Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/2e82cb-4a6e-408f-af20-843154a80b72/1/4iqTzrgrZ1qEsNeOea5KeXypgjE.mft
File: 4iqTzrgrZ1qEsNeOea5KeXypgjE.mft (raw, json)
Hash identifier: JJO86x6MLeMaPgP/59DOh5btbbzd3J2C05PxqrO11A8=
Subject key identifier: 1E:DF:40:3C:E8:D4:29:FC:99:AD:29:F4:A3:1E:55:BB:50:F0:5C:0B
Authority key identifier: E2:2A:93:CE:B8:2B:67:5A:84:B0:D7:8E:79:AE:4A:79:7C:A9:82:31
Certificate issuer: /CN=e22a93ceb82b675a84b0d78e79ae4a797ca98231
Certificate serial: 0198D65FAE3CABB1A62B669C00FF1CD4A4C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4iqTzrgrZ1qEsNeOea5KeXypgjE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/2e82cb-4a6e-408f-af20-843154a80b72/1/4iqTzrgrZ1qEsNeOea5KeXypgjE.mft
Manifest number: 11E1
Signing time: Sat 23 Aug 2025 10:00:51 +0000
Manifest this update: Sat 23 Aug 2025 10:00:51 +0000
Manifest next update: Sun 24 Aug 2025 10:00:51 +0000
Files and hashes: 1: 4iqTzrgrZ1qEsNeOea5KeXypgjE.crl (hash: QKgmIIiMHc+BMqtU8Ivo+6iIQsKPeozy52nuW/MYLPM=)
2: yB2qv2hArqh8Rg0DZ4yGfxQJ57I.roa (hash: b+3wO516colETH6Q8Hnf3dC3oM2heED/4qOLBklRlP8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/af/2e82cb-4a6e-408f-af20-843154a80b72/1/4iqTzrgrZ1qEsNeOea5KeXypgjE.crl
rsync://rpki.ripe.net/repository/DEFAULT/af/2e82cb-4a6e-408f-af20-843154a80b72/1/4iqTzrgrZ1qEsNeOea5KeXypgjE.mft
rsync://rpki.ripe.net/repository/DEFAULT/4iqTzrgrZ1qEsNeOea5KeXypgjE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:5f:ae:3c:ab:b1:a6:2b:66:9c:00:ff:1c:d4:a4:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e22a93ceb82b675a84b0d78e79ae4a797ca98231
Validity
Not Before: Aug 23 10:00:51 2025 GMT
Not After : Aug 24 10:00:51 2025 GMT
Subject: CN=1edf403ce8d429fc99ad29f4a31e55bb50f05c0b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:a6:19:f1:fd:b6:5c:ab:31:dd:66:3b:ed:d7:
0f:56:d6:f5:60:fb:15:f3:55:0e:6d:d7:af:cd:63:
b4:b6:7a:25:39:e3:d4:48:ca:45:d5:10:33:2c:8d:
f6:0c:87:83:5b:38:60:be:39:04:cb:74:16:7e:5d:
58:91:f3:7f:37:30:ec:db:68:01:db:1c:18:9c:cd:
f3:f1:17:6e:e4:af:96:c0:99:e9:28:87:5c:45:b5:
ea:d1:2e:8d:99:3f:17:e4:7e:6e:97:4b:f2:cb:77:
ba:f8:51:8c:82:8e:95:30:ca:59:8a:4a:9e:5a:bc:
35:d0:63:e7:4e:32:4d:2e:06:b5:a3:6d:ac:31:32:
bc:44:45:d2:51:0f:05:bf:2a:05:c9:21:3d:77:d4:
2f:09:14:44:e4:a4:22:9c:dc:75:d5:a6:00:52:f6:
17:65:e2:da:b2:06:83:6c:c5:af:2d:15:2c:e2:4f:
c3:de:a4:b2:b4:c9:f3:db:8c:c4:41:4c:d7:c2:26:
44:ef:09:7a:00:05:15:6a:d8:09:b0:3e:a0:d0:9b:
e9:55:a0:9d:41:a4:ac:62:6f:a8:87:9f:b4:ef:43:
9a:05:10:cf:74:b8:41:f6:96:e4:82:4f:96:cd:07:
b3:e3:30:35:ee:02:b4:3f:65:ac:27:9f:e4:6f:44:
36:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:DF:40:3C:E8:D4:29:FC:99:AD:29:F4:A3:1E:55:BB:50:F0:5C:0B
X509v3 Authority Key Identifier:
keyid:E2:2A:93:CE:B8:2B:67:5A:84:B0:D7:8E:79:AE:4A:79:7C:A9:82:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4iqTzrgrZ1qEsNeOea5KeXypgjE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/2e82cb-4a6e-408f-af20-843154a80b72/1/4iqTzrgrZ1qEsNeOea5KeXypgjE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/2e82cb-4a6e-408f-af20-843154a80b72/1/4iqTzrgrZ1qEsNeOea5KeXypgjE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:70:73:3c:16:68:ff:b3:97:d0:84:0c:f3:86:3c:58:79:8e:
f1:28:d6:f8:b0:bd:66:20:b0:3e:22:0f:1a:97:1c:7c:6c:fb:
cb:ba:64:13:77:1b:b6:2c:27:4b:3d:7a:19:ec:07:37:32:4e:
a3:61:72:61:c0:45:21:9b:64:5d:d3:96:7c:0c:ad:53:ca:ed:
29:a7:e9:95:8e:a4:0e:e7:a3:91:f7:ab:f4:92:f5:46:62:ab:
c7:e5:73:0f:e3:ec:78:34:4b:34:1c:34:ca:1c:7e:0e:4f:14:
16:88:84:7a:6f:f9:bf:33:23:e8:fd:18:b9:b6:81:27:0f:4d:
6b:7a:c1:77:fd:8a:fb:bf:2e:32:24:70:81:eb:16:18:8a:06:
e2:ef:98:7b:eb:b4:48:b0:2f:b3:74:6f:21:b4:6f:b2:b3:da:
79:27:01:be:5d:58:bd:08:8a:01:ae:2a:56:f1:21:9f:06:b2:
87:1c:a5:ac:e8:c5:9c:3a:04:55:0e:03:2b:aa:fd:80:02:ab:
d5:d9:f0:30:c1:90:fc:bd:37:df:3b:8b:b8:4e:39:19:24:fd:
4b:06:8c:31:d9:21:fb:7f:77:ee:cc:d3:dc:57:35:21:a8:9d:
93:a6:e0:01:d1:4b:2d:75:af:cf:f5:11:37:1f:22:98:9a:0f:
68:9b:85:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:32:27 2025 by rpki-client