Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/ad1216-b71d-4557-a086-efea63d06f80/1/4Zy7iNKxqJZlhQZ3hmLnXHMqZ-c.mft
File: 4Zy7iNKxqJZlhQZ3hmLnXHMqZ-c.mft (raw, json)
Hash identifier: OuOkTn8VSas8SkmyRFW+oKljBzeewc2PwQEZyuFFZxk=
Subject key identifier: AD:A2:11:BE:E6:AE:16:77:99:8C:31:D5:B7:BB:4C:DF:47:AD:64:FE
Authority key identifier: E1:9C:BB:88:D2:B1:A8:96:65:85:06:77:86:62:E7:5C:73:2A:67:E7
Certificate issuer: /CN=e19cbb88d2b1a896658506778662e75c732a67e7
Certificate serial: 01988A69E438A2C72DDA12F4448387563F61
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4Zy7iNKxqJZlhQZ3hmLnXHMqZ-c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/ad1216-b71d-4557-a086-efea63d06f80/1/4Zy7iNKxqJZlhQZ3hmLnXHMqZ-c.mft
Manifest number: 1623
Signing time: Fri 08 Aug 2025 16:00:52 +0000
Manifest this update: Fri 08 Aug 2025 16:00:52 +0000
Manifest next update: Sat 09 Aug 2025 16:00:52 +0000
Files and hashes: 1: 4Zy7iNKxqJZlhQZ3hmLnXHMqZ-c.crl (hash: 0L55wTfKxhIELT8MoZiD8MTNueKScKeHaADVDD61BQY=)
2: E3bOWVadiTMoov1haUFyRTwduJA.roa (hash: sxYsSioAFV3M4+urFT6FLkeq4ts+IfaNfTA80Mu3sng=)
3: Z9n5DV0w7GnExRRm5adMC5c1O74.roa (hash: 61N91t8/tHrGPHbqd/Q8TWwC/7eUsMLcp5Fv9vIC6tI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/ad1216-b71d-4557-a086-efea63d06f80/1/4Zy7iNKxqJZlhQZ3hmLnXHMqZ-c.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/ad1216-b71d-4557-a086-efea63d06f80/1/4Zy7iNKxqJZlhQZ3hmLnXHMqZ-c.mft
rsync://rpki.ripe.net/repository/DEFAULT/4Zy7iNKxqJZlhQZ3hmLnXHMqZ-c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 09 Aug 2025 16:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8a:69:e4:38:a2:c7:2d:da:12:f4:44:83:87:56:3f:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e19cbb88d2b1a896658506778662e75c732a67e7
Validity
Not Before: Aug 8 16:00:52 2025 GMT
Not After : Aug 9 16:00:52 2025 GMT
Subject: CN=ada211bee6ae1677998c31d5b7bb4cdf47ad64fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:57:1e:75:73:76:0a:c6:e5:7e:31:68:c3:0a:
a3:ca:f0:5d:dc:12:55:dd:f3:fb:82:75:ed:72:7f:
dc:74:12:95:62:43:45:21:2d:e4:e3:b7:59:45:ad:
61:d0:2c:ee:7f:39:27:33:36:fe:24:ab:82:c8:a1:
7f:3b:7b:4a:2d:45:e2:6c:b3:60:fd:a5:be:8d:7e:
9e:67:1a:ba:86:31:17:06:02:1d:b9:b4:0c:10:40:
49:e3:ff:0c:e6:9f:57:43:28:9c:19:83:45:d3:5c:
d5:ca:16:22:25:19:fa:08:1c:62:54:e4:c9:2d:a6:
dc:7a:f5:48:b7:9c:54:e2:b9:cf:85:ad:81:dc:4d:
ff:bf:e4:42:f6:49:1f:bd:67:09:8b:99:eb:39:35:
9c:05:bd:fb:ee:b9:50:1d:5e:ac:bb:e0:a7:e7:51:
a0:ee:5b:ac:10:91:e7:ab:eb:23:0b:16:aa:60:9a:
cc:9a:31:7a:a2:e7:42:4c:56:53:f5:0e:04:9a:d1:
3d:e6:76:f8:de:64:2c:46:37:ba:48:46:32:1b:a4:
d3:c0:8e:89:b5:32:cb:cd:ee:fd:2b:f7:bd:33:c0:
8b:08:23:7c:6b:60:7b:d1:7b:60:10:0f:5a:a4:bd:
33:d3:0c:40:83:37:55:fc:bb:d1:ec:cb:35:66:20:
3c:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:A2:11:BE:E6:AE:16:77:99:8C:31:D5:B7:BB:4C:DF:47:AD:64:FE
X509v3 Authority Key Identifier:
keyid:E1:9C:BB:88:D2:B1:A8:96:65:85:06:77:86:62:E7:5C:73:2A:67:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4Zy7iNKxqJZlhQZ3hmLnXHMqZ-c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/ad1216-b71d-4557-a086-efea63d06f80/1/4Zy7iNKxqJZlhQZ3hmLnXHMqZ-c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/ad1216-b71d-4557-a086-efea63d06f80/1/4Zy7iNKxqJZlhQZ3hmLnXHMqZ-c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:1c:2a:d0:4c:33:d9:e3:ce:95:a4:f9:58:f7:78:2a:18:1f:
37:77:9d:c1:04:10:7f:51:bc:86:bf:c4:ff:d8:5f:36:23:ea:
e0:37:20:9e:70:5b:fe:a6:fb:8d:62:64:bb:f1:f6:7c:44:f5:
81:fe:20:db:66:0d:12:9f:0e:d8:76:43:bf:68:f3:b2:ba:b5:
d8:13:dc:7c:a0:3f:5f:38:df:0a:4f:f5:9d:17:ae:e1:eb:b3:
c8:87:0a:fb:60:0d:f2:85:fc:3e:80:4e:18:ac:ea:40:de:c8:
39:07:27:06:b7:e3:37:6e:f2:b0:51:a3:42:da:60:94:82:7f:
af:8a:89:8b:4b:a8:13:30:42:10:e1:00:66:42:67:dc:0f:51:
1d:f9:1a:d2:03:30:19:15:eb:01:58:0e:9c:6f:43:ea:38:29:
22:05:99:de:e1:67:d2:39:02:d1:39:8e:ac:2b:f8:e7:9b:98:
19:8d:d4:8a:7c:73:dc:cf:90:02:b1:5b:c6:7d:26:5f:36:c2:
1c:ca:a7:58:cc:85:8b:10:7e:97:53:5b:6b:ae:c6:b2:83:7b:
c3:48:23:77:87:25:77:2e:7d:f4:41:59:aa:57:59:ec:6b:65:
4f:8b:1a:5d:2f:45:17:2b:1f:59:54:12:4f:c6:70:b1:4a:e7:
36:c2:70:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 00:59:21 2025 by rpki-client