Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/0e6f4a-fd57-411b-a94b-6b6fdb54ba31/1/4an-PIpp1Qk1ofdJZm4I3HVFlN0.mft
File: 4an-PIpp1Qk1ofdJZm4I3HVFlN0.mft (raw, json)
Hash identifier: uEhxWFnlaLwa2r7E5EREkr68NsHGOJIcsbnPaaVMX5I=
Subject key identifier: DC:AF:0D:C8:7B:88:5E:96:DC:08:36:D2:32:70:B7:E9:1E:66:92:1A
Authority key identifier: E1:A9:FE:3C:8A:69:D5:09:35:A1:F7:49:66:6E:08:DC:75:45:94:DD
Certificate issuer: /CN=e1a9fe3c8a69d50935a1f749666e08dc754594dd
Certificate serial: 0198D6CD52EDE2AC1D5DBFE508651FBEFCA1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4an-PIpp1Qk1ofdJZm4I3HVFlN0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/0e6f4a-fd57-411b-a94b-6b6fdb54ba31/1/4an-PIpp1Qk1ofdJZm4I3HVFlN0.mft
Manifest number: 110D
Signing time: Sat 23 Aug 2025 12:00:37 +0000
Manifest this update: Sat 23 Aug 2025 12:00:37 +0000
Manifest next update: Sun 24 Aug 2025 12:00:37 +0000
Files and hashes: 1: 3BfIScw6HImdI4whE_vk-buQO8s.roa (hash: G0gYam1RQRQrZL9flb7DmAGTR2cR1ZnF922oRZ/xNlg=)
2: 4an-PIpp1Qk1ofdJZm4I3HVFlN0.crl (hash: LxDXBcZoBMwLRM+TG/bdqxAyceDXr4sPBRuXgikxqjE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/0e6f4a-fd57-411b-a94b-6b6fdb54ba31/1/4an-PIpp1Qk1ofdJZm4I3HVFlN0.crl
rsync://rpki.ripe.net/repository/DEFAULT/24/0e6f4a-fd57-411b-a94b-6b6fdb54ba31/1/4an-PIpp1Qk1ofdJZm4I3HVFlN0.mft
rsync://rpki.ripe.net/repository/DEFAULT/4an-PIpp1Qk1ofdJZm4I3HVFlN0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 12:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:cd:52:ed:e2:ac:1d:5d:bf:e5:08:65:1f:be:fc:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e1a9fe3c8a69d50935a1f749666e08dc754594dd
Validity
Not Before: Aug 23 12:00:37 2025 GMT
Not After : Aug 24 12:00:37 2025 GMT
Subject: CN=dcaf0dc87b885e96dc0836d23270b7e91e66921a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:8f:de:2f:a1:ee:fe:c4:9f:10:c6:49:71:f3:
9f:1b:50:07:5d:19:d8:c9:0c:55:08:36:b4:ba:c6:
a8:88:97:d9:e5:4e:bc:74:38:d3:98:d4:a2:dd:a4:
1f:cf:55:dd:08:6d:7f:cc:1f:46:fd:55:c8:55:e5:
24:88:5e:f0:4b:de:68:0a:b2:a5:de:9a:f4:ef:e2:
a1:64:df:83:5f:37:7b:41:61:ec:09:18:b1:df:34:
c0:8c:03:4f:88:93:28:78:3e:74:40:20:6c:f3:eb:
dd:e1:e3:ed:bc:53:97:be:b5:56:d5:9b:db:81:0d:
74:a0:c2:e3:41:c9:2e:ce:38:c3:64:98:6c:48:ef:
a9:e6:fc:af:db:00:4b:60:67:24:a9:b6:1b:01:57:
41:72:3b:e4:66:d4:80:78:73:19:02:27:b4:b5:7e:
e7:21:9b:eb:a4:47:4e:76:ce:66:5e:1e:bc:1d:3a:
ba:9f:53:e8:73:fb:ae:dd:18:02:c4:b8:07:e3:a5:
54:56:a9:16:b3:84:c5:b7:40:c0:db:cb:77:76:48:
3f:cd:fb:76:b0:c0:75:c5:8b:55:fa:75:47:ee:e3:
c0:51:93:e8:9a:07:f6:a1:3a:91:8d:8d:19:c8:16:
11:a1:5c:8b:99:c6:cb:27:80:75:77:9c:de:1e:8e:
0a:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:AF:0D:C8:7B:88:5E:96:DC:08:36:D2:32:70:B7:E9:1E:66:92:1A
X509v3 Authority Key Identifier:
keyid:E1:A9:FE:3C:8A:69:D5:09:35:A1:F7:49:66:6E:08:DC:75:45:94:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4an-PIpp1Qk1ofdJZm4I3HVFlN0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/0e6f4a-fd57-411b-a94b-6b6fdb54ba31/1/4an-PIpp1Qk1ofdJZm4I3HVFlN0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/0e6f4a-fd57-411b-a94b-6b6fdb54ba31/1/4an-PIpp1Qk1ofdJZm4I3HVFlN0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d0:af:2d:f4:04:4b:7c:1c:e4:f6:fa:63:48:62:eb:3c:cc:77:
84:8f:dd:8e:af:18:de:f3:61:62:60:86:6a:5d:9c:7c:3d:bc:
3c:be:f9:8d:fb:8c:0a:ff:f4:a8:ab:9d:42:81:a4:07:61:b2:
08:07:77:02:41:b2:78:4e:ad:ce:ee:12:d8:f4:07:fb:70:cd:
e9:39:da:af:60:de:4b:46:4a:88:8b:4b:2b:b8:4a:26:1f:53:
4f:33:99:b2:42:c4:fb:43:32:cb:0c:c1:75:03:0f:69:a2:37:
ed:d8:68:09:4f:26:62:57:75:ed:f3:ea:20:82:54:d7:d7:6c:
74:99:56:d2:a7:29:1f:9f:e8:14:56:c9:76:d6:ff:42:45:78:
2b:88:43:fc:78:41:14:66:82:ee:72:61:06:63:84:c1:6b:8d:
47:b1:fa:de:5c:9d:5f:f0:5b:d7:f0:6c:3f:dd:ea:27:e0:35:
cf:21:0a:dd:80:9e:b8:a6:77:76:b7:d1:ff:6c:73:c4:04:b0:
dd:8c:46:a3:a0:8c:cb:85:e0:ca:09:ac:02:2f:ac:fb:ff:d0:
b6:8c:c9:bc:9f:39:fa:24:4e:5b:b3:89:3b:39:29:fa:f1:a1:
f1:ea:d6:3c:4f:8d:19:59:17:03:bc:d8:fe:ad:b1:5b:13:b2:
d6:83:e1:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 17:42:32 2025 by rpki-client