Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/574960-d68d-4069-956d-05908c63b45a/1/4_NSlr0mUtdWucSi8KzS_dp5CXw.mft
File: 4_NSlr0mUtdWucSi8KzS_dp5CXw.mft (raw, json)
Hash identifier: CE5iRBhNqS92mEfuOCunHPQ1rqErbFTkrzB+nOkRQ2c=
Subject key identifier: 97:BE:51:72:A2:C7:65:84:25:73:03:E5:24:E0:79:C5:61:13:69:27
Authority key identifier: E3:F3:52:96:BD:26:52:D7:56:B9:C4:A2:F0:AC:D2:FD:DA:79:09:7C
Certificate issuer: /CN=e3f35296bd2652d756b9c4a2f0acd2fdda79097c
Certificate serial: 01992F3515B5D5DCFA947ABA687D924558CD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4_NSlr0mUtdWucSi8KzS_dp5CXw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/574960-d68d-4069-956d-05908c63b45a/1/4_NSlr0mUtdWucSi8KzS_dp5CXw.mft
Manifest number: 056A
Signing time: Tue 09 Sep 2025 16:00:32 +0000
Manifest this update: Tue 09 Sep 2025 16:00:32 +0000
Manifest next update: Wed 10 Sep 2025 16:00:32 +0000
Files and hashes: 1: 4_NSlr0mUtdWucSi8KzS_dp5CXw.crl (hash: HF0FOXhZ5zM7xNA+EKL+W6FNHgZbgwAR2kj6VNJfN1U=)
2: F1IHbwYI_Vw2biKY9qAxXXgkI1s.roa (hash: x6r7SsZ8T6EvaiAfOOYnrFS57CvR635mJl2CHWctk7k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e6/574960-d68d-4069-956d-05908c63b45a/1/4_NSlr0mUtdWucSi8KzS_dp5CXw.crl
rsync://rpki.ripe.net/repository/DEFAULT/e6/574960-d68d-4069-956d-05908c63b45a/1/4_NSlr0mUtdWucSi8KzS_dp5CXw.mft
rsync://rpki.ripe.net/repository/DEFAULT/4_NSlr0mUtdWucSi8KzS_dp5CXw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 10 Sep 2025 15:12:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:2f:35:15:b5:d5:dc:fa:94:7a:ba:68:7d:92:45:58:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e3f35296bd2652d756b9c4a2f0acd2fdda79097c
Validity
Not Before: Sep 9 16:00:32 2025 GMT
Not After : Sep 10 16:00:32 2025 GMT
Subject: CN=97be5172a2c76584257303e524e079c561136927
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:37:d9:66:62:02:66:19:2d:1d:d0:2f:58:8b:
fd:2f:d3:6a:29:de:fd:53:4f:0d:51:66:c3:bc:72:
81:1b:44:89:74:cc:94:ec:43:6f:73:7d:d1:f9:46:
d2:12:90:de:03:45:a2:24:38:4d:68:34:d2:24:ab:
da:5e:87:ff:3b:ba:7a:dc:7c:1b:b4:3b:d9:02:69:
3a:d2:0d:b6:8c:01:73:14:44:6c:6a:a1:75:bf:84:
09:b0:ef:c3:7e:42:02:4f:8c:0b:b3:d8:82:82:30:
57:bc:d5:77:30:96:92:fa:f4:fe:a5:6d:c5:87:2e:
1b:cf:ea:16:7b:d6:9c:21:59:f3:96:98:82:f1:54:
e4:a7:38:d8:54:43:06:99:9e:5c:ae:6c:3f:27:31:
65:95:d7:26:b1:9c:11:74:e1:57:06:ea:95:65:aa:
49:4e:70:43:d2:b2:bf:c5:02:b4:6c:af:17:b1:e5:
b2:fb:f7:f7:f2:8e:16:bc:2a:da:03:88:91:19:71:
6e:62:76:b7:e0:15:7e:82:c8:f4:b1:ac:e9:12:7b:
de:c5:1b:7b:f4:da:93:ab:81:d2:35:46:42:7c:a9:
24:46:6d:e6:fc:99:76:46:af:08:18:97:c6:3e:a2:
73:a2:20:2a:f4:d7:b7:60:9f:92:f2:1d:1b:f1:2d:
7b:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:BE:51:72:A2:C7:65:84:25:73:03:E5:24:E0:79:C5:61:13:69:27
X509v3 Authority Key Identifier:
keyid:E3:F3:52:96:BD:26:52:D7:56:B9:C4:A2:F0:AC:D2:FD:DA:79:09:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4_NSlr0mUtdWucSi8KzS_dp5CXw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/574960-d68d-4069-956d-05908c63b45a/1/4_NSlr0mUtdWucSi8KzS_dp5CXw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/574960-d68d-4069-956d-05908c63b45a/1/4_NSlr0mUtdWucSi8KzS_dp5CXw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:96:4c:f4:55:ed:cc:59:f4:d2:ae:3f:5a:23:cd:4c:f0:8f:
98:6e:5c:47:34:0b:1f:ff:a7:d4:e5:69:6c:52:f6:67:c2:d1:
49:c4:8c:42:89:4d:eb:0b:ed:ad:13:0d:88:01:d4:ee:00:45:
9e:a3:a2:28:f4:88:38:0d:50:9a:d7:fc:e2:8c:c2:2f:7b:a5:
1e:0a:ad:f2:58:8c:61:29:ee:c2:95:06:11:93:d9:dd:ea:ee:
d0:c2:51:53:21:b0:73:2d:af:bb:e0:f5:50:93:61:90:91:70:
ae:07:0d:db:43:23:e3:48:aa:fa:a9:4f:07:3a:7f:70:bd:8b:
0d:b5:0c:64:3f:01:05:7d:92:00:8c:04:53:05:75:c1:c2:26:
93:61:da:a0:14:b6:05:e3:0d:7f:11:d3:41:7e:6b:83:22:4d:
74:04:68:1a:32:7f:b2:d8:f9:ea:4f:51:0f:49:b0:4c:89:b4:
61:e5:3d:6a:b8:df:e1:fc:45:af:dd:df:95:59:b3:d6:7c:a8:
6f:69:1e:13:95:2a:dc:21:65:b3:6a:ab:01:b2:8b:10:a7:ef:
71:25:5b:53:32:c5:35:41:69:41:91:85:41:65:ba:e5:58:83:
a3:39:fb:be:85:11:6a:28:65:86:2c:f9:ce:55:c7:ad:73:9d:
e7:86:40:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 9 19:11:25 2025 by rpki-client