Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/082c31-f4ef-4acb-90f1-da03bf7a2ec2/1/_E0Gl4lpqL2rbWNZBi13geA0Sco.mft
File: _E0Gl4lpqL2rbWNZBi13geA0Sco.mft (raw, json)
Hash identifier: z7v0AWa9+LghoXriiWsK0AopoQ02GEZW0Fqsj02Zrfg=
Subject key identifier: 46:25:DB:52:C1:0C:2F:FB:AB:03:4B:24:8F:66:BF:C8:FD:01:AE:59
Authority key identifier: FC:4D:06:97:89:69:A8:BD:AB:6D:63:59:06:2D:77:81:E0:34:49:CA
Certificate issuer: /CN=fc4d06978969a8bdab6d6359062d7781e03449ca
Certificate serial: 019873E2498894039865059BF0B1C975A09B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_E0Gl4lpqL2rbWNZBi13geA0Sco.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/082c31-f4ef-4acb-90f1-da03bf7a2ec2/1/_E0Gl4lpqL2rbWNZBi13geA0Sco.mft
Manifest number: 1626
Signing time: Mon 04 Aug 2025 07:01:06 +0000
Manifest this update: Mon 04 Aug 2025 07:01:06 +0000
Manifest next update: Tue 05 Aug 2025 07:01:06 +0000
Files and hashes: 1: 02eA2zVN2NGAdF-P2LMeAYVbZ8E.roa (hash: 1lC1lblUpRwTVQ+Ge49BDR+GJQFgOVsafNXG64hb/XY=)
2: Fh-g3ybxuQPMBjAboSgyWK2vAoc.roa (hash: 2MxUFjGmuDKUG21lzv5veXhyhTQId3UhJyQ5SEul+IE=)
3: RqVcFJZ-UOtFVhYTc8Tvk-2MyWc.roa (hash: EkympbPJChDE++MdHcZn5otezDPhnhwM5HrzDsbo97E=)
4: UGBZOZSWywjphqY06-K_M1ZGoT0.roa (hash: RJB+IF1dz0DTQaSONy8F1A13L8REX4DXW9Kvah614y8=)
5: VqGI977rLYSlPvPeIqKzU5gAsRQ.roa (hash: lpVLT1GI44DAxERwMidgTiLaLBc+qxFL0OsVYhw1jZs=)
6: _E0Gl4lpqL2rbWNZBi13geA0Sco.crl (hash: Ioy1UrBQAkz1p9QIUcTr2ulmiLDli08yxdCA7rvW+Kc=)
7: vdV5qL7SpepCbsvsvfAJBAz8FxI.roa (hash: zM4+IpZ2NSkVy8xnsYcs6SKRJCNxX1j91N1iXdAJ3Zs=)
8: zQ_mdrGL7iDEweRkAPL6mvm3aRA.roa (hash: ZLxLzKI7oWxHfaoLaLC/qvHYpwJYh49zyjA/TXCZ5qY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1d/082c31-f4ef-4acb-90f1-da03bf7a2ec2/1/_E0Gl4lpqL2rbWNZBi13geA0Sco.crl
rsync://rpki.ripe.net/repository/DEFAULT/1d/082c31-f4ef-4acb-90f1-da03bf7a2ec2/1/_E0Gl4lpqL2rbWNZBi13geA0Sco.mft
rsync://rpki.ripe.net/repository/DEFAULT/_E0Gl4lpqL2rbWNZBi13geA0Sco.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:73:e2:49:88:94:03:98:65:05:9b:f0:b1:c9:75:a0:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fc4d06978969a8bdab6d6359062d7781e03449ca
Validity
Not Before: Aug 4 07:01:06 2025 GMT
Not After : Aug 5 07:01:06 2025 GMT
Subject: CN=4625db52c10c2ffbab034b248f66bfc8fd01ae59
