Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/549e4d-8dee-459b-9283-46bb3fa28b00/1/4EHIW0dOi2wAiR2VQST_DIEgDYw.mft
File: 4EHIW0dOi2wAiR2VQST_DIEgDYw.mft (raw, json)
Hash identifier: c/PyjuqM1x2SpmpHPFQlNhcuX+oJnwg0ZV4qGrYE8/A=
Subject key identifier: 93:E9:F9:6C:1D:E2:7C:13:CC:92:65:53:88:BF:36:7D:7C:14:C1:FE
Authority key identifier: E0:41:C8:5B:47:4E:8B:6C:00:89:1D:95:41:24:FF:0C:81:20:0D:8C
Certificate issuer: /CN=e041c85b474e8b6c00891d954124ff0c81200d8c
Certificate serial: 0198D7E1AF41035735E4B2449B3B770952B4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4EHIW0dOi2wAiR2VQST_DIEgDYw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/549e4d-8dee-459b-9283-46bb3fa28b00/1/4EHIW0dOi2wAiR2VQST_DIEgDYw.mft
Manifest number: 09A4
Signing time: Sat 23 Aug 2025 17:02:28 +0000
Manifest this update: Sat 23 Aug 2025 17:02:28 +0000
Manifest next update: Sun 24 Aug 2025 17:02:28 +0000
Files and hashes: 1: 4EHIW0dOi2wAiR2VQST_DIEgDYw.crl (hash: p9vGG2vfTo09tGwzVsSeERC2OKQC/LWBrDKc3vOtiho=)
2: N3RhFZbfRfFlakkE1oKkv4idahs.roa (hash: S19WQvJ0cwuBe3l5agvGw5hBi9jlwv6QitA6NIAiWl4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/549e4d-8dee-459b-9283-46bb3fa28b00/1/4EHIW0dOi2wAiR2VQST_DIEgDYw.crl
rsync://rpki.ripe.net/repository/DEFAULT/20/549e4d-8dee-459b-9283-46bb3fa28b00/1/4EHIW0dOi2wAiR2VQST_DIEgDYw.mft
rsync://rpki.ripe.net/repository/DEFAULT/4EHIW0dOi2wAiR2VQST_DIEgDYw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 14:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d7:e1:af:41:03:57:35:e4:b2:44:9b:3b:77:09:52:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e041c85b474e8b6c00891d954124ff0c81200d8c
Validity
Not Before: Aug 23 17:02:28 2025 GMT
Not After : Aug 24 17:02:28 2025 GMT
Subject: CN=93e9f96c1de27c13cc92655388bf367d7c14c1fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:bd:3f:38:b9:b5:d8:ec:f8:ba:86:4c:59:d9:
f7:2e:78:f5:80:ee:f3:bd:a0:8d:51:2f:d8:8a:0d:
29:15:37:74:30:61:7a:fe:4a:28:56:f5:5e:e8:e9:
53:12:8a:9e:5c:54:24:16:2c:c2:3a:90:f7:e2:e7:
20:e0:d1:bd:52:26:f0:89:ee:1e:a4:0a:f9:7a:e8:
11:4a:40:23:4f:30:bf:8e:48:6a:ca:dc:2b:b2:1c:
9c:96:03:a0:90:9e:4f:fa:80:08:e5:f2:e6:a1:4f:
34:c8:37:23:4a:b5:a1:0e:65:64:45:97:77:db:de:
0f:f2:12:2f:b9:6f:a2:ca:10:69:12:2d:4f:cf:0f:
87:90:a7:12:50:0b:5f:e4:49:73:64:c9:0d:38:30:
28:d3:2d:7b:7b:48:0d:4f:04:52:a4:69:50:4e:1c:
bc:90:27:48:50:14:96:9e:63:a8:73:33:dd:e5:61:
98:e2:92:f2:25:e5:8a:4a:e0:64:e3:10:22:fc:d3:
28:9b:0c:29:eb:72:f4:bd:e7:4d:9c:46:6a:2b:e4:
db:da:5c:58:92:6e:57:50:6e:5e:f6:ec:f7:56:7e:
68:db:0a:ef:04:2b:6a:18:39:b9:a6:33:43:6c:90:
0e:cc:d3:2b:ec:07:e0:26:97:5f:47:c0:a4:ba:2b:
b7:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:E9:F9:6C:1D:E2:7C:13:CC:92:65:53:88:BF:36:7D:7C:14:C1:FE
X509v3 Authority Key Identifier:
keyid:E0:41:C8:5B:47:4E:8B:6C:00:89:1D:95:41:24:FF:0C:81:20:0D:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4EHIW0dOi2wAiR2VQST_DIEgDYw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/549e4d-8dee-459b-9283-46bb3fa28b00/1/4EHIW0dOi2wAiR2VQST_DIEgDYw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/549e4d-8dee-459b-9283-46bb3fa28b00/1/4EHIW0dOi2wAiR2VQST_DIEgDYw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:0c:e8:19:1d:d7:3f:34:6b:0a:bb:90:39:68:f6:18:af:09:
38:2d:ba:60:d9:f7:61:60:af:bc:ec:ea:72:ee:cc:e8:85:da:
52:7d:ee:32:2d:17:25:56:d1:33:d0:68:76:6d:39:a8:0c:39:
59:2b:8c:d5:fc:bb:c3:a9:b3:1d:2c:9a:82:d4:82:8a:d2:66:
95:30:60:78:87:d7:0f:99:f7:27:64:9d:47:1b:d1:25:da:48:
92:71:bb:d1:7d:d0:7f:f8:ed:05:1c:f3:34:a7:90:d3:1c:ef:
b8:4b:eb:e8:74:97:9a:54:2b:82:e1:01:5b:f9:86:09:ea:b6:
aa:77:d4:c9:3a:e6:51:6c:ed:b2:a8:18:59:9a:32:04:f1:ac:
29:25:fd:1c:04:8c:23:af:40:6a:99:08:5c:16:13:dc:24:91:
13:96:52:ce:7b:ad:b2:e8:d0:17:b1:6b:2a:5c:b3:d4:95:48:
21:26:09:b4:79:6f:50:b2:f8:45:a3:6a:f1:a4:e8:59:c4:dd:
b1:6c:bf:06:2d:a3:44:62:6b:0b:48:68:bf:74:66:73:fb:61:
55:0b:d2:33:39:c5:b9:a6:c6:64:69:d0:73:3c:07:1b:af:96:
02:6a:03:4c:88:5f:74:f9:48:ce:c6:87:5e:b4:30:bc:db:81:
3a:51:63:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 19:40:55 2025 by rpki-client