
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/ca13ca-f640-496c-922a-500abd93b9d4/1/4pIlILZ7Gr98QDr6IjVTQyYnIog.mft
File: 4pIlILZ7Gr98QDr6IjVTQyYnIog.mft (raw, json)
Hash identifier: iO9vZJZsa4tc0Hxv7CfeE93779wL6WWhTLBKzOAMf6Q=
Subject key identifier: 4D:17:EB:58:3B:D3:0E:84:3A:19:FB:59:0B:DE:18:70:D2:AD:FE:12
Authority key identifier: E2:92:25:20:B6:7B:1A:BF:7C:40:3A:FA:22:35:53:43:26:27:22:88
Certificate issuer: /CN=e2922520b67b1abf7c403afa2235534326272288
Certificate serial: 019896DC1D721082EE1D0FC6912B9661467F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4pIlILZ7Gr98QDr6IjVTQyYnIog.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/ca13ca-f640-496c-922a-500abd93b9d4/1/4pIlILZ7Gr98QDr6IjVTQyYnIog.mft
Manifest number: 1444
Signing time: Mon 11 Aug 2025 02:01:04 +0000
Manifest this update: Mon 11 Aug 2025 02:01:04 +0000
Manifest next update: Tue 12 Aug 2025 02:01:04 +0000
Files and hashes: 1: 4pIlILZ7Gr98QDr6IjVTQyYnIog.crl (hash: umRhDUlRb6l/Xv3amDyQZXUOlssXe2PNr5ZrotD7CCU=)
2: sraNB3Tq9hs6fPR3orHTINDfXdM.roa (hash: 5fJUa4xuxE1H1Nc9qB8vUJm4+A17xrBmdzBKBxK5rEM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a4/ca13ca-f640-496c-922a-500abd93b9d4/1/4pIlILZ7Gr98QDr6IjVTQyYnIog.crl
rsync://rpki.ripe.net/repository/DEFAULT/a4/ca13ca-f640-496c-922a-500abd93b9d4/1/4pIlILZ7Gr98QDr6IjVTQyYnIog.mft
rsync://rpki.ripe.net/repository/DEFAULT/4pIlILZ7Gr98QDr6IjVTQyYnIog.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 12 Aug 2025 02:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:96:dc:1d:72:10:82:ee:1d:0f:c6:91:2b:96:61:46:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e2922520b67b1abf7c403afa2235534326272288
Validity
Not Before: Aug 11 02:01:04 2025 GMT
Not After : Aug 12 02:01:04 2025 GMT
Subject: CN=4d17eb583bd30e843a19fb590bde1870d2adfe12
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:d5:77:da:fe:4d:e9:92:e6:d9:59:00:19:e4:
88:02:3b:6a:49:82:20:fa:27:3f:71:f1:54:e7:c8:
30:b4:78:b2:ec:ee:1a:4e:b6:54:17:18:5d:72:e0:
40:c1:ef:b4:dc:8c:16:08:46:d6:fb:cf:9b:82:61:
14:5e:e2:48:f1:ce:0d:f8:0d:8a:ce:72:1d:f3:8a:
0a:a0:57:cf:61:b0:8e:29:ff:4d:39:55:77:3e:9f:
0d:96:d0:13:f9:43:2d:2d:3f:98:03:58:3a:62:9a:
7d:9d:c8:2a:df:21:7f:52:f0:f1:b5:49:db:fc:7c:
aa:71:19:00:d0:92:50:a8:4a:3a:22:21:a2:90:05:
87:94:2e:a9:53:ed:9e:ae:20:85:53:c0:7f:8e:bb:
6a:c5:59:89:e0:49:35:de:ef:c6:ef:e7:99:ea:3a:
bb:fe:4e:6b:63:f6:be:d8:89:13:db:fe:d6:59:a9:
e0:eb:c0:46:d1:2e:21:17:0d:96:89:53:b2:e8:42:
87:4d:33:57:f6:3b:74:2a:84:d9:b9:9c:db:8e:19:
91:18:ba:41:50:6e:cb:34:67:99:69:e9:bf:bb:73:
15:2f:72:8c:2a:87:17:c3:8d:f7:11:a4:46:d7:27:
1c:55:4e:18:60:f8:64:67:2d:a2:ce:ed:d2:3b:e3:
ab:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:17:EB:58:3B:D3:0E:84:3A:19:FB:59:0B:DE:18:70:D2:AD:FE:12
X509v3 Authority Key Identifier:
keyid:E2:92:25:20:B6:7B:1A:BF:7C:40:3A:FA:22:35:53:43:26:27:22:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4pIlILZ7Gr98QDr6IjVTQyYnIog.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/ca13ca-f640-496c-922a-500abd93b9d4/1/4pIlILZ7Gr98QDr6IjVTQyYnIog.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/ca13ca-f640-496c-922a-500abd93b9d4/1/4pIlILZ7Gr98QDr6IjVTQyYnIog.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:1e:7f:b6:2d:c9:61:25:42:ff:d1:34:78:9a:12:68:f9:68:
c5:2c:17:1e:47:48:9d:cb:13:ea:76:56:5b:01:68:d1:92:da:
c8:4c:b5:81:6e:ac:69:fb:1b:f0:3d:94:28:54:a0:08:19:e0:
23:33:94:40:ec:79:5c:68:e5:5b:af:6e:6c:f0:ea:b7:47:be:
6e:65:91:56:63:32:6b:24:f1:14:b2:ad:5d:96:24:5e:e8:17:
4f:ca:c3:1c:85:1b:df:93:aa:64:5a:7f:c5:07:5e:7a:84:d4:
62:22:17:d9:f2:f5:81:32:5a:65:b9:cb:d0:35:77:b5:ef:de:
ff:49:c8:f6:a6:06:da:05:3e:97:9d:1b:42:73:e2:5e:54:df:
5e:13:da:48:f4:f7:cc:fb:5f:46:2c:02:9b:be:47:7f:b1:cb:
a4:96:6a:f7:32:2b:82:4f:24:e5:ab:9b:04:31:6b:93:fa:99:
aa:7a:d1:55:0d:40:ac:f2:94:50:d6:aa:58:92:a4:f0:42:39:
a3:e8:aa:d2:4b:16:a0:1b:c4:8d:24:00:34:f1:7c:91:0b:aa:
20:e5:36:2b:62:fe:fd:55:df:63:d7:7b:45:15:3a:66:40:43:
bc:a5:b8:40:70:7b:76:73:4f:85:ce:5c:22:70:10:48:92:00:
a7:ce:4e:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 11 04:08:17 2025 by rpki-client