Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/f9f8fa-2988-445c-be94-913575c58f4a/1/4aWhf1DBNbGFHOwsdrD9cPncx54.mft
File: 4aWhf1DBNbGFHOwsdrD9cPncx54.mft (raw, json)
Hash identifier: nTf4LOLRghU4tALN472F3qBhX5uzKk/3Num0lmUm1R0=
Subject key identifier: 50:9D:3C:00:CA:A8:AC:CD:FD:3E:B3:1F:83:C2:9B:FF:61:05:6A:B5
Authority key identifier: E1:A5:A1:7F:50:C1:35:B1:85:1C:EC:2C:76:B0:FD:70:F9:DC:C7:9E
Certificate issuer: /CN=e1a5a17f50c135b1851cec2c76b0fd70f9dcc79e
Certificate serial: 0198D47405BBF9A4DC216C5ADF58FDC6408B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4aWhf1DBNbGFHOwsdrD9cPncx54.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/f9f8fa-2988-445c-be94-913575c58f4a/1/4aWhf1DBNbGFHOwsdrD9cPncx54.mft
Manifest number: 04C3
Signing time: Sat 23 Aug 2025 01:03:50 +0000
Manifest this update: Sat 23 Aug 2025 01:03:50 +0000
Manifest next update: Sun 24 Aug 2025 01:03:50 +0000
Files and hashes: 1: 4aWhf1DBNbGFHOwsdrD9cPncx54.crl (hash: TBXs+SBRsjZXpSU8HH/+TDrAl/4Uy+7hxNSeObEQ3BU=)
2: hfRFZKITz5hu-gPvGNJloOjkOMc.roa (hash: D3UvYF9mG8nUIanHUFk48MzJyJwGvptN1rrytDvh8Eo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/82/f9f8fa-2988-445c-be94-913575c58f4a/1/4aWhf1DBNbGFHOwsdrD9cPncx54.crl
rsync://rpki.ripe.net/repository/DEFAULT/82/f9f8fa-2988-445c-be94-913575c58f4a/1/4aWhf1DBNbGFHOwsdrD9cPncx54.mft
rsync://rpki.ripe.net/repository/DEFAULT/4aWhf1DBNbGFHOwsdrD9cPncx54.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 01:03:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:74:05:bb:f9:a4:dc:21:6c:5a:df:58:fd:c6:40:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e1a5a17f50c135b1851cec2c76b0fd70f9dcc79e
Validity
Not Before: Aug 23 01:03:50 2025 GMT
Not After : Aug 24 01:03:50 2025 GMT
Subject: CN=509d3c00caa8accdfd3eb31f83c29bff61056ab5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:48:32:ad:df:ae:da:8b:dc:e3:00:e1:59:e2:
59:a6:92:3b:48:76:91:fd:96:1b:6d:54:c0:9f:07:
4a:de:ad:86:f6:c9:58:ef:8e:14:eb:94:c7:01:5e:
15:71:0b:ce:ef:bf:23:19:bc:cc:16:f3:f7:08:4c:
d0:60:4f:c9:52:75:46:f8:17:19:05:99:66:8b:9c:
b3:2f:2f:ad:30:ec:81:06:33:53:91:d4:8f:5c:84:
44:bf:a9:24:a7:a0:fe:b8:33:ad:b1:51:0e:7a:04:
5a:66:9b:60:67:32:95:15:c6:29:e2:1f:9a:98:74:
9a:e2:ec:21:6c:f1:8f:5d:a5:dd:7c:a0:4d:29:9e:
8c:b0:f3:86:01:2c:fe:c5:ca:66:7c:bc:58:fc:8c:
fc:6d:b0:fb:d8:7c:c0:41:30:9e:65:f5:33:44:09:
92:12:b4:bf:e4:ab:82:a0:11:2c:17:e5:00:42:d3:
b4:fd:40:66:73:3a:7b:be:06:ef:97:ac:76:98:4b:
39:3d:cb:79:06:0d:c8:00:57:48:57:f9:12:79:ba:
8a:ff:47:d2:ee:21:e1:15:1e:2b:f9:55:13:d1:1a:
c2:f7:ff:77:ab:10:61:e4:47:3c:30:f7:95:32:97:
1c:cb:1e:5a:68:a0:04:ff:df:41:53:42:67:27:83:
5b:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:9D:3C:00:CA:A8:AC:CD:FD:3E:B3:1F:83:C2:9B:FF:61:05:6A:B5
X509v3 Authority Key Identifier:
keyid:E1:A5:A1:7F:50:C1:35:B1:85:1C:EC:2C:76:B0:FD:70:F9:DC:C7:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4aWhf1DBNbGFHOwsdrD9cPncx54.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/f9f8fa-2988-445c-be94-913575c58f4a/1/4aWhf1DBNbGFHOwsdrD9cPncx54.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/82/f9f8fa-2988-445c-be94-913575c58f4a/1/4aWhf1DBNbGFHOwsdrD9cPncx54.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:95:81:d2:a5:25:4a:92:d6:90:22:d2:a4:28:f0:31:18:ae:
66:1d:9c:6b:c9:eb:eb:85:da:b7:b6:74:58:8c:ac:3d:ea:6c:
04:fd:22:35:ab:f0:82:61:61:40:f8:d2:e2:35:53:6b:34:f8:
bd:68:e9:84:9c:37:49:bc:56:02:33:ac:18:21:a2:a9:c0:b0:
d6:60:52:10:44:f9:f1:19:b0:e7:7b:c3:84:c6:14:46:e6:87:
9e:57:64:5f:1e:62:70:84:7f:70:2a:ac:87:57:ab:40:6a:03:
45:57:05:a1:d1:09:f8:a4:0a:4e:7a:65:c3:a6:2a:0b:19:ae:
cb:22:13:2c:d4:af:72:4d:9c:d5:62:02:cd:aa:7d:3f:30:9f:
e6:3e:5e:3b:8e:90:6e:31:9f:54:04:de:51:d9:2e:7d:0f:69:
f1:c2:9c:1d:7f:21:50:2c:2d:3a:d6:38:32:71:f2:47:6a:7f:
01:4e:00:5e:55:a1:a5:b5:0b:bc:29:8d:22:87:6d:7a:89:a6:
fc:b6:b3:32:63:df:1c:9f:d2:48:a2:ee:e6:38:57:61:82:24:
c7:03:95:7d:4f:c8:c0:a9:89:9c:5e:fb:80:90:d6:14:f7:42:
6d:3e:a4:59:ab:53:05:05:64:d8:aa:54:a4:05:0b:67:07:bd:
2f:58:67:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:52:40 2025 by rpki-client