Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/05ab60-dea6-43a3-87ef-7bfaeb195445/1/4GiTQCg3lEieQayGqvpEFPik1r4.mft
File: 4GiTQCg3lEieQayGqvpEFPik1r4.mft (raw, json)
Hash identifier: 1B73JaXaxseJ41BuUhci3GmGSJX8pp2PdiASY4bjvMA=
Subject key identifier: 6A:B9:2A:4F:32:30:6D:11:C7:25:C9:8D:E3:EE:2E:34:CE:C5:E4:AB
Authority key identifier: E0:68:93:40:28:37:94:48:9E:41:AC:86:AA:FA:44:14:F8:A4:D6:BE
Certificate issuer: /CN=e0689340283794489e41ac86aafa4414f8a4d6be
Certificate serial: 01988BEABA012CD0519479A711BEABD7AAC3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4GiTQCg3lEieQayGqvpEFPik1r4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9a/05ab60-dea6-43a3-87ef-7bfaeb195445/1/4GiTQCg3lEieQayGqvpEFPik1r4.mft
Manifest number: 1627
Signing time: Fri 08 Aug 2025 23:01:12 +0000
Manifest this update: Fri 08 Aug 2025 23:01:12 +0000
Manifest next update: Sat 09 Aug 2025 23:01:12 +0000
Files and hashes: 1: 4GiTQCg3lEieQayGqvpEFPik1r4.crl (hash: z0YPy2Qwhefi/IK6RUMWhDnGFY8RDIA6oupghVpIINA=)
2: URa5fH07dVIqF3IJwFtjDdus5xo.roa (hash: bQ7L6PdzuMotAJCcbvlg+nm2FLpujqZUwsr24eILLiQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9a/05ab60-dea6-43a3-87ef-7bfaeb195445/1/4GiTQCg3lEieQayGqvpEFPik1r4.crl
rsync://rpki.ripe.net/repository/DEFAULT/9a/05ab60-dea6-43a3-87ef-7bfaeb195445/1/4GiTQCg3lEieQayGqvpEFPik1r4.mft
rsync://rpki.ripe.net/repository/DEFAULT/4GiTQCg3lEieQayGqvpEFPik1r4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 09 Aug 2025 20:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8b:ea:ba:01:2c:d0:51:94:79:a7:11:be:ab:d7:aa:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e0689340283794489e41ac86aafa4414f8a4d6be
Validity
Not Before: Aug 8 23:01:12 2025 GMT
Not After : Aug 9 23:01:12 2025 GMT
Subject: CN=6ab92a4f32306d11c725c98de3ee2e34cec5e4ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:a5:9e:45:d3:13:b0:07:c4:1d:e5:82:6b:62:
0b:78:49:a3:92:1f:9b:d6:51:37:98:4c:59:dc:f4:
08:ee:aa:6a:90:95:3d:d6:f9:eb:14:06:b3:44:d5:
5e:fe:1f:a5:64:ac:c7:29:ef:c3:b3:21:26:66:14:
0b:28:3c:fb:d9:7f:92:ec:f6:ab:ff:ea:f7:d5:c2:
d0:8e:6d:9b:57:d8:3a:7e:cf:c3:3e:e8:3a:8e:c8:
81:ad:7f:f2:73:fb:83:f9:67:0a:58:ca:09:9f:fc:
a5:6d:6c:77:a3:a6:2d:1a:c0:bf:a7:86:42:bf:3f:
48:1f:0f:23:8d:cb:76:aa:b7:2c:1d:a8:77:f1:b5:
88:1f:01:58:5d:7f:91:94:a1:12:f8:06:6a:ef:f7:
9a:33:fd:55:95:fb:61:9b:03:10:cb:09:11:1d:9d:
de:1c:66:af:81:7e:e0:27:7c:7c:ae:3b:43:b0:81:
5b:34:dc:b4:95:89:7c:74:b1:28:e7:0c:a6:9a:ac:
36:e3:b4:9d:8c:c7:8b:30:d7:7a:ba:d1:b4:08:f8:
30:a8:50:6e:f0:21:04:1e:ed:4b:c7:dc:00:99:44:
b0:b3:f5:cd:7a:f0:7f:e0:a4:3a:8a:59:b7:af:02:
6f:bc:8f:8c:d5:f4:58:e5:1c:fd:b6:63:6f:68:ea:
ca:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:B9:2A:4F:32:30:6D:11:C7:25:C9:8D:E3:EE:2E:34:CE:C5:E4:AB
X509v3 Authority Key Identifier:
keyid:E0:68:93:40:28:37:94:48:9E:41:AC:86:AA:FA:44:14:F8:A4:D6:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4GiTQCg3lEieQayGqvpEFPik1r4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/05ab60-dea6-43a3-87ef-7bfaeb195445/1/4GiTQCg3lEieQayGqvpEFPik1r4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/05ab60-dea6-43a3-87ef-7bfaeb195445/1/4GiTQCg3lEieQayGqvpEFPik1r4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:11:4b:1c:0b:12:33:8b:b8:c0:b3:c8:12:b8:25:62:06:35:
9a:68:1f:1c:53:17:2c:22:60:a2:22:41:3b:50:e9:e5:7a:d1:
a6:b2:33:0f:c2:8d:fb:02:28:d6:97:62:47:b5:26:20:49:3c:
db:91:2c:07:28:be:a1:e7:20:8f:b9:65:c5:87:84:41:56:7c:
c8:fd:a8:6c:63:ae:f3:03:70:d9:04:4e:62:31:42:9e:3f:ba:
47:c4:d2:a6:5e:49:13:c1:70:d4:a0:af:4e:87:53:2a:30:81:
27:b5:f3:1d:1b:d8:4a:b5:20:44:45:11:b3:a0:f7:5b:84:55:
f8:a6:37:e0:7b:32:ca:89:6c:fb:9a:47:9f:2c:b4:0a:69:ba:
e8:68:6e:26:c7:2a:c2:37:6b:fc:f2:b1:f4:ab:12:b0:66:44:
fc:e7:9f:38:4b:e8:73:1e:6e:d3:c8:3f:92:e4:d1:09:82:b7:
11:ae:bd:24:6d:1f:1b:7b:0f:1f:3e:94:52:75:43:a9:b0:ae:
34:c6:3c:ed:a9:b3:07:a3:8b:65:50:54:fa:4d:58:86:a9:0f:
3f:5f:8f:b3:0b:6a:ab:f8:50:b5:c4:5c:a8:e5:49:85:40:42:
36:77:2b:52:d9:cf:04:d7:bd:96:5e:62:b1:ac:20:a8:39:c3:
04:27:ca:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 01:06:15 2025 by rpki-client