Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/ae0d8b-4857-4ba7-b342-5ec336bf743b/1/4n4d0HRmJ4A2ulzZQ9ew4CHPhig.mft
File: 4n4d0HRmJ4A2ulzZQ9ew4CHPhig.mft (raw, json)
Hash identifier: fZajCJhdIdGg+mUptl+o036vQChiPC5klq9GAHD81Wo=
Subject key identifier: 89:7D:75:3B:91:56:27:81:FF:59:C4:1E:A5:8E:A5:50:4B:6A:24:8D
Authority key identifier: E2:7E:1D:D0:74:66:27:80:36:BA:5C:D9:43:D7:B0:E0:21:CF:86:28
Certificate issuer: /CN=e27e1dd07466278036ba5cd943d7b0e021cf8628
Certificate serial: 019922C353114DBE250E6281A42A2178EBAB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4n4d0HRmJ4A2ulzZQ9ew4CHPhig.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/ae0d8b-4857-4ba7-b342-5ec336bf743b/1/4n4d0HRmJ4A2ulzZQ9ew4CHPhig.mft
Manifest number: 05CB
Signing time: Sun 07 Sep 2025 06:00:49 +0000
Manifest this update: Sun 07 Sep 2025 06:00:49 +0000
Manifest next update: Mon 08 Sep 2025 06:00:49 +0000
Files and hashes: 1: 4n4d0HRmJ4A2ulzZQ9ew4CHPhig.crl (hash: k6cMz2yu5omi9m1SUDkpPG4giSYHV0xox0HTCYkXuws=)
2: FDe_pjW_jnnn_wQOP-AVXix4Szo.roa (hash: VtZUc2Nt2trLnWpsaaIqK/XsZumvjhDGxHdBVKEJhRw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/ae0d8b-4857-4ba7-b342-5ec336bf743b/1/4n4d0HRmJ4A2ulzZQ9ew4CHPhig.crl
rsync://rpki.ripe.net/repository/DEFAULT/f3/ae0d8b-4857-4ba7-b342-5ec336bf743b/1/4n4d0HRmJ4A2ulzZQ9ew4CHPhig.mft
rsync://rpki.ripe.net/repository/DEFAULT/4n4d0HRmJ4A2ulzZQ9ew4CHPhig.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 06:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:c3:53:11:4d:be:25:0e:62:81:a4:2a:21:78:eb:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e27e1dd07466278036ba5cd943d7b0e021cf8628
Validity
Not Before: Sep 7 06:00:49 2025 GMT
Not After : Sep 8 06:00:49 2025 GMT
Subject: CN=897d753b91562781ff59c41ea58ea5504b6a248d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:6b:2e:47:c0:15:d0:59:f1:31:cf:9d:6d:b9:
4b:d8:1d:fb:c7:dd:8b:46:d1:5a:b7:2f:21:b3:82:
4f:92:e1:0b:d2:bd:93:b6:14:a0:9d:74:b4:04:1c:
32:a5:7c:85:17:76:f7:60:31:3f:bc:c6:e1:e6:6b:
fa:d5:69:0a:68:5a:63:cb:e6:db:eb:ed:86:b3:e9:
4c:d7:77:81:3f:10:de:36:87:06:2f:da:64:c2:cd:
68:ae:37:d0:f6:b9:fd:da:e4:04:bb:d6:3a:0e:77:
5f:c4:c3:0a:d1:26:7c:60:ac:1b:45:97:14:a4:d4:
d4:d2:50:7f:73:fa:20:e6:82:79:13:f1:e6:68:e5:
b6:b5:da:a6:3f:bb:2e:c9:1e:a9:94:e3:89:d5:d5:
29:3e:ec:ee:04:94:07:18:97:14:c9:e0:97:20:15:
7f:11:aa:e4:f2:5f:4e:9c:aa:71:9e:99:24:a6:53:
94:3a:92:18:b1:4b:25:1f:7b:a2:41:48:68:74:e5:
99:57:4a:57:c4:4a:1e:82:63:23:c5:f3:d8:58:5f:
7c:e5:fa:50:b9:6e:67:16:f0:b1:44:b0:e6:9b:08:
51:ed:1c:e6:74:f9:e0:57:a9:f8:ea:60:5d:a8:62:
1c:d0:6e:d6:21:59:4d:4c:9e:46:7f:40:0f:64:4c:
96:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:7D:75:3B:91:56:27:81:FF:59:C4:1E:A5:8E:A5:50:4B:6A:24:8D
X509v3 Authority Key Identifier:
keyid:E2:7E:1D:D0:74:66:27:80:36:BA:5C:D9:43:D7:B0:E0:21:CF:86:28
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4n4d0HRmJ4A2ulzZQ9ew4CHPhig.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/ae0d8b-4857-4ba7-b342-5ec336bf743b/1/4n4d0HRmJ4A2ulzZQ9ew4CHPhig.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/ae0d8b-4857-4ba7-b342-5ec336bf743b/1/4n4d0HRmJ4A2ulzZQ9ew4CHPhig.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
cc:71:89:61:d3:13:af:67:c4:48:e8:ba:67:fa:7b:13:ef:e2:
3b:95:68:b7:bb:c4:07:7b:c3:9e:3a:84:2c:f9:c6:96:2b:a7:
9b:b1:93:2b:da:26:be:e3:f7:2b:c5:cd:19:a0:68:e9:56:80:
70:00:fd:36:73:39:2c:26:2f:64:35:80:28:90:1c:ba:4d:3b:
4f:e4:5f:8c:54:ef:6f:74:dd:a2:c4:42:59:25:54:a1:aa:53:
05:36:c9:e4:a1:5a:2f:f0:fd:fe:9a:49:a0:c6:dc:c2:ec:28:
75:53:98:47:cb:01:1f:cb:09:62:46:d4:fa:9c:ee:40:74:e3:
c8:4e:56:97:54:54:6f:4e:2d:44:74:ec:40:d3:ab:ee:2e:52:
79:54:cc:f4:dd:d6:f2:f8:f8:e8:0b:21:d5:0d:ea:69:d1:f8:
30:39:52:83:ea:0e:34:08:cb:24:b5:4c:74:2a:e5:b9:35:9e:
1d:3e:98:dc:7f:d6:8c:3e:68:a9:ea:a4:9b:80:47:9d:31:f5:
36:1c:45:fd:bc:ae:d8:50:12:a4:31:a4:b3:4e:3b:1f:f9:81:
d2:73:44:21:8f:fd:72:5a:e3:2d:f6:a7:33:79:03:ef:3c:cf:
11:d2:85:68:99:d0:7a:b7:0b:ab:f3:7f:0a:bf:c5:0b:33:8b:
39:fb:1b:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 13:32:14 2025 by rpki-client