Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/deebb8-ae86-4694-a972-827a0ac04a9d/1/4toj07kw1MHzrHMGXXGmB8NdKQA.mft
File: 4toj07kw1MHzrHMGXXGmB8NdKQA.mft (raw, json)
Hash identifier: y21CJzbz4GTHYwWTktXw4S2CCXTU/nxc09+Q0SE13jk=
Subject key identifier: 28:52:EE:51:F1:B9:35:86:76:2B:82:AD:9F:E3:ED:28:E0:EB:0A:33
Authority key identifier: E2:DA:23:D3:B9:30:D4:C1:F3:AC:73:06:5D:71:A6:07:C3:5D:29:00
Certificate issuer: /CN=e2da23d3b930d4c1f3ac73065d71a607c35d2900
Certificate serial: 019881D593BF1156F90A12B0CF8B121C8546
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4toj07kw1MHzrHMGXXGmB8NdKQA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/deebb8-ae86-4694-a972-827a0ac04a9d/1/4toj07kw1MHzrHMGXXGmB8NdKQA.mft
Manifest number: 1621
Signing time: Thu 07 Aug 2025 00:01:54 +0000
Manifest this update: Thu 07 Aug 2025 00:01:54 +0000
Manifest next update: Fri 08 Aug 2025 00:01:54 +0000
Files and hashes: 1: 1-rU3n-MmX0x7vSSIglpKrM6p7wc.roa (hash: c73xh5XkAcPFRSo/oWqlfjE2NzFubQ+3BLO5+whFr6o=)
2: 4toj07kw1MHzrHMGXXGmB8NdKQA.crl (hash: 2P732sxu2NTc7/xZULXlRvP/RBnkHo15+jNd/e5Xa0o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/deebb8-ae86-4694-a972-827a0ac04a9d/1/4toj07kw1MHzrHMGXXGmB8NdKQA.crl
rsync://rpki.ripe.net/repository/DEFAULT/12/deebb8-ae86-4694-a972-827a0ac04a9d/1/4toj07kw1MHzrHMGXXGmB8NdKQA.mft
rsync://rpki.ripe.net/repository/DEFAULT/4toj07kw1MHzrHMGXXGmB8NdKQA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 20:46:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:81:d5:93:bf:11:56:f9:0a:12:b0:cf:8b:12:1c:85:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e2da23d3b930d4c1f3ac73065d71a607c35d2900
Validity
Not Before: Aug 7 00:01:54 2025 GMT
Not After : Aug 8 00:01:54 2025 GMT
Subject: CN=2852ee51f1b93586762b82ad9fe3ed28e0eb0a33
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:62:8b:55:ca:4c:22:b5:be:24:ee:d7:30:00:
0c:26:b8:00:27:ee:c5:2a:ac:3a:53:f6:94:80:5b:
dd:2f:1a:5c:9d:1a:a7:f4:2b:e2:b2:00:ec:68:8e:
7d:0d:91:3b:8d:b5:24:73:91:a2:0f:17:aa:76:73:
49:39:81:90:e5:0d:c7:af:7a:0e:85:0e:4c:a9:5a:
54:fc:54:e0:bb:0a:66:d9:72:2a:8b:83:e9:99:6c:
90:c3:02:58:64:27:b0:96:18:50:10:57:7a:bd:10:
2b:49:1c:5c:08:4a:9f:c2:de:e9:6e:6f:12:4d:68:
ec:e9:04:e5:17:95:9f:e0:b5:95:53:e2:1c:d0:56:
0c:c4:97:1f:08:80:46:9d:88:e3:b6:0b:22:c1:9e:
cf:05:e6:f9:3f:cb:92:ce:cc:b3:a9:21:d6:62:c0:
02:55:6a:5f:4d:db:6b:a2:83:23:c7:84:f2:f8:cf:
d3:b9:d0:00:c6:2f:47:90:81:17:d4:80:13:cb:76:
2a:a0:f3:4f:2b:ea:b7:40:24:ba:88:4b:83:5c:fa:
99:45:7d:f9:c2:fb:b9:cc:e7:f5:9a:f6:97:2f:6a:
ac:37:6b:d0:26:61:da:f8:91:00:b4:55:d7:25:0b:
c2:9d:bc:51:26:85:a9:ca:e5:6a:6a:85:b0:27:1f:
02:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:52:EE:51:F1:B9:35:86:76:2B:82:AD:9F:E3:ED:28:E0:EB:0A:33
X509v3 Authority Key Identifier:
keyid:E2:DA:23:D3:B9:30:D4:C1:F3:AC:73:06:5D:71:A6:07:C3:5D:29:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4toj07kw1MHzrHMGXXGmB8NdKQA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/deebb8-ae86-4694-a972-827a0ac04a9d/1/4toj07kw1MHzrHMGXXGmB8NdKQA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/deebb8-ae86-4694-a972-827a0ac04a9d/1/4toj07kw1MHzrHMGXXGmB8NdKQA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
90:78:46:9a:c3:9a:6e:a5:50:45:04:38:96:b6:7c:e7:c4:e0:
72:a5:1a:08:36:00:da:ea:eb:f6:e7:d9:a3:f9:76:b4:11:1c:
00:a8:48:f6:bc:87:ca:fe:49:d9:54:1d:f6:ba:c8:da:b2:a1:
05:c4:98:38:e3:47:3d:b1:be:1d:cd:48:58:76:15:58:97:55:
e2:d9:10:e5:2d:d7:79:65:9c:f5:30:60:0b:a2:c3:21:81:be:
34:5c:f6:a1:39:8d:43:cf:16:52:fa:3c:88:50:60:f4:62:c9:
b5:56:af:19:4e:3b:3d:12:22:00:7c:e5:16:95:e8:4d:d4:7c:
a9:fb:07:47:c7:d5:07:58:6b:9a:12:fe:77:21:bc:ab:17:74:
b2:ca:c2:84:53:5e:fe:dc:55:32:fd:9a:53:99:a2:bf:6a:4a:
b0:d0:f4:03:e8:80:bf:fa:17:e8:c4:3e:1a:b0:42:a8:38:89:
cf:b8:56:9c:84:1b:16:f8:45:75:1d:0b:03:f0:d7:5d:d3:3d:
ce:92:26:d7:92:1f:2e:93:22:9a:9b:48:73:d8:8d:59:c6:85:
15:26:20:65:ec:ca:b6:b0:d5:01:a7:2d:fa:3b:5f:ba:9c:a1:
18:4f:30:ef:6d:cb:8c:bc:1b:80:6c:c5:13:06:61:9b:91:25:
92:34:95:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 04:05:20 2025 by rpki-client