Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/02f8a1-3383-4d21-aa25-e733c262a382/1/4x82Vsbtmj-aQsZ4p4ouN0-OV9M.mft
File: 4x82Vsbtmj-aQsZ4p4ouN0-OV9M.mft (raw, json)
Hash identifier: W6wC74I4/ZKxOWWoQTRm7Qe9tDsMDuLLIkFNLVUtwQE=
Subject key identifier: 91:34:9A:B2:B1:9A:7E:55:4B:2E:4D:65:31:10:4D:9C:1F:47:4B:38
Authority key identifier: E3:1F:36:56:C6:ED:9A:3F:9A:42:C6:78:A7:8A:2E:37:4F:8E:57:D3
Certificate issuer: /CN=e31f3656c6ed9a3f9a42c678a78a2e374f8e57d3
Certificate serial: 0198D4E03489D1D5FFCA83EC8038C0B0AEC9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4x82Vsbtmj-aQsZ4p4ouN0-OV9M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/02f8a1-3383-4d21-aa25-e733c262a382/1/4x82Vsbtmj-aQsZ4p4ouN0-OV9M.mft
Manifest number: 062B
Signing time: Sat 23 Aug 2025 03:01:59 +0000
Manifest this update: Sat 23 Aug 2025 03:01:59 +0000
Manifest next update: Sun 24 Aug 2025 03:01:59 +0000
Files and hashes: 1: 4x82Vsbtmj-aQsZ4p4ouN0-OV9M.crl (hash: 76YAo2ZabJRgeBXPfqAu/hDMxVni+XLsYgHz2NK8m58=)
2: L4hlYKajNqyPnVVv7AIxEY7dFGs.roa (hash: dC2HFDiddhP1IjnshflG9aATVdgRr01kQzAT+rfJKcU=)
3: RLzTzgtpUaEv3Hac48DwnQ6OKRA.roa (hash: U62vygXnMfJooP0R/d4gF/Enn1AJ0PueFVZ40dCASXg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/02f8a1-3383-4d21-aa25-e733c262a382/1/4x82Vsbtmj-aQsZ4p4ouN0-OV9M.crl
rsync://rpki.ripe.net/repository/DEFAULT/0b/02f8a1-3383-4d21-aa25-e733c262a382/1/4x82Vsbtmj-aQsZ4p4ouN0-OV9M.mft
rsync://rpki.ripe.net/repository/DEFAULT/4x82Vsbtmj-aQsZ4p4ouN0-OV9M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:e0:34:89:d1:d5:ff:ca:83:ec:80:38:c0:b0:ae:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e31f3656c6ed9a3f9a42c678a78a2e374f8e57d3
Validity
Not Before: Aug 23 03:01:59 2025 GMT
Not After : Aug 24 03:01:59 2025 GMT
Subject: CN=91349ab2b19a7e554b2e4d6531104d9c1f474b38
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:01:c2:5b:39:be:04:35:15:bf:12:2f:e1:ed:
c0:f1:36:41:4c:b7:7b:d6:d3:cf:d1:51:be:96:6e:
84:33:08:24:fe:08:a3:69:50:b1:4a:bc:61:c6:1b:
fb:22:ad:20:d3:c0:d7:7f:1e:10:c3:64:56:6e:52:
27:b7:f2:2f:ca:70:ac:36:4c:ac:1f:3f:14:ef:86:
f4:6e:d3:bc:37:af:c3:4b:8d:36:7d:f8:4b:f0:3e:
a2:b0:f0:f8:41:51:1c:09:06:49:a0:97:27:da:c6:
d1:1f:09:54:ef:a0:98:7d:bf:84:fd:75:80:4c:bb:
00:11:2d:0e:2f:69:d9:f7:02:cc:ed:7a:81:14:5e:
0e:b4:20:1f:73:5e:9a:57:e5:21:6b:71:a5:c5:f7:
95:31:00:fa:c7:47:10:7b:16:90:ff:a5:bf:25:d6:
b8:70:12:fb:b8:f2:8e:4c:e7:2f:f1:26:0f:0f:23:
09:04:16:47:bb:b6:70:a7:1b:38:98:62:c1:09:bb:
ea:29:1a:c5:4a:64:14:27:cc:2b:eb:11:fd:b1:2e:
3d:48:0d:0b:f9:3d:89:fb:d3:c3:23:1e:c5:13:fd:
0f:91:5c:3c:46:e9:72:49:02:12:80:be:d6:07:3e:
63:df:bd:4f:a5:1f:56:80:6f:71:ba:22:19:c0:33:
c9:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:34:9A:B2:B1:9A:7E:55:4B:2E:4D:65:31:10:4D:9C:1F:47:4B:38
X509v3 Authority Key Identifier:
keyid:E3:1F:36:56:C6:ED:9A:3F:9A:42:C6:78:A7:8A:2E:37:4F:8E:57:D3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4x82Vsbtmj-aQsZ4p4ouN0-OV9M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/02f8a1-3383-4d21-aa25-e733c262a382/1/4x82Vsbtmj-aQsZ4p4ouN0-OV9M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/02f8a1-3383-4d21-aa25-e733c262a382/1/4x82Vsbtmj-aQsZ4p4ouN0-OV9M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
96:65:1a:85:76:de:8b:06:84:98:db:5b:34:6b:73:d6:70:40:
11:52:3d:8c:09:9f:37:be:3b:6e:49:84:c1:a8:0c:7f:6b:bd:
c0:42:2c:cc:1b:1c:91:12:f3:1d:10:c0:26:d3:49:49:97:ab:
7f:e0:b3:f5:48:58:d8:47:70:ff:27:9f:5f:8d:45:fd:3e:9b:
73:8f:61:af:c1:d9:b3:0e:7d:d3:5e:e0:24:9a:44:7b:42:65:
d9:99:68:8b:d8:25:53:83:86:8a:61:cb:5e:dd:3b:b6:63:23:
ab:f1:72:e7:3a:5d:3f:a3:df:69:01:a9:c4:03:5d:4f:0d:bc:
b4:21:dd:d2:a2:d1:e1:e1:0d:0d:1f:b7:8a:3c:88:11:62:86:
e1:8d:af:57:fc:e9:3b:7d:34:de:5b:a6:38:e8:19:3e:cf:f8:
21:31:f3:0c:1c:e7:6a:04:1e:31:68:54:bf:88:fa:ee:47:ca:
28:09:76:ac:80:a5:12:fc:c6:c9:53:03:01:aa:9f:8b:fb:60:
f7:7a:11:58:5b:72:0e:d6:2e:ff:86:e4:56:4a:76:fc:2e:67:
a4:23:83:10:f6:81:5b:6f:49:86:a9:cb:bc:b4:f3:0b:38:2d:
7d:ba:f6:2d:54:f8:01:2b:2e:8e:20:db:37:82:1c:16:11:c4:
b2:e8:a7:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 09:42:11 2025 by rpki-client