Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/be9dab-5f27-43ce-ab22-739a91c620ac/1/4HdrCDj6Dh2hvk7cz4kkvUE7Hbc.mft
File: 4HdrCDj6Dh2hvk7cz4kkvUE7Hbc.mft (raw, json)
Hash identifier: k0F7Fvv5HxM/DHJALIsXXRz3ko4Q2qIvg2Llv92FV64=
Subject key identifier: 94:90:31:1E:39:D6:5A:BB:BB:75:34:01:DC:5F:69:6D:56:F4:2C:8D
Authority key identifier: E0:77:6B:08:38:FA:0E:1D:A1:BE:4E:DC:CF:89:24:BD:41:3B:1D:B7
Certificate issuer: /CN=e0776b0838fa0e1da1be4edccf8924bd413b1db7
Certificate serial: 01988C8ED4CA69CF8BD3D4F8DCFDBCB970C6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4HdrCDj6Dh2hvk7cz4kkvUE7Hbc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/be9dab-5f27-43ce-ab22-739a91c620ac/1/4HdrCDj6Dh2hvk7cz4kkvUE7Hbc.mft
Manifest number: 01B9
Signing time: Sat 09 Aug 2025 02:00:27 +0000
Manifest this update: Sat 09 Aug 2025 02:00:27 +0000
Manifest next update: Sun 10 Aug 2025 02:00:27 +0000
Files and hashes: 1: 4HdrCDj6Dh2hvk7cz4kkvUE7Hbc.crl (hash: X0Q63LS+L5YURNZnUVol3ZQkh0nQ7zsHKAGYhBLAWf8=)
2: U8sue3gZLueOLUNHI3zh7NTbaBA.roa (hash: aGzdRWMTM0/YLdPvutTc1s3WsmhuwZtks1XpZ/1ew6k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/be9dab-5f27-43ce-ab22-739a91c620ac/1/4HdrCDj6Dh2hvk7cz4kkvUE7Hbc.crl
rsync://rpki.ripe.net/repository/DEFAULT/2d/be9dab-5f27-43ce-ab22-739a91c620ac/1/4HdrCDj6Dh2hvk7cz4kkvUE7Hbc.mft
rsync://rpki.ripe.net/repository/DEFAULT/4HdrCDj6Dh2hvk7cz4kkvUE7Hbc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 10 Aug 2025 02:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8c:8e:d4:ca:69:cf:8b:d3:d4:f8:dc:fd:bc:b9:70:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e0776b0838fa0e1da1be4edccf8924bd413b1db7
Validity
Not Before: Aug 9 02:00:27 2025 GMT
Not After : Aug 10 02:00:27 2025 GMT
Subject: CN=9490311e39d65abbbb753401dc5f696d56f42c8d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:49:f1:46:b2:ea:f4:72:73:a8:bd:7d:3b:2e:
b1:3c:89:66:84:03:67:05:40:c5:98:33:67:c1:cd:
31:a6:8d:72:b2:15:9f:ab:d2:0f:18:63:94:e5:20:
d0:46:74:b4:79:11:dc:25:ff:6b:3d:b8:a5:e9:92:
4a:4e:7c:71:a1:36:c8:1a:c6:b4:e2:af:8b:c7:32:
46:c7:d5:cd:22:0b:a1:de:69:52:57:b0:fa:17:ef:
f4:93:0d:4c:85:db:b5:da:bf:e9:0d:79:a0:9a:fb:
47:5a:76:a4:cc:96:b9:d4:c7:17:97:3f:90:8a:64:
bf:ff:55:0d:52:ac:54:28:98:44:3a:9f:04:fc:3b:
12:46:56:06:88:35:75:85:09:ba:51:63:61:ec:5c:
fd:99:32:3e:78:7e:43:ae:d4:05:ca:50:ca:5f:4b:
e7:a1:d0:22:b8:2c:bf:e0:da:26:33:da:d1:22:86:
3f:59:a2:a6:cc:a9:13:6e:20:ca:66:7c:cd:1a:84:
7d:74:36:e0:be:54:6c:c0:06:53:04:02:f3:0c:23:
e0:2c:99:ef:c3:6b:af:a6:39:43:74:a2:75:99:18:
95:9a:cd:29:0c:bf:57:a0:e9:fb:87:b6:a1:70:01:
c0:17:26:16:02:ef:29:7f:83:0d:49:28:1a:08:46:
43:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:90:31:1E:39:D6:5A:BB:BB:75:34:01:DC:5F:69:6D:56:F4:2C:8D
X509v3 Authority Key Identifier:
keyid:E0:77:6B:08:38:FA:0E:1D:A1:BE:4E:DC:CF:89:24:BD:41:3B:1D:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4HdrCDj6Dh2hvk7cz4kkvUE7Hbc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/be9dab-5f27-43ce-ab22-739a91c620ac/1/4HdrCDj6Dh2hvk7cz4kkvUE7Hbc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/be9dab-5f27-43ce-ab22-739a91c620ac/1/4HdrCDj6Dh2hvk7cz4kkvUE7Hbc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:91:a8:fa:b7:dc:33:08:62:c3:9e:10:2b:cf:d9:0d:d1:e5:
b2:f9:51:cc:43:f6:27:70:a2:7b:f2:b3:dc:83:a6:39:db:98:
8c:e3:f5:82:b2:7c:66:b1:cf:5a:e8:86:7a:1e:cb:6b:d7:b5:
11:a1:32:f8:19:93:05:e4:c5:bb:7f:18:b3:22:46:f3:b3:8e:
1a:84:df:03:c2:8d:dc:4f:32:0e:46:d2:9e:d7:22:2d:57:15:
ae:ba:52:a8:2c:ff:a8:08:8e:48:6d:28:99:6e:96:37:10:54:
a1:5f:9e:db:00:fa:d0:46:fa:e3:5f:90:19:3d:64:b3:9e:01:
f4:aa:cb:41:30:46:ca:a9:f4:26:2f:6c:cb:d8:85:32:6f:2c:
a1:1f:20:f3:85:fd:39:f4:bd:38:ad:c9:fd:32:3e:b1:1d:6f:
9b:97:9c:97:d8:20:84:75:cd:ab:df:70:9c:d9:b8:91:95:f1:
4a:bc:ee:c4:d6:6a:eb:37:a5:97:69:d4:e5:43:68:35:17:f3:
c1:2a:6d:d5:ec:5a:bf:57:44:99:78:a2:d8:5b:6b:7f:75:05:
6f:8c:8c:fc:03:71:73:21:96:5d:18:f0:b6:d6:1c:54:b7:34:
22:05:a6:18:ff:62:9e:fe:ea:a0:b6:e6:d8:90:f8:3b:bd:57:
6a:0b:7f:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 10:31:33 2025 by rpki-client