Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/4c9206-95cb-4324-ab88-1e6577ca172d/1/4d9YUq-QW0Ff31PjKHb1enTWwfA.mft
File: 4d9YUq-QW0Ff31PjKHb1enTWwfA.mft (raw, json)
Hash identifier: seZao+aB+a7HDhb9KdpqdoOSw+tJsM+XjJIPD41Cx5M=
Subject key identifier: 23:9F:07:8F:E7:95:1F:9D:49:07:FC:D6:CA:99:5E:DD:EE:13:C6:01
Authority key identifier: E1:DF:58:52:AF:90:5B:41:5F:DF:53:E3:28:76:F5:7A:74:D6:C1:F0
Certificate issuer: /CN=e1df5852af905b415fdf53e32876f57a74d6c1f0
Certificate serial: 01989FDEAB16EBCF8327CF3948787497786B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4d9YUq-QW0Ff31PjKHb1enTWwfA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/4c9206-95cb-4324-ab88-1e6577ca172d/1/4d9YUq-QW0Ff31PjKHb1enTWwfA.mft
Manifest number: 0F3E
Signing time: Tue 12 Aug 2025 20:00:26 +0000
Manifest this update: Tue 12 Aug 2025 20:00:26 +0000
Manifest next update: Wed 13 Aug 2025 20:00:26 +0000
Files and hashes: 1: 4d9YUq-QW0Ff31PjKHb1enTWwfA.crl (hash: eYhghccXw1Ik/DM5gYPemAuRCJ4c8QXSjK59yAgbESo=)
2: cD_mZgVZwLPlXPcv17kJI-LgBr4.roa (hash: KNwGHjS6BluwkxT0qyW7BxgZYc1pPDj7oHyq37oQR90=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/4c9206-95cb-4324-ab88-1e6577ca172d/1/4d9YUq-QW0Ff31PjKHb1enTWwfA.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/4c9206-95cb-4324-ab88-1e6577ca172d/1/4d9YUq-QW0Ff31PjKHb1enTWwfA.mft
rsync://rpki.ripe.net/repository/DEFAULT/4d9YUq-QW0Ff31PjKHb1enTWwfA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 Aug 2025 20:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:9f:de:ab:16:eb:cf:83:27:cf:39:48:78:74:97:78:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e1df5852af905b415fdf53e32876f57a74d6c1f0
Validity
Not Before: Aug 12 20:00:26 2025 GMT
Not After : Aug 13 20:00:26 2025 GMT
Subject: CN=239f078fe7951f9d4907fcd6ca995eddee13c601
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:7f:87:e9:2d:2e:05:65:e3:e0:ae:b0:37:72:
e5:5b:6a:c4:5d:e9:e8:7d:aa:6b:24:b1:71:47:c5:
ed:7b:a9:7b:b2:a6:d1:8f:18:a3:d6:55:09:82:f9:
4a:d5:d3:3e:84:9b:01:a1:be:17:e7:68:da:98:d0:
33:89:a7:00:83:e6:5a:8c:7d:f3:4c:3d:7f:d4:ed:
c3:00:cc:c2:45:b1:14:0e:1c:28:82:d8:20:8b:f8:
cb:0b:8b:70:cb:7e:e6:b0:db:5d:64:41:27:b6:03:
f4:cf:4a:a8:f7:e3:86:fa:5f:8c:e4:06:03:b0:fe:
4a:5b:85:34:e3:6b:e8:3d:07:73:26:2f:e8:26:28:
9b:e3:47:73:45:f7:dc:3c:05:4a:ba:6d:88:00:0d:
4f:b4:52:3c:3b:74:2b:db:9e:f4:39:1c:77:5c:87:
30:fa:79:42:e1:bb:cb:93:73:43:70:7d:8d:45:66:
d9:5d:1b:f0:50:84:e8:6d:0a:9a:b5:9b:74:30:c5:
7e:9f:9d:57:9a:f2:4b:75:a7:8a:b6:da:21:45:fb:
69:d1:e6:a0:b1:45:d1:3b:23:38:9b:a6:34:cf:2f:
e5:4a:70:fb:4b:f5:18:69:b2:c1:0e:d6:57:49:7e:
0e:27:17:d1:24:11:63:fc:81:d9:41:fe:57:e3:99:
cc:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:9F:07:8F:E7:95:1F:9D:49:07:FC:D6:CA:99:5E:DD:EE:13:C6:01
X509v3 Authority Key Identifier:
keyid:E1:DF:58:52:AF:90:5B:41:5F:DF:53:E3:28:76:F5:7A:74:D6:C1:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d9YUq-QW0Ff31PjKHb1enTWwfA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/4c9206-95cb-4324-ab88-1e6577ca172d/1/4d9YUq-QW0Ff31PjKHb1enTWwfA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/4c9206-95cb-4324-ab88-1e6577ca172d/1/4d9YUq-QW0Ff31PjKHb1enTWwfA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:f9:91:3e:7a:92:55:a7:be:ee:f6:4d:25:8f:08:92:62:63:
ef:c6:2e:68:5b:46:8b:63:e4:93:1e:45:48:20:dd:66:17:7c:
4c:34:d3:3d:5b:8b:7e:4f:35:c0:e0:73:12:18:1b:97:bb:53:
9a:cc:16:8c:84:57:6a:18:ac:9f:73:0f:2b:b0:b0:87:ea:ec:
f3:96:08:7c:d9:03:dc:0b:c1:ac:68:a4:ff:a6:47:91:ce:f3:
82:88:b1:1e:9f:53:79:13:c2:45:32:97:05:26:de:14:7d:41:
d5:c7:a0:d3:15:cc:58:de:83:47:a0:a1:cc:19:49:70:6e:39:
e2:50:dc:23:32:86:9a:e6:6b:6e:57:88:50:bc:4c:39:95:6d:
a7:f9:5a:cc:a9:df:64:ee:7c:a4:cf:b3:0f:0c:61:b6:9a:f2:
9a:c2:b6:83:f0:17:7a:e9:14:a9:23:c8:16:7a:77:ee:50:aa:
d0:80:c6:42:ec:f4:b8:fa:a1:0c:55:28:4b:6f:ce:d9:d5:7c:
56:15:dc:34:a3:ab:6f:bc:29:84:6a:85:98:13:12:9e:32:5f:
a5:57:88:13:14:9e:63:37:ea:f3:01:9b:25:b6:68:f1:75:12:
8c:15:59:42:c8:bc:df:97:4d:c5:96:80:22:d7:fc:a9:ff:ac:
c5:8c:32:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 13 02:46:01 2025 by rpki-client