Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/e8f727-cb23-43ce-85d2-d48b7d2624db/1/4wEfCFnQaghJdfTovStVZxDdjDA.mft
File: 4wEfCFnQaghJdfTovStVZxDdjDA.mft (raw, json)
Hash identifier: qPjgFxrXZUpi8+wwVUDTlXtUscQ4tzihRi/N78tVpUY=
Subject key identifier: BD:92:46:4A:93:32:A1:40:25:21:B8:4A:6F:BF:C8:9D:C9:69:84:EF
Authority key identifier: E3:01:1F:08:59:D0:6A:08:49:75:F4:E8:BD:2B:55:67:10:DD:8C:30
Certificate issuer: /CN=e3011f0859d06a084975f4e8bd2b556710dd8c30
Certificate serial: 01988F59A545202F6DD710DF4663E54F23B8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4wEfCFnQaghJdfTovStVZxDdjDA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/e8f727-cb23-43ce-85d2-d48b7d2624db/1/4wEfCFnQaghJdfTovStVZxDdjDA.mft
Manifest number: 10AF
Signing time: Sat 09 Aug 2025 15:01:13 +0000
Manifest this update: Sat 09 Aug 2025 15:01:13 +0000
Manifest next update: Sun 10 Aug 2025 15:01:13 +0000
Files and hashes: 1: 4wEfCFnQaghJdfTovStVZxDdjDA.crl (hash: fedcSY1WEyw5XhhUvQ79/Go/vRVIE2WfiEK68G/9gDU=)
2: y5czNixkNluft47-krcqIbdqVD0.roa (hash: AmEHJkAG0oDmal6HjQJOOd7Nfm7cgEA//96C9SqFxV0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/e8f727-cb23-43ce-85d2-d48b7d2624db/1/4wEfCFnQaghJdfTovStVZxDdjDA.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/e8f727-cb23-43ce-85d2-d48b7d2624db/1/4wEfCFnQaghJdfTovStVZxDdjDA.mft
rsync://rpki.ripe.net/repository/DEFAULT/4wEfCFnQaghJdfTovStVZxDdjDA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 10 Aug 2025 14:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8f:59:a5:45:20:2f:6d:d7:10:df:46:63:e5:4f:23:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e3011f0859d06a084975f4e8bd2b556710dd8c30
Validity
Not Before: Aug 9 15:01:13 2025 GMT
Not After : Aug 10 15:01:13 2025 GMT
Subject: CN=bd92464a9332a1402521b84a6fbfc89dc96984ef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:34:cd:08:36:a9:aa:64:26:46:73:ee:4b:0b:
b0:7a:b7:ab:fd:71:1c:40:8d:15:8a:82:24:30:80:
4c:80:69:e7:57:40:5e:09:9d:04:53:2c:1b:5a:28:
57:8f:b3:bd:ee:2c:06:1c:14:89:18:0b:b3:ba:4e:
29:48:7d:59:a3:e6:36:bb:f1:5a:2a:ea:22:22:45:
6e:59:af:55:e1:03:43:0a:f0:f5:ca:b8:9d:54:19:
69:e4:fa:a6:db:8c:8f:5a:f9:6d:10:6a:fc:8e:db:
00:ef:d7:43:59:80:97:bb:a7:5d:f7:b4:5f:b0:53:
e0:dd:3b:62:d5:80:57:46:3b:15:77:01:bb:5c:ac:
dd:45:24:de:0d:79:57:62:09:9b:c1:0e:83:96:7e:
59:e3:c5:f8:7f:6f:b4:5e:84:e0:28:dd:15:50:6a:
4a:e4:8f:1f:a2:85:19:3e:07:1b:a7:55:db:16:bc:
24:0b:ea:07:0e:d3:f4:14:e6:70:9c:fc:d0:9c:6c:
53:0a:ca:24:73:ff:d1:79:4e:a9:83:bb:c6:38:02:
6f:ed:f4:31:fa:f5:a6:15:fc:69:a5:6f:13:52:79:
60:a1:89:e9:ac:58:38:de:37:1c:53:13:2f:f5:76:
b1:e9:95:ac:4b:3a:ed:ce:04:b3:b3:13:88:f7:f7:
e6:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:92:46:4A:93:32:A1:40:25:21:B8:4A:6F:BF:C8:9D:C9:69:84:EF
X509v3 Authority Key Identifier:
keyid:E3:01:1F:08:59:D0:6A:08:49:75:F4:E8:BD:2B:55:67:10:DD:8C:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4wEfCFnQaghJdfTovStVZxDdjDA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/e8f727-cb23-43ce-85d2-d48b7d2624db/1/4wEfCFnQaghJdfTovStVZxDdjDA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/e8f727-cb23-43ce-85d2-d48b7d2624db/1/4wEfCFnQaghJdfTovStVZxDdjDA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:99:58:fe:62:12:94:30:35:a8:9f:a0:3b:0e:6c:8a:64:4d:
44:6e:5d:30:44:b8:96:63:5e:24:76:ba:45:8d:06:03:46:e6:
76:1e:10:8f:6f:00:18:fe:98:fe:1d:00:62:7a:13:92:07:ad:
f3:67:78:86:76:44:ac:99:f2:48:4c:85:de:ba:5f:68:d4:6e:
46:95:07:e7:42:77:5e:69:c9:32:72:30:b1:ef:28:db:90:10:
06:3d:83:68:42:df:3e:40:62:28:93:df:1d:d1:a5:12:9d:0d:
78:67:44:96:eb:db:97:f5:d0:98:70:a5:3b:da:19:b6:4d:41:
dd:59:95:d1:2d:b7:50:62:0d:b8:64:aa:fb:bc:35:2f:61:0b:
d6:46:b6:af:a0:bc:4c:95:38:c8:4b:b1:68:fe:e5:35:af:47:
49:04:ed:5b:7a:0b:62:5b:0e:54:60:8c:41:3a:1d:d0:e7:f2:
cc:b7:48:9d:0f:7b:d8:e7:5c:8d:a5:e0:05:7b:a7:4e:dd:65:
5b:ba:32:2d:9c:f6:4c:16:ff:47:8b:f9:28:d5:b9:11:03:80:
1c:ec:f2:c5:e9:33:bc:1b:08:a4:8f:a9:be:2f:87:65:80:01:
bc:a8:c6:79:f1:f4:a5:07:ab:3d:e2:44:34:2a:e4:09:59:e3:
4b:24:78:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 20:47:41 2025 by rpki-client