Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/ab8070-4f58-4634-9a44-387536d03a71/1/4i1-riHYuu6d5pQNjOaynZKpAx4.mft
File: 4i1-riHYuu6d5pQNjOaynZKpAx4.mft (raw, json)
Hash identifier: coA4bdBcQyCIiiKAKRXbyo+l/smAvuxQXGmv+ZwEeDI=
Subject key identifier: 3C:8E:C1:4F:B8:75:C9:59:23:7B:9F:7E:25:AE:F4:30:F5:8C:05:CF
Authority key identifier: E2:2D:7E:AE:21:D8:BA:EE:9D:E6:94:0D:8C:E6:B2:9D:92:A9:03:1E
Certificate issuer: /CN=e22d7eae21d8baee9de6940d8ce6b29d92a9031e
Certificate serial: 019921E76159A0EBE03413404C278240F298
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4i1-riHYuu6d5pQNjOaynZKpAx4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/ab8070-4f58-4634-9a44-387536d03a71/1/4i1-riHYuu6d5pQNjOaynZKpAx4.mft
Manifest number: 05B0
Signing time: Sun 07 Sep 2025 02:00:35 +0000
Manifest this update: Sun 07 Sep 2025 02:00:35 +0000
Manifest next update: Mon 08 Sep 2025 02:00:35 +0000
Files and hashes: 1: 4i1-riHYuu6d5pQNjOaynZKpAx4.crl (hash: YSPG5O79lG7768XZK4H/i7LF01hItmDdRJ3JWz9XCdo=)
2: Ym4cY_1EuRnkCyF3T4bm70pYxjE.roa (hash: AkplZO86AEiMlgSJVWAGSBviunFDjdLnWUMhCPpbyQE=)
3: iIMfjrcM-EEaIrK48S4AaqdLSDc.roa (hash: kGHhJdo0yzn2T1RMM++JhdnOAbfrtsEDL/H5s4If3hE=)
4: kVLjxhxgFuqXEqXn9rCH2eEb9oA.roa (hash: QbtMbRiPhMHo4O/j41QZux+PuXLhM2M+5dr1jmr3fpA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/ab8070-4f58-4634-9a44-387536d03a71/1/4i1-riHYuu6d5pQNjOaynZKpAx4.crl
rsync://rpki.ripe.net/repository/DEFAULT/ef/ab8070-4f58-4634-9a44-387536d03a71/1/4i1-riHYuu6d5pQNjOaynZKpAx4.mft
rsync://rpki.ripe.net/repository/DEFAULT/4i1-riHYuu6d5pQNjOaynZKpAx4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 02:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:21:e7:61:59:a0:eb:e0:34:13:40:4c:27:82:40:f2:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e22d7eae21d8baee9de6940d8ce6b29d92a9031e
Validity
Not Before: Sep 7 02:00:35 2025 GMT
Not After : Sep 8 02:00:35 2025 GMT
Subject: CN=3c8ec14fb875c959237b9f7e25aef430f58c05cf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:f6:e7:bc:33:1d:b8:51:fd:92:f1:43:a4:ea:
a4:1b:5a:8a:38:60:69:4e:3a:9a:dd:de:40:e6:86:
50:f1:09:1d:71:b8:9a:e9:28:9c:5a:53:1f:dc:62:
00:58:da:e1:5c:f5:65:e0:0b:12:58:82:e9:85:ce:
12:2a:b6:70:d2:40:94:ef:54:15:d8:a9:f2:2d:ee:
d2:0a:ce:35:23:0a:a6:5b:c2:8e:db:f1:5c:cb:2c:
f8:9e:a1:e6:4f:5c:ca:23:1f:a9:c0:41:8b:bc:6b:
e4:1a:75:23:60:e3:b6:6f:8b:a9:09:36:6b:fe:db:
13:08:6d:18:1a:46:8b:0b:67:19:e6:59:a2:06:10:
3c:03:14:1a:d4:dc:30:1b:81:1d:7c:cc:3c:8e:e2:
3b:cb:a6:b0:ce:ea:e4:5f:a5:2a:cb:f1:ae:21:9e:
0d:c9:b7:ce:66:20:75:f4:d5:6a:6c:f1:0c:b1:e6:
9f:ab:d0:58:5d:4d:60:e6:d6:a9:45:c3:1a:b8:30:
be:db:c4:72:64:66:6f:44:db:02:41:0f:83:2c:54:
25:4d:9c:19:99:23:9a:08:6e:fe:84:6b:7f:1a:4e:
68:94:e3:ce:05:f4:f8:bf:ae:fc:1e:3d:68:3a:94:
5e:84:b9:35:67:45:8f:09:97:2c:06:72:a6:71:e8:
99:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:8E:C1:4F:B8:75:C9:59:23:7B:9F:7E:25:AE:F4:30:F5:8C:05:CF
X509v3 Authority Key Identifier:
keyid:E2:2D:7E:AE:21:D8:BA:EE:9D:E6:94:0D:8C:E6:B2:9D:92:A9:03:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4i1-riHYuu6d5pQNjOaynZKpAx4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/ab8070-4f58-4634-9a44-387536d03a71/1/4i1-riHYuu6d5pQNjOaynZKpAx4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/ab8070-4f58-4634-9a44-387536d03a71/1/4i1-riHYuu6d5pQNjOaynZKpAx4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:ab:12:d5:01:b1:4b:4c:ff:eb:ac:63:6f:e6:77:2e:e4:ee:
c4:00:c7:39:f3:34:d4:69:12:8a:d9:78:d5:25:8f:50:fc:da:
8c:d7:c1:f3:d5:42:fc:af:ec:82:d4:24:8a:97:d8:11:d1:2a:
a3:9d:93:3d:61:f5:c2:a8:2b:6d:b0:f5:4c:3c:d7:a3:15:92:
a0:2b:8f:5b:c6:11:98:0f:f7:1e:d5:f5:b5:d8:a8:dd:d0:76:
dd:d9:8c:51:2c:c0:d2:f5:d9:19:3f:fb:44:ba:f1:28:0b:b6:
14:39:0a:08:6f:69:9e:a8:80:d6:cd:4d:9f:9f:c1:a5:8a:ca:
8c:e2:82:4b:f5:47:fc:58:4b:31:6f:d9:bf:75:13:77:9d:6d:
1e:80:7c:e5:57:92:48:49:cd:29:6f:fb:f7:e0:3f:59:3a:dd:
9c:97:e8:d3:2d:ea:3d:c1:6c:73:f6:e9:40:68:05:5d:77:c4:
16:f6:5b:79:8d:9d:3f:12:1e:c1:0a:ea:d6:bd:66:15:3f:89:
28:5a:15:99:9c:14:41:37:34:db:06:c7:dd:91:6d:c4:10:77:
d8:f9:cf:04:f2:23:10:0a:be:f8:c3:1e:bc:06:df:0e:9a:28:
49:2c:a4:9c:fb:04:af:9d:a7:73:ac:80:6d:7e:5f:fa:7f:6d:
6e:82:f7:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 12:28:27 2025 by rpki-client