Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/908070-fd94-4a75-9872-31c733197073/1/4fR8EaOjyuBqGShgqWxQU-wEtdw.mft
File: 4fR8EaOjyuBqGShgqWxQU-wEtdw.mft (raw, json)
Hash identifier: 0mWTxC8rhdUJ3MMXbVBf/tJwKU5dXMadenYf0bfaAA4=
Subject key identifier: 36:2A:F7:23:2C:A2:46:BE:40:6F:CC:FE:E9:90:94:DE:BF:D8:6A:01
Authority key identifier: E1:F4:7C:11:A3:A3:CA:E0:6A:19:28:60:A9:6C:50:53:EC:04:B5:DC
Certificate issuer: /CN=e1f47c11a3a3cae06a192860a96c5053ec04b5dc
Certificate serial: 01989FDF53B0AD67B08F131E5317C3DDB193
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4fR8EaOjyuBqGShgqWxQU-wEtdw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/908070-fd94-4a75-9872-31c733197073/1/4fR8EaOjyuBqGShgqWxQU-wEtdw.mft
Manifest number: 133E
Signing time: Tue 12 Aug 2025 20:01:09 +0000
Manifest this update: Tue 12 Aug 2025 20:01:09 +0000
Manifest next update: Wed 13 Aug 2025 20:01:09 +0000
Files and hashes: 1: 1-HjAvExmkGaxksSqn85_Dy6VvJM.roa (hash: 8D5kTAs24JEFoR1NyKeFUo+R/Y6CsZUzK26/NpwtHaw=)
2: 4fR8EaOjyuBqGShgqWxQU-wEtdw.crl (hash: dp1J4ibWXIYZB9nn4pnI048NDOIB0LYq8fSCgiWV5sY=)
3: UBam_LF0XAef-2xohQdZlRl7HBg.roa (hash: 7WO0S2f70pIralvylysZjQGv/GwrHdv9TmJ840KoDXo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/908070-fd94-4a75-9872-31c733197073/1/4fR8EaOjyuBqGShgqWxQU-wEtdw.crl
rsync://rpki.ripe.net/repository/DEFAULT/14/908070-fd94-4a75-9872-31c733197073/1/4fR8EaOjyuBqGShgqWxQU-wEtdw.mft
rsync://rpki.ripe.net/repository/DEFAULT/4fR8EaOjyuBqGShgqWxQU-wEtdw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 Aug 2025 13:24:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:9f:df:53:b0:ad:67:b0:8f:13:1e:53:17:c3:dd:b1:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e1f47c11a3a3cae06a192860a96c5053ec04b5dc
Validity
Not Before: Aug 12 20:01:09 2025 GMT
Not After : Aug 13 20:01:09 2025 GMT
Subject: CN=362af7232ca246be406fccfee99094debfd86a01
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:02:d9:62:d0:fd:68:26:3b:ff:93:77:52:89:
61:04:cd:f5:74:6d:db:27:7c:5d:20:73:86:3a:73:
49:c5:a5:5b:49:8f:11:cc:68:3f:e5:c8:10:f9:a5:
48:95:51:dc:21:0e:c9:29:3e:d3:a7:c7:77:ec:d5:
22:eb:26:8e:d0:63:0b:e8:64:d4:0c:a4:de:3d:b7:
27:77:b2:8e:35:0b:9b:1d:de:ae:fa:3c:74:03:82:
51:e5:42:73:50:3e:8f:67:10:8a:84:83:2b:f5:0b:
a8:ec:bb:07:4a:59:de:a9:c1:a4:46:e1:b5:b6:ef:
32:c8:84:0d:88:f2:2b:ed:82:09:5a:aa:31:72:7b:
ff:d1:3d:f8:c8:f0:86:20:3d:7f:83:5c:6b:62:d5:
f4:35:80:a3:21:41:69:8b:0c:49:3c:95:4c:a5:87:
b2:c0:7a:63:4d:fc:32:75:90:26:2c:85:49:ae:91:
1e:74:50:7b:9e:ed:83:e8:36:b8:7d:ee:da:22:c4:
a0:a9:12:83:6f:d5:0b:6b:4c:83:e3:9a:86:70:e6:
02:27:c9:a8:13:04:b8:e8:c0:54:23:e2:16:3b:54:
31:c6:86:ea:21:c7:3f:53:65:fe:e0:f1:6b:eb:35:
a4:8f:59:c8:d6:16:64:f1:27:69:ab:28:a3:29:5a:
ea:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:2A:F7:23:2C:A2:46:BE:40:6F:CC:FE:E9:90:94:DE:BF:D8:6A:01
X509v3 Authority Key Identifier:
keyid:E1:F4:7C:11:A3:A3:CA:E0:6A:19:28:60:A9:6C:50:53:EC:04:B5:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4fR8EaOjyuBqGShgqWxQU-wEtdw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/908070-fd94-4a75-9872-31c733197073/1/4fR8EaOjyuBqGShgqWxQU-wEtdw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/908070-fd94-4a75-9872-31c733197073/1/4fR8EaOjyuBqGShgqWxQU-wEtdw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:cc:1c:6b:8e:f6:ba:01:06:c4:dc:1e:69:b9:68:83:62:06:
41:02:a8:63:7e:bc:ac:8f:21:d1:f8:41:39:86:5c:79:63:04:
79:77:11:b1:8e:d1:f9:e0:a1:9d:25:96:e6:bd:61:07:07:ac:
f7:a8:ac:14:2a:a8:07:e2:7d:77:01:e5:7b:a2:11:c7:1a:67:
54:1e:e8:aa:3f:69:b7:d4:fb:0a:9c:65:4c:c8:1a:6d:19:9f:
03:ca:a4:39:52:7e:42:d4:08:9f:f5:65:ac:90:3e:6f:b0:d8:
6c:58:e1:ca:5d:63:5a:8b:73:9e:eb:21:b2:24:fa:91:f5:ea:
9c:4c:6e:ab:85:39:13:26:ff:0f:df:fc:f4:a6:d5:66:e1:87:
b7:ce:30:8c:43:ed:1f:78:b4:3d:e4:8e:88:85:14:73:de:76:
1b:86:c0:d3:1b:ec:cf:67:92:41:6b:07:5e:b2:68:55:b5:c2:
25:4c:c1:36:62:c6:96:59:a1:59:a1:c1:f5:a1:d3:69:10:c5:
49:6d:c9:6f:b9:5b:45:bc:4f:49:e2:5c:42:3d:c9:b9:ed:63:
29:0a:0d:23:a6:e8:0b:0c:f3:b0:1e:5a:88:f8:12:2f:64:42:
d7:13:e4:0e:37:88:89:42:ad:02:d9:51:5a:b7:c0:98:3d:cb:
82:d9:b0:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 12 22:52:17 2025 by rpki-client