
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/4c9206-95cb-4324-ab88-1e6577ca172d/1/4d9YUq-QW0Ff31PjKHb1enTWwfA.mft
File: 4d9YUq-QW0Ff31PjKHb1enTWwfA.mft (raw, json)
Hash identifier: WMqmDBMJHJQcWwqNajboLrtDG/T68iUkv8eQy51PFUk=
Subject key identifier: E1:F0:A7:E6:58:CC:EF:D9:DE:B6:63:39:79:03:76:68:30:ED:DB:BB
Authority key identifier: E1:DF:58:52:AF:90:5B:41:5F:DF:53:E3:28:76:F5:7A:74:D6:C1:F0
Certificate issuer: /CN=e1df5852af905b415fdf53e32876f57a74d6c1f0
Certificate serial: 0198D7E0F5F796CCA384BC4A62023497D796
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4d9YUq-QW0Ff31PjKHb1enTWwfA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/4c9206-95cb-4324-ab88-1e6577ca172d/1/4d9YUq-QW0Ff31PjKHb1enTWwfA.mft
Manifest number: 0F5B
Signing time: Sat 23 Aug 2025 17:01:41 +0000
Manifest this update: Sat 23 Aug 2025 17:01:41 +0000
Manifest next update: Sun 24 Aug 2025 17:01:41 +0000
Files and hashes: 1: 4d9YUq-QW0Ff31PjKHb1enTWwfA.crl (hash: 5Bm+HJfODVbF9FoBBm6lsmU1odG3tcNzYX+aBG52/ac=)
2: cD_mZgVZwLPlXPcv17kJI-LgBr4.roa (hash: KNwGHjS6BluwkxT0qyW7BxgZYc1pPDj7oHyq37oQR90=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/4c9206-95cb-4324-ab88-1e6577ca172d/1/4d9YUq-QW0Ff31PjKHb1enTWwfA.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/4c9206-95cb-4324-ab88-1e6577ca172d/1/4d9YUq-QW0Ff31PjKHb1enTWwfA.mft
rsync://rpki.ripe.net/repository/DEFAULT/4d9YUq-QW0Ff31PjKHb1enTWwfA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 14:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d7:e0:f5:f7:96:cc:a3:84:bc:4a:62:02:34:97:d7:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e1df5852af905b415fdf53e32876f57a74d6c1f0
Validity
Not Before: Aug 23 17:01:41 2025 GMT
Not After : Aug 24 17:01:41 2025 GMT
Subject: CN=e1f0a7e658ccefd9deb663397903766830eddbbb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:ba:cc:a1:54:7c:8d:0b:69:30:52:2e:cb:20:
ca:07:01:29:3d:23:3e:08:ca:69:93:be:5b:13:ee:
6d:00:94:d6:8c:cf:55:4c:7f:3a:3e:7c:25:f7:97:
ce:a3:99:87:5e:33:f2:0d:7b:95:fc:3d:fc:3d:07:
a9:84:ba:d4:bb:2e:21:da:36:c7:19:80:ae:b4:d3:
c1:03:51:5e:6f:a2:5a:50:8c:f8:33:07:df:0a:38:
7c:6d:aa:59:9e:9a:90:05:92:60:e3:6f:5e:2a:a3:
a2:bd:41:23:2c:e4:bf:b6:48:87:51:c7:d8:6f:10:
b0:66:f6:4d:e3:93:ac:a0:dc:c4:83:98:b3:e2:4d:
dc:27:ef:ae:7c:74:d7:ab:c7:ca:38:27:0f:7f:c1:
a7:a5:63:e2:08:4b:13:26:d7:33:1f:ac:5e:41:49:
02:34:fd:4c:ab:3c:9a:b3:ec:d0:82:02:13:33:94:
65:6e:0a:5f:a7:a1:df:1b:a3:c9:d8:30:c5:53:fe:
de:00:2e:25:0a:94:8f:8d:5d:45:b9:31:a0:7c:19:
f8:16:95:d1:a0:b0:cb:50:b2:d9:f0:ad:75:0f:24:
b7:dd:af:3b:21:aa:1d:c2:9f:37:25:19:fe:82:84:
1d:cd:81:18:17:42:54:e1:27:b8:33:9e:23:77:07:
c7:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:F0:A7:E6:58:CC:EF:D9:DE:B6:63:39:79:03:76:68:30:ED:DB:BB
X509v3 Authority Key Identifier:
keyid:E1:DF:58:52:AF:90:5B:41:5F:DF:53:E3:28:76:F5:7A:74:D6:C1:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d9YUq-QW0Ff31PjKHb1enTWwfA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/4c9206-95cb-4324-ab88-1e6577ca172d/1/4d9YUq-QW0Ff31PjKHb1enTWwfA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/4c9206-95cb-4324-ab88-1e6577ca172d/1/4d9YUq-QW0Ff31PjKHb1enTWwfA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:80:a2:52:0a:3d:7d:15:d6:c5:30:16:2f:6e:a0:62:db:4c:
98:dd:4d:5f:b2:6f:dd:47:88:23:e2:88:57:81:0c:ff:ef:e9:
61:ce:f8:c4:64:f4:82:b7:3d:c0:8e:d2:66:5a:c6:1e:33:9a:
42:20:b3:c5:2c:81:ec:ee:8d:e6:4e:27:ee:a4:23:78:44:bb:
c8:c7:44:1b:63:5e:07:42:db:a6:bd:01:7c:83:1f:32:ac:75:
a7:25:0f:e9:46:78:82:2a:94:4b:cb:26:9c:32:d2:95:6d:5f:
0d:dd:b0:2e:70:75:5c:f9:00:7b:da:66:a9:a0:f6:b2:84:9a:
dc:dd:c0:10:32:f4:96:26:23:85:d7:18:fe:ff:3c:01:27:a2:
bd:d3:75:ab:42:77:5b:83:f1:b7:94:1a:6f:f4:5c:d3:d6:90:
e7:66:36:cd:b4:f9:c6:a0:6e:1e:3f:cd:1e:48:88:67:99:d3:
2d:24:e7:34:dc:c9:98:79:5f:5b:41:bb:74:33:bc:e6:9f:bf:
44:e1:3c:41:59:f4:75:26:74:57:dd:7e:ad:db:8f:aa:b8:56:
49:6b:97:f6:06:07:73:8f:98:e3:52:66:65:89:7c:d2:64:07:
ec:e7:3e:c2:4d:88:d3:77:dc:f5:5e:48:49:63:84:5c:e3:bc:
ff:c2:30:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 19:38:27 2025 by rpki-client