Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/2e82cb-4a6e-408f-af20-843154a80b72/1/4iqTzrgrZ1qEsNeOea5KeXypgjE.mft
File: 4iqTzrgrZ1qEsNeOea5KeXypgjE.mft (raw, json)
Hash identifier: Ohmft3RPvE2E3sVI+Vq34mY9T+Rxg6tiO607sJp2pEQ=
Subject key identifier: 5A:56:A2:62:56:45:4D:08:A0:3B:82:F8:CF:9E:89:10:AB:A8:3B:24
Authority key identifier: E2:2A:93:CE:B8:2B:67:5A:84:B0:D7:8E:79:AE:4A:79:7C:A9:82:31
Certificate issuer: /CN=e22a93ceb82b675a84b0d78e79ae4a797ca98231
Certificate serial: 019892C87A14D00F44669DE12317BDFCA9C2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4iqTzrgrZ1qEsNeOea5KeXypgjE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/2e82cb-4a6e-408f-af20-843154a80b72/1/4iqTzrgrZ1qEsNeOea5KeXypgjE.mft
Manifest number: 11BE
Signing time: Sun 10 Aug 2025 07:01:08 +0000
Manifest this update: Sun 10 Aug 2025 07:01:08 +0000
Manifest next update: Mon 11 Aug 2025 07:01:08 +0000
Files and hashes: 1: 4iqTzrgrZ1qEsNeOea5KeXypgjE.crl (hash: yXvY7CPlq5OoseVICEzgc65CSSbCWcT57divrWzQRmU=)
2: yB2qv2hArqh8Rg0DZ4yGfxQJ57I.roa (hash: b+3wO516colETH6Q8Hnf3dC3oM2heED/4qOLBklRlP8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/af/2e82cb-4a6e-408f-af20-843154a80b72/1/4iqTzrgrZ1qEsNeOea5KeXypgjE.crl
rsync://rpki.ripe.net/repository/DEFAULT/af/2e82cb-4a6e-408f-af20-843154a80b72/1/4iqTzrgrZ1qEsNeOea5KeXypgjE.mft
rsync://rpki.ripe.net/repository/DEFAULT/4iqTzrgrZ1qEsNeOea5KeXypgjE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 11 Aug 2025 07:01:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:92:c8:7a:14:d0:0f:44:66:9d:e1:23:17:bd:fc:a9:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e22a93ceb82b675a84b0d78e79ae4a797ca98231
Validity
Not Before: Aug 10 07:01:08 2025 GMT
Not After : Aug 11 07:01:08 2025 GMT
Subject: CN=5a56a26256454d08a03b82f8cf9e8910aba83b24
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:ae:da:6b:42:49:ac:5d:40:c9:39:a2:46:59:
36:ea:80:a6:f3:27:03:ed:ac:0c:29:9f:ca:0b:fe:
52:35:45:ee:45:d0:7b:77:f0:43:e8:ff:00:36:a8:
d4:3f:87:ae:71:b8:b4:bc:5b:ce:82:eb:de:1e:90:
20:df:6b:d5:ed:b2:58:e9:14:5e:05:e2:7a:92:fb:
cc:91:14:08:06:49:ee:47:15:84:4b:73:9b:ff:99:
01:ba:65:38:92:46:4e:f9:a7:aa:f5:55:6d:ff:7f:
83:c5:0e:5d:91:61:5d:18:72:22:19:4c:80:4a:80:
f0:ec:71:42:ed:fe:8b:e1:9b:fd:2f:2d:b4:b7:29:
b9:3f:ab:f6:c1:8a:ce:d4:cd:70:26:db:a6:e0:f8:
72:1d:58:e1:7b:01:25:f0:5e:ec:86:21:5d:83:9f:
ad:75:fb:f7:52:e7:d0:c7:61:bf:28:d1:36:49:82:
01:82:e3:37:7a:74:29:a1:19:e6:81:45:98:86:1b:
0d:9f:94:56:6c:9a:5f:49:19:1e:7e:6b:7b:83:9c:
8b:c4:48:2a:da:a5:98:a6:86:0f:0f:8c:dd:53:01:
b1:61:2c:a5:87:96:aa:02:64:df:19:fa:08:77:1c:
94:d0:5a:64:6d:de:7a:1e:80:a6:0b:ba:39:ff:e9:
cd:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:56:A2:62:56:45:4D:08:A0:3B:82:F8:CF:9E:89:10:AB:A8:3B:24
X509v3 Authority Key Identifier:
keyid:E2:2A:93:CE:B8:2B:67:5A:84:B0:D7:8E:79:AE:4A:79:7C:A9:82:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4iqTzrgrZ1qEsNeOea5KeXypgjE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/2e82cb-4a6e-408f-af20-843154a80b72/1/4iqTzrgrZ1qEsNeOea5KeXypgjE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/2e82cb-4a6e-408f-af20-843154a80b72/1/4iqTzrgrZ1qEsNeOea5KeXypgjE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:f7:02:a3:df:98:08:f4:96:1a:b6:cc:9e:08:89:00:a6:68:
98:74:3d:97:96:bc:45:86:a8:67:a8:31:79:8a:ef:5e:2b:67:
67:01:e1:27:48:38:f3:3a:db:1c:5c:57:f9:aa:b3:9d:34:aa:
76:96:88:da:42:8c:11:74:c2:4f:d2:85:70:a4:c7:50:2b:7e:
d5:d0:ac:e5:19:e1:de:5f:88:7d:81:d6:f5:63:5a:af:30:5f:
bd:4e:e3:fc:04:33:bb:f4:c3:29:0a:0a:9c:0e:89:a1:43:48:
3e:20:7e:19:e8:51:e5:33:a3:3f:5f:44:ed:27:b9:ac:2a:35:
fc:a1:55:1c:2d:7f:ca:c9:df:09:07:5a:7e:4b:8d:4a:72:4e:
a0:dd:90:33:09:67:be:2b:ba:06:6a:cd:7c:28:d5:77:ed:7b:
74:9c:9c:41:37:c1:16:b5:dc:60:99:fe:35:fb:d3:67:a6:8e:
18:14:64:3c:c0:0f:46:45:24:b8:c8:6d:55:3d:44:5d:6e:d2:
8e:8a:60:bb:2e:6e:3a:93:ef:7c:6f:6c:6b:29:d3:b1:49:17:
61:19:2a:18:c7:9c:5e:ba:68:1d:4b:92:58:9e:e2:79:f0:80:
01:5e:50:bd:cc:bf:d3:f8:43:2e:77:88:2c:76:b6:35:82:c5:
b4:65:8b:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 15:58:40 2025 by rpki-client