Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/9d7cd7-ee63-4886-8fe1-b5ce6b6fd4d1/1/4Zd4WdBx9xUIN7KstDU_8z79gxw.mft
File: 4Zd4WdBx9xUIN7KstDU_8z79gxw.mft (raw, json)
Hash identifier: Q479s6YGyXUjLJ9wrm1irzLgHsWmFwH80YyNhNDWXNI=
Subject key identifier: C9:2A:73:1A:AA:0E:73:2F:E7:17:B9:6C:98:CD:8B:9B:AB:BB:F2:5C
Authority key identifier: E1:97:78:59:D0:71:F7:15:08:37:B2:AC:B4:35:3F:F3:3E:FD:83:1C
Certificate issuer: /CN=e1977859d071f7150837b2acb4353ff33efd831c
Certificate serial: 0198D5F17BE5C35BC741CD2609D7E20FA049
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4Zd4WdBx9xUIN7KstDU_8z79gxw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/76/9d7cd7-ee63-4886-8fe1-b5ce6b6fd4d1/1/4Zd4WdBx9xUIN7KstDU_8z79gxw.mft
Manifest number: 141A
Signing time: Sat 23 Aug 2025 08:00:29 +0000
Manifest this update: Sat 23 Aug 2025 08:00:29 +0000
Manifest next update: Sun 24 Aug 2025 08:00:29 +0000
Files and hashes: 1: 4Zd4WdBx9xUIN7KstDU_8z79gxw.crl (hash: 1V5G2tf7F9DY2D2PQ5/XzrJ3qIs/zJlfQ1mPxI00cjM=)
2: yF44GfEIvZjG1b-fqxz7IcsVaik.roa (hash: Nr6aX1S4xhUfVJHe+PzjETZYUXFy6RKCIH4m44as1jw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/76/9d7cd7-ee63-4886-8fe1-b5ce6b6fd4d1/1/4Zd4WdBx9xUIN7KstDU_8z79gxw.crl
rsync://rpki.ripe.net/repository/DEFAULT/76/9d7cd7-ee63-4886-8fe1-b5ce6b6fd4d1/1/4Zd4WdBx9xUIN7KstDU_8z79gxw.mft
rsync://rpki.ripe.net/repository/DEFAULT/4Zd4WdBx9xUIN7KstDU_8z79gxw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:f1:7b:e5:c3:5b:c7:41:cd:26:09:d7:e2:0f:a0:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e1977859d071f7150837b2acb4353ff33efd831c
Validity
Not Before: Aug 23 08:00:29 2025 GMT
Not After : Aug 24 08:00:29 2025 GMT
Subject: CN=c92a731aaa0e732fe717b96c98cd8b9babbbf25c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:43:77:f8:23:80:aa:9a:7a:2c:73:f4:30:b4:
84:77:0b:0b:19:54:37:40:4b:e4:89:b7:e1:7e:de:
13:13:54:d8:88:50:fc:e0:a3:b6:84:3b:b0:62:fc:
f3:60:28:19:c2:50:8f:dd:79:95:8f:e1:81:40:51:
33:91:fc:a9:6a:02:19:c6:40:c7:b7:0c:82:98:c1:
01:7d:55:ef:1b:7e:2f:5a:62:a4:e9:c2:fd:4a:be:
ae:8d:fb:e6:d2:e2:b3:76:72:46:fc:0e:c1:67:36:
d1:0f:24:d7:af:f0:e7:21:c9:c1:7f:e0:2c:09:dc:
80:8d:58:4f:c1:38:50:bc:29:df:1e:c8:15:51:5b:
ab:2c:c8:f4:04:69:a6:e4:16:0c:29:a8:42:01:55:
cd:cc:3a:fb:93:e1:26:76:67:38:8d:5c:46:68:c2:
21:ac:81:7a:94:48:09:fb:da:87:77:67:be:18:c4:
5b:fb:f7:73:d8:30:74:14:8b:d8:c1:d1:bb:52:5a:
9c:da:69:4a:13:7a:1d:10:37:19:ca:f7:8c:a8:90:
00:12:fb:95:ce:bb:d7:48:57:3b:19:2e:7c:c5:5e:
7d:fa:c0:a3:f6:d1:be:d5:f3:c0:f0:91:27:3a:63:
13:49:45:5e:86:f6:01:64:17:34:37:b7:b3:fb:84:
6c:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:2A:73:1A:AA:0E:73:2F:E7:17:B9:6C:98:CD:8B:9B:AB:BB:F2:5C
X509v3 Authority Key Identifier:
keyid:E1:97:78:59:D0:71:F7:15:08:37:B2:AC:B4:35:3F:F3:3E:FD:83:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4Zd4WdBx9xUIN7KstDU_8z79gxw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/9d7cd7-ee63-4886-8fe1-b5ce6b6fd4d1/1/4Zd4WdBx9xUIN7KstDU_8z79gxw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/76/9d7cd7-ee63-4886-8fe1-b5ce6b6fd4d1/1/4Zd4WdBx9xUIN7KstDU_8z79gxw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9e:a0:5d:90:74:6e:dd:38:a3:89:12:b3:ec:c1:0d:9f:64:43:
bf:2f:6a:2c:1f:45:83:16:9f:83:d0:eb:18:78:d9:bc:c5:2c:
43:1a:66:41:16:ce:de:4c:b2:19:92:9c:f6:6b:06:34:8b:8a:
4a:3a:70:a9:16:e0:cd:55:74:8f:49:bc:b8:3f:30:dd:e4:2e:
9b:6d:db:5a:8e:74:cf:7d:27:a4:4a:70:d3:4d:f9:b8:d8:0a:
9a:1c:a1:4d:29:3d:4c:fe:8c:a3:4e:b5:72:f7:ac:5b:7a:40:
67:e0:99:86:79:52:cc:26:19:fb:10:96:22:1e:e6:df:14:22:
4a:2e:71:b7:76:b0:cb:5c:57:02:03:2a:2c:a3:1b:98:5e:32:
73:de:bf:10:73:21:46:80:1e:ab:63:49:7f:f1:4e:55:1a:98:
25:09:01:a7:1f:d1:a7:ce:7a:4f:e3:11:ef:5a:7a:36:57:d4:
ec:02:86:d3:bc:36:59:9f:af:90:64:75:f6:6d:d0:5a:bd:b6:
85:ac:2f:26:ca:2d:b9:d5:79:f0:2b:06:3a:99:1b:4f:fe:49:
c7:2d:56:ce:e3:32:e7:08:a8:2c:57:00:4f:87:1d:ad:85:a4:
54:4f:d4:c8:ee:10:63:41:16:c8:23:48:c9:7c:74:15:93:2a:
3a:a4:3d:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 13:33:21 2025 by rpki-client