Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/68569f-96cf-45e3-9dab-2ea52896bae1/1/4q9q9tGZ8R7LpDVVEOmbficatUA.mft
File: 4q9q9tGZ8R7LpDVVEOmbficatUA.mft (raw, json)
Hash identifier: sMkXsFhAGjHctEO4jsJGTEKR1fzra9SGIyZEyYtM45c=
Subject key identifier: B1:DC:A8:D1:2E:38:CB:70:AE:DB:1E:CB:8B:6B:90:59:E9:D4:BB:11
Authority key identifier: E2:AF:6A:F6:D1:99:F1:1E:CB:A4:35:55:10:E9:9B:7E:27:1A:B5:40
Certificate issuer: /CN=e2af6af6d199f11ecba4355510e99b7e271ab540
Certificate serial: 019896A6B9A0FD948E549EE17CDACB66A3EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4q9q9tGZ8R7LpDVVEOmbficatUA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/68569f-96cf-45e3-9dab-2ea52896bae1/1/4q9q9tGZ8R7LpDVVEOmbficatUA.mft
Manifest number: 015F
Signing time: Mon 11 Aug 2025 01:02:45 +0000
Manifest this update: Mon 11 Aug 2025 01:02:45 +0000
Manifest next update: Tue 12 Aug 2025 01:02:45 +0000
Files and hashes: 1: 4q9q9tGZ8R7LpDVVEOmbficatUA.crl (hash: Pl5Ii9Ke3i+qi2vhGl2uSzH7zFI1gAZcWrrnFEX7jOE=)
2: C-s3qmcWvVMYI1a9KzViDKmJV5c.roa (hash: /bw45CjGjbfD9z7uFQfaYryXfUKu5UGOeYHJY32SaeY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/81/68569f-96cf-45e3-9dab-2ea52896bae1/1/4q9q9tGZ8R7LpDVVEOmbficatUA.crl
rsync://rpki.ripe.net/repository/DEFAULT/81/68569f-96cf-45e3-9dab-2ea52896bae1/1/4q9q9tGZ8R7LpDVVEOmbficatUA.mft
rsync://rpki.ripe.net/repository/DEFAULT/4q9q9tGZ8R7LpDVVEOmbficatUA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 12 Aug 2025 01:02:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:96:a6:b9:a0:fd:94:8e:54:9e:e1:7c:da:cb:66:a3:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e2af6af6d199f11ecba4355510e99b7e271ab540
Validity
Not Before: Aug 11 01:02:45 2025 GMT
Not After : Aug 12 01:02:45 2025 GMT
Subject: CN=b1dca8d12e38cb70aedb1ecb8b6b9059e9d4bb11
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:4f:54:ec:b4:14:87:5a:22:99:e5:05:8c:a1:
4a:72:cc:3a:70:ff:da:ea:8a:4c:22:37:00:15:2c:
f5:d8:fe:67:ba:b9:0b:6f:37:ce:b9:22:54:5b:e5:
54:bb:0a:93:ee:64:f5:1d:77:1b:f2:4f:58:ba:15:
5f:1f:66:ba:6d:e1:61:4a:58:68:86:66:33:28:f5:
3a:c5:f6:f5:dc:a3:93:b8:9c:18:53:bc:c0:b1:96:
41:1d:9e:4d:51:dc:5c:ef:55:b5:97:cb:af:d0:ce:
cd:de:9a:d1:4a:9d:42:bb:7a:34:2f:57:d5:f6:5f:
a6:21:d6:7c:01:da:81:eb:46:1c:d7:f4:d6:38:b0:
ef:29:1b:a3:54:96:d4:06:9f:63:fc:dc:47:c5:34:
8a:7d:42:b8:d7:0c:0d:00:3c:67:74:86:0c:81:b0:
9d:ba:64:d7:49:b4:39:b8:9e:62:fe:2f:fd:fb:dc:
b7:ea:2d:9b:21:40:4f:0d:a5:d4:4d:4c:3f:a0:26:
53:60:47:5d:14:d4:d9:15:0b:26:cc:5d:23:da:89:
2d:d7:8b:f6:90:3c:d1:51:73:86:5e:14:a9:9e:ea:
c7:dc:d7:92:4c:3b:49:be:86:d8:48:8b:5a:22:0b:
5a:3f:65:9b:10:02:17:8a:5f:aa:99:95:dc:f9:67:
ac:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:DC:A8:D1:2E:38:CB:70:AE:DB:1E:CB:8B:6B:90:59:E9:D4:BB:11
X509v3 Authority Key Identifier:
keyid:E2:AF:6A:F6:D1:99:F1:1E:CB:A4:35:55:10:E9:9B:7E:27:1A:B5:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4q9q9tGZ8R7LpDVVEOmbficatUA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/68569f-96cf-45e3-9dab-2ea52896bae1/1/4q9q9tGZ8R7LpDVVEOmbficatUA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/68569f-96cf-45e3-9dab-2ea52896bae1/1/4q9q9tGZ8R7LpDVVEOmbficatUA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
18:67:1a:28:5f:35:b6:23:1d:07:81:e1:b0:30:cc:bd:41:e2:
48:30:13:cd:5a:05:60:e7:c4:1a:96:85:00:7d:44:4f:ab:16:
8e:78:f1:ae:12:b9:53:ad:7a:7f:5f:f7:59:6a:d7:9c:99:09:
55:9d:cb:d7:2c:38:30:89:68:d3:35:07:75:1f:47:0a:09:bd:
7a:2b:cf:29:6b:27:32:f6:03:98:c2:ef:f9:92:ac:c9:9c:27:
8f:09:dc:d4:7c:c5:2e:d6:15:ed:28:9f:1c:da:0f:d2:0f:5d:
a7:41:0f:55:1d:9f:c3:f0:96:a9:68:b5:d3:49:fd:db:3f:ed:
bb:16:20:da:63:01:98:a8:c5:36:6a:aa:48:1a:74:68:fe:b9:
e9:ef:d5:cc:6c:10:d4:06:79:86:b5:7d:88:dc:25:54:3a:e7:
16:7d:a5:02:c6:80:66:88:f6:05:9a:a6:de:2d:67:0b:14:b5:
ee:04:a0:ea:aa:3d:9a:4d:c7:ef:1a:f6:e5:56:cf:58:a4:b2:
c4:60:b8:66:f9:4f:9f:8b:e0:40:67:4a:bb:72:8c:96:4c:ba:
9f:76:4a:eb:18:fc:97:5c:72:d9:fe:4f:5e:0c:10:ef:b1:1c:
f0:5b:fc:5c:50:2c:f7:6e:ee:08:f1:dc:59:c1:69:c8:c5:9c:
7a:93:6f:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 11 09:54:16 2025 by rpki-client