Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/aa5cc0-bb56-4b47-b7c1-44f41d9e1277/1/4GmrbwlXKvtG6fjpoGOdgguWlCI.mft
File: 4GmrbwlXKvtG6fjpoGOdgguWlCI.mft (raw, json)
Hash identifier: 5IhMN+Uft0+YEOqutxBcJAESVeJL9gVU9GF+FZcxK8Q=
Subject key identifier: 60:AE:A2:75:22:60:F1:EF:FD:ED:8E:6F:EC:78:41:1A:5E:BA:86:6B
Authority key identifier: E0:69:AB:6F:09:57:2A:FB:46:E9:F8:E9:A0:63:9D:82:0B:96:94:22
Certificate issuer: /CN=e069ab6f09572afb46e9f8e9a0639d820b969422
Certificate serial: 019874869DE1388A17A4731BEF599E2E3CD3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4GmrbwlXKvtG6fjpoGOdgguWlCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/aa5cc0-bb56-4b47-b7c1-44f41d9e1277/1/4GmrbwlXKvtG6fjpoGOdgguWlCI.mft
Manifest number: 15AD
Signing time: Mon 04 Aug 2025 10:00:35 +0000
Manifest this update: Mon 04 Aug 2025 10:00:35 +0000
Manifest next update: Tue 05 Aug 2025 10:00:35 +0000
Files and hashes: 1: 3JZ_5w4aMWvRVbzCod8mUk7eyJM.roa (hash: vnbCaew1m+lh3Dj5sXD9W+bmDkZl62H3PlaW/PwhcMY=)
2: 4GmrbwlXKvtG6fjpoGOdgguWlCI.crl (hash: VHw/vfbasYKVUPR1GFsQ0a/htbTZcNQNmaQabW0r7HU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9b/aa5cc0-bb56-4b47-b7c1-44f41d9e1277/1/4GmrbwlXKvtG6fjpoGOdgguWlCI.crl
rsync://rpki.ripe.net/repository/DEFAULT/9b/aa5cc0-bb56-4b47-b7c1-44f41d9e1277/1/4GmrbwlXKvtG6fjpoGOdgguWlCI.mft
rsync://rpki.ripe.net/repository/DEFAULT/4GmrbwlXKvtG6fjpoGOdgguWlCI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 10:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:74:86:9d:e1:38:8a:17:a4:73:1b:ef:59:9e:2e:3c:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e069ab6f09572afb46e9f8e9a0639d820b969422
Validity
Not Before: Aug 4 10:00:35 2025 GMT
Not After : Aug 5 10:00:35 2025 GMT
Subject: CN=60aea2752260f1effded8e6fec78411a5eba866b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:b5:62:5b:70:69:bb:6d:b7:78:86:d3:8b:28:
fe:82:ba:aa:82:b0:25:fb:87:f6:6b:59:b0:bd:7b:
e2:0f:e1:56:ad:a3:16:ac:f9:19:d6:7a:af:5d:8d:
3f:60:cd:43:4d:09:59:33:b3:ab:8d:7a:fb:d2:0c:
b1:b8:3f:b9:bb:a0:38:f5:a0:19:b0:69:b1:76:e5:
f1:c9:a7:b1:b6:62:57:69:4e:3d:19:e5:81:a2:d0:
12:18:f8:02:13:78:b2:38:a1:e3:34:b5:f7:e8:d1:
74:db:cf:dc:e6:32:3d:2d:31:84:f8:48:83:bf:de:
89:f3:79:59:b9:de:ce:bc:50:cd:89:fe:a4:b3:2d:
36:05:e0:7d:b3:72:a5:a8:ce:f5:dc:3d:11:d9:cc:
82:e3:f4:4c:48:78:53:48:d8:25:88:39:c8:16:aa:
ca:d8:be:83:a1:56:c6:c3:45:59:25:4e:4d:e2:22:
ab:0d:aa:78:5c:c6:f8:aa:2b:e0:9c:d9:af:a9:6b:
d3:06:5d:bd:b9:9f:6b:1b:d6:ac:f6:81:3f:26:cd:
dd:3b:3f:93:30:32:5f:df:fc:3c:87:81:32:2e:53:
a3:de:fd:0c:67:a6:d6:40:29:a9:7a:03:af:d0:c6:
b2:56:ed:8a:10:63:d3:c3:93:a1:f7:d5:b7:1d:96:
9a:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:AE:A2:75:22:60:F1:EF:FD:ED:8E:6F:EC:78:41:1A:5E:BA:86:6B
X509v3 Authority Key Identifier:
keyid:E0:69:AB:6F:09:57:2A:FB:46:E9:F8:E9:A0:63:9D:82:0B:96:94:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4GmrbwlXKvtG6fjpoGOdgguWlCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/aa5cc0-bb56-4b47-b7c1-44f41d9e1277/1/4GmrbwlXKvtG6fjpoGOdgguWlCI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/aa5cc0-bb56-4b47-b7c1-44f41d9e1277/1/4GmrbwlXKvtG6fjpoGOdgguWlCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:89:21:0d:9f:35:0f:66:c2:ad:53:95:92:2a:1e:c1:e3:38:
8a:d7:9d:b1:50:f8:1e:bd:cc:a6:5a:4f:d2:d9:c7:92:3e:a6:
35:40:70:b7:7c:a5:b8:5a:4e:80:bd:46:1c:eb:07:a1:1e:5a:
11:3c:32:83:d1:7e:d6:a6:2c:07:1a:e0:b6:21:d2:32:c4:63:
97:a1:ae:a6:e0:c2:7e:f9:06:4e:0c:45:31:0d:b9:7d:be:40:
15:df:14:23:78:7e:94:aa:ea:95:de:06:af:ed:2d:8b:7d:b2:
d9:78:d7:b5:67:0b:0b:46:a0:12:dc:be:ed:e0:f5:38:1e:44:
1e:b4:11:69:a6:e3:13:c3:76:50:96:9f:67:2b:5b:86:ba:b7:
21:94:5c:0c:c5:aa:c5:a1:2a:62:b0:fb:5f:64:29:d4:b9:13:
03:8e:26:8b:b3:51:51:9d:04:93:9b:e5:8e:1c:02:3c:2e:a9:
99:94:b3:0b:a9:f7:89:f4:40:58:ea:3a:36:fc:4f:9e:5d:ce:
f9:93:35:91:b7:68:59:e3:a7:b3:8c:09:4a:32:89:12:27:f0:
d6:9e:cd:be:6d:27:cc:bb:60:41:e0:ce:75:2a:17:61:26:d3:
3e:bc:2c:b4:73:ad:4c:a9:9d:d1:3a:ff:c9:08:2a:13:ee:f9:
56:cd:5c:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 16:04:56 2025 by rpki-client