Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/45d3f3-7eca-4c14-aaf7-15b39134c41e/1/4cg4iRtR4GfqLr-aRNloAUhWLpY.mft
File: 4cg4iRtR4GfqLr-aRNloAUhWLpY.mft (raw, json)
Hash identifier: VadIgRDCcOI55oayPj1P65d09j+JW1B6tJpjliFWHLw=
Subject key identifier: 5B:62:87:D1:9E:EF:5A:82:9A:18:91:DE:2C:A3:1B:D1:23:5A:03:CA
Authority key identifier: E1:C8:38:89:1B:51:E0:67:EA:2E:BF:9A:44:D9:68:01:48:56:2E:96
Certificate issuer: /CN=e1c838891b51e067ea2ebf9a44d9680148562e96
Certificate serial: 0198D58351D5E1F851C8071BFFDEBA871D4A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4cg4iRtR4GfqLr-aRNloAUhWLpY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/45d3f3-7eca-4c14-aaf7-15b39134c41e/1/4cg4iRtR4GfqLr-aRNloAUhWLpY.mft
Manifest number: 0F71
Signing time: Sat 23 Aug 2025 06:00:09 +0000
Manifest this update: Sat 23 Aug 2025 06:00:09 +0000
Manifest next update: Sun 24 Aug 2025 06:00:09 +0000
Files and hashes: 1: 4cg4iRtR4GfqLr-aRNloAUhWLpY.crl (hash: AScN2x5TWgjhprDmS/pSeZheXbYG1OF0ZOM6XGaVpE0=)
2: bmdi-xlLqO-hV5jpMLaaLmUh0MY.roa (hash: fx7rUOLjdEuqg3ZsveozXFH6Izun+R1RWfyBZEftQT4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/45d3f3-7eca-4c14-aaf7-15b39134c41e/1/4cg4iRtR4GfqLr-aRNloAUhWLpY.crl
rsync://rpki.ripe.net/repository/DEFAULT/b1/45d3f3-7eca-4c14-aaf7-15b39134c41e/1/4cg4iRtR4GfqLr-aRNloAUhWLpY.mft
rsync://rpki.ripe.net/repository/DEFAULT/4cg4iRtR4GfqLr-aRNloAUhWLpY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:83:51:d5:e1:f8:51:c8:07:1b:ff:de:ba:87:1d:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e1c838891b51e067ea2ebf9a44d9680148562e96
Validity
Not Before: Aug 23 06:00:09 2025 GMT
Not After : Aug 24 06:00:09 2025 GMT
Subject: CN=5b6287d19eef5a829a1891de2ca31bd1235a03ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:05:0d:d3:2e:ec:df:99:a7:a1:02:5a:6b:8a:
e8:e6:16:fc:b9:3c:b1:57:74:c7:37:08:8d:a9:44:
8e:a6:db:e5:6f:16:74:e6:3f:1e:49:2b:86:b9:fd:
df:ff:e8:0f:10:0c:ce:5d:e5:7d:b8:0b:61:98:7e:
1f:4e:c9:b2:6e:cf:3e:97:59:31:a1:42:87:9e:bb:
79:09:8f:d2:d0:6a:01:18:2c:2a:44:bc:52:eb:c6:
21:d2:dc:81:34:fb:21:73:b4:ef:43:43:fa:36:24:
63:6b:d0:e5:81:5f:9a:e4:8e:2a:ea:12:c3:29:15:
f6:40:72:40:ff:80:d0:ab:2c:4a:eb:11:b1:59:85:
fa:5e:12:f8:10:a6:58:8c:c9:cd:0f:2a:62:92:e2:
b3:3f:66:22:23:0e:74:ec:2a:51:71:c8:39:16:89:
25:cd:76:01:66:77:ad:e9:b3:0a:15:50:97:05:a6:
b3:2a:78:3c:51:c6:f0:6c:cb:cc:cd:cc:94:d8:4a:
99:18:75:b1:3e:cc:1e:01:7c:03:53:2f:eb:3b:cd:
d4:b3:8d:50:13:16:ee:62:65:04:85:85:e1:18:9e:
8f:bc:55:ae:3b:13:eb:94:38:54:73:c8:11:44:1c:
20:1d:20:fb:86:ad:3b:64:84:de:fc:3f:d0:db:15:
af:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:62:87:D1:9E:EF:5A:82:9A:18:91:DE:2C:A3:1B:D1:23:5A:03:CA
X509v3 Authority Key Identifier:
keyid:E1:C8:38:89:1B:51:E0:67:EA:2E:BF:9A:44:D9:68:01:48:56:2E:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4cg4iRtR4GfqLr-aRNloAUhWLpY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/45d3f3-7eca-4c14-aaf7-15b39134c41e/1/4cg4iRtR4GfqLr-aRNloAUhWLpY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/45d3f3-7eca-4c14-aaf7-15b39134c41e/1/4cg4iRtR4GfqLr-aRNloAUhWLpY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b3:da:90:8e:8b:d5:a5:df:4c:5a:47:dd:66:83:c9:67:a9:6c:
98:9e:6f:d2:e4:38:73:1a:a1:23:66:2a:bc:71:7d:eb:4c:d7:
02:67:be:d0:0d:ea:e5:b4:5f:a3:aa:1b:57:7d:ea:27:f7:1a:
de:56:5e:ba:f2:28:a1:a4:7c:d2:dd:99:22:0c:21:85:51:60:
72:77:87:c9:69:50:42:4e:45:09:d4:91:0d:78:20:c8:ee:8d:
2b:c0:f5:50:c5:a1:0c:42:de:80:57:53:d2:bc:f1:3b:1c:8d:
b8:73:60:88:83:e5:97:53:67:cb:77:d2:ac:4e:52:c3:6e:fe:
69:5f:95:9b:d6:d1:0d:45:b5:9a:98:f4:16:29:00:58:96:00:
58:30:32:02:4a:fe:ad:67:90:ff:6a:a9:04:5f:34:35:4c:80:
76:c1:87:06:ee:45:75:04:0d:4e:42:d6:e0:e2:c4:58:4b:8a:
9d:20:82:f2:5b:a1:0d:99:73:ed:64:7b:b5:59:4f:35:cf:6f:
2b:83:bb:d7:53:b8:79:1d:cf:4d:6d:9c:19:ae:70:da:2d:35:
8b:82:80:61:12:c3:bf:c0:24:58:20:28:a7:23:72:a5:4c:c9:
26:1e:ac:ad:fa:6e:87:c5:0a:dd:ce:68:08:96:cb:93:28:d4:
5e:bb:dd:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:29:33 2025 by rpki-client