Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/f9f8fa-2988-445c-be94-913575c58f4a/1/4aWhf1DBNbGFHOwsdrD9cPncx54.mft
File: 4aWhf1DBNbGFHOwsdrD9cPncx54.mft (raw, json)
Hash identifier: dZhu5sETtcA7deQkzC9y3LcSifvZZpVdCETOV4xmpI0=
Subject key identifier: 80:FF:4C:A9:CF:63:E5:1F:B1:CF:A9:5D:AE:81:06:63:E9:CF:A4:D0
Authority key identifier: E1:A5:A1:7F:50:C1:35:B1:85:1C:EC:2C:76:B0:FD:70:F9:DC:C7:9E
Certificate issuer: /CN=e1a5a17f50c135b1851cec2c76b0fd70f9dcc79e
Certificate serial: 01987B9C8A974AD8662C76BBF50A5E43E925
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4aWhf1DBNbGFHOwsdrD9cPncx54.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/f9f8fa-2988-445c-be94-913575c58f4a/1/4aWhf1DBNbGFHOwsdrD9cPncx54.mft
Manifest number: 0495
Signing time: Tue 05 Aug 2025 19:01:53 +0000
Manifest this update: Tue 05 Aug 2025 19:01:53 +0000
Manifest next update: Wed 06 Aug 2025 19:01:53 +0000
Files and hashes: 1: 4aWhf1DBNbGFHOwsdrD9cPncx54.crl (hash: GvXC/nrULCFv202fhV/ADSS8IYt1VxvrL2BXaT7xvVY=)
2: hfRFZKITz5hu-gPvGNJloOjkOMc.roa (hash: D3UvYF9mG8nUIanHUFk48MzJyJwGvptN1rrytDvh8Eo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/82/f9f8fa-2988-445c-be94-913575c58f4a/1/4aWhf1DBNbGFHOwsdrD9cPncx54.crl
rsync://rpki.ripe.net/repository/DEFAULT/82/f9f8fa-2988-445c-be94-913575c58f4a/1/4aWhf1DBNbGFHOwsdrD9cPncx54.mft
rsync://rpki.ripe.net/repository/DEFAULT/4aWhf1DBNbGFHOwsdrD9cPncx54.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 Aug 2025 19:01:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7b:9c:8a:97:4a:d8:66:2c:76:bb:f5:0a:5e:43:e9:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e1a5a17f50c135b1851cec2c76b0fd70f9dcc79e
Validity
Not Before: Aug 5 19:01:53 2025 GMT
Not After : Aug 6 19:01:53 2025 GMT
Subject: CN=80ff4ca9cf63e51fb1cfa95dae810663e9cfa4d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:36:e6:ff:62:41:bb:b0:fc:72:7d:b9:21:41:
f9:34:a7:c4:4e:57:4d:16:b6:c8:6d:6e:3e:eb:81:
7e:21:dd:c6:d0:9f:1f:2e:ab:c7:78:39:36:8d:d8:
5e:a2:fe:c5:c3:81:c9:f9:3a:4d:dc:90:25:03:dd:
cb:4b:29:74:8c:15:93:dd:6d:4a:d4:fe:27:c2:73:
d7:20:0f:31:60:6e:69:c3:c9:06:b4:82:ab:dd:ca:
76:5b:ec:5e:71:b8:40:6c:43:27:5b:48:27:be:d2:
f2:2a:8a:7f:7f:f0:72:d6:70:40:e8:1e:c3:72:80:
6d:09:9e:39:35:cb:8b:90:5b:8a:03:77:57:e6:27:
10:c6:fb:d1:29:79:97:98:af:09:25:23:e7:c5:ea:
ea:6b:18:81:68:0f:63:d1:2a:d2:c5:f2:33:c9:05:
40:73:c5:dc:c2:69:77:97:2d:f0:56:81:c9:07:41:
11:56:dd:76:40:03:ec:4e:4f:30:50:fb:b5:a6:cf:
9c:ba:1e:37:61:74:77:95:36:06:92:86:92:d6:6b:
b2:8a:bd:21:4b:eb:77:da:52:7c:d1:9d:ab:c1:9f:
bd:7f:56:77:5c:24:2d:19:9f:27:4b:92:63:0e:8a:
ca:19:74:2d:c3:fc:37:12:3b:cf:20:e7:37:d9:4f:
e1:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:FF:4C:A9:CF:63:E5:1F:B1:CF:A9:5D:AE:81:06:63:E9:CF:A4:D0
X509v3 Authority Key Identifier:
keyid:E1:A5:A1:7F:50:C1:35:B1:85:1C:EC:2C:76:B0:FD:70:F9:DC:C7:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4aWhf1DBNbGFHOwsdrD9cPncx54.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/f9f8fa-2988-445c-be94-913575c58f4a/1/4aWhf1DBNbGFHOwsdrD9cPncx54.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/82/f9f8fa-2988-445c-be94-913575c58f4a/1/4aWhf1DBNbGFHOwsdrD9cPncx54.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:db:f7:15:46:63:27:da:8b:2b:80:8a:7b:03:33:ed:45:ea:
99:a3:15:47:1e:e1:e7:18:e5:3e:76:f9:d5:43:46:a8:8d:74:
a9:79:15:53:36:1e:5f:6a:eb:d2:dc:f7:6d:1b:db:50:95:e4:
23:d3:23:4f:19:6a:23:69:76:f8:08:09:fe:51:14:ca:9f:8b:
5f:0d:9a:f9:54:cc:47:83:ea:aa:11:59:b0:d7:57:bb:e4:60:
e7:f6:fd:72:95:6e:15:1a:27:2a:20:a7:8a:8d:35:04:7d:f6:
6d:a5:05:9a:81:8e:ff:96:2a:9c:1a:b4:88:37:3f:9c:7c:09:
80:d8:c3:6f:28:40:af:d8:47:fa:29:19:c7:14:c4:51:ee:be:
d8:04:2c:f2:69:10:29:20:c4:65:32:5c:b3:91:29:b5:d2:d0:
7f:11:02:af:48:69:cb:47:ab:4f:bd:44:d1:36:e8:54:5f:0c:
ee:f4:7d:4e:f0:ea:84:93:3b:6e:d1:04:6a:c7:31:a2:fc:61:
e5:56:26:3a:1f:2a:f3:b9:58:ac:72:a3:5d:24:cf:cf:cb:2b:
89:8d:e4:7a:63:20:1b:23:9d:1c:c2:e6:60:a9:f2:e2:39:bd:
b9:27:c8:d2:50:db:e8:b9:2d:1a:c3:74:e8:da:0a:d2:2b:b5:
f7:33:36:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 05:16:49 2025 by rpki-client