Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/3fba05-daed-43b7-b870-fa02c1265d5e/1/4g-H2rlrUPdu6kmxgeqU0mogUyc.mft
File: 4g-H2rlrUPdu6kmxgeqU0mogUyc.mft (raw, json)
Hash identifier: cA50jB/Etmk/kZ8xsgqtrfhF0zNbSCxmeXwgkiBGsu8=
Subject key identifier: 5F:A2:9D:FA:F5:2C:84:CB:A2:AC:D2:BF:68:51:42:6B:48:84:83:34
Authority key identifier: E2:0F:87:DA:B9:6B:50:F7:6E:EA:49:B1:81:EA:94:D2:6A:20:53:27
Certificate issuer: /CN=e20f87dab96b50f76eea49b181ea94d26a205327
Certificate serial: 01989600AAB56B123E37297BB72AE6491102
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4g-H2rlrUPdu6kmxgeqU0mogUyc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/3fba05-daed-43b7-b870-fa02c1265d5e/1/4g-H2rlrUPdu6kmxgeqU0mogUyc.mft
Manifest number: 162B
Signing time: Sun 10 Aug 2025 22:01:22 +0000
Manifest this update: Sun 10 Aug 2025 22:01:22 +0000
Manifest next update: Mon 11 Aug 2025 22:01:22 +0000
Files and hashes: 1: 4g-H2rlrUPdu6kmxgeqU0mogUyc.crl (hash: Q3Nvhb5ZAk5MVSWczGEBjCYh80kOxQ+KD94AE2urMMg=)
2: 8e6EuYvdvJ1TbEt2w_l--VFTSVE.roa (hash: lEOGzvYRz251FXAafldpzBiZsWV7u1gV99thpvyYuY4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/3fba05-daed-43b7-b870-fa02c1265d5e/1/4g-H2rlrUPdu6kmxgeqU0mogUyc.crl
rsync://rpki.ripe.net/repository/DEFAULT/2d/3fba05-daed-43b7-b870-fa02c1265d5e/1/4g-H2rlrUPdu6kmxgeqU0mogUyc.mft
rsync://rpki.ripe.net/repository/DEFAULT/4g-H2rlrUPdu6kmxgeqU0mogUyc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 11 Aug 2025 22:01:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:96:00:aa:b5:6b:12:3e:37:29:7b:b7:2a:e6:49:11:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e20f87dab96b50f76eea49b181ea94d26a205327
Validity
Not Before: Aug 10 22:01:22 2025 GMT
Not After : Aug 11 22:01:22 2025 GMT
Subject: CN=5fa29dfaf52c84cba2acd2bf6851426b48848334
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:e2:fd:0e:96:6d:36:bd:93:27:8b:d7:98:a2:
3a:8b:aa:41:bd:0c:01:19:fd:5f:6b:e5:7c:8c:fe:
4e:9e:8f:ac:0b:38:b5:cb:e7:75:8c:18:18:39:14:
30:54:be:6b:23:f1:3e:50:e3:2b:f4:c3:12:79:48:
dd:d9:fa:d1:25:f9:47:66:36:38:50:23:12:8d:ed:
f2:e4:7e:66:01:12:28:cd:1c:61:d4:5d:71:fa:61:
0f:35:ec:0b:ee:f2:88:e2:43:a8:83:65:86:ea:d8:
fd:51:1d:68:e1:58:3a:25:56:92:fd:0b:5b:89:ba:
a4:30:a7:b9:e2:52:7c:3f:e0:c6:fd:11:08:4e:8c:
81:aa:e4:78:9a:90:ef:2b:9d:b8:f8:62:64:bc:90:
b7:91:86:fb:a7:aa:f6:e4:c3:d3:7a:67:14:8a:21:
e0:50:65:fa:b6:5c:7c:a7:cb:4e:18:c5:68:31:f5:
3c:8e:4c:5d:53:f9:88:db:a1:30:3a:a8:d2:d7:aa:
85:54:e7:11:e1:60:0e:5e:0e:5f:2e:c1:96:f2:e4:
d2:5a:87:90:18:3d:dd:ab:12:54:43:cd:3d:7f:87:
84:c7:91:f4:de:ad:a1:28:28:5e:13:58:6a:bc:c1:
af:92:9f:d5:5e:9d:db:11:f6:7d:87:fd:fe:27:e1:
8f:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:A2:9D:FA:F5:2C:84:CB:A2:AC:D2:BF:68:51:42:6B:48:84:83:34
X509v3 Authority Key Identifier:
keyid:E2:0F:87:DA:B9:6B:50:F7:6E:EA:49:B1:81:EA:94:D2:6A:20:53:27
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4g-H2rlrUPdu6kmxgeqU0mogUyc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/3fba05-daed-43b7-b870-fa02c1265d5e/1/4g-H2rlrUPdu6kmxgeqU0mogUyc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/3fba05-daed-43b7-b870-fa02c1265d5e/1/4g-H2rlrUPdu6kmxgeqU0mogUyc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:e6:d1:3f:6b:51:77:e4:38:4e:f5:f1:db:b8:d6:68:ce:ea:
cd:e1:05:a6:ab:37:ac:d6:fd:28:0b:8c:12:b4:50:11:4c:d3:
20:83:7a:3f:7b:ec:b7:5d:fb:e5:12:23:99:95:7f:e0:e8:c5:
76:3e:37:c1:e7:fe:89:f2:75:11:c1:11:ab:95:e0:39:a6:05:
2e:2c:93:24:a1:78:8a:85:74:e0:b1:07:f2:71:db:fb:e8:30:
7a:8d:03:31:f4:22:56:44:98:9d:c6:af:11:27:aa:3b:65:e3:
d0:81:d8:d4:58:31:15:38:53:8a:4f:d7:ce:79:98:a1:8e:d1:
f6:39:16:29:4e:27:8a:ee:36:0b:b3:e9:01:42:ef:e8:a5:d9:
5f:39:3e:ae:87:54:e5:fc:58:2d:35:c4:b4:f5:15:48:a2:c2:
d9:f8:d2:f1:08:29:b5:86:08:89:57:a4:a9:bd:00:30:02:2b:
c3:68:2e:b8:ae:2c:1c:1d:14:a4:6c:09:c6:ac:96:57:80:01:
ee:83:08:e2:9e:85:97:b4:c9:36:b7:5d:c7:92:98:28:44:3f:
b1:9d:ac:35:f3:36:f9:e2:04:8f:54:07:19:4b:c3:c9:96:0f:
ce:91:58:a4:5e:26:3c:26:89:d9:2a:ee:54:f9:7b:10:76:15:
81:c5:34:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 11 07:23:30 2025 by rpki-client