Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/9b87d4-e0f9-423d-af9d-de9e27ebb25d/1/4RlTX6w_pId5V5vOj8O0At7yy0Q.mft
File: 4RlTX6w_pId5V5vOj8O0At7yy0Q.mft (raw, json)
Hash identifier: T2XQ6FHdaUdd/gvFoomYj5gk2jR5l+O3ZPTyATNS8f4=
Subject key identifier: 3A:B3:37:0F:69:5E:9B:65:37:2A:B8:95:69:AF:8E:E6:86:46:C3:F3
Authority key identifier: E1:19:53:5F:AC:3F:A4:87:79:57:9B:CE:8F:C3:B4:02:DE:F2:CB:44
Certificate issuer: /CN=e119535fac3fa48779579bce8fc3b402def2cb44
Certificate serial: 0198D66091122C8C9405E1D8C315D5DAE4FF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4RlTX6w_pId5V5vOj8O0At7yy0Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/9b87d4-e0f9-423d-af9d-de9e27ebb25d/1/4RlTX6w_pId5V5vOj8O0At7yy0Q.mft
Manifest number: 0621
Signing time: Sat 23 Aug 2025 10:01:49 +0000
Manifest this update: Sat 23 Aug 2025 10:01:49 +0000
Manifest next update: Sun 24 Aug 2025 10:01:49 +0000
Files and hashes: 1: 4RlTX6w_pId5V5vOj8O0At7yy0Q.crl (hash: 6BRUPvPDjB8zXOg+eB/9stjmvFvbugt5vJWbsdPCuyo=)
2: soe--L3Zv3Ab_c4ax7SKPcclEEk.roa (hash: EM4MaU25MU3aJWehslBE3y3dfKuyrb7A7eUnc8kofN8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/9b87d4-e0f9-423d-af9d-de9e27ebb25d/1/4RlTX6w_pId5V5vOj8O0At7yy0Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/f2/9b87d4-e0f9-423d-af9d-de9e27ebb25d/1/4RlTX6w_pId5V5vOj8O0At7yy0Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/4RlTX6w_pId5V5vOj8O0At7yy0Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:60:91:12:2c:8c:94:05:e1:d8:c3:15:d5:da:e4:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e119535fac3fa48779579bce8fc3b402def2cb44
Validity
Not Before: Aug 23 10:01:49 2025 GMT
Not After : Aug 24 10:01:49 2025 GMT
Subject: CN=3ab3370f695e9b65372ab89569af8ee68646c3f3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:9d:1f:6b:5c:a5:d3:20:c3:95:83:d5:64:62:
07:aa:65:d6:b0:80:ef:16:ca:8f:9f:34:a3:fd:cc:
55:38:c1:9b:10:8c:e6:30:4a:ba:7d:58:f1:bc:b6:
1d:25:52:8d:09:8d:d7:78:1e:f9:2d:cf:fe:85:73:
e4:54:7b:ee:b0:e6:1a:92:1b:18:34:ba:8f:7d:b1:
b2:5d:5e:03:71:ef:dd:43:91:a5:79:93:b1:a5:a3:
a0:8b:fa:6c:d6:77:37:f7:bf:dc:51:27:79:a4:13:
3d:cc:b2:5d:53:57:43:79:30:da:dc:63:2c:2d:0a:
83:ac:43:2b:81:9a:a2:e0:38:5c:0e:ad:99:47:d0:
61:28:59:32:2c:1d:a8:f0:35:21:38:8f:65:62:8e:
e2:b7:d7:7e:8c:57:fe:f7:6a:ec:7e:8d:74:d9:d7:
9b:1a:ba:f4:3d:4b:98:ce:ff:11:17:8c:f5:de:6f:
28:71:77:70:fa:6f:8a:3a:93:42:5a:a9:a7:69:8f:
24:e7:51:fe:fe:3a:ae:63:22:44:c9:84:1c:24:25:
30:3e:8b:af:2f:47:48:e0:7c:85:82:f7:ad:2f:c9:
20:d9:f9:0a:c6:e2:00:c3:e3:cb:3c:11:30:5a:09:
7c:33:64:b7:fd:fb:9a:4f:79:fe:0b:47:9a:70:d4:
a0:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:B3:37:0F:69:5E:9B:65:37:2A:B8:95:69:AF:8E:E6:86:46:C3:F3
X509v3 Authority Key Identifier:
keyid:E1:19:53:5F:AC:3F:A4:87:79:57:9B:CE:8F:C3:B4:02:DE:F2:CB:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4RlTX6w_pId5V5vOj8O0At7yy0Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/9b87d4-e0f9-423d-af9d-de9e27ebb25d/1/4RlTX6w_pId5V5vOj8O0At7yy0Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/9b87d4-e0f9-423d-af9d-de9e27ebb25d/1/4RlTX6w_pId5V5vOj8O0At7yy0Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:e4:2c:d4:83:01:78:69:26:b2:4e:4e:cd:76:37:4d:5d:e1:
b7:3c:bf:0b:06:b8:84:03:d2:a0:9e:45:b2:52:35:1e:fe:cc:
7b:88:50:e4:2a:d7:37:c5:5f:16:ca:7e:17:6e:ff:1d:db:84:
eb:b8:97:6f:5c:e0:43:68:a0:ec:40:34:77:aa:8e:88:8d:41:
8e:1f:6e:61:c7:50:02:ef:b4:ef:00:a0:a3:c8:90:56:dd:35:
23:aa:46:a3:8a:d3:80:44:36:08:3e:84:b8:ef:33:25:f3:91:
14:d7:48:21:5e:31:e7:b9:e8:02:46:48:91:0a:10:61:2b:f5:
a5:a2:68:db:66:42:0c:68:32:e9:75:ff:93:63:eb:1c:c7:08:
28:c2:f8:d0:ae:f0:2f:e9:79:d7:c3:b1:de:75:98:e3:2b:32:
14:b1:86:0c:07:aa:41:8d:d0:86:30:31:ce:45:e9:31:e0:0e:
67:c5:c0:44:37:c4:3a:ec:80:2c:0a:3f:04:d2:c2:01:c8:a4:
a8:dc:33:31:20:19:94:6d:7c:bd:ac:45:b4:01:c8:7a:16:2f:
30:e4:71:6f:e0:ec:7a:14:37:23:68:37:d5:cf:00:13:0e:7c:
36:57:b6:e5:60:0a:ef:b1:af:58:81:62:6a:16:81:73:74:4b:
f9:25:c1:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:27:51 2025 by rpki-client