Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/c3dc1b-d1ee-4ff2-a5aa-f0c4be8e240a/1/SeRO7qJladDdvQ6GN_Es9QWk7ek.mft
File: SeRO7qJladDdvQ6GN_Es9QWk7ek.mft (raw, json)
Hash identifier: kT/gRmRl+SoLZ0ALqpj9FyzDTleFV5Hcxe4+zh3Y7gU=
Subject key identifier: 4C:E8:4B:E2:80:1E:12:58:1C:71:56:B0:BB:84:CF:A1:BE:0C:C6:67
Authority key identifier: 49:E4:4E:EE:A2:65:69:D0:DD:BD:0E:86:37:F1:2C:F5:05:A4:ED:E9
Certificate issuer: /CN=49e44eeea26569d0ddbd0e8637f12cf505a4ede9
Certificate serial: 0198741958470175959010913A3E6E8B2338
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SeRO7qJladDdvQ6GN_Es9QWk7ek.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/c3dc1b-d1ee-4ff2-a5aa-f0c4be8e240a/1/SeRO7qJladDdvQ6GN_Es9QWk7ek.mft
Manifest number: 1620
Signing time: Mon 04 Aug 2025 08:01:14 +0000
Manifest this update: Mon 04 Aug 2025 08:01:14 +0000
Manifest next update: Tue 05 Aug 2025 08:01:14 +0000
Files and hashes: 1: SeRO7qJladDdvQ6GN_Es9QWk7ek.crl (hash: /SfvW82HvOisjntxAuxWXOXLWpfnW/D0dbsS4/menb4=)
2: ZLZClTfuDKfBFAb78-Sh9gGUq9o.roa (hash: ZjgvTzOG0NWN+AmJ71kj5d0LbF11Gt0UdOZExqIqebk=)
3: ygmr0LjW6g8O2ji5kesu3ACK874.roa (hash: Fof0/v6mus5tChpoy38UTB0o2Mq7hczl/AM052BO+So=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6e/c3dc1b-d1ee-4ff2-a5aa-f0c4be8e240a/1/SeRO7qJladDdvQ6GN_Es9QWk7ek.crl
rsync://rpki.ripe.net/repository/DEFAULT/6e/c3dc1b-d1ee-4ff2-a5aa-f0c4be8e240a/1/SeRO7qJladDdvQ6GN_Es9QWk7ek.mft
rsync://rpki.ripe.net/repository/DEFAULT/SeRO7qJladDdvQ6GN_Es9QWk7ek.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:74:19:58:47:01:75:95:90:10:91:3a:3e:6e:8b:23:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49e44eeea26569d0ddbd0e8637f12cf505a4ede9
Validity
Not Before: Aug 4 08:01:14 2025 GMT
Not After : Aug 5 08:01:14 2025 GMT
Subject: CN=4ce84be2801e12581c7156b0bb84cfa1be0cc667
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:6f:41:46:46:66:4b:be:34:c7:86:8b:b4:01:
c0:32:83:fb:41:ec:a5:0f:d3:49:be:05:1e:82:3b:
6e:cb:60:d4:ff:1d:55:d9:20:46:98:ee:6c:81:5a:
48:31:c8:9c:44:c6:37:16:47:85:75:71:0b:c2:01:
ff:f9:58:db:f5:1b:cf:7e:0d:b5:b7:05:fe:8b:3f:
75:50:a3:7d:86:49:61:fe:89:4b:ac:29:f0:8a:2b:
ff:55:34:1e:44:48:e9:6b:d9:af:d6:fb:67:52:92:
4c:83:9d:9d:38:26:96:ae:eb:3b:1f:26:f9:8d:21:
49:f5:90:a4:b7:f8:e7:7d:53:79:b7:f3:bf:d5:dd:
48:e6:e3:96:d8:1a:5e:0e:4e:a3:49:d1:88:a7:c3:
cf:0a:75:72:cc:66:5d:62:7e:73:6a:48:cf:c8:a5:
d7:25:9e:cb:f0:dc:53:73:bc:79:92:3e:64:57:db:
14:58:4f:30:b7:ef:f1:1f:92:f0:f5:2e:3e:94:a2:
e2:ee:c0:ce:b4:c3:17:23:96:15:23:13:ce:e6:3f:
df:ae:f2:89:f3:b2:78:bc:31:88:1e:41:ab:c3:c2:
29:c4:a2:b9:03:3b:3d:2e:9a:6f:e8:b6:f9:ed:56:
43:d7:0b:7e:7e:f7:f8:c3:de:fb:0a:10:bb:6c:66:
b4:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:E8:4B:E2:80:1E:12:58:1C:71:56:B0:BB:84:CF:A1:BE:0C:C6:67
X509v3 Authority Key Identifier:
keyid:49:E4:4E:EE:A2:65:69:D0:DD:BD:0E:86:37:F1:2C:F5:05:A4:ED:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SeRO7qJladDdvQ6GN_Es9QWk7ek.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/c3dc1b-d1ee-4ff2-a5aa-f0c4be8e240a/1/SeRO7qJladDdvQ6GN_Es9QWk7ek.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/c3dc1b-d1ee-4ff2-a5aa-f0c4be8e240a/1/SeRO7qJladDdvQ6GN_Es9QWk7ek.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:cb:7a:f8:34:68:28:76:4e:6e:e1:84:92:b6:f7:9d:70:66:
b1:cf:e8:1d:97:a6:20:3e:f8:56:ab:34:54:44:8b:89:2b:0d:
4b:48:09:8e:23:ef:dc:53:ec:e4:97:d5:c4:5b:ef:e6:74:55:
a5:46:ae:63:f8:fa:30:5a:1f:68:a2:3c:4d:99:5a:4c:d4:ef:
02:c1:f6:22:66:5b:83:b8:f1:84:c2:12:5a:a2:01:02:76:02:
1a:92:06:50:e3:11:64:30:c0:33:5e:71:8d:fc:f8:1f:ff:0e:
f0:c9:d6:4e:6a:22:c5:44:5b:6d:00:5a:20:16:34:4b:ca:26:
e8:4d:bb:db:fd:fa:a4:48:9f:5b:c6:da:96:f1:a5:9c:b4:43:
4b:cf:e9:3f:7f:5b:a7:56:7c:59:47:7a:76:1b:fd:52:3e:6a:
92:19:91:ee:0d:e7:77:88:e0:c6:37:db:06:88:ce:e5:c4:ac:
9f:19:f3:7f:5f:d4:5b:8d:a5:6a:97:39:28:bd:72:54:5b:8c:
e0:10:23:8d:e8:08:65:1e:22:f1:f5:12:f2:da:29:f5:14:ad:
7b:ce:0c:31:8d:6e:43:f6:8c:ea:73:ca:1e:0e:e1:49:fb:02:
98:e7:51:dc:08:62:d1:d2:6d:64:db:ad:36:6a:7e:f4:0b:e9:
71:f9:43:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:06:48 2025 by rpki-client