Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/b5559e-950b-48f4-a2ab-b26f1a70af0d/1/4xci15v_Q4Sll8tUTZ55dEkNhzQ.mft
File: 4xci15v_Q4Sll8tUTZ55dEkNhzQ.mft (raw, json)
Hash identifier: MSBun3Sp6QRRHApwPIoeJLlaQJbbr/DBhZqITcKTTPM=
Subject key identifier: 49:80:22:55:6D:5A:0A:C9:2F:41:83:AB:D8:B7:5F:48:81:56:78:19
Authority key identifier: E3:17:22:D7:9B:FF:43:84:A5:97:CB:54:4D:9E:79:74:49:0D:87:34
Certificate issuer: /CN=e31722d79bff4384a597cb544d9e7974490d8734
Certificate serial: 019922FAA6F2995C6088E6414EA2756556FB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4xci15v_Q4Sll8tUTZ55dEkNhzQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/b5559e-950b-48f4-a2ab-b26f1a70af0d/1/4xci15v_Q4Sll8tUTZ55dEkNhzQ.mft
Manifest number: 0F40
Signing time: Sun 07 Sep 2025 07:01:15 +0000
Manifest this update: Sun 07 Sep 2025 07:01:15 +0000
Manifest next update: Mon 08 Sep 2025 07:01:15 +0000
Files and hashes: 1: 4xci15v_Q4Sll8tUTZ55dEkNhzQ.crl (hash: h+ZONK92HYSC+GYA3alZgTVUkd9DNXZxz+gVSVmKPhc=)
2: 7wwToY-I4oQ7zD9rX8H-_4Eb5b4.roa (hash: Hl91ZV/in/bxS0Jez/RCMKQB6Lc2qVYsfbP/T+sqKUA=)
3: VnRQ8C8QXZSlLiPv3ntpPix0MBc.roa (hash: GsTYSMVbMlYjzB/yj1A15/Pa7xUVFVUn8yyhUswywB0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/b5559e-950b-48f4-a2ab-b26f1a70af0d/1/4xci15v_Q4Sll8tUTZ55dEkNhzQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/fe/b5559e-950b-48f4-a2ab-b26f1a70af0d/1/4xci15v_Q4Sll8tUTZ55dEkNhzQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/4xci15v_Q4Sll8tUTZ55dEkNhzQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:fa:a6:f2:99:5c:60:88:e6:41:4e:a2:75:65:56:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e31722d79bff4384a597cb544d9e7974490d8734
Validity
Not Before: Sep 7 07:01:15 2025 GMT
Not After : Sep 8 07:01:15 2025 GMT
Subject: CN=498022556d5a0ac92f4183abd8b75f4881567819
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:2d:f8:ed:0d:ec:d4:91:20:5a:f1:42:4d:de:
f1:50:d8:e0:c9:68:4e:25:28:06:ff:0d:fc:93:19:
4e:ce:3e:f7:bc:24:83:a9:6a:e3:38:dc:f8:c6:a7:
fb:b7:fd:9e:e2:83:58:47:fe:42:84:b2:fe:95:65:
05:00:d2:42:40:05:28:dd:ef:af:10:f4:3d:cc:3c:
15:83:f2:86:96:9a:30:9d:bf:2a:22:9e:b6:fd:65:
6b:cb:c8:1f:e5:c4:f9:22:8f:8c:df:2f:4d:e9:2f:
b4:fd:c9:56:25:39:d2:66:03:a9:50:52:0b:67:f0:
3a:7b:33:db:85:bc:0a:f3:e7:e6:4f:90:0e:9b:58:
43:81:52:f0:18:b4:63:06:ae:ce:04:ff:ab:e8:ef:
7a:f8:6b:6f:42:b1:24:37:3f:c5:14:9d:1a:45:f3:
53:bc:06:c5:9d:d7:0e:fc:e1:ad:ff:a7:cc:07:46:
6d:bc:01:7f:0d:54:e9:91:f9:31:1d:b3:be:a0:29:
86:1a:89:ef:2b:2e:34:41:24:d1:7a:fc:aa:85:8d:
a2:95:07:af:9a:d2:54:50:d8:8e:90:41:56:6a:b4:
6b:71:44:18:a3:b3:a9:13:66:1c:e8:8b:c3:ae:b2:
e4:a2:18:f3:ef:23:27:13:d2:78:12:2a:af:64:c5:
00:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:80:22:55:6D:5A:0A:C9:2F:41:83:AB:D8:B7:5F:48:81:56:78:19
X509v3 Authority Key Identifier:
keyid:E3:17:22:D7:9B:FF:43:84:A5:97:CB:54:4D:9E:79:74:49:0D:87:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4xci15v_Q4Sll8tUTZ55dEkNhzQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/b5559e-950b-48f4-a2ab-b26f1a70af0d/1/4xci15v_Q4Sll8tUTZ55dEkNhzQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/b5559e-950b-48f4-a2ab-b26f1a70af0d/1/4xci15v_Q4Sll8tUTZ55dEkNhzQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:c5:48:a9:62:59:8f:62:96:83:fb:de:a8:27:b1:83:e8:8b:
10:65:e6:09:01:2f:f8:ce:c9:a9:d6:96:c2:21:94:29:a0:b3:
b4:a8:97:93:55:e8:62:2c:ac:f0:14:33:24:8b:c1:ad:f1:65:
5c:0e:a4:ad:a3:f9:b4:7f:80:f8:1b:f4:c0:74:d5:f5:ab:e9:
a6:71:30:ba:a3:3c:37:bd:df:d6:40:52:83:e4:85:16:7e:f8:
16:95:5c:7c:21:0e:46:04:b4:49:29:d4:43:4f:84:55:0c:34:
14:40:17:dd:07:45:e6:92:90:ff:d9:3b:4a:06:58:36:99:4e:
cf:cd:49:71:6c:d5:23:44:8c:66:43:07:70:f2:c6:2a:96:de:
70:91:57:7c:31:17:7e:ca:a5:07:97:e3:bd:fa:c3:4e:fa:27:
de:ea:4a:ba:4d:cb:d7:54:8d:26:f6:17:bd:17:fd:d9:07:7f:
f1:45:1e:5d:93:1f:73:7e:8e:4b:90:ee:46:69:ed:62:08:23:
f2:ab:47:fd:f8:05:c1:ae:95:53:cc:f5:ff:b0:a7:b2:34:28:
d1:48:83:59:2a:73:65:82:56:91:5f:06:7e:18:d1:61:1a:ca:
a3:75:97:8b:49:c7:ac:a7:c2:0b:8a:ee:e3:11:94:1d:ab:59:
22:b0:ed:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 10:15:08 2025 by rpki-client