
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/c80c5a-fae2-466d-aa16-8ca6c33d14bb/1/4PL1Rd2yNOOD02uKjWtWo43XL4k.mft
File: 4PL1Rd2yNOOD02uKjWtWo43XL4k.mft (raw, json)
Hash identifier: YfNJfPeR5AuVQHKWPDhQnyiF6Ch9/Dd0x5KwWUCHPp8=
Subject key identifier: 49:AF:56:20:FF:96:40:78:F0:1F:C5:87:F3:88:F9:64:11:28:6D:CF
Authority key identifier: E0:F2:F5:45:DD:B2:34:E3:83:D3:6B:8A:8D:6B:56:A3:8D:D7:2F:89
Certificate issuer: /CN=e0f2f545ddb234e383d36b8a8d6b56a38dd72f89
Certificate serial: 0198D65F21EC0E05B84436358596312F61DB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4PL1Rd2yNOOD02uKjWtWo43XL4k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/c80c5a-fae2-466d-aa16-8ca6c33d14bb/1/4PL1Rd2yNOOD02uKjWtWo43XL4k.mft
Manifest number: 085C
Signing time: Sat 23 Aug 2025 10:00:15 +0000
Manifest this update: Sat 23 Aug 2025 10:00:15 +0000
Manifest next update: Sun 24 Aug 2025 10:00:15 +0000
Files and hashes: 1: 4PL1Rd2yNOOD02uKjWtWo43XL4k.crl (hash: BErFVC9wfa+lb5sRldjx9H8nKDaPdtCE3Mg7yiU/MK0=)
2: XiEwAhXSmb2kKQcnLFCKbFJrlrE.roa (hash: Yd4FhLWqP85JzI7J+m2iFxGbkWfW5fOZQ9iT2O1gqws=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/c80c5a-fae2-466d-aa16-8ca6c33d14bb/1/4PL1Rd2yNOOD02uKjWtWo43XL4k.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/c80c5a-fae2-466d-aa16-8ca6c33d14bb/1/4PL1Rd2yNOOD02uKjWtWo43XL4k.mft
rsync://rpki.ripe.net/repository/DEFAULT/4PL1Rd2yNOOD02uKjWtWo43XL4k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:5f:21:ec:0e:05:b8:44:36:35:85:96:31:2f:61:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e0f2f545ddb234e383d36b8a8d6b56a38dd72f89
Validity
Not Before: Aug 23 10:00:15 2025 GMT
Not After : Aug 24 10:00:15 2025 GMT
Subject: CN=49af5620ff964078f01fc587f388f96411286dcf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fb:07:5e:1f:fc:e1:51:b3:9d:91:44:96:13:af:
99:6a:f4:60:ac:26:62:f7:5b:2b:90:fb:fd:c5:f0:
a4:eb:93:0a:1c:fa:d0:b6:c6:be:90:92:59:34:9e:
bc:13:d0:86:10:5e:16:ac:f2:17:09:ec:0c:4f:55:
62:72:3b:fd:80:fe:0b:92:35:d0:8e:37:e0:ba:8f:
c6:52:d3:7f:ed:20:58:94:ec:1f:f1:d2:38:2a:10:
12:e5:11:24:b6:95:28:ae:af:7b:f1:af:35:f8:fa:
ac:12:41:95:a8:b2:17:ac:48:ff:2f:0a:86:33:93:
c3:6e:78:dd:df:2b:4f:a9:a6:bf:46:bc:af:7a:cc:
79:88:bd:93:af:24:f5:20:1d:e2:74:bb:bc:8e:c8:
42:2e:99:dc:98:63:2e:02:6d:16:e6:2b:3d:7e:22:
e3:91:ff:50:e5:25:7a:7c:5a:c4:01:53:0a:20:b5:
e2:a4:af:1f:03:ee:49:28:b2:df:4d:14:89:2f:54:
e0:e4:f0:a8:3c:af:1a:e4:35:bc:cb:c5:c2:7e:91:
42:ab:2e:a7:f2:b7:06:03:8d:25:23:3e:5b:60:eb:
84:ba:88:df:76:9a:11:6c:f4:83:99:9d:dc:1e:aa:
78:59:1d:7d:37:91:14:06:3b:d1:6e:b3:df:1b:11:
bc:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:AF:56:20:FF:96:40:78:F0:1F:C5:87:F3:88:F9:64:11:28:6D:CF
X509v3 Authority Key Identifier:
keyid:E0:F2:F5:45:DD:B2:34:E3:83:D3:6B:8A:8D:6B:56:A3:8D:D7:2F:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4PL1Rd2yNOOD02uKjWtWo43XL4k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/c80c5a-fae2-466d-aa16-8ca6c33d14bb/1/4PL1Rd2yNOOD02uKjWtWo43XL4k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/c80c5a-fae2-466d-aa16-8ca6c33d14bb/1/4PL1Rd2yNOOD02uKjWtWo43XL4k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:bf:35:bb:7c:fe:cb:2a:4a:11:62:0c:07:9b:a7:ac:23:4a:
04:bd:0d:88:f8:da:d9:50:19:7f:53:69:91:04:33:a3:52:54:
0b:b4:78:7a:91:26:59:e8:c5:b7:d9:a1:4b:90:42:72:c3:10:
8c:aa:3c:06:c5:ca:28:87:fa:23:ef:92:4a:7c:98:8d:77:e1:
25:35:29:f1:29:e4:1e:69:36:6e:81:c6:f9:a3:0c:fa:a2:4a:
26:74:96:9f:5f:0a:8b:81:e4:e2:e0:d5:4f:f0:a7:0c:4f:8d:
38:53:4c:ca:e9:01:9f:ec:14:73:50:2e:9d:52:4d:e9:af:07:
20:e6:ae:12:4e:8e:11:79:39:bf:23:a9:ed:a1:6f:40:c4:e3:
64:24:88:73:27:28:7a:4a:08:86:91:26:78:cd:1a:d8:bd:d6:
4a:bd:07:55:a2:75:e6:b2:4e:5e:e6:b1:1c:09:95:30:4d:a0:
99:5b:83:59:73:c3:3c:ca:2f:c3:94:ab:c1:97:b1:0d:35:39:
bb:78:ae:82:77:77:30:5b:bc:7c:fc:08:24:7c:36:fd:43:ed:
d5:1d:ad:17:31:24:2b:c8:ba:24:9e:cf:6e:dd:4d:49:b6:d9:
0b:1d:7b:6a:d0:dd:99:89:0b:de:5f:7b:47:32:8a:86:a7:5c:
1c:5c:3f:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 15:01:44 2025 by rpki-client