Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/dbc58e-027b-4aac-9de6-23739b5fd84c/1/v4iEmi616d1XGo50O-17lRPXoSE.mft
File: v4iEmi616d1XGo50O-17lRPXoSE.mft (raw, json)
Hash identifier: 1XedXrgOOf+Rc5Pe5mHOcGQLvahBxZXGy9qCATvaYZw=
Subject key identifier: 62:2A:B7:F4:DB:AB:8A:84:7F:9A:E2:47:5F:14:3F:58:3E:CF:BD:BE
Authority key identifier: BF:88:84:9A:2E:B5:E9:DD:57:1A:8E:74:3B:ED:7B:95:13:D7:A1:21
Certificate issuer: /CN=bf88849a2eb5e9dd571a8e743bed7b9513d7a121
Certificate serial: 019874502304D27220C5F0E87EF97DE52A81
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v4iEmi616d1XGo50O-17lRPXoSE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/dbc58e-027b-4aac-9de6-23739b5fd84c/1/v4iEmi616d1XGo50O-17lRPXoSE.mft
Manifest number: 01E6
Signing time: Mon 04 Aug 2025 09:01:05 +0000
Manifest this update: Mon 04 Aug 2025 09:01:05 +0000
Manifest next update: Tue 05 Aug 2025 09:01:05 +0000
Files and hashes: 1: GQ0CxxzmGMIf26o36jMV1rwO04E.roa (hash: UIjAedFUmI0lEi3/vw17QvXO+LsVSLHEuXqgk5BpOhU=)
2: sI4PiDRoDbx5a6N6DEWl54OUDb4.roa (hash: BuRl5VT0o+3ibVPsQDpCnLVNhSHwLDG5LED3ZzJ2yPk=)
3: v4iEmi616d1XGo50O-17lRPXoSE.crl (hash: NBSNLZt8eY4cc8Ih5mIdJnXptgKyvfRVTOp6AVNmSJo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/dbc58e-027b-4aac-9de6-23739b5fd84c/1/v4iEmi616d1XGo50O-17lRPXoSE.crl
rsync://rpki.ripe.net/repository/DEFAULT/7a/dbc58e-027b-4aac-9de6-23739b5fd84c/1/v4iEmi616d1XGo50O-17lRPXoSE.mft
rsync://rpki.ripe.net/repository/DEFAULT/v4iEmi616d1XGo50O-17lRPXoSE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:74:50:23:04:d2:72:20:c5:f0:e8:7e:f9:7d:e5:2a:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bf88849a2eb5e9dd571a8e743bed7b9513d7a121
Validity
Not Before: Aug 4 09:01:05 2025 GMT
Not After : Aug 5 09:01:05 2025 GMT
Subject: CN=622ab7f4dbab8a847f9ae2475f143f583ecfbdbe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:c4:23:ae:f6:29:ef:b6:c0:ce:60:68:cf:21:
23:cf:6d:32:c8:98:52:37:e6:64:d6:68:e9:14:f3:
d6:58:1e:e1:10:11:03:27:ff:f0:fa:7c:80:48:37:
7d:39:20:5f:79:de:dc:2e:78:0e:36:79:ba:8a:54:
ad:60:61:a4:f3:50:df:7f:f0:91:13:73:89:08:43:
02:c3:9a:d2:7f:82:3e:bc:93:30:89:81:28:3c:72:
d2:36:0d:ed:3f:95:91:7a:5e:a1:9c:d8:96:9f:ea:
61:c6:3f:0b:30:b9:30:24:46:44:4c:ff:80:86:00:
f5:3d:2c:1b:71:17:80:8a:62:03:9f:c3:e7:86:58:
58:0c:90:f7:62:32:8f:93:5b:01:9d:79:37:35:ac:
64:86:b8:06:0c:ed:9f:bc:f4:7b:c2:fa:71:08:f0:
ea:64:d1:d7:1e:07:96:0d:87:f7:44:8c:e4:40:f0:
1a:91:b5:fd:02:43:ea:64:79:4c:fe:26:03:8f:9e:
49:0e:b2:76:8f:0e:87:af:b1:67:cd:b7:7b:90:f2:
7c:dc:f5:5e:0b:46:1b:c7:f7:ed:e0:48:ea:c5:23:
50:ec:7b:1c:1b:d6:87:e0:96:54:78:35:98:20:c6:
ca:2a:97:7b:b4:54:35:e8:a0:1f:46:c5:69:92:f0:
a4:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:2A:B7:F4:DB:AB:8A:84:7F:9A:E2:47:5F:14:3F:58:3E:CF:BD:BE
X509v3 Authority Key Identifier:
keyid:BF:88:84:9A:2E:B5:E9:DD:57:1A:8E:74:3B:ED:7B:95:13:D7:A1:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v4iEmi616d1XGo50O-17lRPXoSE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/dbc58e-027b-4aac-9de6-23739b5fd84c/1/v4iEmi616d1XGo50O-17lRPXoSE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/dbc58e-027b-4aac-9de6-23739b5fd84c/1/v4iEmi616d1XGo50O-17lRPXoSE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:cb:57:61:e6:e8:82:20:89:84:ed:a7:ff:7c:0d:a7:cc:1b:
47:d4:c0:36:91:7c:94:0a:7a:81:94:f8:8b:2e:e4:c0:8c:a9:
44:6e:69:5a:48:c3:7d:59:94:60:ce:5f:a5:58:b0:da:a1:45:
b9:ab:f6:06:e4:0a:0b:37:17:f3:20:14:09:90:b5:c2:0a:3b:
68:9a:66:53:90:8c:ac:03:ec:96:62:d0:49:d0:90:6f:19:c4:
11:fe:81:62:b7:07:7f:f5:6f:7e:b4:17:60:c1:a3:44:3d:9b:
58:8f:da:64:fd:f4:8a:08:2b:6f:19:1c:e8:18:68:0b:55:1a:
b7:0c:86:89:c0:44:bb:a7:72:3e:97:92:85:be:22:89:4a:f2:
68:89:e9:72:69:dc:0c:9f:51:d2:ad:22:37:7c:7d:4a:32:60:
07:23:de:4d:f8:cb:68:d0:5d:81:aa:27:88:07:8e:e2:16:08:
da:83:a6:07:ba:3d:4e:a8:ec:63:4b:78:fa:da:09:45:62:36:
3a:e6:11:8a:45:6a:41:35:1e:ea:21:67:d4:c4:26:c5:45:f6:
5f:27:2b:34:5a:ed:b4:0c:98:30:9d:ff:32:ba:c3:88:13:c4:
37:f4:90:59:79:d9:8e:f5:15:ea:57:ef:7e:94:fe:72:78:92:
e9:39:24:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:16:16 2025 by rpki-client