Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/27ac32-afcf-4e28-abfe-4683bfed0038/1/4_oaCoi7tUs_gvwll9JSr_dhO8U.mft
File: 4_oaCoi7tUs_gvwll9JSr_dhO8U.mft (raw, json)
Hash identifier: QNsaxQv2F4TNiaGS5HSerYc/4Xo02/Zqqcq/N8cdrhs=
Subject key identifier: E5:04:E6:6F:FC:19:EB:B6:A4:DF:4A:AC:F8:40:38:7E:03:C3:69:7D
Authority key identifier: E3:FA:1A:0A:88:BB:B5:4B:3F:82:FC:25:97:D2:52:AF:F7:61:3B:C5
Certificate issuer: /CN=e3fa1a0a88bbb54b3f82fc2597d252aff7613bc5
Certificate serial: 019896A4BFE6CDBCD2C73BDCAD7BF330FC07
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4_oaCoi7tUs_gvwll9JSr_dhO8U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/27ac32-afcf-4e28-abfe-4683bfed0038/1/4_oaCoi7tUs_gvwll9JSr_dhO8U.mft
Manifest number: 1629
Signing time: Mon 11 Aug 2025 01:00:35 +0000
Manifest this update: Mon 11 Aug 2025 01:00:35 +0000
Manifest next update: Tue 12 Aug 2025 01:00:35 +0000
Files and hashes: 1: 4_oaCoi7tUs_gvwll9JSr_dhO8U.crl (hash: xzA3ZWQdhrcsdmqMT3iW0mxWyRpdxmHkOiZnlfaaKss=)
2: zkyq_bkRmP7y8uEpa3W6vwIy36k.roa (hash: rvIkZjLBjiZPMwp1YJD6TUGI2vyzFxSQs2biVpfUSoM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/27ac32-afcf-4e28-abfe-4683bfed0038/1/4_oaCoi7tUs_gvwll9JSr_dhO8U.crl
rsync://rpki.ripe.net/repository/DEFAULT/31/27ac32-afcf-4e28-abfe-4683bfed0038/1/4_oaCoi7tUs_gvwll9JSr_dhO8U.mft
rsync://rpki.ripe.net/repository/DEFAULT/4_oaCoi7tUs_gvwll9JSr_dhO8U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 12 Aug 2025 01:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:96:a4:bf:e6:cd:bc:d2:c7:3b:dc:ad:7b:f3:30:fc:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e3fa1a0a88bbb54b3f82fc2597d252aff7613bc5
Validity
Not Before: Aug 11 01:00:35 2025 GMT
Not After : Aug 12 01:00:35 2025 GMT
Subject: CN=e504e66ffc19ebb6a4df4aacf840387e03c3697d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:15:47:1a:c6:bb:65:8c:58:50:67:33:e1:21:
bc:ac:27:70:13:11:27:f6:ba:34:b9:cc:f9:97:9b:
29:f2:f6:fc:2e:ad:cf:19:58:f4:e0:57:4a:4e:a7:
94:e0:99:34:2c:b8:76:86:f0:6b:d7:48:8c:1e:21:
36:48:a3:1d:6a:64:a4:60:98:77:e9:80:e9:f8:21:
b3:a5:23:53:e0:a6:f2:f4:20:09:0f:e2:12:0b:b8:
9c:9d:c2:18:45:79:36:11:08:19:88:14:14:81:78:
b0:af:55:9b:07:b1:2b:c4:33:64:30:0c:f7:f2:b0:
f5:cd:5b:a5:29:d3:6b:d3:dc:ab:bc:94:35:a7:84:
94:82:98:19:fc:ab:81:9f:cd:c7:07:be:a6:a1:f8:
47:93:fb:33:08:c2:65:04:ea:c2:2d:0c:4a:ef:13:
f3:1c:8f:89:a7:8c:42:e8:ac:fc:65:18:04:70:e6:
3b:42:f9:d2:d3:b0:5c:75:e7:d0:ad:90:cd:df:eb:
a6:30:10:75:8a:51:4a:cc:28:b9:29:de:22:f3:54:
d1:e7:ea:50:93:50:aa:7b:c6:7d:62:fb:a2:28:ea:
09:2d:a5:79:d9:11:51:95:e7:94:f9:a7:a1:8e:64:
48:24:b3:03:07:8e:d1:94:46:f3:bd:9e:6d:61:f9:
1d:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:04:E6:6F:FC:19:EB:B6:A4:DF:4A:AC:F8:40:38:7E:03:C3:69:7D
X509v3 Authority Key Identifier:
keyid:E3:FA:1A:0A:88:BB:B5:4B:3F:82:FC:25:97:D2:52:AF:F7:61:3B:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4_oaCoi7tUs_gvwll9JSr_dhO8U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/27ac32-afcf-4e28-abfe-4683bfed0038/1/4_oaCoi7tUs_gvwll9JSr_dhO8U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/27ac32-afcf-4e28-abfe-4683bfed0038/1/4_oaCoi7tUs_gvwll9JSr_dhO8U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
94:03:8c:c4:6c:4c:79:e0:8b:a1:4e:a4:61:74:66:e7:1f:98:
88:ba:60:fe:15:9c:78:8f:87:f4:40:9d:04:8b:6e:0f:e4:cf:
a6:51:81:dd:25:2d:59:7d:9f:9f:42:18:c5:eb:c0:95:c8:81:
97:16:e1:4f:ef:25:42:96:e1:a1:ca:08:9a:16:53:06:8c:82:
ba:8e:77:e8:0b:aa:8b:fb:73:20:78:88:1d:94:c9:80:a9:50:
98:59:a2:8d:2f:ae:18:ba:b8:56:26:7b:5e:c5:f4:ea:dd:fa:
20:ba:99:6d:cc:9b:65:7b:2f:6f:9f:d9:17:62:26:20:bf:60:
f6:c8:5c:71:30:33:0f:a1:75:0d:79:32:c6:dd:43:35:4b:21:
52:53:19:8f:54:31:a0:4c:9a:2a:6d:41:fc:90:fc:6a:20:ab:
67:47:be:2b:9c:41:1b:53:4f:64:5b:71:0d:9c:66:42:a8:f7:
0d:e5:10:8e:b0:04:74:91:75:ad:15:5d:7c:88:2c:a8:48:5f:
c9:9e:b6:e1:93:51:1e:17:f1:b6:b1:9b:c3:95:81:d0:05:9c:
97:20:c8:50:78:79:82:ec:ca:dc:7c:e5:1d:d3:40:0f:fa:a7:
90:db:b7:b7:b2:cb:c9:17:e8:0a:60:88:48:64:6e:e8:98:37:
5b:61:23:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 11 04:10:12 2025 by rpki-client