Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/549e4d-8dee-459b-9283-46bb3fa28b00/1/4EHIW0dOi2wAiR2VQST_DIEgDYw.mft
File: 4EHIW0dOi2wAiR2VQST_DIEgDYw.mft (raw, json)
Hash identifier: Mkl4W9CHdMfbRpHLEIDSuGMax/h9fDxwVQv1x4gi5kU=
Subject key identifier: D8:28:A9:33:3A:F0:D0:74:9F:09:76:84:B0:3A:82:32:2D:E2:34:1F
Authority key identifier: E0:41:C8:5B:47:4E:8B:6C:00:89:1D:95:41:24:FF:0C:81:20:0D:8C
Certificate issuer: /CN=e041c85b474e8b6c00891d954124ff0c81200d8c
Certificate serial: 01989636FE395DB140632D1F2AC81CCB337F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4EHIW0dOi2wAiR2VQST_DIEgDYw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/549e4d-8dee-459b-9283-46bb3fa28b00/1/4EHIW0dOi2wAiR2VQST_DIEgDYw.mft
Manifest number: 0982
Signing time: Sun 10 Aug 2025 23:00:43 +0000
Manifest this update: Sun 10 Aug 2025 23:00:43 +0000
Manifest next update: Mon 11 Aug 2025 23:00:43 +0000
Files and hashes: 1: 4EHIW0dOi2wAiR2VQST_DIEgDYw.crl (hash: 2NxyFW+Pm5nrgdi4yxaOgMSfCK+ke9j0Sel0U3oo6kU=)
2: N3RhFZbfRfFlakkE1oKkv4idahs.roa (hash: S19WQvJ0cwuBe3l5agvGw5hBi9jlwv6QitA6NIAiWl4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/549e4d-8dee-459b-9283-46bb3fa28b00/1/4EHIW0dOi2wAiR2VQST_DIEgDYw.crl
rsync://rpki.ripe.net/repository/DEFAULT/20/549e4d-8dee-459b-9283-46bb3fa28b00/1/4EHIW0dOi2wAiR2VQST_DIEgDYw.mft
rsync://rpki.ripe.net/repository/DEFAULT/4EHIW0dOi2wAiR2VQST_DIEgDYw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 11 Aug 2025 23:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:96:36:fe:39:5d:b1:40:63:2d:1f:2a:c8:1c:cb:33:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e041c85b474e8b6c00891d954124ff0c81200d8c
Validity
Not Before: Aug 10 23:00:43 2025 GMT
Not After : Aug 11 23:00:43 2025 GMT
Subject: CN=d828a9333af0d0749f097684b03a82322de2341f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:ea:e4:5f:61:e6:2f:0e:07:a0:23:e4:13:b0:
9a:bd:dd:94:39:c2:6c:91:65:91:6a:de:52:54:46:
5b:57:7b:94:fc:5a:d9:b8:ee:15:db:8c:f6:26:2a:
37:57:51:01:10:36:67:90:51:fd:ea:95:7e:16:84:
cb:77:fc:9a:06:6a:d1:be:89:38:6f:46:99:aa:ab:
7f:95:aa:43:ff:16:66:22:c3:97:42:9c:63:ca:4f:
44:fe:2a:97:87:67:94:b2:30:ff:39:e2:83:28:3c:
f6:05:78:7a:52:9f:68:45:bb:d8:85:c5:5f:d1:79:
f4:6c:eb:55:7d:d0:89:31:01:92:f7:73:9c:05:c1:
c5:fe:85:b8:b8:93:32:1e:46:6c:0f:34:00:04:c9:
a8:2d:7c:19:4d:c7:b9:ba:e2:49:e8:ff:37:89:5a:
3e:39:d7:b6:02:4a:28:3c:81:df:77:05:d9:eb:5d:
2b:4d:bf:96:b9:a8:74:a1:fb:60:14:00:21:a0:24:
7e:6a:d7:45:f4:cb:6c:7c:b2:d3:57:a5:9f:e5:64:
21:f8:04:62:1e:6d:c8:8b:94:ef:5b:b6:ea:2a:3a:
1b:3d:4c:8a:f8:8b:17:d9:3f:b2:07:20:bc:32:f5:
19:c9:02:9f:39:d8:42:8e:ff:5c:1c:e8:cc:ac:ee:
21:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:28:A9:33:3A:F0:D0:74:9F:09:76:84:B0:3A:82:32:2D:E2:34:1F
X509v3 Authority Key Identifier:
keyid:E0:41:C8:5B:47:4E:8B:6C:00:89:1D:95:41:24:FF:0C:81:20:0D:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4EHIW0dOi2wAiR2VQST_DIEgDYw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/549e4d-8dee-459b-9283-46bb3fa28b00/1/4EHIW0dOi2wAiR2VQST_DIEgDYw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/549e4d-8dee-459b-9283-46bb3fa28b00/1/4EHIW0dOi2wAiR2VQST_DIEgDYw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:65:6a:57:74:49:d5:17:54:e8:da:13:14:3f:47:a3:04:ff:
6e:58:1a:2b:31:ac:18:13:db:d8:d9:00:87:19:b8:0a:d0:98:
a9:6c:64:3d:d4:4e:d5:d0:eb:5b:82:06:8c:d8:58:f7:7b:1e:
9f:a0:e7:0e:dd:f1:ec:59:24:23:3c:06:8a:da:9d:12:1d:45:
9c:4d:bc:c6:db:00:94:57:e8:4b:f8:fb:d2:aa:e3:3b:f2:63:
49:c0:44:9c:29:72:aa:44:e0:33:57:6a:94:66:82:ab:34:ad:
07:80:86:7b:94:77:24:c3:34:d6:3b:59:d0:e5:ba:2e:6a:7a:
60:d2:e3:17:89:91:da:d9:6d:2c:9b:bb:13:9f:af:1a:0e:66:
e4:7b:6c:64:3e:29:15:84:ea:c8:f9:7a:30:71:93:4b:5e:d1:
30:1c:2b:08:79:fa:2c:fb:77:b6:5b:ea:38:3e:f3:a5:04:0f:
59:5c:f8:e1:e5:ea:c6:37:c7:fc:6c:89:84:a0:49:53:cb:2d:
34:07:e1:0d:e0:0b:66:85:5d:c7:1d:8c:6c:9e:8c:78:2d:09:
02:6e:40:73:ea:e8:17:4d:e6:fa:5d:b9:a5:1e:79:3d:c9:29:
fc:24:23:47:fc:f5:65:fb:53:6c:82:a9:84:33:62:ce:f5:3b:
27:39:54:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 11 04:15:21 2025 by rpki-client