Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/a5f498-6c76-4230-93d1-a39e009627ef/1/4T0_tqhjrA-k0f7v467DntjTiVw.mft
File: 4T0_tqhjrA-k0f7v467DntjTiVw.mft (raw, json)
Hash identifier: RXvtpYhNagZ73ulrh62zOBnjvkdHOiuuGaz2Gz4GgZs=
Subject key identifier: 62:62:01:26:41:EA:D1:6E:A9:DC:BC:8F:B4:DC:10:CB:F7:9E:16:EB
Authority key identifier: E1:3D:3F:B6:A8:63:AC:0F:A4:D1:FE:EF:E3:AE:C3:9E:D8:D3:89:5C
Certificate issuer: /CN=e13d3fb6a863ac0fa4d1feefe3aec39ed8d3895c
Certificate serial: 01989F3AA252D0C98FE309672A5D5398B0E9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4T0_tqhjrA-k0f7v467DntjTiVw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/a5f498-6c76-4230-93d1-a39e009627ef/1/4T0_tqhjrA-k0f7v467DntjTiVw.mft
Manifest number: 1581
Signing time: Tue 12 Aug 2025 17:01:16 +0000
Manifest this update: Tue 12 Aug 2025 17:01:16 +0000
Manifest next update: Wed 13 Aug 2025 17:01:16 +0000
Files and hashes: 1: 4T0_tqhjrA-k0f7v467DntjTiVw.crl (hash: rzxb1c5zOV2X+sqZOd4bhxsE2DAjuxKK1xjgQ5iMDm0=)
2: C_W5uFOffH81U1XB_VG_eFr8n_A.roa (hash: kM5BT5a8AHJ+VqwyNcuISudnKqdFzEc+qETwFrySAkU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/a5f498-6c76-4230-93d1-a39e009627ef/1/4T0_tqhjrA-k0f7v467DntjTiVw.crl
rsync://rpki.ripe.net/repository/DEFAULT/46/a5f498-6c76-4230-93d1-a39e009627ef/1/4T0_tqhjrA-k0f7v467DntjTiVw.mft
rsync://rpki.ripe.net/repository/DEFAULT/4T0_tqhjrA-k0f7v467DntjTiVw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 Aug 2025 13:24:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:9f:3a:a2:52:d0:c9:8f:e3:09:67:2a:5d:53:98:b0:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e13d3fb6a863ac0fa4d1feefe3aec39ed8d3895c
Validity
Not Before: Aug 12 17:01:16 2025 GMT
Not After : Aug 13 17:01:16 2025 GMT
Subject: CN=6262012641ead16ea9dcbc8fb4dc10cbf79e16eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:1b:02:4b:d5:0a:e0:fb:34:d1:f7:b7:b4:f5:
42:4e:a4:f7:98:a3:f9:3d:f4:f8:04:ac:44:5c:ae:
bc:a4:0a:02:67:19:b2:9f:36:e5:e6:6c:8b:b9:38:
21:3d:2a:c3:3e:d7:8b:3a:31:e1:91:09:10:a5:67:
75:7d:01:ab:58:fd:b8:3a:42:c3:1e:01:f4:ab:23:
da:75:01:40:5f:2c:8b:9d:64:29:c6:85:e8:7d:b5:
93:30:94:c0:77:66:35:87:f5:01:39:56:64:cf:47:
b9:a8:ce:22:b0:f3:42:c5:67:5d:6a:21:33:fb:15:
a5:ae:d2:46:86:56:78:87:7e:0d:47:ff:92:35:b6:
0d:5d:9e:67:51:22:47:00:eb:3c:71:63:36:be:0f:
fb:d5:6c:c9:e7:d1:ef:ce:5e:82:72:74:5e:2d:27:
99:e4:b8:e6:b3:50:d8:09:74:a5:97:33:f0:cb:92:
41:7a:73:d0:e2:32:f1:e0:5e:be:8f:a6:6f:6e:16:
aa:50:62:70:26:c8:f6:1a:06:49:9b:99:54:80:7e:
41:5a:58:c3:31:b8:9a:bc:86:c4:ba:f3:f6:36:c7:
8a:58:bf:f1:8a:c1:bf:92:9a:2e:60:08:d0:c7:a8:
bb:cb:7f:d1:0b:34:ef:df:fc:78:7e:b1:37:f1:4a:
0e:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:62:01:26:41:EA:D1:6E:A9:DC:BC:8F:B4:DC:10:CB:F7:9E:16:EB
X509v3 Authority Key Identifier:
keyid:E1:3D:3F:B6:A8:63:AC:0F:A4:D1:FE:EF:E3:AE:C3:9E:D8:D3:89:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4T0_tqhjrA-k0f7v467DntjTiVw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/a5f498-6c76-4230-93d1-a39e009627ef/1/4T0_tqhjrA-k0f7v467DntjTiVw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/a5f498-6c76-4230-93d1-a39e009627ef/1/4T0_tqhjrA-k0f7v467DntjTiVw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:49:c3:e4:29:ef:17:82:ea:64:7b:d4:48:bc:f3:6b:85:84:
ee:71:5a:ed:6f:fd:7f:df:d3:02:98:6e:ca:74:3e:17:08:d2:
66:3f:ff:a3:c2:4e:0c:78:ca:b2:91:e3:d3:52:b6:af:7f:7b:
5b:7d:ae:15:c6:92:07:d5:81:36:b6:4c:70:99:77:32:f5:9f:
a9:ce:d1:e4:77:7b:4e:13:55:0f:24:c4:0f:8f:e3:a4:d8:b3:
12:39:30:2e:30:f6:48:3b:f9:db:91:07:19:e5:e8:bc:25:08:
b1:48:f1:44:c4:ec:80:b2:38:bc:69:db:bc:5b:9d:19:9c:33:
93:c5:c7:b3:b7:8f:2d:00:5e:bd:85:82:d0:62:2e:a6:ac:40:
2c:b6:89:cb:4d:63:09:dd:85:73:a7:f9:6f:3d:41:fd:fc:25:
7e:44:21:4c:6d:a4:7f:e1:ac:94:f2:41:11:c7:8f:5c:2a:67:
55:47:dd:56:1a:8e:3e:bd:f0:91:e9:87:2c:70:49:48:2f:6e:
6d:f6:2d:d5:dc:98:6e:4f:b2:5f:92:13:30:5d:02:d7:04:3b:
88:a4:7c:5d:4d:cc:a0:4d:2b:ff:1f:20:70:b6:b5:3b:fd:0f:
44:69:3f:cb:86:a7:de:71:81:ab:c0:e0:0a:93:70:14:48:57:
53:ff:ff:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 12 18:54:01 2025 by rpki-client