
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/0fc7e5-b1f6-474e-99a7-eda23f2f17e9/1/4YdKiHqiiNq3LGWOk2lO1dr9ICY.mft
File: 4YdKiHqiiNq3LGWOk2lO1dr9ICY.mft (raw, json)
Hash identifier: CAXlVij65HV3KdjjYxCC1R6gLgBJLfkcviFdEeGGeTo=
Subject key identifier: 44:90:93:B7:C5:B5:F9:8C:CB:3A:E3:15:69:D5:E5:7A:DB:53:B7:EF
Authority key identifier: E1:87:4A:88:7A:A2:88:DA:B7:2C:65:8E:93:69:4E:D5:DA:FD:20:26
Certificate issuer: /CN=e1874a887aa288dab72c658e93694ed5dafd2026
Certificate serial: 01989892FCBCA4FC14BA602EC912B0F437DD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4YdKiHqiiNq3LGWOk2lO1dr9ICY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/0fc7e5-b1f6-474e-99a7-eda23f2f17e9/1/4YdKiHqiiNq3LGWOk2lO1dr9ICY.mft
Manifest number: 1185
Signing time: Mon 11 Aug 2025 10:00:26 +0000
Manifest this update: Mon 11 Aug 2025 10:00:26 +0000
Manifest next update: Tue 12 Aug 2025 10:00:26 +0000
Files and hashes: 1: 4YdKiHqiiNq3LGWOk2lO1dr9ICY.crl (hash: 8p0njhFnLRQ+KK8NHoalLGmQK5YCOp7+Mk3/a1+WJ0c=)
2: jnxiRSp6LL1UuZSH55PRoBU9Uug.roa (hash: EzydjgFzmvXFQDadZtYOhUDG1+kFGRWU2sNIMDhFrQ0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/0fc7e5-b1f6-474e-99a7-eda23f2f17e9/1/4YdKiHqiiNq3LGWOk2lO1dr9ICY.crl
rsync://rpki.ripe.net/repository/DEFAULT/24/0fc7e5-b1f6-474e-99a7-eda23f2f17e9/1/4YdKiHqiiNq3LGWOk2lO1dr9ICY.mft
rsync://rpki.ripe.net/repository/DEFAULT/4YdKiHqiiNq3LGWOk2lO1dr9ICY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 12 Aug 2025 10:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:98:92:fc:bc:a4:fc:14:ba:60:2e:c9:12:b0:f4:37:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e1874a887aa288dab72c658e93694ed5dafd2026
Validity
Not Before: Aug 11 10:00:26 2025 GMT
Not After : Aug 12 10:00:26 2025 GMT
Subject: CN=449093b7c5b5f98ccb3ae31569d5e57adb53b7ef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:3a:12:1b:5a:13:3f:75:4f:81:97:32:38:62:
42:9d:10:05:e1:14:ed:5a:6d:16:fa:52:23:2a:4b:
9e:cc:85:86:42:fb:2a:88:dc:4e:33:12:ef:de:02:
58:0d:77:9b:ff:56:33:3c:c7:ab:46:14:4d:7d:5d:
df:b4:11:4b:ff:6a:8d:fc:97:6e:c3:76:0b:89:df:
e4:10:f2:00:ab:42:1a:b4:ef:31:15:65:75:63:59:
be:88:9d:49:75:16:60:df:f9:df:05:e6:21:a4:d5:
56:17:60:68:73:d0:1e:28:83:94:85:a9:2b:b8:b8:
0b:84:1f:a0:9d:e7:24:9a:0f:0f:b9:16:0a:b0:43:
a7:aa:35:8b:1a:86:46:65:42:0e:9a:18:7c:ab:c0:
8c:05:98:75:3a:fa:ee:0c:76:e3:b8:8b:1a:9a:ef:
09:17:fa:15:a1:f4:a3:ec:66:29:8a:3d:20:fa:b0:
3e:2a:fd:d8:87:b3:e9:89:30:6a:5c:f5:60:0b:c5:
ff:e2:e5:78:01:ca:34:43:cb:4a:91:31:fc:61:36:
c1:aa:1d:06:de:2f:33:f1:d0:64:db:df:a7:9d:71:
55:6d:bf:42:c1:c3:64:2d:43:11:57:17:88:1b:5b:
11:32:c2:4f:1a:71:41:84:cd:9c:9d:24:3e:4c:05:
3c:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:90:93:B7:C5:B5:F9:8C:CB:3A:E3:15:69:D5:E5:7A:DB:53:B7:EF
X509v3 Authority Key Identifier:
keyid:E1:87:4A:88:7A:A2:88:DA:B7:2C:65:8E:93:69:4E:D5:DA:FD:20:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4YdKiHqiiNq3LGWOk2lO1dr9ICY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/0fc7e5-b1f6-474e-99a7-eda23f2f17e9/1/4YdKiHqiiNq3LGWOk2lO1dr9ICY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/0fc7e5-b1f6-474e-99a7-eda23f2f17e9/1/4YdKiHqiiNq3LGWOk2lO1dr9ICY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:35:f8:76:47:fa:96:db:da:af:d7:cd:26:a5:6b:13:da:7d:
07:7a:cd:49:ea:b8:45:8a:13:14:b7:c2:f7:36:54:5d:9d:04:
55:de:9a:07:2e:23:1a:e4:23:9d:bb:8f:85:4f:4c:75:2a:66:
b5:32:6b:f2:b5:0f:7e:84:4f:89:1a:e4:3d:ed:22:ab:88:c5:
d4:8e:16:62:c1:7c:66:83:64:25:ec:66:23:59:e3:a8:8c:9c:
b0:f1:cc:80:95:05:d0:a0:73:89:4d:6f:aa:82:e1:11:cb:71:
4a:39:22:69:6e:ab:9e:6e:a0:b1:99:c7:a9:34:68:38:23:51:
8d:21:d2:02:28:e1:21:3b:63:81:51:c7:a3:4b:24:04:f9:47:
e8:d3:d5:47:70:2c:9b:35:9c:af:ef:15:44:d1:7b:9d:18:90:
27:ba:f5:61:16:08:b5:53:7a:28:0c:6d:8a:6e:69:b9:99:70:
3c:c9:05:b9:93:62:37:4c:34:a5:22:98:c5:dd:ec:56:39:9e:
b7:2e:e5:7c:92:bb:d0:9b:fd:72:64:2e:c8:be:56:cf:df:e6:
3d:c1:26:98:22:a7:a9:13:3d:7d:05:7c:86:d2:70:66:86:e6:
a6:bb:d4:1c:6f:bc:d4:b7:1b:b5:57:2b:9b:2b:3f:4e:69:62:
c2:17:f6:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 11 14:42:40 2025 by rpki-client