Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/466119-873f-4cfd-91a6-b1e313d79893/1/4K-xYKlzOKshEUhArdxhgKW6QrE.mft
File: 4K-xYKlzOKshEUhArdxhgKW6QrE.mft (raw, json)
Hash identifier: +DDe0b+va5P02gIDYSNyazzF6VP9v39EKqZYGXghG6M=
Subject key identifier: 5E:F6:EE:0D:D8:34:A2:16:E8:16:A0:81:97:0B:C9:F0:BB:F7:CB:1E
Authority key identifier: E0:AF:B1:60:A9:73:38:AB:21:11:48:40:AD:DC:61:80:A5:BA:42:B1
Certificate issuer: /CN=e0afb160a97338ab21114840addc6180a5ba42b1
Certificate serial: 0198D583916574E66B8ABD7AF918E3CD6255
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4K-xYKlzOKshEUhArdxhgKW6QrE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6b/466119-873f-4cfd-91a6-b1e313d79893/1/4K-xYKlzOKshEUhArdxhgKW6QrE.mft
Manifest number: 131E
Signing time: Sat 23 Aug 2025 06:00:25 +0000
Manifest this update: Sat 23 Aug 2025 06:00:25 +0000
Manifest next update: Sun 24 Aug 2025 06:00:25 +0000
Files and hashes: 1: 4K-xYKlzOKshEUhArdxhgKW6QrE.crl (hash: rHm711rOYM+dT/IMXy91V3VwlqiQutnr9gUtrAJC1nw=)
2: Gwy6_uUvgZKl_FsgbK0SBR2765s.roa (hash: e+42Dv5ZMct1RmCP3DiJKtyiBUgVYfDjN9qagjZj7ck=)
3: RoGLSCET83zk1v-3GNDAGUmNCf4.roa (hash: TK8/4ls6e1537IxcrmPC8DEH8k32Or5yu+pxFNpz4Eo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6b/466119-873f-4cfd-91a6-b1e313d79893/1/4K-xYKlzOKshEUhArdxhgKW6QrE.crl
rsync://rpki.ripe.net/repository/DEFAULT/6b/466119-873f-4cfd-91a6-b1e313d79893/1/4K-xYKlzOKshEUhArdxhgKW6QrE.mft
rsync://rpki.ripe.net/repository/DEFAULT/4K-xYKlzOKshEUhArdxhgKW6QrE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:83:91:65:74:e6:6b:8a:bd:7a:f9:18:e3:cd:62:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e0afb160a97338ab21114840addc6180a5ba42b1
Validity
Not Before: Aug 23 06:00:25 2025 GMT
Not After : Aug 24 06:00:25 2025 GMT
Subject: CN=5ef6ee0dd834a216e816a081970bc9f0bbf7cb1e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:a2:db:3c:58:d7:91:6d:e7:3f:40:35:c2:d5:
49:9a:c5:e7:e9:db:51:e9:89:c3:b6:e2:07:cf:8a:
79:03:b0:aa:f1:ec:00:7d:72:c3:78:98:d3:ff:aa:
6f:a7:1a:7a:42:ce:8e:db:09:f8:c4:b3:d0:a2:61:
4c:be:f5:79:75:c7:eb:a9:05:f3:ee:a8:45:fe:74:
af:63:45:32:11:2b:bf:63:4a:49:74:b6:9e:15:49:
e4:34:63:37:85:3e:2c:a1:73:42:fd:d6:2e:88:0d:
a4:96:fb:cb:d8:81:23:4e:38:6a:c9:7c:94:d4:0a:
64:20:54:16:71:e7:27:ae:a3:b9:ea:07:f4:98:1c:
0c:95:4f:02:11:54:51:94:d0:75:84:fe:39:76:49:
3f:84:6d:ee:b6:95:c3:79:ba:33:82:fe:01:b3:83:
f0:74:1c:88:7e:fb:69:16:62:d4:8d:96:74:ec:7d:
39:83:11:01:07:75:f9:57:84:43:6f:15:b7:8c:39:
62:33:3a:e2:4e:81:bd:f5:5d:86:cd:39:6c:e3:93:
ca:cf:82:17:b2:64:a0:b7:98:25:73:dd:fb:8c:de:
70:c4:5c:d2:64:97:29:84:4f:42:17:33:33:60:9e:
5c:0c:a7:f1:f2:58:06:a4:63:03:99:01:d0:72:99:
7a:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:F6:EE:0D:D8:34:A2:16:E8:16:A0:81:97:0B:C9:F0:BB:F7:CB:1E
X509v3 Authority Key Identifier:
keyid:E0:AF:B1:60:A9:73:38:AB:21:11:48:40:AD:DC:61:80:A5:BA:42:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4K-xYKlzOKshEUhArdxhgKW6QrE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/466119-873f-4cfd-91a6-b1e313d79893/1/4K-xYKlzOKshEUhArdxhgKW6QrE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/466119-873f-4cfd-91a6-b1e313d79893/1/4K-xYKlzOKshEUhArdxhgKW6QrE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a1:2a:85:7e:a6:3b:85:8a:04:1c:5c:12:a4:cc:be:6b:8b:0e:
bf:b1:0a:dc:7b:aa:ed:8b:49:90:dd:57:fa:72:95:5a:01:5c:
bc:21:76:b3:0a:8a:0b:5c:99:b2:8d:5b:37:34:c0:32:1e:15:
0d:e4:fb:72:40:30:82:c7:dc:7f:75:4e:e2:ba:96:a4:d7:e5:
6a:ef:d0:4a:30:a8:9b:ce:6a:b1:fd:30:ad:c7:4c:04:aa:50:
83:55:0f:06:1b:6a:ac:fe:78:bc:7c:4c:9a:14:32:70:50:67:
f9:ba:bc:71:de:2a:89:df:a9:8d:91:72:8d:ad:60:70:8e:27:
79:5d:1a:e0:9c:a6:28:c0:b3:ad:66:9d:f1:04:64:de:d6:bf:
d0:09:56:b8:a1:81:7f:61:ce:84:06:4c:e2:e7:98:1a:6e:7a:
bf:b1:75:2c:f9:7d:bb:5c:75:75:66:55:6a:98:c1:78:d5:71:
1a:5c:6e:2f:6f:c5:7c:3c:12:00:d4:da:d8:6e:01:8d:7b:9c:
e9:92:ee:1b:54:5f:db:cc:12:4e:ab:59:bf:e3:15:29:d4:f4:
6a:7d:4a:a8:67:63:30:07:c3:72:fb:b6:d5:50:6c:d2:fa:7a:
16:19:46:01:f7:af:d3:54:3d:c7:b0:f2:30:5e:81:df:8c:d6:
4a:c2:ed:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 14:31:04 2025 by rpki-client