Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/a31ddb-1fd2-461c-bfeb-82ee2d2b4289/1/4ndTjewu_NLxHMY3GX0dmm_a6dk.mft
File: 4ndTjewu_NLxHMY3GX0dmm_a6dk.mft (raw, json)
Hash identifier: Um9IYV0jSf/VN27uJopEhZ9z1SwimiKkf+u9luDInO8=
Subject key identifier: 5B:32:4D:5E:4B:91:5E:49:85:40:A4:72:EF:74:3E:C7:93:80:01:4A
Authority key identifier: E2:77:53:8D:EC:2E:FC:D2:F1:1C:C6:37:19:7D:1D:9A:6F:DA:E9:D9
Certificate issuer: /CN=e277538dec2efcd2f11cc637197d1d9a6fdae9d9
Certificate serial: 01987418D914BEBDB31F59BF8C7C75328481
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4ndTjewu_NLxHMY3GX0dmm_a6dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/a31ddb-1fd2-461c-bfeb-82ee2d2b4289/1/4ndTjewu_NLxHMY3GX0dmm_a6dk.mft
Manifest number: 12CE
Signing time: Mon 04 Aug 2025 08:00:42 +0000
Manifest this update: Mon 04 Aug 2025 08:00:42 +0000
Manifest next update: Tue 05 Aug 2025 08:00:42 +0000
Files and hashes: 1: 4ndTjewu_NLxHMY3GX0dmm_a6dk.crl (hash: 1od1asDz/F2ErnMoyCo0N5G/cWBMQBx/p1Vm+jGKkIU=)
2: hA-e1ExzRSPNWyW93O3s0XSrAZ4.roa (hash: wOrCVsUdrc4d/IuOMgZHbZ6waL7T9XC1LvudSdq2sG0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/94/a31ddb-1fd2-461c-bfeb-82ee2d2b4289/1/4ndTjewu_NLxHMY3GX0dmm_a6dk.crl
rsync://rpki.ripe.net/repository/DEFAULT/94/a31ddb-1fd2-461c-bfeb-82ee2d2b4289/1/4ndTjewu_NLxHMY3GX0dmm_a6dk.mft
rsync://rpki.ripe.net/repository/DEFAULT/4ndTjewu_NLxHMY3GX0dmm_a6dk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:74:18:d9:14:be:bd:b3:1f:59:bf:8c:7c:75:32:84:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e277538dec2efcd2f11cc637197d1d9a6fdae9d9
Validity
Not Before: Aug 4 08:00:42 2025 GMT
Not After : Aug 5 08:00:42 2025 GMT
Subject: CN=5b324d5e4b915e498540a472ef743ec79380014a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:b8:6e:bc:43:43:17:72:e4:0c:6c:15:80:25:
d0:98:83:34:10:e8:fb:f1:ca:6a:37:26:07:b9:62:
ea:ed:26:aa:00:e5:0e:a7:01:65:30:e3:d1:80:6c:
fb:1c:8e:02:16:82:cf:06:06:b2:a3:96:ac:3c:d7:
e4:b2:6e:43:a9:6b:f6:7b:a6:21:c3:32:e0:9d:2a:
e9:39:fd:53:f8:1f:60:e0:20:a8:ff:fd:4d:c3:20:
6c:08:05:b2:a0:23:8e:1e:f6:3c:f3:fd:3a:2c:33:
3c:f5:74:0c:61:69:e5:bd:cb:b8:04:5d:f5:fd:7a:
01:d0:15:05:44:fb:dd:b3:c5:20:3a:21:05:a8:6b:
86:d0:97:6a:f3:05:ee:19:06:18:a6:07:35:d9:d3:
5b:72:1c:78:df:9f:93:64:75:c4:16:bb:49:83:68:
0f:df:08:2d:09:06:8f:be:a5:74:bf:d1:60:85:fe:
86:31:f9:e0:c3:5c:9f:04:a2:74:8e:c7:b2:dd:98:
f5:00:15:f6:45:84:58:89:58:b8:6c:b2:7e:ae:58:
08:d7:d8:26:2c:72:c0:cb:df:db:0b:5b:ad:78:de:
0f:2a:2d:bc:ba:15:91:e0:d7:9a:29:84:3b:01:08:
e3:11:6f:6d:ac:19:6c:6f:02:72:4a:eb:19:5f:a7:
3f:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:32:4D:5E:4B:91:5E:49:85:40:A4:72:EF:74:3E:C7:93:80:01:4A
X509v3 Authority Key Identifier:
keyid:E2:77:53:8D:EC:2E:FC:D2:F1:1C:C6:37:19:7D:1D:9A:6F:DA:E9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4ndTjewu_NLxHMY3GX0dmm_a6dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/a31ddb-1fd2-461c-bfeb-82ee2d2b4289/1/4ndTjewu_NLxHMY3GX0dmm_a6dk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/94/a31ddb-1fd2-461c-bfeb-82ee2d2b4289/1/4ndTjewu_NLxHMY3GX0dmm_a6dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9b:6b:c8:b0:6e:2f:f0:3a:b5:49:0f:1b:d9:f7:9a:98:45:86:
de:0f:2f:08:5d:a1:47:7b:b1:ee:14:54:a8:e0:99:99:dc:5a:
20:77:20:7c:1e:27:05:23:5b:d4:e9:a1:25:de:bc:16:ab:c0:
cb:00:69:7f:72:3d:de:7f:dc:85:b3:29:44:e8:f2:70:67:df:
c9:55:fd:97:1c:17:ad:10:9c:ef:38:03:26:d7:c3:5b:ca:c9:
01:57:f0:1a:48:e3:88:1e:41:0a:d7:9a:ba:f2:e8:97:30:02:
fe:7f:d7:f3:ae:82:9a:50:1a:dd:ee:c4:79:5e:35:84:a8:f4:
88:87:14:0f:00:b6:b5:60:16:80:5b:cc:83:1f:2a:fd:df:e8:
ef:cd:c8:75:bd:a8:cd:39:87:aa:54:84:51:2c:fb:69:9c:87:
50:b8:12:6e:57:34:be:c3:b9:c5:86:cc:79:0c:06:56:b1:b3:
de:4e:b0:14:9c:9a:f6:6f:93:27:0f:ab:f7:ad:9e:ac:8e:9b:
4d:bc:81:b7:ab:24:d1:3b:5b:d4:56:81:d1:6b:4a:43:44:9e:
ca:cb:70:30:bc:97:02:ff:d7:e7:c2:18:d9:13:43:e8:bd:cd:
7a:4c:dd:5b:11:f2:b6:85:8f:ca:16:e7:f1:0a:2b:1d:d5:d7:
90:db:7b:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:20:05 2025 by rpki-client