Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/6ec943-70e2-4335-84fe-c79d4eeb5ad6/1/4kCgJeDmGkTZPkqAHjiIsm570kE.mft
File: 4kCgJeDmGkTZPkqAHjiIsm570kE.mft (raw, json)
Hash identifier: hDUAzeKQPjwzG6YtWVockmj9DTjtcYP+1EJt0R7iEb0=
Subject key identifier: 61:1B:BE:15:F4:31:26:42:35:70:02:50:BD:57:A0:50:8F:F1:23:E4
Authority key identifier: E2:40:A0:25:E0:E6:1A:44:D9:3E:4A:80:1E:38:88:B2:6E:7B:D2:41
Certificate issuer: /CN=e240a025e0e61a44d93e4a801e3888b26e7bd241
Certificate serial: 019895FFFF257248D4BC73973FF526E2F2A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4kCgJeDmGkTZPkqAHjiIsm570kE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/6ec943-70e2-4335-84fe-c79d4eeb5ad6/1/4kCgJeDmGkTZPkqAHjiIsm570kE.mft
Manifest number: 162B
Signing time: Sun 10 Aug 2025 22:00:38 +0000
Manifest this update: Sun 10 Aug 2025 22:00:38 +0000
Manifest next update: Mon 11 Aug 2025 22:00:38 +0000
Files and hashes: 1: 4kCgJeDmGkTZPkqAHjiIsm570kE.crl (hash: KsoGJxiEtVqUgk+3QkIQvrMSDPhBrO7HrWonDyX9CJI=)
2: K7SH4zYCXr-cp1q6N2Mp-Gdj1PU.roa (hash: fOTEXpl4gYkXzMjvkhlooQdp3U8U0Z9lMps20TcryK0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/6ec943-70e2-4335-84fe-c79d4eeb5ad6/1/4kCgJeDmGkTZPkqAHjiIsm570kE.crl
rsync://rpki.ripe.net/repository/DEFAULT/1a/6ec943-70e2-4335-84fe-c79d4eeb5ad6/1/4kCgJeDmGkTZPkqAHjiIsm570kE.mft
rsync://rpki.ripe.net/repository/DEFAULT/4kCgJeDmGkTZPkqAHjiIsm570kE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 11 Aug 2025 17:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:95:ff:ff:25:72:48:d4:bc:73:97:3f:f5:26:e2:f2:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e240a025e0e61a44d93e4a801e3888b26e7bd241
Validity
Not Before: Aug 10 22:00:38 2025 GMT
Not After : Aug 11 22:00:38 2025 GMT
Subject: CN=611bbe15f431264235700250bd57a0508ff123e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:3e:d2:88:65:67:4e:3c:8a:48:69:2d:f4:95:
d0:bc:01:18:f1:c4:fd:ca:6d:11:d3:c5:e2:86:64:
9e:d7:a3:b3:33:23:b7:9b:32:a4:ae:70:be:be:df:
e1:c8:e2:4e:1d:02:20:95:e8:27:cf:a4:91:ae:40:
ba:7b:85:b5:b3:4b:93:f6:a9:36:a6:28:df:53:83:
93:77:77:80:f7:8d:28:eb:3c:1e:d4:3e:25:dc:9b:
30:bb:b2:a4:88:a5:f1:bb:e1:ca:ee:32:95:18:12:
4a:19:af:e9:25:69:ba:0f:2e:11:b2:b7:5a:c3:9d:
50:f0:c3:db:84:62:60:62:70:c6:08:89:97:f9:ec:
b2:fa:6a:d6:5b:de:cd:5b:6f:9a:e5:88:8a:ba:7f:
c3:e5:a0:23:b5:19:4f:d7:73:e5:e8:d1:2f:b0:4f:
27:f0:90:36:b6:31:b3:20:1c:5c:c5:89:02:4f:ad:
84:02:77:ec:25:6f:5b:2a:fb:50:59:dc:a4:71:6e:
31:1c:f2:b5:f3:31:06:a3:f4:8b:50:a1:d9:20:61:
cc:8b:8a:64:7d:41:11:9a:19:9a:0d:46:a6:3b:f5:
9e:67:5b:97:a2:0a:c3:90:12:ab:da:c9:26:63:54:
62:fa:18:50:ed:df:c8:45:d6:d8:ca:5c:f2:60:84:
12:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:1B:BE:15:F4:31:26:42:35:70:02:50:BD:57:A0:50:8F:F1:23:E4
X509v3 Authority Key Identifier:
keyid:E2:40:A0:25:E0:E6:1A:44:D9:3E:4A:80:1E:38:88:B2:6E:7B:D2:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4kCgJeDmGkTZPkqAHjiIsm570kE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/6ec943-70e2-4335-84fe-c79d4eeb5ad6/1/4kCgJeDmGkTZPkqAHjiIsm570kE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/6ec943-70e2-4335-84fe-c79d4eeb5ad6/1/4kCgJeDmGkTZPkqAHjiIsm570kE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:39:d4:cb:7a:e8:3f:53:a4:0d:5f:7e:0a:d5:87:6d:54:b6:
9d:5e:91:aa:29:0e:c8:a2:f4:7e:77:2f:97:9d:76:02:65:e6:
e8:49:b8:eb:7e:1f:e1:3a:b4:18:e7:21:38:a2:af:43:12:04:
d6:ef:0c:7b:d2:bd:9d:4e:86:0a:00:96:c0:2a:19:da:ab:c1:
ae:45:9d:c5:a3:d0:57:50:fd:8a:47:73:7f:c2:e2:cd:fc:86:
97:21:6f:70:6b:4f:ef:7f:88:96:8b:92:fe:a3:8d:e4:bc:ff:
73:90:c6:84:cc:3d:3b:93:e8:12:3d:c7:ab:33:7c:61:e9:60:
d4:f6:88:ca:f8:13:b0:1a:d1:e0:72:5c:12:95:71:d4:c4:1d:
1b:41:9d:e0:77:bb:9b:aa:a3:a7:71:d7:90:9c:59:8f:5c:23:
2b:a5:6f:c9:1a:1f:13:a6:3f:66:b6:83:a0:67:61:d4:f6:e6:
54:67:d5:12:df:3e:2a:74:fd:42:1b:4d:b7:48:d4:eb:3a:ae:
7a:0f:4a:c7:b0:c7:c4:ec:b6:b4:46:26:6b:95:4a:6a:6e:6e:
b7:c2:0d:3a:8b:77:45:0a:24:d7:11:55:32:64:80:84:06:fa:
aa:a5:f8:cd:92:93:27:4f:a8:d6:28:05:b8:26:6c:ff:be:4d:
d7:fd:89:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 11 01:45:14 2025 by rpki-client