Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/a91afe-9651-4de3-ad88-d8393e185732/1/4rRFsAqGALgzTB06rfHvcZFOaMk.mft
File: 4rRFsAqGALgzTB06rfHvcZFOaMk.mft (raw, json)
Hash identifier: P3hjMODQSFQv4mld3vCmXyHBgCakTxqBRbBHvAabsFo=
Subject key identifier: D6:92:65:03:24:DE:1D:40:B7:AA:42:15:78:E1:9D:C7:DE:12:9C:BE
Authority key identifier: E2:B4:45:B0:0A:86:00:B8:33:4C:1D:3A:AD:F1:EF:71:91:4E:68:C9
Certificate issuer: /CN=e2b445b00a8600b8334c1d3aadf1ef71914e68c9
Certificate serial: 019892FF7C27B7114CF6E7FA1E122907BDCE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4rRFsAqGALgzTB06rfHvcZFOaMk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/a91afe-9651-4de3-ad88-d8393e185732/1/4rRFsAqGALgzTB06rfHvcZFOaMk.mft
Manifest number: 1626
Signing time: Sun 10 Aug 2025 08:01:13 +0000
Manifest this update: Sun 10 Aug 2025 08:01:13 +0000
Manifest next update: Mon 11 Aug 2025 08:01:13 +0000
Files and hashes: 1: 4rRFsAqGALgzTB06rfHvcZFOaMk.crl (hash: tlLYf9lpa0L5CPDfvyspbFFr3D8Am/0J+Bvj5d+NJZk=)
2: 8LUgcOoiwyxAy7v4r-Iu6BnRjQM.roa (hash: bhDJBeMXd7WyfIdgyXkUTipM9MJXycedE6ysXMdh0sE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/79/a91afe-9651-4de3-ad88-d8393e185732/1/4rRFsAqGALgzTB06rfHvcZFOaMk.crl
rsync://rpki.ripe.net/repository/DEFAULT/79/a91afe-9651-4de3-ad88-d8393e185732/1/4rRFsAqGALgzTB06rfHvcZFOaMk.mft
rsync://rpki.ripe.net/repository/DEFAULT/4rRFsAqGALgzTB06rfHvcZFOaMk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 11 Aug 2025 08:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:92:ff:7c:27:b7:11:4c:f6:e7:fa:1e:12:29:07:bd:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e2b445b00a8600b8334c1d3aadf1ef71914e68c9
Validity
Not Before: Aug 10 08:01:13 2025 GMT
Not After : Aug 11 08:01:13 2025 GMT
Subject: CN=d692650324de1d40b7aa421578e19dc7de129cbe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:d9:52:52:86:f2:df:bf:9f:bc:85:89:a6:bb:
81:17:77:75:14:15:88:be:8d:d0:69:50:b3:96:9e:
69:0a:d2:99:03:df:6a:fa:79:ad:b6:98:b3:8b:aa:
bb:47:8f:44:24:0c:66:cc:2b:29:f6:86:78:a5:66:
7a:36:5c:f0:76:99:d1:57:dd:cc:21:4c:6d:29:98:
fd:fc:06:58:ab:cc:3c:8b:2c:f3:2e:56:01:ee:a5:
39:c2:fb:2b:5d:81:3e:72:f9:d2:10:21:33:f8:8f:
d6:dc:2a:03:04:f2:b3:ec:62:a0:bc:b9:b5:9a:cf:
6b:4d:66:87:40:f1:eb:ac:38:e9:ee:06:04:07:ea:
89:d5:29:05:70:64:5f:a2:80:e5:b7:1c:09:88:8c:
f4:fc:07:9e:19:e0:11:52:cc:91:ca:ae:7f:9a:82:
fb:27:a5:03:dc:32:67:af:8a:71:28:ef:ec:a0:1e:
2f:06:90:6a:7a:60:e7:2a:8b:4e:09:91:35:39:be:
75:73:25:b2:fe:71:ab:b3:cf:eb:38:b9:0d:fa:9a:
12:78:d7:c5:ad:c9:41:1d:ca:6f:c6:ff:cf:ad:a9:
68:e6:51:c3:be:3d:a9:7c:76:92:da:6e:ce:11:34:
02:b9:9d:4f:77:d2:db:13:2f:df:ec:51:b8:2a:54:
fc:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:92:65:03:24:DE:1D:40:B7:AA:42:15:78:E1:9D:C7:DE:12:9C:BE
X509v3 Authority Key Identifier:
keyid:E2:B4:45:B0:0A:86:00:B8:33:4C:1D:3A:AD:F1:EF:71:91:4E:68:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4rRFsAqGALgzTB06rfHvcZFOaMk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/a91afe-9651-4de3-ad88-d8393e185732/1/4rRFsAqGALgzTB06rfHvcZFOaMk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/79/a91afe-9651-4de3-ad88-d8393e185732/1/4rRFsAqGALgzTB06rfHvcZFOaMk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:0e:55:8d:5d:80:63:10:01:80:cc:89:19:f3:b7:70:a1:6d:
97:13:ba:2d:d0:12:5b:cb:e6:37:3b:06:56:18:ad:af:ac:65:
f4:65:31:1b:d9:b2:42:be:d0:b1:ee:c8:b5:4e:be:85:67:87:
3e:80:3d:65:ca:25:c9:50:23:a6:86:20:19:83:96:ef:02:96:
b0:24:6e:84:11:18:bf:bf:af:78:01:61:c3:d2:d6:7f:ec:3b:
67:ce:5e:77:62:ba:80:90:ac:f8:0b:60:6b:c7:23:2f:f0:db:
59:f0:3b:ca:31:8d:e4:cf:3e:43:02:20:bf:eb:90:52:73:fe:
15:1b:e3:f1:5a:ba:c1:07:11:ae:e7:af:88:68:21:59:3c:3b:
e6:f0:f0:f7:ac:ec:ab:3e:d6:b5:2a:a5:70:f4:d2:80:b7:25:
57:e9:cd:bc:8c:8f:75:0b:ef:b9:be:65:dc:57:a3:67:6b:29:
c5:74:c4:59:b5:17:13:ca:79:dc:d8:37:49:ba:88:06:a7:bf:
0a:7c:62:53:51:f1:80:fb:be:52:52:0a:e3:de:8b:9f:6d:d6:
fe:ee:a9:93:fa:09:ed:76:65:21:7c:58:05:1a:f6:6f:ff:c7:
ea:bd:7a:48:92:a9:85:a1:2d:13:8d:1a:72:cd:fc:f5:fa:1d:
a5:06:24:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 10:33:52 2025 by rpki-client