Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/549e4d-8dee-459b-9283-46bb3fa28b00/1/4EHIW0dOi2wAiR2VQST_DIEgDYw.mft
File: 4EHIW0dOi2wAiR2VQST_DIEgDYw.mft (raw, json)
Hash identifier: hfh+LiNOybiSWsp0dY75R5mz0VXGnOwTFNZeH0XQzrU=
Subject key identifier: 8B:75:F9:FA:BB:FA:3D:DA:56:FE:AE:11:40:20:31:2F:7A:AF:0D:67
Authority key identifier: E0:41:C8:5B:47:4E:8B:6C:00:89:1D:95:41:24:FF:0C:81:20:0D:8C
Certificate issuer: /CN=e041c85b474e8b6c00891d954124ff0c81200d8c
Certificate serial: 0197D32ACE39B4916D88CF78F8A46AE5FC6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4EHIW0dOi2wAiR2VQST_DIEgDYw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/549e4d-8dee-459b-9283-46bb3fa28b00/1/4EHIW0dOi2wAiR2VQST_DIEgDYw.mft
Manifest number: 091D
Signing time: Fri 04 Jul 2025 02:01:27 +0000
Manifest this update: Fri 04 Jul 2025 02:01:27 +0000
Manifest next update: Sat 05 Jul 2025 02:01:27 +0000
Files and hashes: 1: 4EHIW0dOi2wAiR2VQST_DIEgDYw.crl (hash: 2KpFGfg7v9o4iOd7O1MRpOHdJFMzIhOOg+zQLg1Cj6M=)
2: N3RhFZbfRfFlakkE1oKkv4idahs.roa (hash: S19WQvJ0cwuBe3l5agvGw5hBi9jlwv6QitA6NIAiWl4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/549e4d-8dee-459b-9283-46bb3fa28b00/1/4EHIW0dOi2wAiR2VQST_DIEgDYw.crl
rsync://rpki.ripe.net/repository/DEFAULT/20/549e4d-8dee-459b-9283-46bb3fa28b00/1/4EHIW0dOi2wAiR2VQST_DIEgDYw.mft
rsync://rpki.ripe.net/repository/DEFAULT/4EHIW0dOi2wAiR2VQST_DIEgDYw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Jul 2025 02:01:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:d3:2a:ce:39:b4:91:6d:88:cf:78:f8:a4:6a:e5:fc:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e041c85b474e8b6c00891d954124ff0c81200d8c
Validity
Not Before: Jul 4 02:01:27 2025 GMT
Not After : Jul 5 02:01:27 2025 GMT
Subject: CN=8b75f9fabbfa3dda56feae114020312f7aaf0d67
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:68:f1:e5:92:e5:01:af:64:78:ff:03:f3:9c:
0b:5b:a4:d5:46:99:70:3b:55:50:5c:58:f3:68:23:
16:26:3b:36:d6:d8:48:9f:48:7b:3e:5f:eb:6c:c5:
ea:fb:ef:94:38:56:12:1f:bc:59:a1:62:9c:0a:f2:
ca:15:47:5a:0d:bc:50:35:a4:76:62:f3:c9:b8:4d:
5e:cc:70:30:63:3c:4c:23:7b:39:34:bf:ba:25:0d:
7d:6e:03:f5:5a:6d:dd:48:77:44:b5:cb:34:cb:b2:
ad:7b:77:26:be:c0:a8:50:98:51:4f:13:03:45:8f:
80:13:c7:b0:27:19:96:30:4b:15:6a:6c:45:de:0d:
da:fc:80:e9:c5:df:fb:2a:db:c4:10:f5:ed:70:b0:
2a:39:03:4b:dc:45:ea:b5:e5:76:84:75:92:12:15:
9d:33:d9:c6:68:f9:23:6d:89:ab:73:f0:46:12:a8:
1e:97:ac:f0:56:5d:58:00:bc:89:a8:28:0f:f4:a5:
97:a2:e6:ed:34:22:97:1d:b4:dd:b1:6b:36:3f:9b:
0e:a0:cd:e4:78:ff:e6:33:b8:6d:07:b9:64:22:07:
43:f9:2c:62:c2:5f:8a:79:7b:1a:81:da:d4:c2:01:
3f:5e:09:a4:3f:42:c3:bb:34:d3:1c:67:f7:51:75:
16:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:75:F9:FA:BB:FA:3D:DA:56:FE:AE:11:40:20:31:2F:7A:AF:0D:67
X509v3 Authority Key Identifier:
keyid:E0:41:C8:5B:47:4E:8B:6C:00:89:1D:95:41:24:FF:0C:81:20:0D:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4EHIW0dOi2wAiR2VQST_DIEgDYw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/549e4d-8dee-459b-9283-46bb3fa28b00/1/4EHIW0dOi2wAiR2VQST_DIEgDYw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/549e4d-8dee-459b-9283-46bb3fa28b00/1/4EHIW0dOi2wAiR2VQST_DIEgDYw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a5:9f:f0:fe:ba:b1:68:b6:05:d1:43:75:ed:58:52:99:6e:cc:
f7:bc:5d:07:d3:1c:71:9c:75:fd:fe:f1:8b:61:00:55:d0:51:
e4:99:83:12:f4:7b:d4:97:70:3e:11:3c:14:93:45:ef:60:8c:
b2:73:21:e3:a1:ae:23:b1:41:4c:c2:60:cd:1f:d4:35:86:24:
8a:17:cd:21:65:a8:a2:82:6b:64:12:08:54:a3:3e:80:e3:5d:
68:c3:ac:ac:0f:e5:5f:dd:85:e7:e2:56:44:f2:b3:db:da:ca:
17:d3:63:2b:4b:d8:69:b1:96:4e:0b:a4:05:0a:13:34:ab:87:
c4:be:f3:46:8b:ef:26:e9:ad:3c:f6:aa:8a:5f:27:d6:fa:bf:
c8:74:27:49:1c:9b:6d:b7:0e:d9:a5:54:f9:99:02:55:bd:36:
47:74:4e:62:8f:26:3f:ed:c0:94:40:e0:67:94:74:c6:b5:82:
48:fd:a9:9f:42:62:1d:2e:98:5f:68:5b:d1:0b:44:f3:86:b0:
da:2c:da:71:13:00:49:f4:de:7f:88:82:d5:1c:a3:1f:5a:b7:
da:6d:27:bb:2a:3f:0f:75:6e:47:d5:cd:27:64:70:f6:76:19:
76:53:d5:22:e5:69:54:8c:32:44:9d:88:1c:d1:44:48:86:43:
1e:7d:b4:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 4 10:59:26 2025 by rpki-client