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:13:6a:da:fb:30:ea:dd:69:26:9d:8e:d4:58:
82:dd:61:1e:a2:73:6e:06:98:cb:fc:72:8e:f4:f6:
cc:ed:86:9a:f7:3c:92:b3:4f:5e:3c:f1:af:2c:b5:
51:15:38:cb:84:27:8b:0e:bf:e3:6c:04:ab:8e:64:
6d:44:ee:1e:27:30:d7:97:71:9a:a9:3f:0f:39:ca:
ab:c3:b8:0b:86:7c:b5:12:41:75:53:d9:df:2c:f5:
f9:6a:5c:86:86:4d:f1:7e:c1:c2:2f:a5:ea:0b:51:
d7:4c:3c:05:6b:2b:05:42:25:d0:5c:11:e0:95:29:
5b:58:17:06:09:37:62:ae:4c:66:b3:40:f1:33:22:
7a:ba:03:2b:6b:1f:03:c4:b7:7e:e7:38:55:fc:58:
3e:06:02:e8:f6:e0:c0:f3:8b:c4:b4:3a:53:a2:d7:
be:10:bb:7a:62:7d:a3:71:43:7a:e8:b8:4f:8a:c1:
2b:43:d5:a5:b5:8e:48:ac:0d:18:0e:38:94:76:79:
72:64:3c:7b:47:d9:02:22:d9:b1:70:05:e5:a2:7d:
e8:b7:76:b9:f5:ce:2d:0f:be:a9:9f:b0:2d:aa:3e:
48:31:14:b6:99:0b:ca:04:17:b7:01:f9:6b:48:19:
f1:7a:9f:e5:87:04:de:e6:96:a1:c6:96:0e:a7:72:
98:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:25:DB:52:C1:0C:2F:FB:AB:03:4B:24:8F:66:BF:C8:FD:01:AE:59
X509v3 Authority Key Identifier:
keyid:FC:4D:06:97:89:69:A8:BD:AB:6D:63:59:06:2D:77:81:E0:34:49:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_E0Gl4lpqL2rbWNZBi13geA0Sco.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/082c31-f4ef-4acb-90f1-da03bf7a2ec2/1/_E0Gl4lpqL2rbWNZBi13geA0Sco.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/082c31-f4ef-4acb-90f1-da03bf7a2ec2/1/_E0Gl4lpqL2rbWNZBi13geA0Sco.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:33:f5:59:81:e7:c8:ec:2b:26:97:b6:83:b5:e1:14:8a:8d:
e2:ca:91:77:39:18:8e:a5:f3:a0:86:47:76:23:87:b8:da:a9:
7e:be:67:ab:7a:c5:4f:d7:9d:5f:be:86:17:d2:ce:83:e6:ea:
10:e8:07:7b:4f:2f:68:c1:2c:fa:14:49:b7:47:b8:51:29:60:
b1:f0:a6:63:a5:f8:bd:db:8b:c9:a4:a3:2a:94:4d:cb:2b:81:
80:6c:2b:47:df:18:cc:4a:98:aa:12:82:92:d1:4c:8c:d4:39:
7e:38:a6:80:45:a6:f6:d9:9c:24:3b:d0:08:9b:c4:dd:84:33:
09:88:16:c4:c7:96:be:24:b4:29:52:15:14:d6:e5:cf:b5:87:
f3:bc:6e:cd:2c:51:30:f5:e9:4d:f2:e7:3b:f6:83:84:d0:8d:
be:bd:b1:49:0e:bc:01:8e:10:1a:1b:15:5c:c8:f5:f2:21:6c:
e9:ec:a7:0b:ac:cf:fa:ad:19:82:0b:7a:60:57:ca:9c:01:54:
42:30:3d:2c:95:cc:fa:06:80:83:fd:59:cc:1d:5b:57:0b:f0:
dc:ea:1e:f5:8b:b2:3c:59:1b:83:62:43:de:66:d5:b9:ed:6b:
bb:44:00:29:3b:66:49:b8:1d:41:20:be:df:8a:cb:e1:00:6f:
33:b8:63:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:22:39 2025 by rpki-client