Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/2048e4-818c-4601-b023-743765bd0f3e/1/e4jUpKsYpZtmTauv2ziA3DWyK5E.mft
File: e4jUpKsYpZtmTauv2ziA3DWyK5E.mft (raw, json)
Hash identifier: UCuj9qw8xUpul+sHavxQGyRwNHhLZWbF4sOxiYAiOIA=
Subject key identifier: 0B:4C:B2:23:29:62:25:13:68:BA:61:C8:A8:BF:5B:14:93:C0:E4:8C
Authority key identifier: 7B:88:D4:A4:AB:18:A5:9B:66:4D:AB:AF:DB:38:80:DC:35:B2:2B:91
Certificate issuer: /CN=7b88d4a4ab18a59b664dabafdb3880dc35b22b91
Certificate serial: 019876AC0D13CC8F5DE72E4F0EFACC8B1F34
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/e4jUpKsYpZtmTauv2ziA3DWyK5E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/2048e4-818c-4601-b023-743765bd0f3e/1/e4jUpKsYpZtmTauv2ziA3DWyK5E.mft
Manifest number: 161E
Signing time: Mon 04 Aug 2025 20:00:43 +0000
Manifest this update: Mon 04 Aug 2025 20:00:43 +0000
Manifest next update: Tue 05 Aug 2025 20:00:43 +0000
Files and hashes: 1: XWu-Cy3k4bG46jzu68jWDU2BUlE.roa (hash: oYNAZflFkpftatNeWIk412xMRJVARxZKG+FJn7voe4M=)
2: e4jUpKsYpZtmTauv2ziA3DWyK5E.crl (hash: RsuUgfNulkhFeLREb7nZW6uWg2N/KWsA7TVh34M6Ae8=)
3: jYKhHXV1OB2pC6LjAmSh2r6YUk0.roa (hash: 7C9VKQGPhygAtV4ulo4sNDzQRhMNsoU08LmAQx4ncWw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/04/2048e4-818c-4601-b023-743765bd0f3e/1/e4jUpKsYpZtmTauv2ziA3DWyK5E.crl
rsync://rpki.ripe.net/repository/DEFAULT/04/2048e4-818c-4601-b023-743765bd0f3e/1/e4jUpKsYpZtmTauv2ziA3DWyK5E.mft
rsync://rpki.ripe.net/repository/DEFAULT/e4jUpKsYpZtmTauv2ziA3DWyK5E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 12:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:76:ac:0d:13:cc:8f:5d:e7:2e:4f:0e:fa:cc:8b:1f:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7b88d4a4ab18a59b664dabafdb3880dc35b22b91
Validity
Not Before: Aug 4 20:00:43 2025 GMT
Not After : Aug 5 20:00:43 2025 GMT
Subject: CN=0b4cb2232962251368ba61c8a8bf5b1493c0e48c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:d6:13:19:5e:18:d6:cb:4f:e5:a8:7a:8f:32:
39:53:48:57:55:f4:84:ff:2f:67:49:80:3d:b7:63:
b1:3d:38:41:01:45:cf:97:37:3b:ac:21:31:af:e4:
23:50:bf:ec:79:d4:e4:1c:6d:31:fa:0d:e8:97:5d:
e2:8d:45:7b:f8:15:d4:41:9e:83:8a:45:59:c9:d4:
ff:08:db:a6:44:9d:22:1b:e8:cf:c5:3d:55:a6:e3:
0b:2e:c4:cd:12:4c:f1:99:f8:a9:72:37:bf:9a:fc:
fb:11:72:cb:51:5f:eb:1f:c5:c6:94:03:64:b1:80:
5c:37:a3:45:1b:f0:04:12:9f:81:7c:c3:d0:63:66:
73:90:0b:24:de:b8:3b:6e:12:1e:b2:60:a3:99:a4:
c5:48:3c:02:43:21:fe:29:16:c1:91:71:20:e3:1e:
56:1e:20:f4:60:6f:19:a0:e8:13:26:1c:77:0a:95:
86:ea:b4:10:54:dd:0f:39:41:bd:e6:60:c5:70:1d:
67:50:14:1b:23:eb:67:b1:64:d3:d4:59:52:06:6c:
09:f2:af:f9:74:26:1f:d1:42:9a:59:40:fd:78:81:
ec:5c:21:55:d0:f7:f0:c5:35:7d:41:d3:24:45:6d:
a6:1d:8d:9c:2e:a0:ba:44:a5:00:80:fc:fd:2b:ff:
0e:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:4C:B2:23:29:62:25:13:68:BA:61:C8:A8:BF:5B:14:93:C0:E4:8C
X509v3 Authority Key Identifier:
keyid:7B:88:D4:A4:AB:18:A5:9B:66:4D:AB:AF:DB:38:80:DC:35:B2:2B:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4jUpKsYpZtmTauv2ziA3DWyK5E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/2048e4-818c-4601-b023-743765bd0f3e/1/e4jUpKsYpZtmTauv2ziA3DWyK5E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/04/2048e4-818c-4601-b023-743765bd0f3e/1/e4jUpKsYpZtmTauv2ziA3DWyK5E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:7f:d4:b2:b1:8a:cd:35:dd:92:9e:66:ac:ab:63:88:b7:7b:
c7:ad:4a:87:22:da:05:26:d1:f2:bd:63:b9:28:60:38:b5:28:
70:8b:92:e7:35:a6:e1:2c:0a:3b:d9:b9:1f:a1:03:9c:38:15:
91:55:71:1d:40:33:5e:bf:56:40:20:1c:45:7a:a0:a4:ac:17:
47:cb:59:eb:cd:7c:0f:5e:b8:e1:84:bc:55:32:19:0a:aa:67:
91:d9:a8:ef:be:6f:b8:c2:f3:68:53:07:b7:f3:9d:77:53:59:
e7:e3:2b:18:92:7a:b2:d0:ef:db:83:b2:2b:9f:8a:b6:42:6d:
3a:eb:ef:b8:f4:40:c7:b5:c5:d8:77:83:9b:97:33:e4:d1:83:
e7:e6:5c:db:c5:8c:0a:80:e2:0c:5e:73:1d:b5:5e:84:6c:33:
c6:59:0a:6d:32:b1:9b:cc:7d:8d:e1:56:58:eb:45:ac:c7:27:
11:25:8f:6f:75:cf:72:36:cc:e8:ec:f5:0a:0d:86:35:00:c6:
a5:9d:10:28:04:43:0f:9d:3d:3b:de:31:b5:ef:60:c0:6e:81:
0f:12:d6:01:21:70:98:1d:5a:5c:13:db:f3:f2:c4:7c:13:d2:
e6:79:1c:9b:5f:38:c9:05:88:34:f2:03:13:4e:a3:79:70:e0:
6f:4e:fb:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 22:16:11 2025 by rpki-client