Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/e6efcf-e5d9-49f0-b11f-d52fdc9e8287/1/4br5DtE9F1RSz15aFjKnlL8fTJo.mft
File: 4br5DtE9F1RSz15aFjKnlL8fTJo.mft (raw, json)
Hash identifier: 1KaKGNaoTFqpeDhOC+b5ALTrMKEDK6lF8DK9nNfv18M=
Subject key identifier: D1:8A:81:ED:3D:BA:12:E5:28:54:F8:A2:B0:60:78:F6:79:E7:D6:3A
Authority key identifier: E1:BA:F9:0E:D1:3D:17:54:52:CF:5E:5A:16:32:A7:94:BF:1F:4C:9A
Certificate issuer: /CN=e1baf90ed13d175452cf5e5a1632a794bf1f4c9a
Certificate serial: 019873E386F757ED217039F89E42EFB76CC6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4br5DtE9F1RSz15aFjKnlL8fTJo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/e6efcf-e5d9-49f0-b11f-d52fdc9e8287/1/4br5DtE9F1RSz15aFjKnlL8fTJo.mft
Manifest number: 1618
Signing time: Mon 04 Aug 2025 07:02:27 +0000
Manifest this update: Mon 04 Aug 2025 07:02:27 +0000
Manifest next update: Tue 05 Aug 2025 07:02:27 +0000
Files and hashes: 1: 4br5DtE9F1RSz15aFjKnlL8fTJo.crl (hash: jDVnoX8jlMAGb4YLto/uh/947u0LxbmybxkTc5w5xGQ=)
2: Tli-MNBliT4GZ0SuL6-kYDFipSs.roa (hash: tAZBpKtmJpVB7wLzYFodx1oVBHeaFLGJGQEpb9KD5qs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/e6efcf-e5d9-49f0-b11f-d52fdc9e8287/1/4br5DtE9F1RSz15aFjKnlL8fTJo.crl
rsync://rpki.ripe.net/repository/DEFAULT/64/e6efcf-e5d9-49f0-b11f-d52fdc9e8287/1/4br5DtE9F1RSz15aFjKnlL8fTJo.mft
rsync://rpki.ripe.net/repository/DEFAULT/4br5DtE9F1RSz15aFjKnlL8fTJo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:73:e3:86:f7:57:ed:21:70:39:f8:9e:42:ef:b7:6c:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e1baf90ed13d175452cf5e5a1632a794bf1f4c9a
Validity
Not Before: Aug 4 07:02:27 2025 GMT
Not After : Aug 5 07:02:27 2025 GMT
Subject: CN=d18a81ed3dba12e52854f8a2b06078f679e7d63a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:4a:ff:d1:82:26:d3:22:2e:fd:d9:37:e8:86:
0e:97:db:9a:34:ca:2c:45:95:a1:80:3f:31:10:d4:
dc:e0:cb:00:7c:7b:78:d6:64:92:f3:e9:be:4f:00:
ab:83:bf:0c:92:9a:91:54:2c:42:e1:97:d2:8e:44:
92:ef:87:3e:2d:d8:d8:c5:8e:d7:fb:4c:24:cd:62:
a5:8f:dc:c0:7c:2d:62:ef:4d:39:0b:a3:c3:1e:75:
2f:b9:21:f0:39:b4:1e:d4:73:4c:5f:27:40:1f:d6:
f3:a9:95:43:d8:e7:17:1a:c1:1d:e0:31:76:c6:35:
d5:cb:b9:5f:96:92:3e:1c:8c:94:c5:7e:14:68:0d:
af:21:36:66:b8:9e:d0:2f:77:25:88:71:9a:57:be:
4f:77:d5:d1:14:39:47:19:e3:ba:0f:51:f5:4b:51:
5e:48:6c:ad:f8:b2:61:58:9a:7d:47:58:1a:b1:e0:
1b:d3:6b:14:61:69:90:70:f4:16:d8:5d:11:dc:ba:
84:9c:71:8f:36:62:7b:5f:18:7d:07:58:50:ae:db:
44:3c:88:78:70:2f:9f:fa:5a:dc:0b:2f:65:b1:10:
cc:ae:a4:2f:a8:ad:b2:51:82:6a:77:c0:fc:a0:90:
5f:6f:d3:61:ed:75:37:1d:10:43:d6:3b:93:8f:0b:
d7:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:8A:81:ED:3D:BA:12:E5:28:54:F8:A2:B0:60:78:F6:79:E7:D6:3A
X509v3 Authority Key Identifier:
keyid:E1:BA:F9:0E:D1:3D:17:54:52:CF:5E:5A:16:32:A7:94:BF:1F:4C:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4br5DtE9F1RSz15aFjKnlL8fTJo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/e6efcf-e5d9-49f0-b11f-d52fdc9e8287/1/4br5DtE9F1RSz15aFjKnlL8fTJo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/e6efcf-e5d9-49f0-b11f-d52fdc9e8287/1/4br5DtE9F1RSz15aFjKnlL8fTJo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
93:1e:c2:ad:53:7b:3d:eb:a8:49:8e:18:37:b3:7f:b4:45:2b:
56:9e:60:0c:8d:ff:2b:2c:53:20:7c:b9:2d:05:42:e4:6e:ba:
7a:68:e7:11:6f:10:f4:75:b5:e6:57:c0:51:1e:8e:bf:e6:a0:
cb:13:36:21:59:f0:0d:b7:ce:17:ac:c5:88:75:66:95:51:89:
28:01:f6:73:b3:87:56:95:54:e6:4a:ca:84:5b:3f:cf:44:86:
fa:d2:2e:21:30:11:92:b8:02:7a:30:0a:4c:88:4d:ce:bd:68:
40:6e:ae:64:06:54:14:51:69:62:89:a4:3f:a0:4a:9e:31:47:
6e:58:9e:d5:b5:15:52:41:bc:64:0b:c2:b1:7d:51:e6:15:71:
43:71:18:67:3c:04:58:1f:f4:10:58:32:21:dc:6e:cc:e9:bd:
14:90:78:8a:b8:51:0a:4f:9c:04:b2:d0:f9:a1:f0:66:dd:ce:
2e:42:3c:d0:7f:5f:f7:01:78:bf:90:8f:c4:e1:12:49:5c:64:
51:9b:e5:41:c0:56:0d:cd:54:b7:e5:14:c8:1e:8d:fb:71:0f:
e2:99:84:6e:7f:66:ef:e9:38:15:35:0c:fd:5f:65:06:84:2d:
5e:1e:a1:ad:ba:f5:26:9a:b2:6d:ab:16:81:46:7c:50:56:92:
38:f3:08:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:10:58 2025 by rpki-client