Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/6ac056-baa4-4c71-b940-46d6baefdab1/1/4qhjHttIETIyWh0Yb73gH6FXeRA.mft
File: 4qhjHttIETIyWh0Yb73gH6FXeRA.mft (raw, json)
Hash identifier: J6rTrhSyuq7DBXjnpxtyjakR4L6zPGl0pgVgGU5vY84=
Subject key identifier: AC:69:EE:EA:9B:2B:09:E8:F9:E6:34:32:31:36:4B:EF:A3:72:01:C1
Authority key identifier: E2:A8:63:1E:DB:48:11:32:32:5A:1D:18:6F:BD:E0:1F:A1:57:79:10
Certificate issuer: /CN=e2a8631edb481132325a1d186fbde01fa1577910
Certificate serial: 0198D4DFF70938FB6649188266ABA3EF2709
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4qhjHttIETIyWh0Yb73gH6FXeRA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/6ac056-baa4-4c71-b940-46d6baefdab1/1/4qhjHttIETIyWh0Yb73gH6FXeRA.mft
Manifest number: 05CC
Signing time: Sat 23 Aug 2025 03:01:44 +0000
Manifest this update: Sat 23 Aug 2025 03:01:44 +0000
Manifest next update: Sun 24 Aug 2025 03:01:44 +0000
Files and hashes: 1: 4qhjHttIETIyWh0Yb73gH6FXeRA.crl (hash: Pzhjk6NIPi53Uj1K4CDafhXTL/km9Lla8JL+h8XNeEc=)
2: h3E6-zfi_xyDMKZ-mjqCgktKu5o.roa (hash: jFGY2eFUS/f/RiSzQYMsT/EoV/0tdGrsjyAMY/vYpEg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/6ac056-baa4-4c71-b940-46d6baefdab1/1/4qhjHttIETIyWh0Yb73gH6FXeRA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/6ac056-baa4-4c71-b940-46d6baefdab1/1/4qhjHttIETIyWh0Yb73gH6FXeRA.mft
rsync://rpki.ripe.net/repository/DEFAULT/4qhjHttIETIyWh0Yb73gH6FXeRA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 03:01:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:df:f7:09:38:fb:66:49:18:82:66:ab:a3:ef:27:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e2a8631edb481132325a1d186fbde01fa1577910
Validity
Not Before: Aug 23 03:01:44 2025 GMT
Not After : Aug 24 03:01:44 2025 GMT
Subject: CN=ac69eeea9b2b09e8f9e6343231364befa37201c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:bf:76:cd:38:2f:69:79:6d:0f:ad:58:d3:27:
12:a9:8e:75:a5:cf:d6:4e:61:47:f2:81:7b:f9:24:
4f:1d:72:18:84:ea:09:ec:36:47:dd:59:65:42:de:
18:6a:7f:1a:e0:0c:37:37:8e:87:50:e8:b2:7c:03:
dd:4d:f8:e4:34:fa:b1:2a:0c:20:ea:de:7c:ab:31:
a9:cc:02:e9:9d:a0:4d:8e:72:d4:16:ff:19:95:a8:
9d:ca:25:d8:92:17:92:84:b2:23:5d:00:bd:64:65:
19:4a:5f:0e:f8:15:38:5e:4f:d6:be:fe:6a:1c:3a:
e8:0d:4e:f9:af:3d:1a:93:d6:07:6e:de:1c:ef:53:
f7:55:58:97:0b:3c:21:f2:40:a9:f3:12:06:73:d8:
f1:fb:0a:44:29:91:e7:81:b2:95:54:48:a7:aa:52:
cc:b2:c9:90:cd:7e:ee:96:64:ea:e7:57:3c:8e:16:
6d:cc:59:95:fd:6f:a5:49:a1:c4:1a:3a:e8:24:5c:
3d:be:6f:41:1a:8c:d5:ec:d3:f9:12:91:da:cc:e6:
3d:73:8a:bf:82:0d:f1:11:5b:70:d9:42:8c:69:3a:
fd:35:75:29:b9:ab:63:5e:ea:80:89:bf:42:70:21:
4b:df:28:ee:e7:cc:8c:c0:95:f6:ed:3b:d6:1e:0c:
04:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:69:EE:EA:9B:2B:09:E8:F9:E6:34:32:31:36:4B:EF:A3:72:01:C1
X509v3 Authority Key Identifier:
keyid:E2:A8:63:1E:DB:48:11:32:32:5A:1D:18:6F:BD:E0:1F:A1:57:79:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4qhjHttIETIyWh0Yb73gH6FXeRA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/6ac056-baa4-4c71-b940-46d6baefdab1/1/4qhjHttIETIyWh0Yb73gH6FXeRA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/6ac056-baa4-4c71-b940-46d6baefdab1/1/4qhjHttIETIyWh0Yb73gH6FXeRA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b9:2e:af:40:37:35:fa:8a:f2:17:e9:79:7d:52:63:00:bd:39:
af:f9:a3:79:cd:f7:97:72:a0:f0:d5:fb:12:8a:9f:20:13:f4:
ac:19:32:86:94:a7:20:fe:8e:ed:68:de:80:04:64:bb:68:6b:
b9:d8:77:aa:9d:0e:42:06:42:a1:a6:aa:fe:93:05:7c:94:94:
87:bb:5c:21:30:0d:c2:7f:c8:84:7f:0d:c9:ac:e5:3d:a4:02:
e0:dc:90:af:7e:03:25:a6:ae:5b:14:af:06:ea:c4:77:0a:17:
12:78:a4:a2:e5:64:63:f4:73:89:45:d9:25:5c:ed:3b:e5:58:
ac:b7:6e:28:da:fb:9a:c7:e5:8f:3d:d7:0b:b9:d4:00:ad:01:
d6:66:bd:79:c2:c1:63:0d:1b:ea:fd:05:b6:fe:d6:08:8f:c1:
f9:3c:7b:70:c6:00:4e:1c:41:e9:92:b3:8a:56:56:4f:c2:00:
32:e8:a0:fc:16:c9:9f:27:c8:1b:90:5f:af:2e:cb:3b:97:bf:
ee:9d:ca:56:27:d3:63:a6:02:59:36:47:3a:b4:17:3a:2a:88:
d5:f4:42:46:f3:13:f8:57:0b:cf:1d:4a:95:53:d1:67:cf:8d:
1c:0f:57:57:74:ed:71:1e:7c:6f:19:89:88:04:74:37:a7:fb:
b6:59:f5:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:29:50 2025 by rpki-client