Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/793709-ee58-4f76-b308-862b86b6e642/1/geTmB1l46pR2tkHOAIx4erKOXRM.mft
File: geTmB1l46pR2tkHOAIx4erKOXRM.mft (raw, json)
Hash identifier: Xg4ZCX5r1J1ePbOetSBae6pgx6il8nIEeWC74z0ynkA=
Subject key identifier: 19:81:CC:4D:BF:14:E1:C9:7F:DD:CC:D5:BF:E1:19:00:E6:4C:CD:5E
Authority key identifier: 81:E4:E6:07:59:78:EA:94:76:B6:41:CE:00:8C:78:7A:B2:8E:5D:13
Certificate issuer: /CN=81e4e6075978ea9476b641ce008c787ab28e5d13
Certificate serial: 0198936CB9937C2F9DF0EAE140E60A3415FC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/geTmB1l46pR2tkHOAIx4erKOXRM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/793709-ee58-4f76-b308-862b86b6e642/1/geTmB1l46pR2tkHOAIx4erKOXRM.mft
Manifest number: 1626
Signing time: Sun 10 Aug 2025 10:00:32 +0000
Manifest this update: Sun 10 Aug 2025 10:00:32 +0000
Manifest next update: Mon 11 Aug 2025 10:00:32 +0000
Files and hashes: 1: dBbI1Z81Mloa7W2OzhoKXchOrRQ.roa (hash: cFMz5yq3xJCpOCH1TXFzmCMMTxw6N/8cLdoB9ZDvza0=)
2: geTmB1l46pR2tkHOAIx4erKOXRM.crl (hash: rDKbs8ygEmQWV6JCWXPpULHZlw0639QUQp0vtKNKG0g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/793709-ee58-4f76-b308-862b86b6e642/1/geTmB1l46pR2tkHOAIx4erKOXRM.crl
rsync://rpki.ripe.net/repository/DEFAULT/4d/793709-ee58-4f76-b308-862b86b6e642/1/geTmB1l46pR2tkHOAIx4erKOXRM.mft
rsync://rpki.ripe.net/repository/DEFAULT/geTmB1l46pR2tkHOAIx4erKOXRM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 11 Aug 2025 08:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:93:6c:b9:93:7c:2f:9d:f0:ea:e1:40:e6:0a:34:15:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=81e4e6075978ea9476b641ce008c787ab28e5d13
Validity
Not Before: Aug 10 10:00:32 2025 GMT
Not After : Aug 11 10:00:32 2025 GMT
Subject: CN=1981cc4dbf14e1c97fddccd5bfe11900e64ccd5e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:eb:a4:72:ba:e8:3b:67:29:23:0a:5e:d2:16:
0a:76:38:95:d8:e5:88:15:2d:22:59:cd:89:ed:5c:
72:52:4b:ff:c4:8e:26:70:15:12:27:2b:b2:5c:8f:
ed:af:6c:9e:6c:e6:17:db:64:6b:5e:cf:b8:a8:e7:
61:26:23:d8:6f:9b:8c:bd:d9:5a:e6:4b:dd:39:7c:
11:1b:41:b8:08:39:28:eb:fa:bc:86:7c:59:dc:c0:
ec:a3:89:51:38:2c:ed:37:fd:ef:0e:af:3f:17:d5:
ed:40:04:57:c4:a8:17:99:99:b6:f3:e1:9d:68:bf:
e9:4e:27:99:e0:e6:cb:41:69:c4:29:5d:1c:81:55:
c8:7e:59:18:85:47:e5:37:cf:60:27:a2:08:fc:bf:
7a:03:46:b8:85:90:d5:b4:1a:9e:60:8c:76:79:26:
03:e4:b3:06:65:cc:f1:d2:95:af:de:78:a8:5a:46:
95:fe:25:ed:ab:74:b5:32:c4:ab:c7:49:90:5f:2f:
72:a6:83:49:b4:a3:c3:fc:60:28:09:45:c1:d9:5d:
0e:4d:08:13:01:ca:9d:56:a8:6d:96:91:5c:a1:70:
f2:07:f9:fd:34:2b:f4:4d:20:31:c1:02:90:4b:a2:
3a:a6:d5:ab:f7:c4:28:a4:22:3b:44:24:92:fa:61:
a6:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:81:CC:4D:BF:14:E1:C9:7F:DD:CC:D5:BF:E1:19:00:E6:4C:CD:5E
X509v3 Authority Key Identifier:
keyid:81:E4:E6:07:59:78:EA:94:76:B6:41:CE:00:8C:78:7A:B2:8E:5D:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/geTmB1l46pR2tkHOAIx4erKOXRM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/793709-ee58-4f76-b308-862b86b6e642/1/geTmB1l46pR2tkHOAIx4erKOXRM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/793709-ee58-4f76-b308-862b86b6e642/1/geTmB1l46pR2tkHOAIx4erKOXRM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a1:59:4d:f7:cc:cc:81:7c:45:12:59:d9:08:50:36:01:26:cf:
aa:b9:8c:32:1b:36:01:74:4f:7e:18:a9:c7:49:5d:1a:d9:d5:
b0:8e:88:d6:b8:c7:51:57:1c:6c:1f:66:15:9f:b3:16:65:4e:
60:b9:07:ef:06:39:41:b8:ab:0c:76:67:5a:c0:83:d8:d2:12:
94:ae:bb:44:7d:db:78:ab:14:ce:ab:48:f3:03:1b:34:da:7c:
4f:ed:07:e0:56:bc:2f:d3:e0:0c:cf:c6:f9:26:ca:8c:75:3a:
f4:41:f0:9a:62:a9:48:92:5b:2c:8b:3e:93:fd:8a:36:64:20:
02:bd:3e:43:71:fa:57:14:af:3c:41:0f:ee:0e:f9:e8:89:de:
0e:f8:04:d4:5e:ba:8b:31:69:a9:6e:0f:d6:f3:08:63:12:6a:
9b:93:64:52:a1:5b:c0:fe:34:fe:60:55:b7:17:00:8f:a3:5c:
66:02:e7:aa:57:fa:ea:0e:8a:f8:25:d8:67:0c:1c:00:7c:c0:
27:59:b9:d3:3d:c2:19:07:ce:73:ac:44:d9:32:85:25:e1:d2:
cc:89:c9:62:79:66:e7:df:81:5c:39:71:16:34:bc:0c:0d:45:
ea:5a:30:27:4a:a2:fe:90:4f:2b:f2:68:a0:56:02:71:99:e8:
1c:81:4a:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 13:55:12 2025 by rpki-client