Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/160a77-756d-441a-86c3-0e5392757f82/1/458aboTAJ378tW2UKw615FZHESk.mft
File: 458aboTAJ378tW2UKw615FZHESk.mft (raw, json)
Hash identifier: b25D1tqWDSa/SqETP8rrTYnVc+uMdIvnSQS8aPBQaTw=
Subject key identifier: AB:2D:79:D5:F3:8A:30:07:85:93:E2:E1:1B:3C:78:3C:CD:76:53:CA
Authority key identifier: E3:9F:1A:6E:84:C0:27:7E:FC:B5:6D:94:2B:0E:B5:E4:56:47:11:29
Certificate issuer: /CN=e39f1a6e84c0277efcb56d942b0eb5e456471129
Certificate serial: 0198879FD89DA0AC5CC2EAAE00EED2AB25E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/458aboTAJ378tW2UKw615FZHESk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/160a77-756d-441a-86c3-0e5392757f82/1/458aboTAJ378tW2UKw615FZHESk.mft
Manifest number: 1628
Signing time: Fri 08 Aug 2025 03:00:56 +0000
Manifest this update: Fri 08 Aug 2025 03:00:56 +0000
Manifest next update: Sat 09 Aug 2025 03:00:56 +0000
Files and hashes: 1: 00-pDRnkJ28HOY9PiW3UHtRlnaA.roa (hash: ajRA1r/wZbCFV5DRURYHBboFEqfVmi4nUu+o5RsVv7I=)
2: 458aboTAJ378tW2UKw615FZHESk.crl (hash: QQraC0cfXPaiPf3b9QxCeUgtX0iMs1Ur7qLDKh/utS8=)
3: h0icjzgutWd6lA-1BOIfw-Gwjqg.roa (hash: S1MAwDWcpRVxYAC6r+etNs1goxhniGxwWQ8E6EEXeo8=)
4: w1G2WgRwg5TMv1o-ctrHxpnkGg8.roa (hash: agU6Qqy0fnivl3H4SG64+Hxp9Tp7KmPmlQXRx4PQep0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3e/160a77-756d-441a-86c3-0e5392757f82/1/458aboTAJ378tW2UKw615FZHESk.crl
rsync://rpki.ripe.net/repository/DEFAULT/3e/160a77-756d-441a-86c3-0e5392757f82/1/458aboTAJ378tW2UKw615FZHESk.mft
rsync://rpki.ripe.net/repository/DEFAULT/458aboTAJ378tW2UKw615FZHESk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 09 Aug 2025 03:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:87:9f:d8:9d:a0:ac:5c:c2:ea:ae:00:ee:d2:ab:25:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e39f1a6e84c0277efcb56d942b0eb5e456471129
Validity
Not Before: Aug 8 03:00:56 2025 GMT
Not After : Aug 9 03:00:56 2025 GMT
Subject: CN=ab2d79d5f38a30078593e2e11b3c783ccd7653ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:68:b3:e8:58:ae:59:07:55:a6:56:79:90:e0:
76:86:82:e9:03:eb:68:83:ab:46:35:3f:65:fa:a5:
55:45:bc:20:33:f5:53:fa:14:4d:56:41:0f:3f:15:
a2:57:b3:8a:09:2d:d8:11:4c:b8:98:2e:3e:e2:13:
20:7b:bc:aa:00:31:41:8f:87:8c:88:b7:4c:da:0f:
48:f1:7b:35:e9:9d:16:be:96:65:eb:b8:8a:51:b8:
58:70:2f:89:b0:a9:67:c4:e9:e0:20:52:f6:88:60:
aa:52:01:fa:b5:f5:ea:e6:03:a3:7e:91:5b:ce:fe:
8e:df:88:b8:71:00:0a:67:60:42:3b:db:69:5b:9f:
58:1d:8a:d5:d8:4b:ee:66:2e:cd:1c:04:0b:69:75:
65:52:0b:63:f9:3c:24:b9:b4:b2:ac:1e:02:1b:63:
b5:51:df:02:53:b2:be:bd:11:79:ce:62:38:21:78:
98:6d:c5:1f:6f:43:87:eb:c7:f0:8f:46:38:63:34:
6c:a7:2b:49:a1:57:e7:bb:f0:d0:af:09:c3:14:3d:
38:ed:e9:b9:be:41:e1:31:ec:1d:a4:6e:52:dc:bf:
a5:f4:34:9b:00:91:40:a0:cb:61:70:18:3a:b7:36:
6e:e6:f3:80:3a:e6:27:8b:6b:eb:72:ed:75:6f:a4:
de:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:2D:79:D5:F3:8A:30:07:85:93:E2:E1:1B:3C:78:3C:CD:76:53:CA
X509v3 Authority Key Identifier:
keyid:E3:9F:1A:6E:84:C0:27:7E:FC:B5:6D:94:2B:0E:B5:E4:56:47:11:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/458aboTAJ378tW2UKw615FZHESk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/160a77-756d-441a-86c3-0e5392757f82/1/458aboTAJ378tW2UKw615FZHESk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/160a77-756d-441a-86c3-0e5392757f82/1/458aboTAJ378tW2UKw615FZHESk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:ce:23:76:e9:d6:64:0d:40:52:eb:0f:f7:a4:1a:f5:49:2e:
84:9a:c4:b4:40:6d:22:06:66:6f:01:96:68:21:63:32:41:a1:
41:2e:ac:26:40:58:f3:23:53:6d:ad:5c:44:65:a9:6f:59:1d:
55:54:70:33:24:52:52:e2:a7:4f:fe:56:da:d6:5c:80:18:7d:
f1:0e:b7:d2:95:a2:52:d2:fa:67:92:cc:79:a9:0d:6c:d3:74:
11:b1:66:c1:52:97:bd:8b:84:8a:63:66:e9:39:66:8d:5e:cc:
27:bf:cd:d2:a3:43:7d:e0:bf:25:8c:c4:56:f4:5d:00:56:49:
d1:38:72:e8:bb:70:05:e2:81:aa:3d:1b:27:65:b7:28:65:16:
86:9b:71:f9:c4:4d:61:2f:0b:a0:8c:74:fd:7a:99:78:58:cc:
8f:a5:3f:f0:9b:e6:3c:93:56:73:4c:9e:53:84:53:e7:61:13:
68:35:b0:f9:7d:dc:e5:64:36:8a:d2:02:dd:b9:ee:0b:fe:f6:
58:33:52:0a:3e:47:9a:39:68:2a:d9:6f:a4:8c:8c:38:f8:c6:
41:6c:70:f0:bc:88:37:ca:fd:df:4b:cf:87:ac:ff:71:1c:76:
38:65:af:5f:41:d4:5d:b0:d1:bc:bc:76:80:73:e3:29:da:d4:
4b:8d:ab:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 8 13:03:52 2025 by rpki-client