
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/33d639-49c2-4301-b6c3-bb6c6c457817/1/4HUznawWU11FeuiGK1NbzlHhIg8.mft
File: 4HUznawWU11FeuiGK1NbzlHhIg8.mft (raw, json)
Hash identifier: R0zRXTQ9RjqjCPNysem5kCHSdLjEXRy0/S4S9uO2gK0=
Subject key identifier: 5D:72:CC:EF:53:0B:37:2B:49:8E:F9:DE:81:3F:38:8D:AF:8E:6F:5F
Authority key identifier: E0:75:33:9D:AC:16:53:5D:45:7A:E8:86:2B:53:5B:CE:51:E1:22:0F
Certificate issuer: /CN=e075339dac16535d457ae8862b535bce51e1220f
Certificate serial: 0198A04D4EABA079D758A4BF97ACB130E10E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4HUznawWU11FeuiGK1NbzlHhIg8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/33d639-49c2-4301-b6c3-bb6c6c457817/1/4HUznawWU11FeuiGK1NbzlHhIg8.mft
Manifest number: 0474
Signing time: Tue 12 Aug 2025 22:01:17 +0000
Manifest this update: Tue 12 Aug 2025 22:01:17 +0000
Manifest next update: Wed 13 Aug 2025 22:01:17 +0000
Files and hashes: 1: 4HUznawWU11FeuiGK1NbzlHhIg8.crl (hash: TKIzK2lUmxrqkvGI+v6m5+qUvTPK+uyTuJADJbUKges=)
2: thETdmyhsrSxA59VxLlSHQ0J73Q.roa (hash: KY6/Rka8NKx7O/9lJJyGOxFVIRAxMy7b72Qvukxyq9Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/33d639-49c2-4301-b6c3-bb6c6c457817/1/4HUznawWU11FeuiGK1NbzlHhIg8.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/33d639-49c2-4301-b6c3-bb6c6c457817/1/4HUznawWU11FeuiGK1NbzlHhIg8.mft
rsync://rpki.ripe.net/repository/DEFAULT/4HUznawWU11FeuiGK1NbzlHhIg8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 Aug 2025 22:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:a0:4d:4e:ab:a0:79:d7:58:a4:bf:97:ac:b1:30:e1:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e075339dac16535d457ae8862b535bce51e1220f
Validity
Not Before: Aug 12 22:01:17 2025 GMT
Not After : Aug 13 22:01:17 2025 GMT
Subject: CN=5d72ccef530b372b498ef9de813f388daf8e6f5f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:d4:2d:8f:40:9c:8f:89:6f:2d:79:d0:40:54:
cf:37:41:b2:44:9d:dd:a9:38:4c:49:3e:9f:98:94:
b1:95:19:4c:f4:d1:5f:5a:57:18:a0:07:3d:6c:37:
4c:8f:a5:b7:fe:09:af:ea:ba:8f:8c:53:18:8a:4a:
e0:2a:a2:e0:47:0d:5b:6e:e9:4b:5d:4b:d9:32:54:
70:5f:6b:79:56:41:e9:76:e3:09:ea:f7:f1:58:bf:
f0:9b:f5:34:f9:f6:42:db:9d:25:49:96:4b:c8:b4:
96:c1:39:2d:da:6b:e4:35:6b:04:48:f9:96:db:cd:
8d:3a:1d:ef:f9:b5:b5:4e:a7:dc:7c:80:88:60:39:
56:5d:3a:1b:4a:7a:26:17:b0:73:3b:e5:79:a2:e4:
88:03:32:28:ae:9c:39:b4:a8:11:45:65:c4:ea:c4:
72:8e:ce:0a:b3:1e:c8:aa:a3:a9:6a:b2:17:16:25:
41:78:9d:de:3b:76:24:08:16:37:47:92:e8:eb:17:
27:70:ac:6b:0b:30:77:7d:19:00:8e:44:e1:a7:70:
82:13:50:c8:67:10:4b:ec:da:8a:7c:8d:31:de:b0:
5d:81:78:f1:c5:92:17:45:eb:38:fd:7d:6c:d3:1a:
b7:1a:fe:dc:8e:a2:cd:5e:93:3e:83:c2:0a:03:4d:
fd:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:72:CC:EF:53:0B:37:2B:49:8E:F9:DE:81:3F:38:8D:AF:8E:6F:5F
X509v3 Authority Key Identifier:
keyid:E0:75:33:9D:AC:16:53:5D:45:7A:E8:86:2B:53:5B:CE:51:E1:22:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4HUznawWU11FeuiGK1NbzlHhIg8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/33d639-49c2-4301-b6c3-bb6c6c457817/1/4HUznawWU11FeuiGK1NbzlHhIg8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/33d639-49c2-4301-b6c3-bb6c6c457817/1/4HUznawWU11FeuiGK1NbzlHhIg8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:fd:04:7b:df:29:0d:2e:c2:1e:93:3f:ab:1d:7f:ad:3d:c0:
29:21:2f:cb:e2:c1:78:d4:dd:63:0b:4d:27:eb:30:3c:8b:97:
e7:5e:b9:15:68:3d:98:b6:87:a9:a5:90:b0:bc:77:e7:e1:af:
4f:41:74:e5:33:b7:23:75:53:fa:4c:2e:e2:b9:f5:34:5c:a2:
09:4c:3f:a7:9d:34:17:6d:8b:18:d0:30:78:b1:5b:4d:27:fd:
e2:28:07:6e:c4:39:b2:80:76:de:8e:e1:32:92:a3:b3:31:7f:
61:1d:3f:66:9c:28:f0:3b:79:9f:33:16:86:b8:ac:d2:04:f4:
28:56:05:71:55:02:72:c5:8b:60:db:45:d4:e4:df:6b:9b:8f:
f2:3c:f2:6a:cf:da:7b:0f:46:19:af:3e:d8:3a:45:73:61:f8:
6f:b9:16:ce:d7:35:c9:34:11:be:de:a2:81:36:08:81:5b:58:
ae:c6:83:db:ed:bb:39:24:cc:68:06:f4:23:e4:ec:cd:13:40:
74:98:ba:2c:36:a4:bd:02:e1:a9:21:39:9c:85:2f:51:cf:b2:
91:e6:69:d4:74:d7:df:08:82:8a:47:6a:68:8d:07:89:2f:03:
62:5e:db:48:c3:b0:8d:9e:2b:18:d1:8d:69:e9:8c:ae:1a:ad:
e7:17:97:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 13 05:30:08 2025 by rpki-client