Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/e34cd5-011a-404a-9ad5-93b578d18c8c/1/4RUdSJs2aUGSrL_KpeC7RvyeW-A.mft
File: 4RUdSJs2aUGSrL_KpeC7RvyeW-A.mft (raw, json)
Hash identifier: Bu4Sux6JsQ4gY8WrsYTW6RzeGCgM3ppmwa/UyKGPoG4=
Subject key identifier: CA:5B:80:A6:7C:13:76:49:DF:DE:52:9C:EC:A1:B8:B9:D4:F5:4D:7E
Authority key identifier: E1:15:1D:48:9B:36:69:41:92:AC:BF:CA:A5:E0:BB:46:FC:9E:5B:E0
Certificate issuer: /CN=e1151d489b36694192acbfcaa5e0bb46fc9e5be0
Certificate serial: 01988166E9191FD97403FBBB0607388902A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4RUdSJs2aUGSrL_KpeC7RvyeW-A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/e34cd5-011a-404a-9ad5-93b578d18c8c/1/4RUdSJs2aUGSrL_KpeC7RvyeW-A.mft
Manifest number: 0649
Signing time: Wed 06 Aug 2025 22:01:01 +0000
Manifest this update: Wed 06 Aug 2025 22:01:01 +0000
Manifest next update: Thu 07 Aug 2025 22:01:01 +0000
Files and hashes: 1: 4RUdSJs2aUGSrL_KpeC7RvyeW-A.crl (hash: hf7JOqrddce5F76bg5RHICxHIeppf73mW0780xVcqLA=)
2: HYom0-kciwsBpHtG02N8IppZ_kA.roa (hash: gd8Ptnlp+eybQYq2eGs8Iys0wttljsxiJW6GYdz0ar4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/e34cd5-011a-404a-9ad5-93b578d18c8c/1/4RUdSJs2aUGSrL_KpeC7RvyeW-A.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/e34cd5-011a-404a-9ad5-93b578d18c8c/1/4RUdSJs2aUGSrL_KpeC7RvyeW-A.mft
rsync://rpki.ripe.net/repository/DEFAULT/4RUdSJs2aUGSrL_KpeC7RvyeW-A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 20:46:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:81:66:e9:19:1f:d9:74:03:fb:bb:06:07:38:89:02:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e1151d489b36694192acbfcaa5e0bb46fc9e5be0
Validity
Not Before: Aug 6 22:01:01 2025 GMT
Not After : Aug 7 22:01:01 2025 GMT
Subject: CN=ca5b80a67c137649dfde529ceca1b8b9d4f54d7e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:e3:6d:89:5c:c1:9c:32:b0:b4:62:5e:43:c3:
fc:ae:99:0d:41:0f:9d:f6:6a:8e:e9:7a:f9:5a:92:
1b:0b:23:76:ad:b4:7d:7e:7d:83:59:7a:e0:2f:4a:
8d:2a:2d:c2:08:3d:40:78:99:0e:65:b9:26:0b:b4:
5d:f3:d1:67:36:7f:b9:94:9e:d4:a3:39:b1:97:8d:
f8:9f:36:7b:1e:bd:9d:dc:c4:dd:e2:a1:09:dc:78:
57:75:8e:56:5d:45:59:7a:dd:93:05:e9:28:29:35:
52:e8:84:f2:0e:00:aa:1a:44:81:47:2f:08:b3:ae:
c9:00:85:da:b7:8f:2f:05:55:71:98:50:ce:60:39:
84:4d:d5:ff:da:e4:41:71:f5:a7:ce:1c:d4:6d:6b:
4c:97:70:69:da:43:06:78:3f:d8:4c:7d:7d:e2:b1:
c4:a3:1e:30:74:59:6f:ef:7d:08:7c:77:0e:00:d4:
96:8f:78:d8:85:e8:45:55:88:c0:58:b9:44:80:91:
38:e5:2d:70:4d:7b:74:86:4c:f0:1d:c9:b8:00:d3:
56:06:da:46:62:df:95:49:f4:7a:a8:2c:b7:3a:a2:
63:03:c0:2e:14:73:57:9f:8c:2d:ac:16:17:08:27:
1f:32:2a:21:82:8d:f3:31:dd:d0:c9:1c:79:68:b9:
84:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:5B:80:A6:7C:13:76:49:DF:DE:52:9C:EC:A1:B8:B9:D4:F5:4D:7E
X509v3 Authority Key Identifier:
keyid:E1:15:1D:48:9B:36:69:41:92:AC:BF:CA:A5:E0:BB:46:FC:9E:5B:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4RUdSJs2aUGSrL_KpeC7RvyeW-A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/e34cd5-011a-404a-9ad5-93b578d18c8c/1/4RUdSJs2aUGSrL_KpeC7RvyeW-A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/e34cd5-011a-404a-9ad5-93b578d18c8c/1/4RUdSJs2aUGSrL_KpeC7RvyeW-A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:46:08:42:88:58:ee:24:6e:53:1c:50:57:76:3e:16:d9:62:
a8:15:4a:9a:ee:71:99:45:83:27:8b:68:b7:2c:f8:bd:01:08:
19:8e:12:36:90:3d:4a:ed:59:23:ed:e4:3e:94:53:bd:c6:37:
4e:e2:0c:f1:83:31:3f:d2:31:87:ec:b5:11:85:86:4d:77:91:
d2:6b:68:07:b0:22:03:16:33:54:d2:b5:4f:eb:1d:7f:d7:b9:
c7:e4:67:fa:28:7a:3e:cf:39:8b:90:96:3c:11:26:4e:ad:dc:
d1:a7:ac:43:eb:4b:32:9a:2c:67:44:b4:72:5b:54:3f:ba:14:
e7:f7:b6:50:df:d5:57:33:b0:e9:9a:64:59:f0:2d:9e:cf:c7:
26:b7:a6:6b:5b:8e:96:dd:38:4a:70:15:55:ca:1a:94:a8:f6:
90:dc:cc:31:c8:47:53:28:a2:fe:36:63:ea:9a:30:f5:9f:68:
2d:38:f0:d7:6e:c2:71:d2:a8:1b:a3:49:b6:ed:4b:0f:e1:e4:
4d:a3:2b:51:6b:b4:b8:a2:20:c4:a2:4b:54:97:40:c8:da:67:
9e:79:dd:b6:06:33:80:40:8a:6a:8c:30:27:5e:87:7d:2b:b0:
7f:3e:a6:cb:bf:93:4f:74:61:ce:62:4e:41:ea:e9:3e:38:d6:
17:61:fc:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 01:06:52 2025 by rpki-client