Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/d45469-0c7b-4410-bb5e-7dc528aa5d4e/1/4NXVYedu8lnEoC3zDzUGTe3t8tc.mft
File: 4NXVYedu8lnEoC3zDzUGTe3t8tc.mft (raw, json)
Hash identifier: HgO2dtM9DeBiarCCOIbm5G/yK4/AG4SP9shzaW5vxqc=
Subject key identifier: A1:4F:74:FF:B5:CD:5E:1D:F6:C7:30:60:0A:87:32:38:2A:99:C2:F5
Authority key identifier: E0:D5:D5:61:E7:6E:F2:59:C4:A0:2D:F3:0F:35:06:4D:ED:ED:F2:D7
Certificate issuer: /CN=e0d5d561e76ef259c4a02df30f35064dededf2d7
Certificate serial: 01988DA24F2039083F57913E0EE4C4E026BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4NXVYedu8lnEoC3zDzUGTe3t8tc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/d45469-0c7b-4410-bb5e-7dc528aa5d4e/1/4NXVYedu8lnEoC3zDzUGTe3t8tc.mft
Manifest number: 04F0
Signing time: Sat 09 Aug 2025 07:01:21 +0000
Manifest this update: Sat 09 Aug 2025 07:01:21 +0000
Manifest next update: Sun 10 Aug 2025 07:01:21 +0000
Files and hashes: 1: 4NXVYedu8lnEoC3zDzUGTe3t8tc.crl (hash: XSTBMH4mp52M7InJ2cxaOkUcqaRfBjvypXOlnJ0720w=)
2: 6pWip88KFCQlBaqpP5OAyYyKKL0.roa (hash: 2kxcH3Ha1RRmUiGnKMePTKTFBssB2qkinO67e/D6ssU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/23/d45469-0c7b-4410-bb5e-7dc528aa5d4e/1/4NXVYedu8lnEoC3zDzUGTe3t8tc.crl
rsync://rpki.ripe.net/repository/DEFAULT/23/d45469-0c7b-4410-bb5e-7dc528aa5d4e/1/4NXVYedu8lnEoC3zDzUGTe3t8tc.mft
rsync://rpki.ripe.net/repository/DEFAULT/4NXVYedu8lnEoC3zDzUGTe3t8tc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 10 Aug 2025 05:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8d:a2:4f:20:39:08:3f:57:91:3e:0e:e4:c4:e0:26:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e0d5d561e76ef259c4a02df30f35064dededf2d7
Validity
Not Before: Aug 9 07:01:21 2025 GMT
Not After : Aug 10 07:01:21 2025 GMT
Subject: CN=a14f74ffb5cd5e1df6c730600a8732382a99c2f5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:63:b5:ef:98:f7:c3:a0:9c:77:75:20:2e:86:
30:33:40:5b:64:36:77:2b:6b:f7:4d:cd:af:8f:c1:
8d:67:9e:61:46:28:b8:ae:d7:9e:1e:91:0d:62:a5:
26:ba:4e:2d:f0:98:b3:c7:e8:04:88:5d:6d:45:03:
74:22:e3:df:5f:2a:86:fc:41:4f:a8:13:cf:05:35:
2b:4e:32:a6:16:aa:bb:7e:30:af:4f:98:a3:ee:27:
12:42:fc:90:22:d4:5a:90:a4:dc:d9:18:c3:ae:db:
c5:09:85:bd:be:ab:2b:4b:ff:1c:de:58:92:2a:9d:
8d:9e:f9:d3:8b:9a:23:03:5a:70:31:02:fc:fc:87:
be:a2:e6:e8:dc:0e:31:ad:c3:bb:49:a6:ee:07:4a:
10:c7:a0:b0:3e:c5:0a:f9:ae:ac:16:77:4d:ab:22:
7d:6c:7f:6b:ae:fc:fd:73:a8:3e:66:22:44:2a:58:
f3:78:17:d6:fa:47:cd:aa:b0:f4:7a:aa:2b:1b:71:
67:53:96:8a:29:4a:b9:8a:f0:c5:23:1c:c3:dd:0d:
1b:36:c4:07:de:6f:96:71:9f:ca:bc:36:1a:6e:31:
30:f6:96:aa:51:11:67:85:73:ca:67:6b:2e:56:c0:
c3:ae:f5:45:48:a7:1b:22:89:03:c8:ba:64:d0:43:
ac:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:4F:74:FF:B5:CD:5E:1D:F6:C7:30:60:0A:87:32:38:2A:99:C2:F5
X509v3 Authority Key Identifier:
keyid:E0:D5:D5:61:E7:6E:F2:59:C4:A0:2D:F3:0F:35:06:4D:ED:ED:F2:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4NXVYedu8lnEoC3zDzUGTe3t8tc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/d45469-0c7b-4410-bb5e-7dc528aa5d4e/1/4NXVYedu8lnEoC3zDzUGTe3t8tc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/23/d45469-0c7b-4410-bb5e-7dc528aa5d4e/1/4NXVYedu8lnEoC3zDzUGTe3t8tc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:43:9d:4b:8e:97:8d:55:d9:80:3a:d6:e8:b8:1f:80:3c:b6:
f8:eb:84:c6:98:e8:b1:c5:01:b7:c5:3b:ff:32:91:7f:59:19:
ad:d3:be:56:53:5a:bc:94:ce:db:1a:20:87:35:c8:e2:f2:bd:
54:f8:fd:99:b2:7a:0d:fa:0f:aa:a1:ea:6d:25:fc:70:17:5b:
3c:cc:a4:b4:e4:7d:97:5a:94:1f:9c:39:38:f5:e4:22:12:e7:
49:1e:4b:da:c9:f3:a5:ea:1c:b1:9b:8e:70:79:f9:99:da:b5:
d5:6b:64:6f:8a:e6:3b:4b:d4:90:03:6f:7a:ed:7e:24:b6:1e:
cc:bb:8e:3a:7a:a0:f1:54:89:7c:b0:96:2e:d8:55:1c:62:fc:
d5:49:85:32:0c:5b:86:b7:08:55:34:c2:cd:9b:76:7f:5c:70:
cd:8c:68:e7:8e:ab:05:1b:f4:76:0b:88:4b:bf:8b:4d:9a:81:
a1:9d:2c:04:50:32:a7:6b:d3:1b:6d:42:0b:f9:da:1a:b3:8b:
a5:0e:ec:9c:ec:bf:1f:9e:7b:1c:ea:41:4d:cb:e8:4b:59:bd:
a2:55:2a:e1:26:ac:e5:7d:70:d2:04:91:e1:7e:3c:ae:1b:11:
75:cc:14:ee:c7:b5:90:53:78:48:54:bc:22:fb:0d:f3:06:4c:
37:57:6a:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 14:16:08 2025 by rpki-client