
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/a34200-4b9b-4334-a159-9cb296301e64/1/4z2f_axY52ErCVFE_sBrolhapqg.mft
File: 4z2f_axY52ErCVFE_sBrolhapqg.mft (raw, json)
Hash identifier: +22MvuQfjoBnNGmDwc3avaDasA80nLcA4ynvs0EV+lM=
Subject key identifier: ED:3C:94:BC:B2:FC:AE:31:DF:9F:ED:49:3C:CA:78:2B:80:B4:8C:9B
Authority key identifier: E3:3D:9F:FD:AC:58:E7:61:2B:09:51:44:FE:C0:6B:A2:58:5A:A6:A8
Certificate issuer: /CN=e33d9ffdac58e7612b095144fec06ba2585aa6a8
Certificate serial: 0198729891AE3257CDEF322DD4720E94B9FA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4z2f_axY52ErCVFE_sBrolhapqg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/a34200-4b9b-4334-a159-9cb296301e64/1/4z2f_axY52ErCVFE_sBrolhapqg.mft
Manifest number: 136D
Signing time: Mon 04 Aug 2025 01:00:58 +0000
Manifest this update: Mon 04 Aug 2025 01:00:58 +0000
Manifest next update: Tue 05 Aug 2025 01:00:58 +0000
Files and hashes: 1: 4z2f_axY52ErCVFE_sBrolhapqg.crl (hash: mQHro+ulCgjf+APGTFqRKM5CRlN2o7Pm6ojpR9xjrXs=)
2: kDBI9l_YMVWuxKarh0cfBt-co8E.roa (hash: Cmec62sAgGLnTuvkkeIcYM85TIkQ74UMRSA2arV5eDI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/a34200-4b9b-4334-a159-9cb296301e64/1/4z2f_axY52ErCVFE_sBrolhapqg.crl
rsync://rpki.ripe.net/repository/DEFAULT/f1/a34200-4b9b-4334-a159-9cb296301e64/1/4z2f_axY52ErCVFE_sBrolhapqg.mft
rsync://rpki.ripe.net/repository/DEFAULT/4z2f_axY52ErCVFE_sBrolhapqg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 01:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:72:98:91:ae:32:57:cd:ef:32:2d:d4:72:0e:94:b9:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e33d9ffdac58e7612b095144fec06ba2585aa6a8
Validity
Not Before: Aug 4 01:00:58 2025 GMT
Not After : Aug 5 01:00:58 2025 GMT
Subject: CN=ed3c94bcb2fcae31df9fed493cca782b80b48c9b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:5d:75:5d:3a:2a:55:84:dd:2f:f6:5a:6a:82:
04:1e:57:71:b8:f6:ed:52:e6:2c:4f:66:2a:9d:b8:
ca:24:0c:8e:ad:d4:1a:d1:59:c9:ad:28:4c:57:1f:
3c:c7:0e:c7:62:bb:fb:a5:0a:b7:7f:80:7f:45:35:
e8:91:b4:12:9a:1f:0a:3b:2b:a4:6a:e7:f1:61:92:
92:7d:43:48:50:38:f9:b9:7b:6e:12:29:0b:3b:49:
d4:e4:b6:b2:64:b8:65:68:2b:20:c0:3e:24:db:5c:
2a:57:40:1c:9d:7f:31:41:b0:3e:36:63:04:08:48:
ab:76:47:6a:e8:00:96:28:ab:b5:6c:74:9c:ca:1a:
db:c2:08:34:b9:63:90:66:e8:85:11:bf:b0:f2:e8:
f1:8c:27:99:76:6f:42:12:62:32:1b:d7:71:11:ed:
ad:34:a4:fa:55:68:dd:c2:75:b4:b0:09:38:f0:3d:
55:db:f1:d6:1b:d4:30:e0:8e:c4:a0:67:ae:40:d8:
fd:e8:e3:8d:9c:9e:73:20:91:ec:a7:60:43:37:6f:
30:4e:6e:24:51:52:73:70:ab:8d:e9:1f:23:c3:e0:
10:51:a1:07:67:b8:64:bc:f8:28:ab:80:b4:cb:b8:
25:01:44:ac:0c:57:d7:3d:51:32:db:2d:e3:eb:9f:
34:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:3C:94:BC:B2:FC:AE:31:DF:9F:ED:49:3C:CA:78:2B:80:B4:8C:9B
X509v3 Authority Key Identifier:
keyid:E3:3D:9F:FD:AC:58:E7:61:2B:09:51:44:FE:C0:6B:A2:58:5A:A6:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4z2f_axY52ErCVFE_sBrolhapqg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/a34200-4b9b-4334-a159-9cb296301e64/1/4z2f_axY52ErCVFE_sBrolhapqg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/a34200-4b9b-4334-a159-9cb296301e64/1/4z2f_axY52ErCVFE_sBrolhapqg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:25:00:d4:d1:7c:ad:93:47:29:c1:ea:75:2e:73:97:90:4b:
14:49:9f:25:e3:64:0c:19:7c:d0:76:fa:9a:95:c3:8a:d3:65:
81:8f:0b:2f:e3:55:76:02:bb:12:18:72:dd:5b:b0:70:ec:6b:
dd:52:e8:10:f1:f9:f5:a3:48:d0:8d:d4:79:6d:b7:d0:7c:3c:
a5:ce:ea:92:5f:3a:1a:a8:5c:95:93:47:fe:e9:35:e0:c9:8f:
82:e0:56:51:29:1f:08:d4:4d:07:42:80:74:a4:ce:35:74:10:
d6:98:6e:71:78:1a:fc:30:56:2a:d0:b4:9b:9c:be:6c:42:ba:
04:14:27:0e:75:45:72:a8:32:2c:25:e9:7c:cc:0a:c7:96:9f:
8b:1e:e5:22:c0:94:95:c5:e3:62:24:ae:8f:17:8f:4f:b0:83:
3d:9d:35:7b:d8:b5:75:24:b6:70:5d:9a:52:a2:ba:f8:b2:91:
51:a5:4f:7b:fe:d1:5d:c5:4d:69:36:e5:e7:ec:c5:bb:f7:a9:
6b:1d:77:9b:0b:8d:f0:13:b3:b5:8a:6e:63:74:6d:02:57:f3:
38:57:8c:59:01:f1:da:5e:6e:e0:7b:98:b5:fd:43:44:20:0d:
37:34:46:5d:39:27:e1:ae:86:e9:2e:e9:b7:5c:2a:24:75:0f:
53:fe:95:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:04:24 2025 by rpki-client