Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/5ea4b4-9ed7-444e-86bf-2eb0af3ac781/1/4zjNaBHc4u1PQmFDw_yEV7G0NLs.mft
File: 4zjNaBHc4u1PQmFDw_yEV7G0NLs.mft (raw, json)
Hash identifier: z2ttjREt/T2fGlTVMer9/QuPq26rKZ3ol3angi6tQHk=
Subject key identifier: 97:B4:D0:EC:AB:03:CF:9C:9F:41:D9:F8:F6:D6:A0:D8:CC:69:06:99
Authority key identifier: E3:38:CD:68:11:DC:E2:ED:4F:42:61:43:C3:FC:84:57:B1:B4:34:BB
Certificate issuer: /CN=e338cd6811dce2ed4f426143c3fc8457b1b434bb
Certificate serial: 019874190FA4D1F97F39484D60C45576FB64
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4zjNaBHc4u1PQmFDw_yEV7G0NLs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/5ea4b4-9ed7-444e-86bf-2eb0af3ac781/1/4zjNaBHc4u1PQmFDw_yEV7G0NLs.mft
Manifest number: 1616
Signing time: Mon 04 Aug 2025 08:00:56 +0000
Manifest this update: Mon 04 Aug 2025 08:00:56 +0000
Manifest next update: Tue 05 Aug 2025 08:00:56 +0000
Files and hashes: 1: 4zjNaBHc4u1PQmFDw_yEV7G0NLs.crl (hash: 0oirT7g44woHSXpwnMe/EQBXDzyxyODJfUmEm7JTRpU=)
2: MCauzdzhAV-eC2FQCIe1KmEfC3E.roa (hash: qyelRqdJ6kSMtNhACvHl/U5TJ8kn8s3czDwjuibAJCM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/5ea4b4-9ed7-444e-86bf-2eb0af3ac781/1/4zjNaBHc4u1PQmFDw_yEV7G0NLs.crl
rsync://rpki.ripe.net/repository/DEFAULT/27/5ea4b4-9ed7-444e-86bf-2eb0af3ac781/1/4zjNaBHc4u1PQmFDw_yEV7G0NLs.mft
rsync://rpki.ripe.net/repository/DEFAULT/4zjNaBHc4u1PQmFDw_yEV7G0NLs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 08:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:74:19:0f:a4:d1:f9:7f:39:48:4d:60:c4:55:76:fb:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e338cd6811dce2ed4f426143c3fc8457b1b434bb
Validity
Not Before: Aug 4 08:00:56 2025 GMT
Not After : Aug 5 08:00:56 2025 GMT
Subject: CN=97b4d0ecab03cf9c9f41d9f8f6d6a0d8cc690699
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:aa:af:c5:c0:70:18:90:e7:15:ab:bb:08:45:
c3:99:fd:71:b1:ec:91:64:ee:8c:c2:f8:99:97:e5:
d8:3c:e1:22:cc:3b:ce:b7:48:0e:56:57:4a:31:ba:
32:74:14:78:df:81:e9:5c:b7:81:55:0b:4d:70:d4:
d3:14:53:d8:dd:cf:dd:7b:ba:c1:d8:24:2c:db:1e:
47:b1:9e:3d:ba:63:b5:6d:27:0a:fc:e4:06:85:1c:
7c:be:b7:ca:60:33:73:27:7a:fb:16:e6:6f:90:33:
79:e1:5a:0a:4e:80:93:5b:ea:5b:da:de:b7:b6:eb:
ce:73:d1:97:97:8d:e0:2e:0f:e8:88:08:63:d1:47:
30:65:ab:4b:86:38:16:d8:28:f3:9a:41:48:7d:f0:
a9:1b:5a:14:1e:3e:da:46:01:16:03:e3:00:24:6c:
eb:3b:54:cc:89:c1:92:f4:20:a0:26:da:85:e9:83:
3b:aa:1c:98:32:35:a4:fd:20:fe:21:5c:6d:6c:af:
9c:78:a0:e4:b0:f9:f3:86:80:dc:b9:7e:99:f3:d8:
2b:3c:b4:60:05:a2:ce:38:db:23:bf:e5:72:98:bb:
fd:23:37:8d:68:e6:f7:c0:b5:9e:89:fd:c4:68:ef:
12:a3:a0:b4:6c:1b:e7:c8:a6:fa:17:1f:a9:39:e2:
da:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:B4:D0:EC:AB:03:CF:9C:9F:41:D9:F8:F6:D6:A0:D8:CC:69:06:99
X509v3 Authority Key Identifier:
keyid:E3:38:CD:68:11:DC:E2:ED:4F:42:61:43:C3:FC:84:57:B1:B4:34:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4zjNaBHc4u1PQmFDw_yEV7G0NLs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/5ea4b4-9ed7-444e-86bf-2eb0af3ac781/1/4zjNaBHc4u1PQmFDw_yEV7G0NLs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/5ea4b4-9ed7-444e-86bf-2eb0af3ac781/1/4zjNaBHc4u1PQmFDw_yEV7G0NLs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a8:23:0d:04:47:bd:95:20:f0:2c:50:7c:41:a3:f5:23:b5:42:
90:98:a5:11:c6:48:ce:26:11:fb:5b:22:9b:6c:c5:c9:ca:0a:
f0:6e:0e:2c:d1:82:dd:6a:9c:f1:75:b8:68:6b:f9:51:4e:db:
fb:6d:fa:af:0b:0d:c3:7c:f6:db:45:d4:f8:0e:f2:1b:2d:01:
f2:57:e1:ca:99:0e:7a:f7:b0:7a:c1:62:bc:d5:f3:84:58:8a:
b7:5c:6b:2c:70:3b:ca:be:3f:f4:58:ed:49:d5:72:be:53:2b:
02:24:55:95:45:95:ff:03:16:fb:c8:38:0e:2e:cb:63:fa:20:
a1:b4:6b:a3:3a:28:ac:1a:9a:7a:20:e2:65:a4:8f:8d:b7:a8:
12:35:cf:8e:92:59:e4:23:bc:dd:b6:83:33:66:14:95:d6:2a:
d5:74:69:2d:5c:81:cf:ff:ef:fb:71:22:ea:a0:dc:61:7d:10:
de:73:fe:19:de:32:15:18:44:f5:7f:06:52:78:50:58:fd:c3:
b1:93:7b:10:29:8b:cd:66:39:ec:47:4c:c4:75:c4:83:b7:ed:
c9:3a:bc:e9:17:72:e4:84:e8:b3:09:7f:01:9d:06:68:56:61:
39:e0:37:28:14:99:d7:88:c3:6c:48:65:3c:4b:84:6c:83:56:
be:dd:b8:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 15:01:16 2025 by rpki-client