Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/4c9206-95cb-4324-ab88-1e6577ca172d/1/4d9YUq-QW0Ff31PjKHb1enTWwfA.mft
File: 4d9YUq-QW0Ff31PjKHb1enTWwfA.mft (raw, json)
Hash identifier: Ti40cMdpuD9dfaLcOKZS6hMK0xY8Wb8Y+QlchNG3VvU=
Subject key identifier: 33:61:A6:59:21:76:63:B0:C0:83:DC:F9:53:F6:57:AA:0A:52:9C:DD
Authority key identifier: E1:DF:58:52:AF:90:5B:41:5F:DF:53:E3:28:76:F5:7A:74:D6:C1:F0
Certificate issuer: /CN=e1df5852af905b415fdf53e32876f57a74d6c1f0
Certificate serial: 01991B77DD99D31B8F5E179F1C5EFC66AC30
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4d9YUq-QW0Ff31PjKHb1enTWwfA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/4c9206-95cb-4324-ab88-1e6577ca172d/1/4d9YUq-QW0Ff31PjKHb1enTWwfA.mft
Manifest number: 0F7E
Signing time: Fri 05 Sep 2025 20:01:04 +0000
Manifest this update: Fri 05 Sep 2025 20:01:04 +0000
Manifest next update: Sat 06 Sep 2025 20:01:04 +0000
Files and hashes: 1: 4d9YUq-QW0Ff31PjKHb1enTWwfA.crl (hash: ORsUl0vTJR4GVzxboxNy+2IJ2fsJzl/R3J3q8NfXWDo=)
2: cD_mZgVZwLPlXPcv17kJI-LgBr4.roa (hash: KNwGHjS6BluwkxT0qyW7BxgZYc1pPDj7oHyq37oQR90=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/4c9206-95cb-4324-ab88-1e6577ca172d/1/4d9YUq-QW0Ff31PjKHb1enTWwfA.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/4c9206-95cb-4324-ab88-1e6577ca172d/1/4d9YUq-QW0Ff31PjKHb1enTWwfA.mft
rsync://rpki.ripe.net/repository/DEFAULT/4d9YUq-QW0Ff31PjKHb1enTWwfA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 06 Sep 2025 20:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:1b:77:dd:99:d3:1b:8f:5e:17:9f:1c:5e:fc:66:ac:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e1df5852af905b415fdf53e32876f57a74d6c1f0
Validity
Not Before: Sep 5 20:01:04 2025 GMT
Not After : Sep 6 20:01:04 2025 GMT
Subject: CN=3361a659217663b0c083dcf953f657aa0a529cdd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:b5:0a:a8:31:2d:ca:73:7b:87:27:e0:01:50:
4d:da:5a:08:0b:42:b4:21:ba:a6:e6:33:39:48:62:
93:61:c7:f4:d6:df:88:3d:d7:66:11:26:7e:a8:2e:
b4:0e:09:ec:4e:24:db:49:77:fc:06:99:53:1f:1c:
72:a8:2e:6d:09:16:3b:f6:69:a4:a3:e9:69:71:e7:
be:e1:ea:58:07:b8:16:ef:26:37:b5:b8:e4:7e:ea:
ae:e9:77:5d:9b:e9:1b:f4:23:d1:7f:d3:ee:fd:19:
bf:ad:97:76:be:5a:ee:3c:41:ce:76:06:5f:14:d1:
f2:84:10:61:cb:c1:aa:b8:ac:44:4b:f2:90:03:44:
fc:2f:9c:25:81:34:02:e4:4c:16:36:b9:f6:bc:1f:
44:7e:59:ca:b8:54:8c:fc:01:4c:69:23:0a:a6:3c:
9e:97:10:0e:35:67:48:b2:1b:d0:42:35:92:de:ac:
b9:68:ad:79:a5:7d:cb:d8:05:59:f0:38:cd:14:ea:
8a:7e:04:ba:23:c1:66:bb:86:a7:4d:54:82:a5:70:
4c:43:69:d0:d9:cc:46:ac:69:0b:ae:07:07:91:b9:
89:9b:dd:7d:01:c9:0d:e1:d6:77:58:ec:89:13:8c:
2a:2b:d7:b6:6f:d4:cf:ee:0f:f8:26:33:43:47:4d:
56:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:61:A6:59:21:76:63:B0:C0:83:DC:F9:53:F6:57:AA:0A:52:9C:DD
X509v3 Authority Key Identifier:
keyid:E1:DF:58:52:AF:90:5B:41:5F:DF:53:E3:28:76:F5:7A:74:D6:C1:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d9YUq-QW0Ff31PjKHb1enTWwfA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/4c9206-95cb-4324-ab88-1e6577ca172d/1/4d9YUq-QW0Ff31PjKHb1enTWwfA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/4c9206-95cb-4324-ab88-1e6577ca172d/1/4d9YUq-QW0Ff31PjKHb1enTWwfA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:6c:ab:98:20:c6:03:08:08:6e:4f:c4:cb:3f:40:04:01:ab:
9f:99:3b:41:80:dc:48:ab:1c:07:fc:85:0a:79:0e:01:26:be:
a9:51:7b:24:a4:96:e2:43:34:d6:e1:a9:26:46:63:64:1b:c3:
1d:4d:c2:6c:d4:41:e5:2a:ec:b0:cd:86:dc:0d:0e:b6:66:49:
05:24:f7:92:c4:3d:73:fa:84:76:21:5c:66:d6:6f:cf:fe:6d:
e1:83:aa:be:44:d4:9b:8c:4b:9b:dd:14:29:5c:c0:d9:10:57:
36:f0:f1:a1:3f:22:38:9f:71:eb:b2:3e:e2:71:f4:d3:d8:f0:
f1:9e:49:97:4b:3a:34:40:65:84:0a:dd:dc:d1:8b:c1:96:ed:
16:ca:01:05:a2:c1:2b:9d:8f:e8:4c:c3:87:9c:b5:85:ef:4d:
50:47:e9:50:1a:4d:d0:57:56:df:b2:46:c9:d8:03:c2:74:e1:
02:90:6b:e2:34:8b:5a:77:1a:12:f8:2e:52:80:74:3f:3a:60:
3e:d7:7e:52:a3:29:53:c1:ca:81:54:8c:36:1a:9d:ec:b8:77:
1a:dc:e8:1f:40:45:5d:eb:19:6a:4f:5e:ad:df:01:03:90:59:
20:81:f2:e8:42:e2:4a:05:a0:e4:45:ed:5c:b5:ea:a1:b9:07:
2d:43:a7:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 6 06:01:53 2025 by rpki-client