Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/39a47f-1bfd-440e-b4ef-b0701b8b40c7/1/4z5VR668F6SCuM0e6BfdjO_2o68.mft
File: 4z5VR668F6SCuM0e6BfdjO_2o68.mft (raw, json)
Hash identifier: k1MIQ0oalV7VNorhcniza/bVCTcQ2iPwvXuczwdENIE=
Subject key identifier: E1:3D:78:2D:32:AC:46:90:C7:4C:6A:B6:E9:60:3A:97:50:5C:2A:A1
Authority key identifier: E3:3E:55:47:AE:BC:17:A4:82:B8:CD:1E:E8:17:DD:8C:EF:F6:A3:AF
Certificate issuer: /CN=e33e5547aebc17a482b8cd1ee817dd8ceff6a3af
Certificate serial: 01987450166DEDD8D7EC0758C2FA7A91C379
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4z5VR668F6SCuM0e6BfdjO_2o68.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/95/39a47f-1bfd-440e-b4ef-b0701b8b40c7/1/4z5VR668F6SCuM0e6BfdjO_2o68.mft
Manifest number: 0DF8
Signing time: Mon 04 Aug 2025 09:01:02 +0000
Manifest this update: Mon 04 Aug 2025 09:01:02 +0000
Manifest next update: Tue 05 Aug 2025 09:01:02 +0000
Files and hashes: 1: 4z5VR668F6SCuM0e6BfdjO_2o68.crl (hash: OFkEAbQloC+MTyYetLE81IjVhEsB/rIr8TxKiSmZJls=)
2: nlxhNU09PYV8ICYRds67uFQ8SD4.roa (hash: 5Mkpw05F7xKd7rn+KAmOk8IiGnvRNLjGed3AF2L+Quk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/95/39a47f-1bfd-440e-b4ef-b0701b8b40c7/1/4z5VR668F6SCuM0e6BfdjO_2o68.crl
rsync://rpki.ripe.net/repository/DEFAULT/95/39a47f-1bfd-440e-b4ef-b0701b8b40c7/1/4z5VR668F6SCuM0e6BfdjO_2o68.mft
rsync://rpki.ripe.net/repository/DEFAULT/4z5VR668F6SCuM0e6BfdjO_2o68.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:74:50:16:6d:ed:d8:d7:ec:07:58:c2:fa:7a:91:c3:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e33e5547aebc17a482b8cd1ee817dd8ceff6a3af
Validity
Not Before: Aug 4 09:01:02 2025 GMT
Not After : Aug 5 09:01:02 2025 GMT
Subject: CN=e13d782d32ac4690c74c6ab6e9603a97505c2aa1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:0d:31:8d:16:ce:15:6a:9a:62:99:63:7d:04:
41:0f:8a:66:3c:c5:75:2d:d2:ee:bd:56:cb:ef:f4:
07:d9:3c:45:e2:7a:ea:8b:14:13:d7:62:ad:cb:02:
b7:85:97:f9:22:7b:d4:30:f4:19:b4:dc:3c:94:5d:
ca:78:d9:57:7d:c5:7c:e6:c4:37:29:49:a4:0b:e6:
ff:f3:aa:91:39:08:f8:ef:72:fe:d3:00:14:f9:86:
e4:1e:f0:1f:23:78:86:86:b7:50:58:92:2d:0a:f8:
12:8c:28:b6:24:e4:7c:f7:1a:1f:b1:42:f0:56:80:
00:87:b6:4f:d6:ff:c4:e4:d6:24:ae:5c:65:dc:dc:
58:99:ce:d3:50:5d:55:ba:30:16:94:be:10:99:0e:
50:eb:73:fe:2e:c5:85:0a:fc:ab:47:a2:3a:40:33:
46:96:8a:62:d0:3e:93:80:c7:ad:9f:06:c8:f5:11:
1b:98:23:6b:21:f8:ab:99:02:1d:53:8e:53:5e:6f:
9e:fb:8d:31:59:92:44:47:8b:59:1d:54:72:56:9c:
1c:b1:8c:44:50:a2:f5:77:36:13:1f:0e:7b:05:8c:
c9:ef:aa:3f:50:24:3d:f8:37:5b:f7:c1:66:57:04:
29:e9:1c:b3:fc:70:81:da:2a:58:2d:0b:f3:dd:23:
26:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:3D:78:2D:32:AC:46:90:C7:4C:6A:B6:E9:60:3A:97:50:5C:2A:A1
X509v3 Authority Key Identifier:
keyid:E3:3E:55:47:AE:BC:17:A4:82:B8:CD:1E:E8:17:DD:8C:EF:F6:A3:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4z5VR668F6SCuM0e6BfdjO_2o68.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/39a47f-1bfd-440e-b4ef-b0701b8b40c7/1/4z5VR668F6SCuM0e6BfdjO_2o68.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/95/39a47f-1bfd-440e-b4ef-b0701b8b40c7/1/4z5VR668F6SCuM0e6BfdjO_2o68.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9a:f9:00:d6:62:5d:87:d8:d1:bf:32:cb:d6:27:cc:99:e5:40:
29:6b:ca:55:47:f3:bf:01:76:92:1d:6c:09:85:25:cd:d1:41:
84:0e:7d:da:09:32:3d:01:6f:9e:48:0a:24:7a:bd:fa:02:a6:
c1:4b:8f:6b:87:af:ee:ad:46:b2:33:6d:5f:4e:78:b3:53:91:
5a:1e:62:c6:ac:41:fa:0e:ff:47:6f:bd:dd:9b:1b:89:f3:db:
5b:41:b5:34:34:ea:13:30:6e:84:aa:8b:05:4e:4a:69:fe:5f:
f3:9a:e7:93:21:50:3a:74:1a:b9:66:a0:7b:c6:9f:4f:1a:bc:
28:fe:07:e5:4c:ae:85:bb:93:1e:4f:17:64:3d:86:2d:95:f9:
2d:73:32:da:7d:b8:27:c3:11:34:c9:fc:10:04:98:61:0e:07:
13:b3:10:01:81:37:f3:38:e9:05:9b:20:26:be:92:01:54:69:
6d:37:59:ab:56:2b:f1:2b:c1:0e:ee:fc:d1:1c:87:1f:a7:85:
de:b9:01:57:38:89:3b:dc:78:82:57:04:ee:b1:fc:90:96:b7:
2d:ec:55:1e:77:ee:bd:e9:1a:c7:5d:d1:51:d5:f9:77:b1:6a:
14:75:39:fc:c2:e5:2a:5a:5b:40:0c:d5:f4:3e:7f:f5:8b:34:
b8:76:28:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:08:48 2025 by rpki-client