Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/b9df5a-a454-4e27-86af-13d380715cef/1/4gThwgEU13MWlN3E8nfE3xv_xPg.mft
File: 4gThwgEU13MWlN3E8nfE3xv_xPg.mft (raw, json)
Hash identifier: yLTnD8va1WvKFpVqg1k3okitRR2lnuJO5DI5rOlz5wE=
Subject key identifier: 9C:02:EE:DA:85:5D:B4:71:45:B2:78:68:D4:7E:39:2D:E5:25:E1:3B
Authority key identifier: E2:04:E1:C2:01:14:D7:73:16:94:DD:C4:F2:77:C4:DF:1B:FF:C4:F8
Certificate issuer: /CN=e204e1c20114d7731694ddc4f277c4df1bffc4f8
Certificate serial: 0198D47410C0623C6CB602C384666E24DAFE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4gThwgEU13MWlN3E8nfE3xv_xPg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/b9df5a-a454-4e27-86af-13d380715cef/1/4gThwgEU13MWlN3E8nfE3xv_xPg.mft
Manifest number: 164B
Signing time: Sat 23 Aug 2025 01:03:52 +0000
Manifest this update: Sat 23 Aug 2025 01:03:52 +0000
Manifest next update: Sun 24 Aug 2025 01:03:52 +0000
Files and hashes: 1: 4gThwgEU13MWlN3E8nfE3xv_xPg.crl (hash: mEvrX/NbpQ6n87E+YAK9/RWeCBffKkwO96ME+sUpJdM=)
2: BDxLMkKnaceqpe6Gqca_PK3aI0Q.roa (hash: g477khgykIY2Mcl6yKjre2phFpHAMbTwNboQthw3CVw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ec/b9df5a-a454-4e27-86af-13d380715cef/1/4gThwgEU13MWlN3E8nfE3xv_xPg.crl
rsync://rpki.ripe.net/repository/DEFAULT/ec/b9df5a-a454-4e27-86af-13d380715cef/1/4gThwgEU13MWlN3E8nfE3xv_xPg.mft
rsync://rpki.ripe.net/repository/DEFAULT/4gThwgEU13MWlN3E8nfE3xv_xPg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:74:10:c0:62:3c:6c:b6:02:c3:84:66:6e:24:da:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e204e1c20114d7731694ddc4f277c4df1bffc4f8
Validity
Not Before: Aug 23 01:03:52 2025 GMT
Not After : Aug 24 01:03:52 2025 GMT
Subject: CN=9c02eeda855db47145b27868d47e392de525e13b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:9e:1c:1b:33:4c:ce:dc:b6:c1:3e:0d:0d:2a:
12:6e:46:30:20:76:86:92:aa:1a:e5:44:d6:33:d3:
a0:61:f2:28:d9:39:f4:a5:c0:8b:bb:d6:24:3f:a0:
d7:f9:8a:c5:8d:6b:22:2b:4c:2b:0b:33:59:6d:f2:
21:f4:1b:ee:a6:b5:3a:69:a0:a3:53:0d:68:3b:cd:
53:b7:df:78:32:b0:46:3c:dc:ff:96:3a:dc:10:13:
49:ba:9e:b2:24:40:5b:3c:64:4c:bb:ab:87:ef:0f:
28:10:c5:79:d5:61:30:c4:4b:90:84:1e:d2:51:90:
04:a1:72:6f:49:f8:fc:ed:97:18:65:e0:0b:27:be:
94:28:8b:c4:66:16:50:75:45:39:f8:c3:3d:93:f9:
f7:35:99:c2:cc:1f:dc:57:da:68:28:c4:df:19:c7:
2a:65:6b:b3:11:c0:19:f0:bc:92:6d:40:2c:44:23:
74:bd:1e:48:12:f3:62:1b:8e:9e:b5:c4:fe:3d:41:
c4:54:27:84:65:ec:0b:89:23:69:01:f9:45:d5:74:
9b:e9:b7:ff:6b:01:c6:e4:56:cd:b4:2b:17:3a:7b:
da:07:ca:38:00:f6:da:63:6a:cd:a4:bd:5d:08:ea:
71:08:27:50:58:3a:cc:8f:95:31:c4:15:c8:52:4f:
93:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:02:EE:DA:85:5D:B4:71:45:B2:78:68:D4:7E:39:2D:E5:25:E1:3B
X509v3 Authority Key Identifier:
keyid:E2:04:E1:C2:01:14:D7:73:16:94:DD:C4:F2:77:C4:DF:1B:FF:C4:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4gThwgEU13MWlN3E8nfE3xv_xPg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/b9df5a-a454-4e27-86af-13d380715cef/1/4gThwgEU13MWlN3E8nfE3xv_xPg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/b9df5a-a454-4e27-86af-13d380715cef/1/4gThwgEU13MWlN3E8nfE3xv_xPg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:f0:29:c0:ac:2e:64:65:c8:f8:ee:13:1e:00:0e:92:cd:7c:
d3:94:67:9f:04:ab:6a:80:51:db:bd:02:b3:46:fe:02:72:6b:
30:02:0f:94:98:91:02:08:b5:aa:be:21:a3:a8:68:1c:67:9f:
75:30:7a:14:bf:85:92:62:8e:57:a8:c7:53:86:0f:08:9e:d4:
da:2e:e9:b5:51:d2:a5:00:30:52:0b:a9:cf:67:26:3e:7e:b8:
67:0b:76:d9:dc:35:20:12:3e:a5:cd:81:59:75:52:bc:12:6c:
19:7e:26:ec:b9:b9:1c:f2:e0:c2:1c:2f:c7:2e:4c:8c:fe:6f:
94:d8:b1:db:8e:f3:58:6b:0b:ee:03:e9:87:78:0c:68:77:44:
94:ca:02:7c:6a:77:a1:fa:fe:ea:bc:30:70:e3:a3:fb:e8:4d:
c3:fb:3e:98:ed:14:39:38:c4:2b:8e:46:35:3a:2f:b9:9d:1b:
cc:af:7e:cc:6b:d3:62:92:99:48:62:d4:c0:e3:64:79:9a:82:
44:9a:19:09:28:42:bd:25:36:12:42:8a:e2:42:f2:d7:77:3f:
3a:70:fa:d2:a9:c7:f7:6b:4f:f7:b6:fb:41:3a:41:3f:dc:67:
94:db:b7:5f:15:95:13:ad:d7:52:67:4b:44:c6:72:25:5b:9d:
07:57:10:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:31:04 2025 by rpki-client