Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/f20071-22a1-461d-b6bf-4fd0e1b9c12f/1/4Ax6xWsR4QSrsWe7GrN5Kz-nw9M.mft
File: 4Ax6xWsR4QSrsWe7GrN5Kz-nw9M.mft (raw, json)
Hash identifier: HRDpVbLSQLNi/mZ7lIDSJcWiVE7NEu+mM98C8hzc3OQ=
Subject key identifier: 17:55:52:1B:B7:EA:F0:7F:9B:53:15:C5:FF:CF:F7:79:79:0C:9B:29
Authority key identifier: E0:0C:7A:C5:6B:11:E1:04:AB:B1:67:BB:1A:B3:79:2B:3F:A7:C3:D3
Certificate issuer: /CN=e00c7ac56b11e104abb167bb1ab3792b3fa7c3d3
Certificate serial: 01987AF7408225CC88BE77EBC9838F9CEF22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4Ax6xWsR4QSrsWe7GrN5Kz-nw9M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/f20071-22a1-461d-b6bf-4fd0e1b9c12f/1/4Ax6xWsR4QSrsWe7GrN5Kz-nw9M.mft
Manifest number: 1328
Signing time: Tue 05 Aug 2025 16:01:20 +0000
Manifest this update: Tue 05 Aug 2025 16:01:20 +0000
Manifest next update: Wed 06 Aug 2025 16:01:20 +0000
Files and hashes: 1: 0vfqJp8CAa8Wb2tMkMFK4NfB1iI.roa (hash: Fq32OdyGPsi3kvuTM0d8dbHXJU1ZVYcji5eWBETIXTQ=)
2: 4Ax6xWsR4QSrsWe7GrN5Kz-nw9M.crl (hash: Z8c0qhrEYZzDQMyxHpl5m1wAq6R9ngiKqqNeoSztuAY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/f20071-22a1-461d-b6bf-4fd0e1b9c12f/1/4Ax6xWsR4QSrsWe7GrN5Kz-nw9M.crl
rsync://rpki.ripe.net/repository/DEFAULT/41/f20071-22a1-461d-b6bf-4fd0e1b9c12f/1/4Ax6xWsR4QSrsWe7GrN5Kz-nw9M.mft
rsync://rpki.ripe.net/repository/DEFAULT/4Ax6xWsR4QSrsWe7GrN5Kz-nw9M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 Aug 2025 14:37:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7a:f7:40:82:25:cc:88:be:77:eb:c9:83:8f:9c:ef:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e00c7ac56b11e104abb167bb1ab3792b3fa7c3d3
Validity
Not Before: Aug 5 16:01:20 2025 GMT
Not After : Aug 6 16:01:20 2025 GMT
Subject: CN=1755521bb7eaf07f9b5315c5ffcff779790c9b29
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:f9:a3:9a:c0:1f:b0:f3:40:f2:cb:4d:97:4f:
27:90:84:54:94:9f:80:21:d0:6a:8c:fb:f5:a1:b1:
29:40:59:11:e8:bb:21:6a:59:53:c3:5e:d9:72:27:
10:da:a6:d9:68:56:18:c0:7c:c1:58:82:97:d3:9b:
44:39:71:82:c5:db:f9:b9:7e:bd:62:73:ce:e8:45:
e0:0d:72:ba:a5:2f:57:04:ed:43:53:a3:d0:df:f9:
4d:db:7e:ba:e2:ab:a4:fa:2f:6e:a5:0e:0b:de:77:
29:23:d3:15:cf:07:a1:51:be:e2:f6:17:3c:ca:1d:
70:b7:e3:e0:f8:f6:47:8b:af:1b:55:bf:fc:a2:89:
96:e5:ec:3d:61:d0:35:8d:2a:1a:96:bc:76:07:73:
49:31:6c:07:6c:2f:96:dc:1b:77:d5:b5:d5:27:c6:
65:62:16:8c:7a:50:38:b5:97:19:b2:43:da:e5:7d:
87:55:e3:51:c5:97:ae:f1:a2:f8:f5:2f:d8:5b:6e:
48:c4:4c:5f:22:89:1f:b5:b9:b3:e2:dd:b3:e4:02:
e9:8b:0f:da:4d:f0:e7:57:28:9d:36:4c:48:98:0d:
76:4d:73:6d:aa:6a:a1:4d:fd:45:03:67:8e:6e:f6:
45:98:51:8f:e3:64:8e:2f:51:02:a9:79:05:7a:c7:
f5:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:55:52:1B:B7:EA:F0:7F:9B:53:15:C5:FF:CF:F7:79:79:0C:9B:29
X509v3 Authority Key Identifier:
keyid:E0:0C:7A:C5:6B:11:E1:04:AB:B1:67:BB:1A:B3:79:2B:3F:A7:C3:D3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4Ax6xWsR4QSrsWe7GrN5Kz-nw9M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/f20071-22a1-461d-b6bf-4fd0e1b9c12f/1/4Ax6xWsR4QSrsWe7GrN5Kz-nw9M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/f20071-22a1-461d-b6bf-4fd0e1b9c12f/1/4Ax6xWsR4QSrsWe7GrN5Kz-nw9M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:5b:b8:26:1c:b4:f5:c6:e8:bd:1c:62:fc:0b:af:c9:d6:69:
c3:19:76:1f:ee:3f:63:f9:1a:79:39:c0:cc:c4:c5:3f:65:57:
1e:3d:07:28:ce:ed:2b:87:d7:97:cf:46:a7:71:33:65:55:12:
39:8d:c6:99:d3:01:0a:72:13:9b:9f:6a:0c:75:a4:a4:d0:fd:
12:1f:6c:83:02:2a:9d:48:63:ba:d5:ff:77:2d:b0:0e:04:e0:
e5:b0:c6:04:06:de:38:29:cf:de:15:d9:2c:61:83:37:7f:a8:
36:3a:7d:29:eb:26:fc:3e:56:6a:ac:c9:bc:00:3e:96:62:0d:
68:a9:2e:29:c7:0b:8c:f6:e5:80:b9:e4:8a:3b:8b:0f:f4:51:
d3:ca:ed:3f:7f:65:07:03:df:21:d0:b8:81:b0:3a:1b:a1:c8:
c2:22:45:d5:0a:6d:bb:59:dc:0f:cd:45:fa:a8:15:26:9b:8b:
9a:f1:c7:a9:2c:ff:0d:47:ae:f1:5c:b8:96:b9:c8:78:e1:0d:
ab:91:a0:09:e1:08:cd:3d:bc:0e:92:67:d9:06:90:2a:6d:24:
4e:b7:d4:13:c4:1e:11:11:31:79:97:35:06:0b:c1:70:c5:31:
bc:17:48:cd:c0:eb:2b:41:2e:4b:67:54:99:d0:f3:97:d7:08:
e3:79:42:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 00:34:59 2025 by rpki-client