Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/7e3025-8caf-402c-b54f-cbb8cfee6e3c/1/4kLCt011daIop-ZPBAbzo5fHrlY.mft
File: 4kLCt011daIop-ZPBAbzo5fHrlY.mft (raw, json)
Hash identifier: RT6ec4pDIIHzERftmh57CnIjjMEdvwLuS9Ax0gvGOVQ=
Subject key identifier: E5:DD:A9:B2:D6:01:53:CA:82:22:16:A4:37:0D:6F:30:06:D1:A9:09
Authority key identifier: E2:42:C2:B7:4D:75:75:A2:28:A7:E6:4F:04:06:F3:A3:97:C7:AE:56
Certificate issuer: /CN=e242c2b74d7575a228a7e64f0406f3a397c7ae56
Certificate serial: 019922553B856AB3DF623C64ACB0C6A23B5D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4kLCt011daIop-ZPBAbzo5fHrlY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/7e3025-8caf-402c-b54f-cbb8cfee6e3c/1/4kLCt011daIop-ZPBAbzo5fHrlY.mft
Manifest number: 0A33
Signing time: Sun 07 Sep 2025 04:00:35 +0000
Manifest this update: Sun 07 Sep 2025 04:00:35 +0000
Manifest next update: Mon 08 Sep 2025 04:00:35 +0000
Files and hashes: 1: 4kLCt011daIop-ZPBAbzo5fHrlY.crl (hash: W1V5iAlodvQv8PlasmFTO3c4yxWcfxERSa9jwQz6f0o=)
2: tqH_QlpRHC3I-MGoNxLkAHQ-nF8.roa (hash: NbmtGcVLSkgpCEX2NZ9d9iO41gK+6pDcIvg0Zs3pCA8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/7e3025-8caf-402c-b54f-cbb8cfee6e3c/1/4kLCt011daIop-ZPBAbzo5fHrlY.crl
rsync://rpki.ripe.net/repository/DEFAULT/e5/7e3025-8caf-402c-b54f-cbb8cfee6e3c/1/4kLCt011daIop-ZPBAbzo5fHrlY.mft
rsync://rpki.ripe.net/repository/DEFAULT/4kLCt011daIop-ZPBAbzo5fHrlY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 04:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:55:3b:85:6a:b3:df:62:3c:64:ac:b0:c6:a2:3b:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e242c2b74d7575a228a7e64f0406f3a397c7ae56
Validity
Not Before: Sep 7 04:00:35 2025 GMT
Not After : Sep 8 04:00:35 2025 GMT
Subject: CN=e5dda9b2d60153ca822216a4370d6f3006d1a909
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:53:08:78:99:8d:57:88:0f:8f:9d:a3:56:15:
a2:7d:39:63:c4:5c:c5:41:89:d0:9d:84:fa:91:70:
e7:e7:64:2d:fe:67:96:94:ca:b1:ef:3f:1b:4a:40:
de:87:d2:dc:60:96:46:67:8e:24:1b:81:aa:2d:38:
04:a8:1b:4b:58:07:b6:b9:e2:27:d8:1c:77:c7:bf:
e3:ff:b7:eb:cc:33:ec:dd:9e:a5:fd:23:5c:e0:09:
4a:3d:1e:86:c4:fb:f4:a5:64:2c:0c:13:16:f4:19:
30:76:f8:42:6e:e6:4d:4b:74:3f:63:ce:ab:7a:3c:
8f:46:9e:84:87:67:f0:9e:cd:a7:77:36:b7:04:bb:
cc:43:d5:6f:b8:ca:28:aa:a9:f0:64:25:b0:b4:89:
1e:c7:b3:89:04:6b:d6:e4:61:b4:5d:16:b2:36:8c:
3c:14:ed:81:64:81:18:56:b2:eb:96:b3:3e:7d:1d:
e7:5a:7c:7d:53:1f:ac:1d:09:e7:67:d3:d6:57:22:
d3:f6:9d:57:cb:61:7a:35:e3:36:8a:29:ae:66:08:
c4:e8:65:14:3a:4a:f2:50:57:18:a5:5a:58:18:e9:
90:ab:87:7d:51:1a:78:88:17:2f:f9:2b:df:f7:d6:
7c:b0:07:ed:0b:35:62:02:7c:be:ef:72:7d:e4:b6:
48:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:DD:A9:B2:D6:01:53:CA:82:22:16:A4:37:0D:6F:30:06:D1:A9:09
X509v3 Authority Key Identifier:
keyid:E2:42:C2:B7:4D:75:75:A2:28:A7:E6:4F:04:06:F3:A3:97:C7:AE:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4kLCt011daIop-ZPBAbzo5fHrlY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/7e3025-8caf-402c-b54f-cbb8cfee6e3c/1/4kLCt011daIop-ZPBAbzo5fHrlY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/7e3025-8caf-402c-b54f-cbb8cfee6e3c/1/4kLCt011daIop-ZPBAbzo5fHrlY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:f8:03:38:6f:40:49:6a:6c:2d:5e:dd:9a:83:ab:2d:47:7d:
47:76:34:6a:52:16:c9:f0:62:c7:d3:cd:55:9e:0e:20:54:0d:
d8:8a:9f:a6:85:08:44:cb:c1:21:9f:ab:e5:2d:28:51:05:09:
92:3d:e6:19:11:49:ee:38:96:3c:d4:01:47:36:db:62:3c:e4:
70:74:c6:8f:ca:94:15:1e:35:23:f2:e4:4e:63:46:e6:12:8d:
94:93:b0:6e:6f:61:1c:d9:eb:1f:78:58:e2:a4:11:cd:7e:36:
ba:99:b8:a7:b3:92:0e:73:85:77:6d:10:09:56:80:2e:e6:af:
0a:65:46:9a:09:39:b5:cf:9a:b0:2f:20:5d:2a:37:13:66:41:
2c:81:37:34:36:f2:00:65:96:d0:36:c7:9d:9d:87:68:79:bc:
bf:c4:28:76:5b:aa:6b:9e:14:7f:95:c3:ec:c3:76:7f:28:ba:
83:92:e3:ec:58:b0:28:0c:3c:d4:02:45:07:92:c3:8c:03:3a:
2f:10:3c:c1:ce:b6:4d:63:60:6c:4b:78:02:59:d6:fc:9c:52:
31:60:62:34:fe:a3:01:35:60:e9:e5:d6:e4:2b:b1:a1:e3:db:
9a:1d:52:96:79:25:ac:86:46:51:1b:c6:74:48:bd:58:be:06:
a6:1d:1c:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 11:14:57 2025 by rpki-client