Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/a05eba-9d85-489b-aec7-ed42d3a625a4/1/4NQ1eE2owhjg_xB83P4kykVpyUk.mft
File: 4NQ1eE2owhjg_xB83P4kykVpyUk.mft (raw, json)
Hash identifier: 3R0SLbymDpGj8OfDYLKwC/n4KoxJV/BxvH6M++HlysY=
Subject key identifier: B2:79:AE:82:8F:44:FD:98:E7:23:7B:88:14:BD:EC:2D:0E:D8:3D:B4
Authority key identifier: E0:D4:35:78:4D:A8:C2:18:E0:FF:10:7C:DC:FE:24:CA:45:69:C9:49
Certificate issuer: /CN=e0d435784da8c218e0ff107cdcfe24ca4569c949
Certificate serial: 019872983100F3B735D3673305D13DC0C87F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4NQ1eE2owhjg_xB83P4kykVpyUk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/a05eba-9d85-489b-aec7-ed42d3a625a4/1/4NQ1eE2owhjg_xB83P4kykVpyUk.mft
Manifest number: 1617
Signing time: Mon 04 Aug 2025 01:00:33 +0000
Manifest this update: Mon 04 Aug 2025 01:00:33 +0000
Manifest next update: Tue 05 Aug 2025 01:00:33 +0000
Files and hashes: 1: 4NQ1eE2owhjg_xB83P4kykVpyUk.crl (hash: 62/fu5U3mC/HeISYzAFERFApRcPY/BoDJ9T1xWFVl7s=)
2: PCU_z8etHMahQn2RAV03QXEYQNY.roa (hash: u3wh2VwTq9MZxicFM5jtw2aPgJCWNRgfQ4wq8HW2GwA=)
3: dzbMTYGCieBVBPgENTHt9L5KJ8M.roa (hash: ujry7yejU+h1f7YJVtPloSSU466DjjsHF906b9LbjBg=)
4: iFRT7pIErYyjSrvBoxfFD5pxtGQ.roa (hash: 5ByeZ/21OPrr4ys4yOkH+9BugOf167l7MKLoGEfw+nA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/a05eba-9d85-489b-aec7-ed42d3a625a4/1/4NQ1eE2owhjg_xB83P4kykVpyUk.crl
rsync://rpki.ripe.net/repository/DEFAULT/5d/a05eba-9d85-489b-aec7-ed42d3a625a4/1/4NQ1eE2owhjg_xB83P4kykVpyUk.mft
rsync://rpki.ripe.net/repository/DEFAULT/4NQ1eE2owhjg_xB83P4kykVpyUk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 01:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:72:98:31:00:f3:b7:35:d3:67:33:05:d1:3d:c0:c8:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e0d435784da8c218e0ff107cdcfe24ca4569c949
Validity
Not Before: Aug 4 01:00:33 2025 GMT
Not After : Aug 5 01:00:33 2025 GMT
Subject: CN=b279ae828f44fd98e7237b8814bdec2d0ed83db4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:5f:e8:10:08:47:78:49:44:b8:10:45:9e:58:
a9:b9:da:47:9b:4e:97:63:96:8d:80:e7:0f:d3:3d:
4c:5f:5a:3c:0b:0b:ba:3a:8e:0c:db:b6:49:75:f2:
1a:da:f4:c4:c1:a2:0c:3f:1a:b1:cf:a2:53:39:2a:
df:62:97:54:64:4e:a0:eb:93:09:94:31:79:3a:87:
d0:8a:a5:a4:c6:cb:78:d8:b3:7d:39:2a:49:7a:e1:
04:3a:ed:aa:b5:1b:c0:19:ba:e2:1f:e0:2e:a0:ee:
4e:28:34:13:6b:6e:1a:51:9d:74:4b:87:52:e7:87:
f7:92:aa:28:e4:86:41:54:e8:4e:75:c1:c7:0e:18:
21:57:25:b6:bc:1e:ea:4e:3a:66:b0:65:3e:45:4b:
d0:b1:c5:47:80:cd:78:42:c3:ec:44:36:da:ca:f4:
b7:d5:49:73:8c:4b:c5:10:33:15:28:80:ab:f7:bb:
84:0f:d1:5c:0e:86:ae:31:08:f3:2e:4d:d0:49:e9:
2e:35:30:8b:68:65:c8:8c:6b:e5:1e:df:a6:21:4b:
94:aa:c5:e4:67:0d:06:d3:84:7c:56:df:18:1c:9f:
42:8e:c8:38:3b:39:fd:e1:00:0b:21:e9:8a:c7:fd:
92:ff:e2:1e:97:a7:c3:eb:45:53:ab:aa:ad:99:fc:
3e:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:79:AE:82:8F:44:FD:98:E7:23:7B:88:14:BD:EC:2D:0E:D8:3D:B4
X509v3 Authority Key Identifier:
keyid:E0:D4:35:78:4D:A8:C2:18:E0:FF:10:7C:DC:FE:24:CA:45:69:C9:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4NQ1eE2owhjg_xB83P4kykVpyUk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/a05eba-9d85-489b-aec7-ed42d3a625a4/1/4NQ1eE2owhjg_xB83P4kykVpyUk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/a05eba-9d85-489b-aec7-ed42d3a625a4/1/4NQ1eE2owhjg_xB83P4kykVpyUk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:74:a1:64:49:02:16:fb:d7:11:21:0e:ea:8b:63:5e:36:40:
eb:7e:a2:c9:dd:76:f5:c9:94:18:6d:65:94:dd:77:87:a3:db:
5f:60:95:e3:6f:23:4c:d2:71:85:a7:94:b7:c6:dd:73:0d:f4:
02:60:a7:45:15:a8:a5:cc:c9:a3:cd:68:ba:0c:47:cd:3d:69:
67:8f:fe:9f:cf:c5:bc:a1:dc:d0:88:2a:9c:43:b1:9a:5d:18:
6b:24:e0:6f:36:17:b7:1d:31:ac:0a:04:65:4f:40:2c:4c:a1:
16:59:9a:6f:bc:15:c2:42:60:54:dc:08:5b:39:ac:64:03:3c:
78:f6:2b:75:06:d2:a1:27:3d:55:9b:44:ac:2f:42:4d:18:db:
de:9e:00:f6:ae:f0:2e:4f:78:1e:9d:fa:31:06:ce:09:85:c9:
4a:3f:d3:19:9c:32:a4:ee:29:20:0a:e4:fa:fd:9c:5e:6d:cf:
df:59:c7:3a:17:1a:65:ef:70:d7:dd:82:47:e6:02:9b:a2:18:
72:e9:6b:ec:aa:1f:53:73:ca:c4:8c:ee:90:da:1d:e5:75:f8:
89:6e:ed:99:b2:1d:28:45:0d:b4:7f:c9:98:46:74:42:70:70:
45:79:48:f7:c2:05:24:6a:f4:ee:81:35:6a:b8:d9:cc:ef:8c:
8e:ec:6d:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:15:49 2025 by rpki-client