Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/ee42bb-1e49-4c21-a4d6-ec287e1d37e5/1/4xYxgkfSEYQfliCpoRMAEN20hvI.mft
File: 4xYxgkfSEYQfliCpoRMAEN20hvI.mft (raw, json)
Hash identifier: nh54VtogmxooqRDQYkk92Jd/HXnioHdfBT4m/T3UTPQ=
Subject key identifier: 7F:A2:CF:0D:FC:8B:2B:44:C7:1E:12:F7:10:39:7A:F7:6D:D5:FC:2C
Authority key identifier: E3:16:31:82:47:D2:11:84:1F:96:20:A9:A1:13:00:10:DD:B4:86:F2
Certificate issuer: /CN=e316318247d211841f9620a9a1130010ddb486f2
Certificate serial: 0198D4737DBC05BA551D527D6EE132063DC0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4xYxgkfSEYQfliCpoRMAEN20hvI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/ee42bb-1e49-4c21-a4d6-ec287e1d37e5/1/4xYxgkfSEYQfliCpoRMAEN20hvI.mft
Manifest number: 0E69
Signing time: Sat 23 Aug 2025 01:03:15 +0000
Manifest this update: Sat 23 Aug 2025 01:03:15 +0000
Manifest next update: Sun 24 Aug 2025 01:03:15 +0000
Files and hashes: 1: 4xYxgkfSEYQfliCpoRMAEN20hvI.crl (hash: YCOjqzhx11NtJfmOYfw1mqGYek8uqU4EtgbDZqIN5CU=)
2: OPoJJXIKKrWhudAq1xiuARrS1H4.roa (hash: sQTnuyk1NVfltmH/ouY0am8WUGDv6HXMop3KtZ2xXJo=)
3: Y0KH9jUtOdTdVzzVwvfGtDjZxIU.roa (hash: ECg0/VJoY6yBxbdarx1o6Xry+PkavLOkwZaMHO8CBps=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/ee42bb-1e49-4c21-a4d6-ec287e1d37e5/1/4xYxgkfSEYQfliCpoRMAEN20hvI.crl
rsync://rpki.ripe.net/repository/DEFAULT/99/ee42bb-1e49-4c21-a4d6-ec287e1d37e5/1/4xYxgkfSEYQfliCpoRMAEN20hvI.mft
rsync://rpki.ripe.net/repository/DEFAULT/4xYxgkfSEYQfliCpoRMAEN20hvI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 01:03:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:73:7d:bc:05:ba:55:1d:52:7d:6e:e1:32:06:3d:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e316318247d211841f9620a9a1130010ddb486f2
Validity
Not Before: Aug 23 01:03:15 2025 GMT
Not After : Aug 24 01:03:15 2025 GMT
Subject: CN=7fa2cf0dfc8b2b44c71e12f710397af76dd5fc2c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:76:ff:0d:59:27:56:41:c1:b4:20:42:b1:dd:
4c:98:07:5e:ed:62:7f:02:4d:f3:a1:ba:4f:b8:b8:
6d:0e:86:72:0d:df:18:3b:59:0c:31:b5:10:b5:11:
e2:7a:fd:ce:9e:9a:ab:d0:3a:d8:d5:80:a7:6c:3b:
d3:02:ab:69:6a:40:04:05:98:a5:c1:07:56:cb:d7:
e3:df:1b:e3:cf:3e:ec:47:e6:18:07:9c:28:dd:f8:
6b:c2:3c:15:1f:3c:eb:82:b7:3a:14:4d:6d:d6:ca:
c7:25:f5:2c:33:15:18:40:1a:bc:15:e5:20:f8:27:
36:58:85:86:bd:40:31:0b:ae:31:81:66:2e:99:83:
d4:22:d9:61:bc:b6:c0:29:32:96:ee:b8:c1:f2:e5:
fd:3d:f7:93:18:9d:fd:bb:30:e7:a3:66:3a:d1:b5:
d7:a6:bd:ef:3e:ee:83:71:81:39:58:a7:c6:f3:41:
c1:a2:c2:70:fd:df:d4:4b:86:ef:f7:e9:87:e0:59:
4a:18:ea:6b:88:1e:ea:85:a7:ab:b4:ec:01:23:00:
22:89:e6:7d:a3:b4:59:9e:c6:c6:de:4f:de:83:ea:
b3:c8:cc:fe:23:6c:07:fb:45:03:04:61:d8:7d:99:
26:1f:ed:66:7f:29:cc:d0:57:9f:3a:ae:79:ce:a2:
d3:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:A2:CF:0D:FC:8B:2B:44:C7:1E:12:F7:10:39:7A:F7:6D:D5:FC:2C
X509v3 Authority Key Identifier:
keyid:E3:16:31:82:47:D2:11:84:1F:96:20:A9:A1:13:00:10:DD:B4:86:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4xYxgkfSEYQfliCpoRMAEN20hvI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/ee42bb-1e49-4c21-a4d6-ec287e1d37e5/1/4xYxgkfSEYQfliCpoRMAEN20hvI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/ee42bb-1e49-4c21-a4d6-ec287e1d37e5/1/4xYxgkfSEYQfliCpoRMAEN20hvI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:1b:e2:a0:0e:3a:ce:7a:b2:da:cd:2e:a3:ab:5e:a1:dd:91:
5c:07:1a:13:d6:05:0f:7a:fb:bd:8f:18:7b:cb:01:6a:99:30:
1d:91:48:b8:29:ad:b9:ea:70:8b:c1:5c:69:ce:93:25:28:39:
e0:2a:0a:69:f2:77:0f:71:b5:1f:73:c3:34:19:47:8d:4a:67:
09:06:74:d7:bc:0a:ea:20:8b:f1:00:32:a9:44:86:e9:43:59:
2c:da:01:d0:b5:83:96:26:2d:01:70:81:ff:ff:c9:cb:5e:34:
09:9c:b5:db:b5:01:2e:6d:27:2b:ea:7b:e3:27:6a:20:87:b2:
9a:85:72:de:89:9a:77:35:fa:a5:29:2b:fd:64:19:b2:a8:12:
19:44:fb:9e:5d:89:92:9f:31:2b:26:1e:a1:ed:df:22:91:59:
41:bc:41:83:b7:c4:a5:84:f0:63:ee:20:92:dc:a4:1f:eb:bb:
b4:28:f3:17:ae:8c:5f:7f:56:8d:11:f2:65:12:59:aa:f2:0b:
ef:06:98:95:af:2f:37:4b:94:37:db:d1:ff:04:75:fa:db:e2:
06:61:29:eb:2f:bf:70:46:7d:37:47:e7:0a:51:37:80:6a:93:
b1:f1:3e:fe:f4:90:0c:d0:dd:ec:cd:a9:08:cb:72:d7:c5:90:
b3:15:70:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 11:35:46 2025 by rpki-client