Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/4a2e97-2570-478b-b9bc-5ebb6378009e/1/4pLIx3m27W7ecqjPEUkO9tep6SE.mft
File: 4pLIx3m27W7ecqjPEUkO9tep6SE.mft (raw, json)
Hash identifier: zwyEUzL03beqOzKvq5Vv1gg+jPrPfbDrsK24SntyEMc=
Subject key identifier: 5A:76:5F:27:28:75:3A:65:C6:6B:BA:80:7E:34:38:B6:D7:DB:1D:12
Authority key identifier: E2:92:C8:C7:79:B6:ED:6E:DE:72:A8:CF:11:49:0E:F6:D7:A9:E9:21
Certificate issuer: /CN=e292c8c779b6ed6ede72a8cf11490ef6d7a9e921
Certificate serial: 01988BEB111340147A16FDD260D098111963
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4pLIx3m27W7ecqjPEUkO9tep6SE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/4a2e97-2570-478b-b9bc-5ebb6378009e/1/4pLIx3m27W7ecqjPEUkO9tep6SE.mft
Manifest number: 05B8
Signing time: Fri 08 Aug 2025 23:01:34 +0000
Manifest this update: Fri 08 Aug 2025 23:01:34 +0000
Manifest next update: Sat 09 Aug 2025 23:01:34 +0000
Files and hashes: 1: 4pLIx3m27W7ecqjPEUkO9tep6SE.crl (hash: JOwLxW5g1uFweHuifbqhnmQFIEHJ+qtuepnkTvyI+ow=)
2: LbRLSCZgNjKQ4NVrLzk4GRKtgYY.roa (hash: /kAcDTHsuQOYOXcr8j8Fv03Ys7En4o0Y+S9NpXp7/Jw=)
3: pxY6_rBQcn3iz82XldYnkJz45JM.roa (hash: YOl0UxNW+xdGkU9HEm/QZ7M3QuxM2oQJBlY7pjYmG24=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/4a2e97-2570-478b-b9bc-5ebb6378009e/1/4pLIx3m27W7ecqjPEUkO9tep6SE.crl
rsync://rpki.ripe.net/repository/DEFAULT/b4/4a2e97-2570-478b-b9bc-5ebb6378009e/1/4pLIx3m27W7ecqjPEUkO9tep6SE.mft
rsync://rpki.ripe.net/repository/DEFAULT/4pLIx3m27W7ecqjPEUkO9tep6SE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 09 Aug 2025 20:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8b:eb:11:13:40:14:7a:16:fd:d2:60:d0:98:11:19:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e292c8c779b6ed6ede72a8cf11490ef6d7a9e921
Validity
Not Before: Aug 8 23:01:34 2025 GMT
Not After : Aug 9 23:01:34 2025 GMT
Subject: CN=5a765f2728753a65c66bba807e3438b6d7db1d12
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:0a:0e:41:e1:d8:21:ac:23:f0:30:d0:af:4c:
eb:d4:ee:20:59:00:2d:a6:e1:68:96:a2:40:fa:5a:
c7:db:cd:d5:0b:e8:45:14:b5:95:14:eb:77:3c:40:
51:7e:e4:7a:f9:36:bf:99:e3:95:c0:1b:53:46:1c:
79:a1:a1:c1:ce:8c:ca:0e:56:c8:55:45:01:11:7e:
e2:e8:72:33:d7:71:6c:a3:9e:4c:6a:b0:e7:31:51:
7d:1b:cb:d3:42:09:de:fb:49:16:f7:ef:82:78:b3:
28:a7:51:ab:5a:d8:65:32:07:be:be:46:69:1e:dd:
36:87:05:f3:2b:0b:fc:53:bb:ea:32:5d:ac:30:a1:
af:67:11:60:db:72:a5:8f:ef:a1:4e:63:4c:c1:bd:
fe:cb:c8:2b:1b:cf:7f:e7:9f:f3:ef:42:88:b4:0a:
cc:fe:66:72:fa:79:ac:90:c9:80:42:40:4a:c3:2c:
8f:d9:09:a6:91:56:f7:a5:8e:14:97:7e:e0:ad:64:
8a:af:18:34:a5:b5:6d:2f:f8:25:d2:fb:e5:09:2f:
f8:36:e2:40:2d:bd:7c:df:f3:cf:a2:a7:5b:6e:33:
72:db:27:95:0e:a8:a0:b6:43:8a:f1:48:92:16:1e:
67:11:cf:04:b5:e2:29:b0:54:e0:59:e3:31:50:48:
88:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:76:5F:27:28:75:3A:65:C6:6B:BA:80:7E:34:38:B6:D7:DB:1D:12
X509v3 Authority Key Identifier:
keyid:E2:92:C8:C7:79:B6:ED:6E:DE:72:A8:CF:11:49:0E:F6:D7:A9:E9:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4pLIx3m27W7ecqjPEUkO9tep6SE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/4a2e97-2570-478b-b9bc-5ebb6378009e/1/4pLIx3m27W7ecqjPEUkO9tep6SE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/4a2e97-2570-478b-b9bc-5ebb6378009e/1/4pLIx3m27W7ecqjPEUkO9tep6SE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
be:bb:8f:d1:60:f9:c6:4f:95:9b:ef:22:9e:24:65:10:f8:85:
35:53:48:ad:26:72:a8:7a:27:3b:90:27:44:ea:5f:df:15:16:
e4:96:dc:97:47:e6:99:bc:5a:df:4f:64:db:fa:ad:77:27:42:
c2:c4:ed:09:b2:03:c8:a4:8d:39:74:f9:ef:d9:81:b3:ad:d0:
bb:cf:df:db:47:89:77:27:24:39:a6:e7:73:2f:04:db:1a:a2:
9a:84:be:43:c0:aa:3c:90:f6:07:1a:de:7c:59:f4:91:b0:36:
6d:17:17:64:23:7d:57:aa:7f:6a:fc:58:60:33:ac:e0:22:06:
fc:0c:b2:04:3d:fe:f6:8d:64:3c:c7:f7:ab:f4:a4:60:cf:eb:
13:62:0e:49:e9:55:80:a7:0d:87:d5:f2:6e:e4:cd:0f:b5:98:
c3:ef:ef:58:21:f9:5b:3f:e4:3f:ef:78:7c:af:ef:f9:70:68:
de:6b:64:64:df:e7:da:78:db:31:c2:49:22:7f:e7:7d:33:41:
c8:0f:ee:11:10:54:7c:3e:9a:b6:f0:1a:2d:1c:7d:28:0b:0a:
9f:a1:60:5c:0d:05:60:3c:b2:22:a0:e4:fb:f6:d0:59:ae:5b:
55:63:b0:ea:40:2f:7e:76:58:22:b0:ad:d0:f0:6b:8c:5c:b8:
79:7e:16:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 05:40:44 2025 by rpki-client