Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/8f90a5-c878-4dd4-b2db-4e5861187c4f/1/4f9iX0oY0E1ZCludc7JVGkNbcXI.mft
File: 4f9iX0oY0E1ZCludc7JVGkNbcXI.mft (raw, json)
Hash identifier: 4Uij7i86soF0NlVbeFHtDnI+ORwe3E7XMIMZKr0IGR4=
Subject key identifier: 59:DB:95:5F:A0:94:FB:8A:DA:A7:89:AA:AB:1B:56:CA:C2:CD:8F:41
Authority key identifier: E1:FF:62:5F:4A:18:D0:4D:59:0A:5B:9D:73:B2:55:1A:43:5B:71:72
Certificate issuer: /CN=e1ff625f4a18d04d590a5b9d73b2551a435b7172
Certificate serial: 019885B173BCDF66895630A0729953FA2B89
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4f9iX0oY0E1ZCludc7JVGkNbcXI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/8f90a5-c878-4dd4-b2db-4e5861187c4f/1/4f9iX0oY0E1ZCludc7JVGkNbcXI.mft
Manifest number: 0FDE
Signing time: Thu 07 Aug 2025 18:00:55 +0000
Manifest this update: Thu 07 Aug 2025 18:00:55 +0000
Manifest next update: Fri 08 Aug 2025 18:00:55 +0000
Files and hashes: 1: 4f9iX0oY0E1ZCludc7JVGkNbcXI.crl (hash: UqdfUvi9PZ2TYaD3fA76/04oIAOHvZCWpwviB5P8ffc=)
2: v-UIauQZjW8hDMdx3w3tSE6IDRc.roa (hash: uCYTkmd7Ahc37aZdyBrq8T1Px2W2MX7+A97XE/19qf0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/8f90a5-c878-4dd4-b2db-4e5861187c4f/1/4f9iX0oY0E1ZCludc7JVGkNbcXI.crl
rsync://rpki.ripe.net/repository/DEFAULT/54/8f90a5-c878-4dd4-b2db-4e5861187c4f/1/4f9iX0oY0E1ZCludc7JVGkNbcXI.mft
rsync://rpki.ripe.net/repository/DEFAULT/4f9iX0oY0E1ZCludc7JVGkNbcXI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 08 Aug 2025 16:13:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:85:b1:73:bc:df:66:89:56:30:a0:72:99:53:fa:2b:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e1ff625f4a18d04d590a5b9d73b2551a435b7172
Validity
Not Before: Aug 7 18:00:55 2025 GMT
Not After : Aug 8 18:00:55 2025 GMT
Subject: CN=59db955fa094fb8adaa789aaab1b56cac2cd8f41
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:10:3c:b9:c3:06:ff:50:51:47:e6:65:fd:55:
e9:40:66:bd:d3:1e:02:72:1a:f5:b0:06:53:12:d5:
29:4f:4f:f9:27:82:28:f8:a9:57:67:a4:2e:c1:3d:
15:cd:54:f9:56:87:02:c0:43:fd:50:cc:e2:69:47:
08:8c:a6:c2:9f:3d:b1:b3:73:02:1b:73:09:c8:ce:
d9:e6:2f:c7:16:66:17:25:82:33:aa:1a:ad:b6:ff:
eb:cf:0e:af:2e:68:f1:70:8d:29:6a:35:46:3d:ff:
45:0d:ea:f5:7f:15:94:73:a6:45:60:6b:d1:c0:f0:
b2:31:0a:00:6a:b4:f8:b9:86:93:7c:43:d0:42:b2:
4f:4f:ef:ae:d5:7c:a9:39:88:17:26:7e:f9:c8:1c:
28:2c:0b:2b:ec:ba:75:3f:76:97:d9:0d:85:df:60:
3a:ce:bc:72:f5:43:ce:7b:1a:b4:2b:3f:aa:ac:a9:
9f:ed:95:92:5d:ad:83:b5:5e:fd:2c:5c:41:89:e8:
d5:73:77:f4:9b:0b:df:ae:9c:63:72:fd:97:c2:8b:
93:d8:9a:f0:a3:65:5f:c4:cb:f8:44:95:49:b4:89:
c1:9b:e1:60:33:09:65:28:92:f8:9e:3c:46:d8:15:
5f:4b:26:7b:56:07:2c:32:20:3c:ad:68:47:34:9e:
a1:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:DB:95:5F:A0:94:FB:8A:DA:A7:89:AA:AB:1B:56:CA:C2:CD:8F:41
X509v3 Authority Key Identifier:
keyid:E1:FF:62:5F:4A:18:D0:4D:59:0A:5B:9D:73:B2:55:1A:43:5B:71:72
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f9iX0oY0E1ZCludc7JVGkNbcXI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/8f90a5-c878-4dd4-b2db-4e5861187c4f/1/4f9iX0oY0E1ZCludc7JVGkNbcXI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/8f90a5-c878-4dd4-b2db-4e5861187c4f/1/4f9iX0oY0E1ZCludc7JVGkNbcXI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:62:b8:a9:91:ac:d0:37:e5:6e:fc:2e:78:08:e2:cc:68:35:
75:27:b5:f3:49:c7:7a:b0:af:25:d9:fb:35:74:62:1d:96:80:
12:1c:d8:96:2b:75:11:bb:1a:0a:ef:16:69:a8:4d:43:c5:ed:
0d:34:a6:00:cc:37:61:2c:9c:64:bf:f4:9e:64:f5:2d:0e:e6:
69:95:f5:f4:5d:18:56:51:50:5d:5d:42:67:4e:f7:7f:43:fe:
03:5e:ab:42:17:8f:c9:88:62:88:71:c8:72:ba:d7:8a:5c:4d:
23:1b:4a:e7:b4:2c:9f:19:5a:65:3f:d1:38:d5:e4:26:f3:dc:
64:3f:f1:bc:7a:0e:39:56:90:26:dc:ed:3e:48:7a:58:9f:48:
e5:a6:83:75:18:fe:76:12:80:5e:3e:0b:4d:8e:fe:13:db:03:
fb:8d:f9:74:14:ef:2c:12:b6:3e:ce:61:7e:fa:2c:49:fd:c1:
41:ca:04:86:84:ee:2b:71:27:d0:df:4a:a9:7b:0b:53:38:ee:
07:12:51:3a:85:87:dd:b4:b3:74:0a:98:ee:3d:f4:ab:db:1d:
eb:2c:98:37:7e:33:f7:2d:fe:5a:19:84:d5:8f:4c:c4:94:e0:
f7:1b:dd:28:3d:83:13:ee:09:b5:0b:3c:13:9d:4b:da:87:01:
d7:f4:35:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 20:24:50 2025 by rpki-client