Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/f3d446-ac06-4902-a647-ef1570c72599/1/4T43FhOUZeaoz59r2LW492M68ig.mft
File: 4T43FhOUZeaoz59r2LW492M68ig.mft (raw, json)
Hash identifier: oP+P8geg2CrHJcgQFvHOdExo9GnLF0VIkP7jGnbkxuk=
Subject key identifier: DE:99:B6:D6:3C:91:09:0A:72:05:05:4F:F4:E4:98:DA:E0:25:5F:9B
Authority key identifier: E1:3E:37:16:13:94:65:E6:A8:CF:9F:6B:D8:B5:B8:F7:63:3A:F2:28
Certificate issuer: /CN=e13e3716139465e6a8cf9f6bd8b5b8f7633af228
Certificate serial: 019896A6A0359999EB6EDBDD6DD18E148629
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4T43FhOUZeaoz59r2LW492M68ig.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/f3d446-ac06-4902-a647-ef1570c72599/1/4T43FhOUZeaoz59r2LW492M68ig.mft
Manifest number: 1628
Signing time: Mon 11 Aug 2025 01:02:38 +0000
Manifest this update: Mon 11 Aug 2025 01:02:38 +0000
Manifest next update: Tue 12 Aug 2025 01:02:38 +0000
Files and hashes: 1: 4T43FhOUZeaoz59r2LW492M68ig.crl (hash: jBLd182evcw6Bh6DqSH1K3vn5YTiMyoT47a0dqasWy4=)
2: VbNrPWQYTWo9s0J6s8AxjamlwvI.roa (hash: /mWvYY88JMhRPBUym5HOiq9hJe5sysSC0ACyBbQ58No=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/f3d446-ac06-4902-a647-ef1570c72599/1/4T43FhOUZeaoz59r2LW492M68ig.crl
rsync://rpki.ripe.net/repository/DEFAULT/ef/f3d446-ac06-4902-a647-ef1570c72599/1/4T43FhOUZeaoz59r2LW492M68ig.mft
rsync://rpki.ripe.net/repository/DEFAULT/4T43FhOUZeaoz59r2LW492M68ig.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 12 Aug 2025 01:02:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:96:a6:a0:35:99:99:eb:6e:db:dd:6d:d1:8e:14:86:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e13e3716139465e6a8cf9f6bd8b5b8f7633af228
Validity
Not Before: Aug 11 01:02:38 2025 GMT
Not After : Aug 12 01:02:38 2025 GMT
Subject: CN=de99b6d63c91090a7205054ff4e498dae0255f9b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:08:9d:04:25:e4:bf:f8:bd:b6:f6:7e:cb:25:
a5:79:b5:a9:fe:d1:14:6c:6b:b3:3a:c0:b7:63:3a:
56:17:18:0a:27:f3:b6:13:63:7e:2a:23:18:ea:6d:
9b:f4:59:76:7a:89:78:82:39:b2:21:e4:9b:ce:83:
a6:62:8c:61:5d:61:8d:70:a6:13:95:df:39:df:fc:
ab:9c:18:88:33:71:68:1e:a8:71:54:63:28:26:e6:
8a:cc:15:2c:0d:10:bf:a0:7b:fb:96:6f:86:50:9b:
ba:79:4c:bf:13:c2:c7:60:01:32:51:e5:d4:87:1e:
79:48:60:c8:f5:1d:46:8d:3f:db:43:53:8c:68:bd:
33:32:d7:a5:a1:6c:3d:85:86:d4:b6:ec:a2:92:d1:
7b:ad:c9:cf:66:38:02:ce:2a:06:27:08:02:44:1d:
11:ee:2a:c8:b8:23:e7:38:8c:36:03:0a:06:a9:f6:
f4:98:12:3c:2c:c2:2c:c0:68:8b:17:fd:55:d6:28:
3c:8d:32:64:39:f6:48:3f:7a:37:fe:0c:a1:42:63:
41:9e:80:db:59:d7:fd:c0:c4:06:4e:d4:26:90:43:
0f:a2:15:5c:48:77:e5:81:03:a8:54:ca:ff:c5:5c:
c5:72:3e:3d:8f:8d:c3:b9:f6:ca:ea:5f:ec:ad:9c:
57:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:99:B6:D6:3C:91:09:0A:72:05:05:4F:F4:E4:98:DA:E0:25:5F:9B
X509v3 Authority Key Identifier:
keyid:E1:3E:37:16:13:94:65:E6:A8:CF:9F:6B:D8:B5:B8:F7:63:3A:F2:28
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4T43FhOUZeaoz59r2LW492M68ig.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/f3d446-ac06-4902-a647-ef1570c72599/1/4T43FhOUZeaoz59r2LW492M68ig.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/f3d446-ac06-4902-a647-ef1570c72599/1/4T43FhOUZeaoz59r2LW492M68ig.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:a0:0b:f4:e8:97:dc:8e:db:34:58:8b:02:b0:c2:5d:ba:5b:
d1:ed:52:0c:af:fd:8a:f9:df:be:ff:64:3f:6a:d3:8b:68:36:
70:ae:43:c8:4d:ee:31:27:ef:d0:1c:d4:07:8a:cc:70:d9:41:
12:3c:c5:f7:cc:af:e5:fc:d4:69:c6:0d:f9:34:8e:07:e8:51:
f7:17:9a:d6:66:e8:d0:47:96:bb:7e:e5:7a:43:3a:5c:9a:ab:
18:f4:57:5b:f5:6d:d6:7e:5e:ea:87:5e:5d:b1:43:e2:54:85:
d4:de:c0:5e:8f:92:c0:8f:94:eb:1b:5b:8d:d9:18:61:11:c4:
06:25:b2:19:4c:6d:52:23:55:08:da:4a:91:25:50:a1:c6:1c:
dc:45:d5:7a:18:4c:c3:85:9e:12:f0:9b:d7:84:0f:ca:cb:8e:
2f:dc:00:cd:0e:89:17:1d:1e:d7:12:ad:cd:73:51:f7:aa:23:
52:3f:1e:f8:78:17:a5:1b:62:7c:4e:0c:a3:83:d3:8d:8b:6d:
7b:0c:e9:99:23:65:6c:05:f7:c4:2b:8d:0e:ff:cd:8f:8f:31:
c9:ec:92:fd:ca:59:c2:11:cf:50:59:71:66:62:5d:cf:7c:7b:
39:fe:92:b1:34:4a:d5:25:2e:7b:ae:38:92:5e:1d:1d:04:67:
21:0b:ca:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 11 08:47:45 2025 by rpki-client