Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/dd5c15-815d-411d-8a56-82c6cf14dfe2/1/4eEqJ5W25N8mX2XfCgDLfH5F3u8.mft
File: 4eEqJ5W25N8mX2XfCgDLfH5F3u8.mft (raw, json)
Hash identifier: N2nv+FULhJxMjlskTJluYHh2V34EjuBv+QTo5zwC3c0=
Subject key identifier: B7:26:59:D9:66:94:7E:B2:79:AE:DC:61:7A:F2:B9:80:CD:A0:8E:EB
Authority key identifier: E1:E1:2A:27:95:B6:E4:DF:26:5F:65:DF:0A:00:CB:7C:7E:45:DE:EF
Certificate issuer: /CN=e1e12a2795b6e4df265f65df0a00cb7c7e45deef
Certificate serial: 0198D5834AC56CE90AF938322528FB8652AD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4eEqJ5W25N8mX2XfCgDLfH5F3u8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/dd5c15-815d-411d-8a56-82c6cf14dfe2/1/4eEqJ5W25N8mX2XfCgDLfH5F3u8.mft
Manifest number: 1242
Signing time: Sat 23 Aug 2025 06:00:08 +0000
Manifest this update: Sat 23 Aug 2025 06:00:08 +0000
Manifest next update: Sun 24 Aug 2025 06:00:08 +0000
Files and hashes: 1: 4eEqJ5W25N8mX2XfCgDLfH5F3u8.crl (hash: RXQUgZqR9UAdgsbjR9Rqvn09hRyGpYI6Rke5iZS3qw4=)
2: t1ORbdksbr2p1B59lFrh9IkJsfE.roa (hash: JVz20kQAYF9u2DMBNNZhgOePGcGoxFfVOgHdTdf+BvA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/dd5c15-815d-411d-8a56-82c6cf14dfe2/1/4eEqJ5W25N8mX2XfCgDLfH5F3u8.crl
rsync://rpki.ripe.net/repository/DEFAULT/41/dd5c15-815d-411d-8a56-82c6cf14dfe2/1/4eEqJ5W25N8mX2XfCgDLfH5F3u8.mft
rsync://rpki.ripe.net/repository/DEFAULT/4eEqJ5W25N8mX2XfCgDLfH5F3u8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:83:4a:c5:6c:e9:0a:f9:38:32:25:28:fb:86:52:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e1e12a2795b6e4df265f65df0a00cb7c7e45deef
Validity
Not Before: Aug 23 06:00:08 2025 GMT
Not After : Aug 24 06:00:08 2025 GMT
Subject: CN=b72659d966947eb279aedc617af2b980cda08eeb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:53:dc:5e:ab:50:d5:ea:7f:e5:fc:b2:ec:fd:
b1:50:d0:c1:25:a5:6f:d4:b9:00:cf:05:15:ef:2b:
7c:36:ed:79:7e:38:d3:15:d6:5c:2b:62:8d:c6:ac:
ae:12:26:ec:72:c6:2b:98:3a:af:df:8e:54:5e:d4:
ea:b5:8c:68:8b:21:a5:ff:0c:35:22:2d:de:ec:67:
e1:d8:ab:e4:29:b4:4a:4c:02:e0:b4:8c:2a:0b:2c:
8f:1d:1c:75:60:5c:72:85:69:5b:41:de:c2:a3:0f:
c0:05:7a:59:39:ba:37:b6:f3:ff:e2:13:c7:1e:ba:
3c:5d:0f:ce:c5:6b:e3:73:be:0d:99:a8:52:16:79:
b5:78:d7:1f:b0:8c:29:4f:82:6d:a1:53:2e:68:b9:
92:8d:ac:48:4c:83:a8:08:52:4c:80:dd:87:f9:b7:
a5:23:60:ee:1a:6f:27:3b:1e:63:ff:27:54:44:32:
96:52:39:2f:5e:99:f4:88:1a:10:0e:9b:4b:8d:eb:
34:a2:c2:ad:bc:74:c8:5e:7c:70:12:f8:0c:ae:f7:
83:bf:86:80:36:dd:03:43:37:f1:7a:44:a0:96:32:
da:07:a1:45:42:20:dd:9c:1b:73:3f:a5:1f:67:78:
5d:1c:12:9d:27:4e:bb:96:e9:d4:2c:95:89:9b:9d:
91:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:26:59:D9:66:94:7E:B2:79:AE:DC:61:7A:F2:B9:80:CD:A0:8E:EB
X509v3 Authority Key Identifier:
keyid:E1:E1:2A:27:95:B6:E4:DF:26:5F:65:DF:0A:00:CB:7C:7E:45:DE:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4eEqJ5W25N8mX2XfCgDLfH5F3u8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/dd5c15-815d-411d-8a56-82c6cf14dfe2/1/4eEqJ5W25N8mX2XfCgDLfH5F3u8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/dd5c15-815d-411d-8a56-82c6cf14dfe2/1/4eEqJ5W25N8mX2XfCgDLfH5F3u8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:36:7d:0d:3e:00:ad:a0:b4:c0:99:04:61:4b:22:5b:6d:8e:
b0:04:af:03:b2:96:83:1c:80:24:15:88:7d:3b:01:d4:1d:1a:
db:d7:ac:60:bf:70:44:ad:e9:2d:ff:ac:c8:6d:ac:df:b9:3c:
26:bb:37:b3:c6:50:7e:40:3f:82:55:b6:07:b3:63:83:56:11:
af:a7:fe:07:a6:ae:69:7b:af:6b:ee:8c:39:32:1c:ec:9d:24:
08:0d:99:55:fe:ad:b9:65:24:15:58:a3:c2:ba:23:f9:c2:4b:
dc:c9:62:04:83:04:66:b7:51:35:67:f0:e3:f0:e1:72:0b:76:
ec:75:82:de:52:9d:fa:06:b5:04:b7:b0:ad:86:5a:55:67:e7:
05:2c:47:30:ee:a8:76:d0:fd:6c:81:e6:ca:d7:01:dd:ab:ff:
d8:1c:69:ba:0e:48:f8:ca:b0:72:a5:17:20:7d:e2:a5:97:2a:
bd:94:b8:0c:59:9c:08:26:0e:3d:41:4a:fd:5e:98:5e:fc:ae:
68:e3:1e:37:79:00:ff:ec:d3:1e:fd:e6:d2:ec:02:d4:38:4e:
77:de:07:73:46:90:8b:91:60:74:f6:e0:36:56:88:1f:17:9e:
d4:44:44:0c:45:ef:f6:8d:19:b7:0a:fa:20:79:a9:51:a8:a1:
9c:31:2d:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:39:57 2025 by rpki-client