Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/1a85a8-e4f8-498b-a5ae-a4be172c76ba/1/4_GcxeONj5wdZUcXdmX4khHeyJk.mft
File: 4_GcxeONj5wdZUcXdmX4khHeyJk.mft (raw, json)
Hash identifier: Lg7UArahywe3cLmKrsf8uuhzaZs6TBl99DTSrgZ927w=
Subject key identifier: 4A:F7:03:22:1E:46:14:37:AA:F8:EE:BD:CD:9C:F9:85:F2:48:80:FC
Authority key identifier: E3:F1:9C:C5:E3:8D:8F:9C:1D:65:47:17:76:65:F8:92:11:DE:C8:99
Certificate issuer: /CN=e3f19cc5e38d8f9c1d6547177665f89211dec899
Certificate serial: 0198D69873DF58927EE6668D7ADD1D3EAC96
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4_GcxeONj5wdZUcXdmX4khHeyJk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/1a85a8-e4f8-498b-a5ae-a4be172c76ba/1/4_GcxeONj5wdZUcXdmX4khHeyJk.mft
Manifest number: 0EB7
Signing time: Sat 23 Aug 2025 11:02:51 +0000
Manifest this update: Sat 23 Aug 2025 11:02:51 +0000
Manifest next update: Sun 24 Aug 2025 11:02:51 +0000
Files and hashes: 1: 4_GcxeONj5wdZUcXdmX4khHeyJk.crl (hash: /iocF9ulOeO3cU5SahY/ywKnvcJAIhO/Oo5I1RwU8iI=)
2: nCO98tc8B201HK59o3LGsGaIbRQ.roa (hash: 5XD9s6utrTJgO6HcLNBLSP37yElvartuHWVrwWT7jxg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/23/1a85a8-e4f8-498b-a5ae-a4be172c76ba/1/4_GcxeONj5wdZUcXdmX4khHeyJk.crl
rsync://rpki.ripe.net/repository/DEFAULT/23/1a85a8-e4f8-498b-a5ae-a4be172c76ba/1/4_GcxeONj5wdZUcXdmX4khHeyJk.mft
rsync://rpki.ripe.net/repository/DEFAULT/4_GcxeONj5wdZUcXdmX4khHeyJk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:98:73:df:58:92:7e:e6:66:8d:7a:dd:1d:3e:ac:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e3f19cc5e38d8f9c1d6547177665f89211dec899
Validity
Not Before: Aug 23 11:02:51 2025 GMT
Not After : Aug 24 11:02:51 2025 GMT
Subject: CN=4af703221e461437aaf8eebdcd9cf985f24880fc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:d3:91:f6:09:8b:57:19:fa:d9:b9:de:c0:61:
e1:56:7a:8c:b7:5f:08:68:39:11:e9:c1:cc:30:28:
69:db:7e:f9:7a:0f:c5:a7:bf:4d:e3:69:b5:4d:3b:
a7:49:92:12:1c:23:4d:3b:39:79:65:df:48:89:7f:
69:19:8c:1f:37:dd:bb:f9:c0:12:63:ff:93:17:b4:
90:de:33:33:aa:0d:ef:aa:f6:09:e0:3c:75:9b:5b:
ae:82:86:9e:c3:65:70:ad:fc:33:8e:ce:84:e7:2c:
55:41:fc:92:2c:9a:87:f6:d6:16:63:c4:e2:3c:a4:
ef:84:84:3b:f2:b1:3f:fa:9e:cf:de:b4:a3:17:70:
3a:d1:42:52:75:97:29:e3:d5:c8:01:db:c8:60:c2:
e8:db:94:05:3b:af:7a:65:e7:91:0f:1f:ce:92:20:
92:1b:bb:ca:ac:40:33:56:b6:a9:77:62:b9:b6:28:
82:c3:a7:dc:61:49:3e:46:c8:4c:76:24:be:51:72:
81:b3:75:63:61:79:66:22:80:4b:d5:00:04:dc:32:
24:c2:a6:94:69:91:ea:21:f3:e8:36:f9:6a:7f:2c:
eb:2c:f1:6f:4d:c8:d9:b3:4e:95:91:8e:99:74:6d:
c8:0a:0f:da:49:7b:1f:b4:a7:7e:ba:cc:7f:a8:94:
23:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:F7:03:22:1E:46:14:37:AA:F8:EE:BD:CD:9C:F9:85:F2:48:80:FC
X509v3 Authority Key Identifier:
keyid:E3:F1:9C:C5:E3:8D:8F:9C:1D:65:47:17:76:65:F8:92:11:DE:C8:99
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4_GcxeONj5wdZUcXdmX4khHeyJk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/1a85a8-e4f8-498b-a5ae-a4be172c76ba/1/4_GcxeONj5wdZUcXdmX4khHeyJk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/23/1a85a8-e4f8-498b-a5ae-a4be172c76ba/1/4_GcxeONj5wdZUcXdmX4khHeyJk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:e7:ee:6e:31:18:b0:7e:17:e4:3b:10:3c:e0:d1:06:68:53:
93:a9:ae:a1:c7:1e:f9:ca:f4:e8:7e:38:db:3d:b4:15:1d:86:
56:08:a5:75:86:22:cf:a4:0d:fb:fe:57:1e:c0:c8:9d:d3:84:
7c:62:f6:9b:eb:02:9d:65:ce:ab:e9:78:e2:29:09:79:f2:07:
f5:42:87:8b:d7:e9:85:86:7f:9b:44:bf:98:1d:13:14:ef:e3:
56:1c:c1:70:d4:4d:3c:cc:3a:57:8a:91:f9:07:f6:2f:ff:9e:
e6:d6:49:df:21:26:3f:2e:4e:f9:17:f0:a7:41:a6:a9:6f:7e:
36:72:44:dd:85:ec:cb:79:4c:20:cd:55:8c:d4:5e:2f:73:21:
a1:b2:9e:df:92:3e:ab:61:4c:9c:ff:d2:e7:f3:c1:66:31:85:
26:46:1c:d7:38:9d:ed:5b:94:bb:15:20:f5:6c:a2:b5:9f:fb:
2f:5e:ea:44:af:c3:27:f2:af:ff:61:63:f3:f8:5f:df:c6:42:
bf:56:61:08:be:86:9c:45:0a:cf:d0:3b:e0:14:b0:73:c8:61:
3d:11:45:5e:ca:82:3c:aa:14:fd:c6:4a:39:12:ce:bf:4b:76:
69:37:46:ec:3e:09:09:56:d6:75:4d:4c:68:f2:d0:59:34:b6:
09:1d:81:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 13:57:28 2025 by rpki-client