Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/4a2e97-2570-478b-b9bc-5ebb6378009e/1/4pLIx3m27W7ecqjPEUkO9tep6SE.mft
File: 4pLIx3m27W7ecqjPEUkO9tep6SE.mft (raw, json)
Hash identifier: xmSaaFU98MVDMbwzhP+0Ij+VVa9YMo3ek/GQQSbRGvA=
Subject key identifier: E2:1A:33:29:51:73:5C:11:F9:79:75:19:EB:29:03:9A:C8:F2:E2:EC
Authority key identifier: E2:92:C8:C7:79:B6:ED:6E:DE:72:A8:CF:11:49:0E:F6:D7:A9:E9:21
Certificate issuer: /CN=e292c8c779b6ed6ede72a8cf11490ef6d7a9e921
Certificate serial: 0198D54EBD21249BB125FA8AE1C8BBBACC06
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4pLIx3m27W7ecqjPEUkO9tep6SE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/4a2e97-2570-478b-b9bc-5ebb6378009e/1/4pLIx3m27W7ecqjPEUkO9tep6SE.mft
Manifest number: 05DE
Signing time: Sat 23 Aug 2025 05:02:43 +0000
Manifest this update: Sat 23 Aug 2025 05:02:43 +0000
Manifest next update: Sun 24 Aug 2025 05:02:43 +0000
Files and hashes: 1: 4pLIx3m27W7ecqjPEUkO9tep6SE.crl (hash: 0MjP7JEiAjUoq1fnBKZZ1Okv02CWjOimC838CAUvu6s=)
2: LbRLSCZgNjKQ4NVrLzk4GRKtgYY.roa (hash: /kAcDTHsuQOYOXcr8j8Fv03Ys7En4o0Y+S9NpXp7/Jw=)
3: pxY6_rBQcn3iz82XldYnkJz45JM.roa (hash: YOl0UxNW+xdGkU9HEm/QZ7M3QuxM2oQJBlY7pjYmG24=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/4a2e97-2570-478b-b9bc-5ebb6378009e/1/4pLIx3m27W7ecqjPEUkO9tep6SE.crl
rsync://rpki.ripe.net/repository/DEFAULT/b4/4a2e97-2570-478b-b9bc-5ebb6378009e/1/4pLIx3m27W7ecqjPEUkO9tep6SE.mft
rsync://rpki.ripe.net/repository/DEFAULT/4pLIx3m27W7ecqjPEUkO9tep6SE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:4e:bd:21:24:9b:b1:25:fa:8a:e1:c8:bb:ba:cc:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e292c8c779b6ed6ede72a8cf11490ef6d7a9e921
Validity
Not Before: Aug 23 05:02:43 2025 GMT
Not After : Aug 24 05:02:43 2025 GMT
Subject: CN=e21a332951735c11f9797519eb29039ac8f2e2ec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:eb:39:8c:cf:36:fa:ae:26:a5:12:f6:93:cf:
65:05:40:c7:cc:a7:a5:a2:95:4f:40:5a:50:01:96:
d6:b6:16:59:d6:db:91:bd:d7:d6:db:83:18:28:a9:
88:72:39:1e:e8:9f:0e:17:f4:36:24:94:06:ff:a7:
14:8d:6d:d2:0a:a8:cd:25:08:c2:a8:78:a1:1a:2a:
7c:c5:70:32:9b:a8:91:85:8a:81:10:b0:3b:a1:3a:
8b:6a:23:5d:ab:8e:98:9f:80:db:4b:95:aa:bd:c0:
3a:13:a3:cd:d0:6b:7f:bf:73:0f:40:72:c4:57:d3:
05:be:b1:5f:1a:20:ac:25:24:9b:0f:66:d0:a9:70:
21:49:f6:33:2e:0c:99:3c:68:65:d7:5d:e1:0d:8c:
36:78:5d:5e:9e:c7:eb:8f:6e:30:55:f8:1a:28:7d:
06:2c:f5:8a:02:11:66:2a:e5:2e:c2:bb:01:57:0c:
9f:84:4a:bd:54:67:e2:b5:79:f7:08:aa:2f:d1:5a:
bc:db:52:f7:f1:6c:99:1e:2c:68:52:63:04:98:2c:
1f:cb:d5:41:10:c6:6b:3d:b7:7e:1a:da:3e:85:cf:
9b:57:fd:a9:9f:15:57:3e:5b:e0:1e:ef:a4:11:05:
d6:d5:6e:29:1c:e8:8a:79:00:f8:ed:d1:34:9d:cd:
dc:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:1A:33:29:51:73:5C:11:F9:79:75:19:EB:29:03:9A:C8:F2:E2:EC
X509v3 Authority Key Identifier:
keyid:E2:92:C8:C7:79:B6:ED:6E:DE:72:A8:CF:11:49:0E:F6:D7:A9:E9:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4pLIx3m27W7ecqjPEUkO9tep6SE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/4a2e97-2570-478b-b9bc-5ebb6378009e/1/4pLIx3m27W7ecqjPEUkO9tep6SE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/4a2e97-2570-478b-b9bc-5ebb6378009e/1/4pLIx3m27W7ecqjPEUkO9tep6SE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:d0:f9:92:43:87:9e:bd:0d:55:4c:82:b6:c2:93:75:40:4d:
ee:41:8e:30:02:ac:d5:be:df:90:44:6f:42:c8:19:21:1a:5a:
4c:f6:e5:cf:0a:03:a5:e3:35:73:e8:cf:82:93:44:81:61:fe:
07:e3:de:12:f0:5e:f5:27:31:38:fb:3a:eb:a9:80:5a:be:94:
d0:cd:61:a8:f5:e2:24:69:27:cb:60:46:b1:ae:0e:39:7e:32:
ee:94:d3:22:72:1c:d1:bb:d8:1b:cd:1a:1c:71:cb:68:bb:d5:
aa:98:f4:3c:c4:d7:e5:84:55:43:95:cc:e4:74:fb:7e:ac:68:
da:e9:1e:40:82:93:b5:af:13:75:20:d7:d5:0c:e3:8d:b9:f6:
08:74:6f:ea:cd:50:1b:ed:d3:3d:88:f9:b7:25:60:55:0c:6a:
54:1e:4f:0b:40:33:36:41:91:bc:c1:12:ea:2e:af:29:40:8c:
2c:8d:3e:d5:e4:72:14:37:01:0c:bf:28:5b:d6:ce:ca:d6:01:
42:9d:64:97:ab:b5:6e:f1:c4:bb:4d:63:97:5d:35:82:cb:b6:
45:5a:06:22:bf:4b:d8:bf:e1:30:f7:f3:84:80:f1:34:ea:58:
0c:35:1b:aa:08:84:f7:98:1f:8f:7d:9f:71:07:4c:6c:c0:41:
ff:4d:42:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 11:41:33 2025 by rpki-client