Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/4d2928-c636-40c0-9c9b-7990e3d1ddaa/1/4r7xjk9w0I3z-zD-5QfltakZb5k.mft
File: 4r7xjk9w0I3z-zD-5QfltakZb5k.mft (raw, json)
Hash identifier: Sw/RWRJbQHW/J8X3VhV+kGUiWLJBqUnl49SL69yqK4M=
Subject key identifier: 96:BE:A3:B9:E5:33:71:6A:93:6B:23:97:41:93:28:66:B0:44:28:26
Authority key identifier: E2:BE:F1:8E:4F:70:D0:8D:F3:FB:30:FE:E5:07:E5:B5:A9:19:6F:99
Certificate issuer: /CN=e2bef18e4f70d08df3fb30fee507e5b5a9196f99
Certificate serial: 019883553D0C827D0D8FD02E84DD2C81D630
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4r7xjk9w0I3z-zD-5QfltakZb5k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/4d2928-c636-40c0-9c9b-7990e3d1ddaa/1/4r7xjk9w0I3z-zD-5QfltakZb5k.mft
Manifest number: 0884
Signing time: Thu 07 Aug 2025 07:00:58 +0000
Manifest this update: Thu 07 Aug 2025 07:00:58 +0000
Manifest next update: Fri 08 Aug 2025 07:00:58 +0000
Files and hashes: 1: 4r7xjk9w0I3z-zD-5QfltakZb5k.crl (hash: EipQXGwX3d4J8NdVZIY4UhhFrcpV5mze/TFKbMmAa44=)
2: MiW57nOg30xLDqZY9OOUVNFKZQY.roa (hash: 2YBiQuBVr6rbcdD+nTl7ci5JjnWlTA1kLFdMgjGPElQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/4d2928-c636-40c0-9c9b-7990e3d1ddaa/1/4r7xjk9w0I3z-zD-5QfltakZb5k.crl
rsync://rpki.ripe.net/repository/DEFAULT/e3/4d2928-c636-40c0-9c9b-7990e3d1ddaa/1/4r7xjk9w0I3z-zD-5QfltakZb5k.mft
rsync://rpki.ripe.net/repository/DEFAULT/4r7xjk9w0I3z-zD-5QfltakZb5k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 08 Aug 2025 07:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:83:55:3d:0c:82:7d:0d:8f:d0:2e:84:dd:2c:81:d6:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e2bef18e4f70d08df3fb30fee507e5b5a9196f99
Validity
Not Before: Aug 7 07:00:58 2025 GMT
Not After : Aug 8 07:00:58 2025 GMT
Subject: CN=96bea3b9e533716a936b239741932866b0442826
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:ee:fb:8c:73:be:85:29:ef:6e:8a:ba:6f:a8:
a6:fe:c3:24:fc:e1:3e:c3:66:a0:43:51:f1:1a:b9:
15:ef:7b:70:d9:88:72:18:a1:fb:3a:e8:ac:1a:a1:
85:8c:02:35:35:27:0d:b6:06:9f:51:fb:a1:30:74:
b9:43:47:dd:57:38:d8:6b:20:83:9a:51:9d:ef:6c:
85:08:44:0b:d0:c0:ab:6c:08:43:3e:bc:eb:32:6e:
5e:c4:70:f1:63:da:37:32:2d:51:cf:7a:6d:52:01:
4a:e1:63:c9:e8:bf:7d:91:f8:98:ec:3a:cc:d2:48:
0f:a2:cf:f9:9b:83:2c:27:a1:5d:a9:2a:08:ae:7f:
23:f3:9c:3a:3e:2a:6b:86:ee:27:bd:ab:36:a8:13:
19:e0:f2:ea:57:a4:f8:b5:f8:c4:cb:1e:41:39:7a:
2c:73:a3:1b:8a:7e:d0:ec:24:d5:32:b6:c3:84:ef:
91:d5:64:a1:79:35:33:d4:c7:df:31:cf:91:5b:38:
7d:df:4d:bc:c2:c2:d6:ef:56:77:4b:56:20:1a:2e:
f1:e2:94:e0:68:84:51:34:cd:6c:c8:76:3f:8c:dd:
2a:f2:62:aa:e2:60:c5:09:dc:07:0c:7b:06:3c:e0:
04:76:9a:25:7d:6a:c3:3f:1d:45:4c:15:ef:56:b7:
52:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:BE:A3:B9:E5:33:71:6A:93:6B:23:97:41:93:28:66:B0:44:28:26
X509v3 Authority Key Identifier:
keyid:E2:BE:F1:8E:4F:70:D0:8D:F3:FB:30:FE:E5:07:E5:B5:A9:19:6F:99
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4r7xjk9w0I3z-zD-5QfltakZb5k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/4d2928-c636-40c0-9c9b-7990e3d1ddaa/1/4r7xjk9w0I3z-zD-5QfltakZb5k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/4d2928-c636-40c0-9c9b-7990e3d1ddaa/1/4r7xjk9w0I3z-zD-5QfltakZb5k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:00:19:38:15:f9:e6:03:80:f3:41:3e:67:81:4e:73:b2:9e:
a6:98:b4:7f:8c:de:b5:eb:7e:9e:d0:61:4e:2d:2b:af:65:01:
90:81:ec:59:8d:9a:37:26:c4:fc:2c:6b:d3:b4:3e:25:89:ae:
47:9b:0e:de:62:1e:88:88:34:88:1f:8f:ab:41:d0:55:6d:1e:
f1:cf:1d:07:fc:fd:11:da:7e:8a:4e:cb:58:64:8b:f9:51:2e:
1e:89:90:05:e2:9b:32:64:d5:75:69:5f:ea:a9:e2:94:9c:43:
08:e5:ed:6a:f1:65:6a:c2:3c:79:d3:34:62:75:b7:5f:ba:f7:
28:c8:b3:7f:27:a0:36:34:ac:73:4c:57:ac:26:ff:23:f2:3e:
40:40:25:9c:08:c7:82:4f:53:0b:4e:d6:0d:2a:6f:51:12:d5:
c7:9a:f2:b0:62:4f:04:51:2a:d6:95:5b:a2:1e:fe:28:7d:a3:
a2:eb:0f:bf:ca:00:1c:46:57:94:9e:fb:f9:ce:40:aa:e0:c1:
5a:09:05:98:2c:c0:1c:10:a8:4c:ae:26:7a:e1:73:ec:79:84:
2e:79:a8:a3:a9:cf:1f:5e:94:a6:9a:bf:de:06:3e:55:94:37:
36:8f:d1:78:28:72:9c:f7:80:08:c1:47:56:98:10:f0:84:77:
5b:c0:b1:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 12:59:11 2025 by rpki-client