Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/ee42bb-1e49-4c21-a4d6-ec287e1d37e5/1/4xYxgkfSEYQfliCpoRMAEN20hvI.mft
File: 4xYxgkfSEYQfliCpoRMAEN20hvI.mft (raw, json)
Hash identifier: CHkFsPMQzdBMPFbopDwHMf5Dbw0XX7nMUBZYvMH4n2Q=
Subject key identifier: 4A:D3:C4:5C:E6:2C:D7:E0:D8:6E:27:5F:3D:44:D7:A2:94:A2:1E:D9
Authority key identifier: E3:16:31:82:47:D2:11:84:1F:96:20:A9:A1:13:00:10:DD:B4:86:F2
Certificate issuer: /CN=e316318247d211841f9620a9a1130010ddb486f2
Certificate serial: 01988B0FC710417399463230A8DF591CE5F6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4xYxgkfSEYQfliCpoRMAEN20hvI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/ee42bb-1e49-4c21-a4d6-ec287e1d37e5/1/4xYxgkfSEYQfliCpoRMAEN20hvI.mft
Manifest number: 0E43
Signing time: Fri 08 Aug 2025 19:02:03 +0000
Manifest this update: Fri 08 Aug 2025 19:02:03 +0000
Manifest next update: Sat 09 Aug 2025 19:02:03 +0000
Files and hashes: 1: 4xYxgkfSEYQfliCpoRMAEN20hvI.crl (hash: NF8MQXHquQqkcXglaSn2vFzA873iMKbNPSTy/v8tV7Y=)
2: OPoJJXIKKrWhudAq1xiuARrS1H4.roa (hash: sQTnuyk1NVfltmH/ouY0am8WUGDv6HXMop3KtZ2xXJo=)
3: Y0KH9jUtOdTdVzzVwvfGtDjZxIU.roa (hash: ECg0/VJoY6yBxbdarx1o6Xry+PkavLOkwZaMHO8CBps=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/ee42bb-1e49-4c21-a4d6-ec287e1d37e5/1/4xYxgkfSEYQfliCpoRMAEN20hvI.crl
rsync://rpki.ripe.net/repository/DEFAULT/99/ee42bb-1e49-4c21-a4d6-ec287e1d37e5/1/4xYxgkfSEYQfliCpoRMAEN20hvI.mft
rsync://rpki.ripe.net/repository/DEFAULT/4xYxgkfSEYQfliCpoRMAEN20hvI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 09 Aug 2025 19:02:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8b:0f:c7:10:41:73:99:46:32:30:a8:df:59:1c:e5:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e316318247d211841f9620a9a1130010ddb486f2
Validity
Not Before: Aug 8 19:02:03 2025 GMT
Not After : Aug 9 19:02:03 2025 GMT
Subject: CN=4ad3c45ce62cd7e0d86e275f3d44d7a294a21ed9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:fb:52:c2:9c:06:92:cc:fa:a8:f7:0c:9e:1e:
eb:22:20:85:87:f2:00:02:ee:32:95:0c:45:77:9c:
c6:49:2a:fe:25:8d:1b:1e:dd:89:9a:cf:3a:8c:ee:
39:26:8e:e6:d2:3d:4c:3a:6c:30:2f:8e:10:68:67:
17:e3:19:26:a3:0f:07:24:a8:fe:38:3d:e8:09:65:
79:0c:b3:5b:bd:8a:6b:28:8e:38:31:ea:f6:7b:12:
03:f4:3a:72:82:bb:01:d4:d6:5e:4a:f0:e2:85:df:
d9:b5:93:c3:08:a9:2b:e7:6e:1f:5e:98:63:cb:a3:
73:fb:2b:87:b7:40:c9:e5:9a:91:73:97:ba:c2:e0:
8f:9b:de:89:d6:db:b0:0d:f7:7b:fb:a5:70:3d:50:
bc:5b:3a:33:2f:c8:a7:d1:60:80:5c:61:0a:74:1d:
83:ca:cc:a0:19:48:91:af:79:72:a0:c3:5e:76:28:
b7:08:6e:a2:0e:8b:30:83:9f:d2:25:6b:d3:fe:0b:
8c:6b:88:6c:ea:a1:6a:1a:ac:c5:3c:08:6c:e2:8e:
4e:44:90:11:45:52:60:90:f3:3a:a6:90:28:06:fe:
58:f7:d6:a8:f5:e0:c6:51:94:c8:c7:88:40:9b:6c:
80:c0:ff:2a:77:e7:bb:19:4c:03:64:b0:55:bb:8c:
63:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:D3:C4:5C:E6:2C:D7:E0:D8:6E:27:5F:3D:44:D7:A2:94:A2:1E:D9
X509v3 Authority Key Identifier:
keyid:E3:16:31:82:47:D2:11:84:1F:96:20:A9:A1:13:00:10:DD:B4:86:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4xYxgkfSEYQfliCpoRMAEN20hvI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/ee42bb-1e49-4c21-a4d6-ec287e1d37e5/1/4xYxgkfSEYQfliCpoRMAEN20hvI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/ee42bb-1e49-4c21-a4d6-ec287e1d37e5/1/4xYxgkfSEYQfliCpoRMAEN20hvI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:83:94:ca:b1:87:4d:b2:8c:cf:58:e1:39:c4:98:3a:f6:2a:
f7:cb:94:fd:4e:3c:d5:ac:fd:5b:fc:81:b3:8e:bb:27:54:70:
ba:0f:90:3f:39:79:9e:eb:da:dc:1a:19:81:85:36:3b:59:f9:
4f:7f:77:cd:65:76:82:73:c2:59:d7:bf:29:80:64:cd:17:ee:
26:a9:80:a7:e1:22:64:39:8d:53:09:60:cd:55:76:8c:17:f1:
10:b9:bc:f6:7a:5e:c3:8b:72:6f:23:74:ca:4b:83:71:c8:ff:
18:1f:a8:2e:9b:e9:7a:66:c0:98:f4:8b:86:00:4c:0b:c5:67:
fd:9e:1b:89:54:0d:8b:64:ba:00:9f:fc:fd:fc:e6:24:11:dc:
65:b9:49:79:57:63:92:11:56:82:3a:52:d9:ad:40:28:b2:0b:
9d:ee:53:5c:06:11:42:3e:b5:c9:8e:c5:e3:3d:6c:d2:89:6a:
57:75:3d:10:10:e9:6b:a7:0f:5f:07:7e:f4:a2:57:3e:ce:eb:
da:4a:f9:c6:c2:9a:d0:50:50:d9:ee:0a:1f:99:1c:88:51:38:
31:98:60:83:7a:28:51:47:e3:8c:c0:79:67:c9:1b:ff:82:f8:
4a:9f:5c:be:ae:a7:86:9f:e4:ca:de:7d:7a:01:c0:2f:a7:5c:
1f:14:17:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 00:59:51 2025 by rpki-client