Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/523a93-8bbd-44ac-88bd-4e7bca55f821/1/4a7RSE6W5L95k-m4Z7NMNNaorjY.mft
File: 4a7RSE6W5L95k-m4Z7NMNNaorjY.mft (raw, json)
Hash identifier: SIKiwzJF1xBw6/3z0EmtUjdlYa8EYVh0Zl/cq9olcxc=
Subject key identifier: D0:A7:EA:93:77:17:08:45:EA:5F:DF:A1:7B:D8:1D:80:E0:35:1A:1F
Authority key identifier: E1:AE:D1:48:4E:96:E4:BF:79:93:E9:B8:67:B3:4C:34:D6:A8:AE:36
Certificate issuer: /CN=e1aed1484e96e4bf7993e9b867b34c34d6a8ae36
Certificate serial: 0198D515C5E2F14887CCC75F25488DE05FE0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4a7RSE6W5L95k-m4Z7NMNNaorjY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/523a93-8bbd-44ac-88bd-4e7bca55f821/1/4a7RSE6W5L95k-m4Z7NMNNaorjY.mft
Manifest number: 0D01
Signing time: Sat 23 Aug 2025 04:00:30 +0000
Manifest this update: Sat 23 Aug 2025 04:00:30 +0000
Manifest next update: Sun 24 Aug 2025 04:00:30 +0000
Files and hashes: 1: 4a7RSE6W5L95k-m4Z7NMNNaorjY.crl (hash: mPQKbGZp+VXyWTt0ms/1npHEer6rcLscAeVLaY5lDeo=)
2: 7e4XWoTxR_4GFJNbOkXvGvD-gG4.roa (hash: 4YXw3iLwYdL9YkiJ0wB5yVfXs/BwnpG21A305csfmtA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/523a93-8bbd-44ac-88bd-4e7bca55f821/1/4a7RSE6W5L95k-m4Z7NMNNaorjY.crl
rsync://rpki.ripe.net/repository/DEFAULT/64/523a93-8bbd-44ac-88bd-4e7bca55f821/1/4a7RSE6W5L95k-m4Z7NMNNaorjY.mft
rsync://rpki.ripe.net/repository/DEFAULT/4a7RSE6W5L95k-m4Z7NMNNaorjY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 04:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:15:c5:e2:f1:48:87:cc:c7:5f:25:48:8d:e0:5f:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e1aed1484e96e4bf7993e9b867b34c34d6a8ae36
Validity
Not Before: Aug 23 04:00:30 2025 GMT
Not After : Aug 24 04:00:30 2025 GMT
Subject: CN=d0a7ea9377170845ea5fdfa17bd81d80e0351a1f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:d0:2f:2a:bc:3d:0c:45:36:9c:47:a9:83:a9:
e5:74:a1:32:8c:fa:dc:d7:35:41:98:5c:53:77:37:
fb:45:a4:04:fb:10:43:25:b8:ee:d4:62:9b:d2:f2:
82:97:7d:ad:e4:25:63:d4:ca:86:04:06:24:46:3b:
ed:71:d4:28:f4:05:f4:a6:3f:3e:bd:f3:02:ca:8d:
eb:f7:5b:91:97:56:be:55:ba:fc:86:72:c6:46:8c:
d6:11:64:7e:3a:8c:03:ce:5c:eb:b3:5b:dd:35:fd:
8d:15:9c:29:cf:78:a7:05:6a:17:6d:54:a5:fe:3f:
7a:65:07:dd:4d:ff:4b:a8:4c:b5:07:bd:24:27:1f:
ab:fa:c2:7c:e8:b8:e0:2d:bd:d8:4a:d8:37:1f:aa:
3f:0d:76:5c:d2:0b:c2:42:de:b2:85:a7:43:d8:33:
ab:a9:68:cf:68:c5:53:e2:0b:60:4e:b2:64:e3:de:
46:b6:31:27:8a:19:d7:62:e7:b4:29:fb:84:f7:50:
7b:53:b1:64:03:b8:b1:28:38:39:42:af:84:cf:97:
e2:26:31:f1:d8:57:e8:02:0e:2a:b3:9d:2a:31:9b:
cd:72:f0:f8:19:e8:9f:ff:39:33:39:6c:5c:74:62:
c4:40:8a:1e:4d:7e:e0:2b:3e:e4:12:9c:95:8f:cc:
68:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:A7:EA:93:77:17:08:45:EA:5F:DF:A1:7B:D8:1D:80:E0:35:1A:1F
X509v3 Authority Key Identifier:
keyid:E1:AE:D1:48:4E:96:E4:BF:79:93:E9:B8:67:B3:4C:34:D6:A8:AE:36
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a7RSE6W5L95k-m4Z7NMNNaorjY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/523a93-8bbd-44ac-88bd-4e7bca55f821/1/4a7RSE6W5L95k-m4Z7NMNNaorjY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/523a93-8bbd-44ac-88bd-4e7bca55f821/1/4a7RSE6W5L95k-m4Z7NMNNaorjY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:88:20:79:32:bf:dc:f8:cc:5e:a5:39:a0:cc:d8:91:f8:3c:
45:45:d5:bc:27:8a:09:d8:c7:aa:26:aa:f0:d0:81:23:52:6c:
d8:f3:03:13:53:73:00:30:f4:ff:36:0d:f7:09:ca:44:b9:d1:
44:dc:9e:1c:65:aa:bc:0f:04:0e:c2:c3:12:ce:ad:4f:3e:93:
14:cd:62:92:ab:14:09:20:ee:c7:ed:07:c5:87:a4:29:3d:c1:
81:c2:e2:ff:00:81:a3:66:d2:19:aa:94:68:be:6a:f4:6e:56:
50:e4:e6:22:9f:31:d9:6c:1b:9b:f9:24:7f:67:a2:d5:23:41:
c8:68:53:33:05:bf:b2:37:fe:97:12:22:58:a0:33:7a:f2:01:
c4:ef:51:8f:c9:57:cc:41:fc:80:42:5d:4c:30:82:d3:51:f1:
a5:40:be:ae:cd:60:79:a0:87:9e:c8:b6:63:ed:50:01:cb:83:
24:58:c1:5e:4e:9f:f0:9f:dc:9c:1b:ca:03:0d:4e:b4:c9:51:
1c:7d:c7:f6:c7:4a:eb:a2:90:aa:70:54:8c:22:94:32:23:c4:
1b:1a:bd:7d:93:02:88:f9:c5:da:d6:3a:e6:36:91:0b:ef:32:
1c:42:89:e2:f9:02:2a:b5:0a:fa:e6:fc:09:91:4b:de:b8:b2:
d5:a1:2a:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 11:39:13 2025 by rpki-client