Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/1750bd-47d6-4505-ab05-828197634976/1/4zgHQmp0h6CET99NelLw-5C9t9M.mft
File: 4zgHQmp0h6CET99NelLw-5C9t9M.mft (raw, json)
Hash identifier: NSKCPtUsI+mNXS2//0ro4CHYHSRK6JHXz+VPMghhCok=
Subject key identifier: AA:81:4E:9F:77:1F:A8:59:19:20:55:97:3B:99:B8:E4:D8:56:23:3E
Authority key identifier: E3:38:07:42:6A:74:87:A0:84:4F:DF:4D:7A:52:F0:FB:90:BD:B7:D3
Certificate issuer: /CN=e33807426a7487a0844fdf4d7a52f0fb90bdb7d3
Certificate serial: 0198D5BBD2306E1C6D781429AB3B450A5412
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4zgHQmp0h6CET99NelLw-5C9t9M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/1750bd-47d6-4505-ab05-828197634976/1/4zgHQmp0h6CET99NelLw-5C9t9M.mft
Manifest number: 151B
Signing time: Sat 23 Aug 2025 07:01:52 +0000
Manifest this update: Sat 23 Aug 2025 07:01:52 +0000
Manifest next update: Sun 24 Aug 2025 07:01:52 +0000
Files and hashes: 1: 4zgHQmp0h6CET99NelLw-5C9t9M.crl (hash: imvt5KL2D+QSNT7DPCUhZlxgLEU4eGAcdCqyQ0k2oB8=)
2: M8fpAx6jpgG6MlSmE255nM2U54s.roa (hash: RD69vCeynoVt4KuZOJLoQcLLqCnDtkjvXD3NKIK92bk=)
3: mv_a-WXN9u1j2MpwExlmXt_l8JA.roa (hash: rF/9pNd0YOCzH1ms4AnrOsMwkemWNqGPF+0nwHKpIf8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/1750bd-47d6-4505-ab05-828197634976/1/4zgHQmp0h6CET99NelLw-5C9t9M.crl
rsync://rpki.ripe.net/repository/DEFAULT/e5/1750bd-47d6-4505-ab05-828197634976/1/4zgHQmp0h6CET99NelLw-5C9t9M.mft
rsync://rpki.ripe.net/repository/DEFAULT/4zgHQmp0h6CET99NelLw-5C9t9M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:bb:d2:30:6e:1c:6d:78:14:29:ab:3b:45:0a:54:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e33807426a7487a0844fdf4d7a52f0fb90bdb7d3
Validity
Not Before: Aug 23 07:01:52 2025 GMT
Not After : Aug 24 07:01:52 2025 GMT
Subject: CN=aa814e9f771fa859192055973b99b8e4d856233e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:b7:6e:76:77:80:2d:12:e2:02:86:cd:09:59:
ca:bb:15:59:dc:50:cc:69:4a:8d:e1:81:a3:3d:5e:
40:7b:c7:22:fe:05:7a:5b:06:1e:cb:48:15:b7:c9:
52:ae:3d:e3:09:65:6e:5e:08:80:72:53:01:8c:09:
84:2c:30:8f:1c:5e:78:40:4f:7c:98:fa:32:18:ad:
20:ee:11:94:1f:01:7a:17:bb:a0:01:d3:cd:91:2e:
93:66:bc:53:14:01:c9:b2:97:05:3e:75:7e:a6:a4:
21:c5:c3:64:b9:16:38:be:43:4d:4a:d6:27:b2:3e:
77:ef:23:5c:9e:4d:8c:3d:45:93:db:d1:b7:6d:d7:
5e:8b:ef:f8:b9:db:fc:27:28:c0:f1:69:d9:b2:68:
fe:76:78:73:2c:76:38:bc:ca:b2:ae:74:23:c6:b8:
d0:b8:67:24:bb:d9:20:77:ef:aa:88:2e:49:72:6d:
49:e8:b7:b0:60:68:25:66:9f:be:97:3a:c1:c7:c4:
59:f9:9e:a7:71:56:0d:fe:ca:e7:5c:15:d9:c1:48:
e4:4f:1c:13:cd:8a:8a:61:2c:ca:71:c5:42:93:ce:
2e:09:da:d8:cd:f9:0e:90:1f:8d:f3:3c:8c:3c:13:
70:86:cf:28:bd:65:8f:b3:18:e8:00:7f:6d:86:9b:
67:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:81:4E:9F:77:1F:A8:59:19:20:55:97:3B:99:B8:E4:D8:56:23:3E
X509v3 Authority Key Identifier:
keyid:E3:38:07:42:6A:74:87:A0:84:4F:DF:4D:7A:52:F0:FB:90:BD:B7:D3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4zgHQmp0h6CET99NelLw-5C9t9M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/1750bd-47d6-4505-ab05-828197634976/1/4zgHQmp0h6CET99NelLw-5C9t9M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/1750bd-47d6-4505-ab05-828197634976/1/4zgHQmp0h6CET99NelLw-5C9t9M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9a:9b:c9:25:ae:cb:bb:a3:f2:ea:e0:ef:cf:5b:0c:10:f2:4e:
8b:03:b5:86:ea:09:51:92:a5:a9:a0:2e:a5:1b:66:58:f8:14:
77:fe:76:d9:5f:d9:91:69:53:99:10:ef:4d:30:7b:b2:67:86:
48:54:bb:bc:65:f2:02:ce:ac:98:1d:2e:f7:c4:31:98:1d:fb:
32:c6:45:19:bb:83:0b:9f:7a:12:c6:10:03:be:9d:21:75:0f:
e7:65:25:6b:e6:ed:0d:cd:f6:7a:7c:e2:44:8b:43:0a:d6:81:
ca:8f:36:ee:18:cc:10:9d:49:2d:52:9f:a0:f0:35:0b:bf:27:
53:9a:2f:69:82:3c:9e:d7:1a:4a:a1:c9:e7:12:6b:ce:84:c0:
8d:10:22:57:7c:a6:30:96:2c:33:83:1e:aa:bd:e2:08:ea:f9:
d8:73:56:6b:d0:12:fe:96:c5:86:00:a0:9a:95:23:71:61:42:
99:e3:e3:09:44:49:1a:78:e0:d4:e9:53:02:01:c3:7d:0d:d9:
02:ec:83:74:b9:9b:ef:74:1b:cc:95:fb:08:60:d6:88:dd:ef:
92:eb:f9:cb:83:7d:46:c5:b9:68:01:f1:e8:2c:8b:d5:1d:8f:
a9:51:3c:17:92:92:b0:65:86:6b:d8:24:d6:7d:20:b7:d0:9f:
f7:fd:bc:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:25:03 2025 by rpki-client