Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/e4ccbb-fd61-4fc4-aabd-a1883c8b1fe4/1/4uTP5HrtUexxqnX1NhibrW6GLes.mft
File: 4uTP5HrtUexxqnX1NhibrW6GLes.mft (raw, json)
Hash identifier: KpU5cs3ktSd+yMB0n5zNRqUVnXfZ1UEIHM6cP2F4LGE=
Subject key identifier: A0:C6:E8:5A:8F:BE:F4:61:0C:57:65:6A:B9:54:D8:0A:C1:D0:FF:2D
Authority key identifier: E2:E4:CF:E4:7A:ED:51:EC:71:AA:75:F5:36:18:9B:AD:6E:86:2D:EB
Certificate issuer: /CN=e2e4cfe47aed51ec71aa75f536189bad6e862deb
Certificate serial: 0198D4E0B1E478FBB6069B8B8187786FDF06
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4uTP5HrtUexxqnX1NhibrW6GLes.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/e4ccbb-fd61-4fc4-aabd-a1883c8b1fe4/1/4uTP5HrtUexxqnX1NhibrW6GLes.mft
Manifest number: 09EE
Signing time: Sat 23 Aug 2025 03:02:32 +0000
Manifest this update: Sat 23 Aug 2025 03:02:32 +0000
Manifest next update: Sun 24 Aug 2025 03:02:32 +0000
Files and hashes: 1: 4uTP5HrtUexxqnX1NhibrW6GLes.crl (hash: uqd8F5i5e7ZgthRGmPIQmfn45dZeKUEer7410QMDh2A=)
2: QOPe1cLW7EaWSDo3eq_hBQK39Wo.roa (hash: N6OU5OMUXPa8ri34/Wuotfq2VOjXlYSfy+37I0hPZzM=)
3: qswjHcqLBQY9Z2nmcWTR62TphaY.roa (hash: p4pPSzszW4Gf4Jz9O3n/L0PF3Vv3naASMu8aongMgFA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/e4ccbb-fd61-4fc4-aabd-a1883c8b1fe4/1/4uTP5HrtUexxqnX1NhibrW6GLes.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/e4ccbb-fd61-4fc4-aabd-a1883c8b1fe4/1/4uTP5HrtUexxqnX1NhibrW6GLes.mft
rsync://rpki.ripe.net/repository/DEFAULT/4uTP5HrtUexxqnX1NhibrW6GLes.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 03:02:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:e0:b1:e4:78:fb:b6:06:9b:8b:81:87:78:6f:df:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e2e4cfe47aed51ec71aa75f536189bad6e862deb
Validity
Not Before: Aug 23 03:02:32 2025 GMT
Not After : Aug 24 03:02:32 2025 GMT
Subject: CN=a0c6e85a8fbef4610c57656ab954d80ac1d0ff2d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:f1:18:8e:0e:13:79:5a:fe:43:3a:4f:d0:7f:
bb:eb:d0:3e:d8:06:86:8d:e2:e5:83:db:5c:cf:a4:
ae:15:78:94:d4:67:a8:e1:35:45:d2:00:51:e6:be:
81:75:21:41:31:9d:65:38:b1:5d:b4:47:77:ba:9c:
09:96:56:ae:1b:8c:21:4b:6e:55:76:df:ff:fe:b6:
d4:c1:ce:7a:0d:d0:fd:2a:ff:6a:e4:ef:6e:45:5b:
ba:e6:e7:6f:85:6e:f1:ca:52:18:4e:b8:94:ed:c7:
11:3b:dd:a4:6a:fa:df:2a:c2:b4:bc:7b:3a:82:78:
61:f5:67:25:34:f3:6a:24:fe:c0:51:6c:4c:20:d8:
0c:59:48:99:51:8f:f1:12:2c:bc:58:ed:b1:34:59:
d7:f2:f4:66:c5:b9:2e:7f:1e:d2:c5:67:e7:e4:ac:
0d:c7:20:e3:fc:83:5c:3d:88:a5:fd:9f:c5:7f:b0:
3e:30:d5:25:2e:a8:5c:dd:47:a0:d9:51:0f:be:4c:
2d:5f:c0:e9:e8:95:53:68:1f:fa:d6:c2:2e:98:2e:
3d:c9:45:74:5c:8b:7e:6e:c4:d2:b6:ca:c0:0f:b0:
c1:00:07:22:e1:8f:a7:4e:5f:4a:20:6f:d9:3b:70:
47:a5:bf:1b:20:3d:7b:e5:aa:cc:41:7f:f5:7f:74:
71:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:C6:E8:5A:8F:BE:F4:61:0C:57:65:6A:B9:54:D8:0A:C1:D0:FF:2D
X509v3 Authority Key Identifier:
keyid:E2:E4:CF:E4:7A:ED:51:EC:71:AA:75:F5:36:18:9B:AD:6E:86:2D:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4uTP5HrtUexxqnX1NhibrW6GLes.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/e4ccbb-fd61-4fc4-aabd-a1883c8b1fe4/1/4uTP5HrtUexxqnX1NhibrW6GLes.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/e4ccbb-fd61-4fc4-aabd-a1883c8b1fe4/1/4uTP5HrtUexxqnX1NhibrW6GLes.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
69:3f:1a:42:9a:1a:44:1e:1e:20:77:46:01:9a:77:50:67:ff:
eb:49:2d:49:07:8d:1f:c5:0e:b7:a2:7f:46:64:6b:76:21:f7:
9c:ee:5e:3c:81:d5:a7:b8:b4:bb:61:83:b8:a9:b7:28:e4:f3:
ec:5a:ed:37:47:24:ad:6d:72:3c:cd:3d:04:2e:8f:6f:b0:15:
23:4a:f8:3b:08:ac:5b:30:5a:8e:db:a2:6c:91:0f:1f:49:5d:
7e:de:02:af:a0:a3:f8:6c:84:86:9d:5d:79:94:72:3e:c2:4a:
e0:c9:a1:30:af:59:4d:55:43:84:72:8a:2a:d8:ce:2c:59:17:
33:7b:6d:a2:d6:d9:cd:83:b7:38:6c:55:6b:1e:35:58:a4:ba:
13:32:2b:7f:55:6b:16:25:ab:c9:32:57:b1:65:49:57:bd:3e:
15:cb:8e:e5:40:a3:67:76:54:df:dd:72:16:6b:32:46:17:d6:
7d:44:e0:88:8b:f2:2a:e2:78:92:a4:12:41:51:c2:87:12:7a:
16:8f:e5:d2:f1:c7:8e:b7:83:70:60:a1:51:08:6c:45:47:24:
18:83:ea:7a:b5:bd:be:00:49:00:c1:b6:ae:b7:81:cf:46:82:
50:24:ea:9a:7b:5b:db:76:9b:c1:b4:ea:35:22:49:42:74:75:
38:8a:f3:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:50:17 2025 by rpki-client