Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/b81460-e06c-4352-ab1b-bb380bcabd28/1/4HG570GlOChYzZ7vmKf7nRJqpK4.mft
File: 4HG570GlOChYzZ7vmKf7nRJqpK4.mft (raw, json)
Hash identifier: il85UphaxHXEunrtQuM2aXM27SdPl/QL2kxWrM7RqPQ=
Subject key identifier: A4:96:DE:26:B0:90:4B:89:30:C3:D8:32:8E:F1:32:C8:37:B0:E6:1E
Authority key identifier: E0:71:B9:EF:41:A5:38:28:58:CD:9E:EF:98:A7:FB:9D:12:6A:A4:AE
Certificate issuer: /CN=e071b9ef41a5382858cd9eef98a7fb9d126aa4ae
Certificate serial: 019873E2A6768A32D087527B757F00643042
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4HG570GlOChYzZ7vmKf7nRJqpK4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/b81460-e06c-4352-ab1b-bb380bcabd28/1/4HG570GlOChYzZ7vmKf7nRJqpK4.mft
Manifest number: 0340
Signing time: Mon 04 Aug 2025 07:01:30 +0000
Manifest this update: Mon 04 Aug 2025 07:01:30 +0000
Manifest next update: Tue 05 Aug 2025 07:01:30 +0000
Files and hashes: 1: 4HG570GlOChYzZ7vmKf7nRJqpK4.crl (hash: d9Spz0q/QtDGd5C/g7pVHi5oFdoP9glMbs8BAHzwak4=)
2: YBfLAkuYURNDoMTvjD2hLc0uuNc.roa (hash: gM7Y+qrK9OGNkcbA31bQAYiigRBUM5Di4cIR3nOhPM8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8d/b81460-e06c-4352-ab1b-bb380bcabd28/1/4HG570GlOChYzZ7vmKf7nRJqpK4.crl
rsync://rpki.ripe.net/repository/DEFAULT/8d/b81460-e06c-4352-ab1b-bb380bcabd28/1/4HG570GlOChYzZ7vmKf7nRJqpK4.mft
rsync://rpki.ripe.net/repository/DEFAULT/4HG570GlOChYzZ7vmKf7nRJqpK4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 07:01:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:73:e2:a6:76:8a:32:d0:87:52:7b:75:7f:00:64:30:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e071b9ef41a5382858cd9eef98a7fb9d126aa4ae
Validity
Not Before: Aug 4 07:01:30 2025 GMT
Not After : Aug 5 07:01:30 2025 GMT
Subject: CN=a496de26b0904b8930c3d8328ef132c837b0e61e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:e2:a7:34:d2:e5:6f:c5:a5:db:cf:9e:b2:be:
a4:86:7a:00:f7:03:57:54:6e:ea:74:7e:8f:83:ed:
51:94:69:73:dc:b6:00:de:95:f8:c3:aa:72:8e:cf:
b2:0b:57:01:cf:df:7a:33:e7:e5:a5:37:27:a0:75:
84:ec:ce:e5:21:de:ca:0c:bd:5c:4d:99:04:a9:b8:
64:c0:2b:7a:d0:ec:92:ce:67:3b:ec:f9:56:92:64:
ce:f8:3e:8e:16:82:a9:1b:65:b9:41:11:e6:f5:d1:
88:71:74:77:2a:1b:00:8e:07:e9:9f:28:af:26:32:
1e:2a:8c:14:3d:31:36:83:4c:b0:7e:66:f8:c5:3e:
e4:6b:5a:9b:97:44:2e:24:b7:79:ac:fe:5a:08:d1:
34:c4:ac:da:c9:11:97:f0:db:e7:7f:e3:6c:43:bf:
9b:0c:6c:9a:46:05:fe:b1:b7:2e:5d:e6:3f:2d:78:
9c:5a:b9:77:ca:d5:6b:ac:85:6a:54:89:8d:a9:d1:
c5:47:40:0d:df:09:43:47:23:4a:c1:2d:07:bf:d0:
99:7a:79:57:e5:9a:5b:fa:71:23:9d:1d:00:46:71:
ca:90:cb:54:82:e1:5b:65:e6:ed:f1:8f:98:e4:28:
82:0c:d4:fa:67:58:a0:83:14:a3:89:ae:1d:5e:09:
8a:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:96:DE:26:B0:90:4B:89:30:C3:D8:32:8E:F1:32:C8:37:B0:E6:1E
X509v3 Authority Key Identifier:
keyid:E0:71:B9:EF:41:A5:38:28:58:CD:9E:EF:98:A7:FB:9D:12:6A:A4:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4HG570GlOChYzZ7vmKf7nRJqpK4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/b81460-e06c-4352-ab1b-bb380bcabd28/1/4HG570GlOChYzZ7vmKf7nRJqpK4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/b81460-e06c-4352-ab1b-bb380bcabd28/1/4HG570GlOChYzZ7vmKf7nRJqpK4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:61:0b:d2:e4:a8:93:40:0f:6a:eb:32:4b:af:5a:0d:69:a8:
a8:45:18:82:1f:af:27:db:19:fb:c7:34:d2:7a:81:1a:b1:a0:
7e:b3:19:c3:1a:98:da:50:e3:8a:13:25:a0:87:b2:2f:2d:fc:
44:7f:eb:8d:17:bf:f3:1b:1e:19:87:2e:76:f2:47:f2:ad:be:
60:17:5c:6c:46:34:13:60:85:09:0c:72:9d:e9:79:2c:0b:69:
9b:36:8a:d0:16:6f:d0:5d:3e:be:b5:04:25:43:d0:ab:9b:5c:
d8:6a:e1:bf:9e:9a:a7:ea:01:fd:4c:52:d5:55:62:dc:b0:94:
3e:17:e2:b2:68:bc:69:f0:48:a6:01:9a:cf:fc:14:59:e6:2d:
23:bb:09:98:a8:78:d8:4f:c9:7f:98:ce:87:89:67:03:36:74:
05:b0:05:68:05:bc:e9:1b:a0:a9:38:49:a6:70:a7:3f:c4:eb:
d9:bf:a3:78:21:f8:1d:01:85:9d:fa:5e:15:7c:4c:d5:dd:46:
f3:64:33:2f:1c:63:0d:fe:cb:e8:70:73:4d:7e:14:fe:d8:ec:
fd:6b:c2:b8:48:7f:89:ee:e6:3f:ec:2d:83:87:7c:b1:51:93:
63:e1:ed:8b:e1:56:a5:54:7f:f4:c7:e7:7c:0c:4c:da:9a:4c:
22:68:ea:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 16:08:45 2025 by rpki-client