Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/69984a-29bf-4d76-9561-62ba3a6884c8/1/4h32qKqnBB1yUoXQ3Q4YCmSbwhM.mft
File: 4h32qKqnBB1yUoXQ3Q4YCmSbwhM.mft (raw, json)
Hash identifier: ky4BT5vMdcTIoQ1dSReAG8XIevfCeGP4wmzUB/HZqWE=
Subject key identifier: 32:2D:23:71:31:96:C1:B4:7C:71:7D:F4:8D:AA:88:08:75:42:DB:9E
Authority key identifier: E2:1D:F6:A8:AA:A7:04:1D:72:52:85:D0:DD:0E:18:0A:64:9B:C2:13
Certificate issuer: /CN=e21df6a8aaa7041d725285d0dd0e180a649bc213
Certificate serial: 01989592246982CABD1A3BB0EF34072B09A4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4h32qKqnBB1yUoXQ3Q4YCmSbwhM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/69984a-29bf-4d76-9561-62ba3a6884c8/1/4h32qKqnBB1yUoXQ3Q4YCmSbwhM.mft
Manifest number: 137A
Signing time: Sun 10 Aug 2025 20:00:39 +0000
Manifest this update: Sun 10 Aug 2025 20:00:39 +0000
Manifest next update: Mon 11 Aug 2025 20:00:39 +0000
Files and hashes: 1: 4h32qKqnBB1yUoXQ3Q4YCmSbwhM.crl (hash: Y4ycx0GDx2eSjysXOsVlfUw506E/h6RNDA1JRGRWNfg=)
2: HTMh6RJF_q53kTnEGeTtdGIx040.roa (hash: nzX5ZOpXvf0qMt8FdSECR2favMzFA7ed3+MWJmI8hm4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/69984a-29bf-4d76-9561-62ba3a6884c8/1/4h32qKqnBB1yUoXQ3Q4YCmSbwhM.crl
rsync://rpki.ripe.net/repository/DEFAULT/b3/69984a-29bf-4d76-9561-62ba3a6884c8/1/4h32qKqnBB1yUoXQ3Q4YCmSbwhM.mft
rsync://rpki.ripe.net/repository/DEFAULT/4h32qKqnBB1yUoXQ3Q4YCmSbwhM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 11 Aug 2025 17:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:95:92:24:69:82:ca:bd:1a:3b:b0:ef:34:07:2b:09:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e21df6a8aaa7041d725285d0dd0e180a649bc213
Validity
Not Before: Aug 10 20:00:39 2025 GMT
Not After : Aug 11 20:00:39 2025 GMT
Subject: CN=322d23713196c1b47c717df48daa88087542db9e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:84:36:4b:28:fe:ce:66:cc:28:11:c1:dc:0e:
4a:9b:8a:75:4d:9f:bb:97:b5:55:e0:fc:14:c6:e2:
47:fd:23:31:12:ec:08:6d:49:13:b3:cb:9c:8a:88:
82:ff:5f:49:22:aa:a6:25:ed:a0:2a:9b:61:64:dc:
f5:8b:83:32:7f:c9:1f:76:5f:a5:fd:29:99:6d:f8:
ec:9d:5f:7b:3a:09:05:20:c2:d2:eb:c0:9f:ca:ea:
5c:fe:80:14:29:de:77:77:90:6e:0b:8f:52:3a:2b:
97:ef:a2:18:a8:26:3a:e9:43:2d:71:8f:57:29:84:
18:7d:8c:6d:e2:6d:fc:81:dc:6d:f1:a6:74:09:cf:
d9:84:ed:23:e8:99:14:0d:1c:28:41:28:23:01:d9:
b6:a1:f7:2a:29:85:4a:cb:3a:ba:2e:31:54:a7:69:
e9:17:4e:63:8a:26:f9:17:96:88:4c:36:f7:ae:65:
c1:37:a8:8a:35:4e:e7:69:31:66:3f:c9:1f:dd:89:
46:e5:fc:a9:3c:13:b3:d4:4b:1f:cd:3c:60:25:1e:
23:7e:88:d3:02:8b:36:14:60:f6:44:15:50:7f:2f:
1b:bb:3e:2d:0a:3e:93:a6:6f:25:55:24:4a:c2:27:
71:49:79:89:b3:df:22:e7:e9:57:70:4e:5c:8b:dd:
d3:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:2D:23:71:31:96:C1:B4:7C:71:7D:F4:8D:AA:88:08:75:42:DB:9E
X509v3 Authority Key Identifier:
keyid:E2:1D:F6:A8:AA:A7:04:1D:72:52:85:D0:DD:0E:18:0A:64:9B:C2:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4h32qKqnBB1yUoXQ3Q4YCmSbwhM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/69984a-29bf-4d76-9561-62ba3a6884c8/1/4h32qKqnBB1yUoXQ3Q4YCmSbwhM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/69984a-29bf-4d76-9561-62ba3a6884c8/1/4h32qKqnBB1yUoXQ3Q4YCmSbwhM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:de:6a:08:28:91:26:c1:44:b6:02:5d:41:8e:79:53:4b:90:
55:a0:06:f9:f8:a4:61:54:87:f9:2a:90:58:e6:5e:98:14:66:
4d:39:8b:ad:47:07:6d:93:48:33:39:f1:b8:30:79:3d:e7:7b:
49:59:3c:60:17:f6:46:9b:06:e9:b1:71:e3:d2:e0:91:c1:e2:
4e:b6:52:9d:eb:7c:c4:7f:cd:f6:73:d0:61:ad:af:c3:c1:03:
48:d5:bf:88:4b:9d:13:a3:28:41:18:d3:67:f6:05:c0:49:f2:
c7:33:a1:05:4d:ec:60:2a:41:80:57:48:d0:5f:db:07:a9:ad:
fc:76:fd:1b:bb:d0:f3:01:b5:c2:5a:87:dc:45:ee:ff:2b:50:
9c:41:a2:c7:d5:f0:c7:67:1a:ed:c2:b2:a0:60:3b:28:cc:b1:
42:30:a7:5a:58:e1:48:28:6d:78:5a:bb:fe:f8:07:cf:d6:f4:
6b:d8:a6:ad:47:5a:5b:72:49:01:90:72:63:8c:b6:5f:27:5d:
bf:e9:e5:e0:ea:3b:ac:b7:2e:ac:28:36:45:a3:e4:8b:74:7b:
6e:3d:2a:9f:c0:f0:8f:00:b9:83:d0:8b:d7:53:97:93:7d:4f:
b7:8d:be:25:c7:06:a5:4e:37:f7:cc:07:26:9c:03:c7:d6:32:
11:46:14:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 11 01:51:35 2025 by rpki-client