authority key identifier: E3:38:07:42:6A:74:87:A0:84:4F:DF:4D:7A:52:F0:FB:90:BD:B7:D3
Certificate issuer: /CN=e33807426a7487a0844fdf4d7a52f0fb90bdb7d3
Certificate serial: 0199345B9883993D4A0AB78B5669FBB7B91E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4zgHQmp0h6CET99NelLw-5C9t9M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/1750bd-47d6-4505-ab05-828197634976/1/4zgHQmp0h6CET99NelLw-5C9t9M.mft
Manifest number: 154C
Signing time: Wed 10 Sep 2025 16:00:41 +0000
Manifest this update: Wed 10 Sep 2025 16:00:41 +0000
Manifest next update: Thu 11 Sep 2025 16:00:41 +0000
Files and hashes: 1: 4zgHQmp0h6CET99NelLw-5C9t9M.crl (hash: kqlBzfM2rWOdxtpL/KTNIRQLx8Kedg812UCwiVLH4Yw=)
2: M8fpAx6jpgG6MlSmE255nM2U54s.roa (hash: RD69vCeynoVt4KuZOJLoQcLLqCnDtkjvXD3NKIK92bk=)
3: mv_a-WXN9u1j2MpwExlmXt_l8JA.roa (hash: rF/9pNd0YOCzH1ms4AnrOsMwkemWNqGPF+0nwHKpIf8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/1750bd-47d6-4505-ab05-828197634976/1/4zgHQmp0h6CET99NelLw-5C9t9M.crl
rsync://rpki.ripe.net/repository/DEFAULT/e5/1750bd-47d6-4505-ab05-828197634976/1/4zgHQmp0h6CET99NelLw-5C9t9M.mft
rsync://rpki.ripe.net/repository/DEFAULT/4zgHQmp0h6CET99NelLw-5C9t9M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 11 Sep 2025 16:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:34:5b:98:83:99:3d:4a:0a:b7:8b:56:69:fb:b7:b9:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e33807426a7487a0844fdf4d7a52f0fb90bdb7d3
Validity
Not Before: Sep 10 16:00:41 2025 GMT
Not After : Sep 11 16:00:41 2025 GMT
Subject: CN=7617b4c0d2ee420df98c5d2d96a187f880a953a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:ce:d4:91:79:10:1e:22:ed:82:30:d4:29:a1:
3d:fa:0b:52:18:f6:52:89:a2:67:00:e0:c2:9f:12:
f1:4c:ca:fb:8e:4b:9d:2a:04:a7:e6:f5:f7:15:96:
30:8d:46:4d:48:63:4e:d6:90:b6:2a:cb:c3:34:e5:
ad:5d:75:ce:e4:7a:db:2c:67:c1:d4:63:11:85:6a:
f1:b9:b7:26:25:f7:5b:b0:de:12:12:1e:61:5e:0f:
4e:d8:b0:c9:da:a0:96:70:9d:ee:14:48:64:e3:b9:
a3:61:6a:ad:2a:d9:76:4c:bc:c0:d7:be:97:ab:96:
8e:e2:cf:1b:05:fd:7c:80:fa:f6:90:10:bc:91:86:
7c:34:d8:f4:5b:e1:a5:db:fe:ad:84:c4:61:c7:10:
7d:fa:5d:78:f1:3c:85:2f:94:3f:8f:18:c8:04:f4:
03:8e:ac:8d:a7:17:23:28:1b:4e:bf:b5:6a:03:7c:
62:8f:98:a9:15:c1:5f:bb:9e:30:e9:76:83:15:5e:
6c:f7:5b:1b:e2:e2:1a:fc:77:a8:59:12:a6:45:24:
58:75:c5:12:0e:4f:9b:29:bd:07:75:99:f6:75:2c:
f6:65:01:04:bd:25:62:70:b4:b2:37:d0:38:0f:92:
a8:7c:06:d8:a3:54:a3:2b:c8:0b:63:da:42:b5:ef:
56:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:17:B4:C0:D2:EE:42:0D:F9:8C:5D:2D:96:A1:87:F8:80:A9:53:A7
X509v3 Authority Key Identifier:
keyid:E3:38:07:42:6A:74:87:A0:84:4F:DF:4D:7A:52:F0:FB:90:BD:B7:D3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4zgHQmp0h6CET99NelLw-5C9t9M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/1750bd-47d6-4505-ab05-828197634976/1/4zgHQmp0h6CET99NelLw-5C9t9M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/1750bd-47d6-4505-ab05-828197634976/1/4zgHQmp0h6CET99NelLw-5C9t9M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
18:e6:d4:68:42:f9:7d:a8:86:d8:c6:cf:fc:34:8a:6e:f8:77:
25:e9:56:f8:9e:d3:82:5d:a7:a2:86:d9:f7:98:df:51:3d:c5:
cd:14:99:a0:62:80:39:c4:a9:90:03:ae:72:ef:1b:76:b3:a4:
78:5e:f2:6a:c6:66:ab:72:85:14:eb:c3:7d:a5:c4:f0:a2:9a:
a7:8d:1e:4a:21:49:3c:4c:bd:9f:8a:22:fa:83:26:49:22:ef:
a6:ee:9c:2c:da:0f:4f:be:98:11:0a:df:67:9d:70:1f:27:60:
08:a1:e0:cc:b2:ca:1c:83:c1:8b:16:03:e6:02:5c:08:ff:19:
a5:bd:79:b9:25:3d:92:e0:19:d7:66:2e:c4:2a:d5:32:96:64:
b6:01:a1:fd:cd:be:7f:81:05:7b:6e:f6:13:2e:03:18:cc:1d:
b4:84:5d:90:6d:e1:66:61:be:f5:d3:63:35:0c:83:76:4b:4a:
a6:5c:69:67:36:ae:f6:0b:fc:04:6d:bb:2f:c8:f7:72:ce:3f:
86:a4:e4:83:56:80:e9:f3:4b:82:4e:86:9e:0b:27:52:14:00:
ba:38:df:ec:90:04:e6:0f:9e:47:d6:a5:a9:b7:61:52:29:8b:
e7:ca:ce:97:ed:0f:c4:88:e3:33:ef:ed:95:f6:cc:b6:52:52:
50:de:17:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 10 23:00:48 2025 by rpki-client