Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/64ed62-a8ef-4802-a1b4-9f97b0fc4832/1/4kVMRWzmi6j-ytVCqrlhCx7MEuI.mft
File: 4kVMRWzmi6j-ytVCqrlhCx7MEuI.mft (raw, json)
Hash identifier: Dz8vo7D6NewOMudu96Y1T0FseVnuxJ1E4OvkgMogTnk=
Subject key identifier: 86:72:26:74:5B:29:64:87:7C:7F:32:B5:46:7A:E1:D2:34:64:EC:14
Authority key identifier: E2:45:4C:45:6C:E6:8B:A8:FE:CA:D5:42:AA:B9:61:0B:1E:CC:12:E2
Certificate issuer: /CN=e2454c456ce68ba8fecad542aab9610b1ecc12e2
Certificate serial: 019881D5308A572D502849FE95C8DE4E444B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4kVMRWzmi6j-ytVCqrlhCx7MEuI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/64ed62-a8ef-4802-a1b4-9f97b0fc4832/1/4kVMRWzmi6j-ytVCqrlhCx7MEuI.mft
Manifest number: 1621
Signing time: Thu 07 Aug 2025 00:01:29 +0000
Manifest this update: Thu 07 Aug 2025 00:01:29 +0000
Manifest next update: Fri 08 Aug 2025 00:01:29 +0000
Files and hashes: 1: 4kVMRWzmi6j-ytVCqrlhCx7MEuI.crl (hash: 386nPAw1YedJ5d21CbDNwdrRfrO/V8vUBz8Asxa+GnU=)
2: 9wiAjxQ8cKdQoI4k97phXcqjm0U.roa (hash: aw34neSnWmkzi+er/oSuocGYd5WKHEhdmA5jFSEL7u8=)
3: VHke2dRAU413gG-qOq91BqFotnA.roa (hash: tCtViRscoxX/FUXZsRP79cmOS8/23LI5c9CHWFx8Vhg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/aa/64ed62-a8ef-4802-a1b4-9f97b0fc4832/1/4kVMRWzmi6j-ytVCqrlhCx7MEuI.crl
rsync://rpki.ripe.net/repository/DEFAULT/aa/64ed62-a8ef-4802-a1b4-9f97b0fc4832/1/4kVMRWzmi6j-ytVCqrlhCx7MEuI.mft
rsync://rpki.ripe.net/repository/DEFAULT/4kVMRWzmi6j-ytVCqrlhCx7MEuI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 23:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:81:d5:30:8a:57:2d:50:28:49:fe:95:c8:de:4e:44:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e2454c456ce68ba8fecad542aab9610b1ecc12e2
Validity
Not Before: Aug 7 00:01:29 2025 GMT
Not After : Aug 8 00:01:29 2025 GMT
Subject: CN=867226745b2964877c7f32b5467ae1d23464ec14
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:b9:e2:6b:ca:fa:1f:57:90:78:0d:ca:dd:59:
3e:3f:28:cd:c8:12:2f:47:b9:87:cf:fa:fa:79:41:
2e:52:77:55:3e:bb:7a:1f:7f:ca:06:1a:04:75:63:
85:06:cb:01:42:f9:6f:8c:74:0b:b6:ea:95:79:49:
fa:f5:28:fd:5f:9c:90:09:ee:c5:4e:5e:80:6d:4a:
14:1b:d9:2d:e3:61:d7:40:7d:86:1e:c1:78:67:d3:
2a:f1:8f:a4:39:b6:2b:65:ed:11:28:8e:48:df:38:
89:86:76:c3:7e:50:af:f5:ad:4e:c9:e8:14:e2:23:
b9:bd:67:98:e0:8f:ca:81:f5:c3:f4:bd:a0:e1:b4:
38:30:9b:d6:45:6d:de:b2:a9:cd:a2:29:b4:02:8c:
b5:37:89:b4:e2:7d:f4:31:53:4b:da:0f:98:35:07:
a6:86:65:e6:d2:a9:90:3a:3d:f4:cd:71:31:39:85:
ba:0d:03:dc:40:bd:56:77:89:86:7c:32:8b:b0:87:
18:99:4c:28:3a:c6:eb:77:4a:b1:7c:78:2e:5d:84:
f1:d4:de:1a:44:44:44:b3:de:ff:68:17:b2:6a:d7:
4b:ac:9e:bd:34:45:c2:12:2c:0e:1c:57:5b:2a:1b:
fb:a2:93:aa:84:03:8c:9c:81:80:85:6a:96:f9:56:
fd:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:72:26:74:5B:29:64:87:7C:7F:32:B5:46:7A:E1:D2:34:64:EC:14
X509v3 Authority Key Identifier:
keyid:E2:45:4C:45:6C:E6:8B:A8:FE:CA:D5:42:AA:B9:61:0B:1E:CC:12:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4kVMRWzmi6j-ytVCqrlhCx7MEuI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/64ed62-a8ef-4802-a1b4-9f97b0fc4832/1/4kVMRWzmi6j-ytVCqrlhCx7MEuI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/64ed62-a8ef-4802-a1b4-9f97b0fc4832/1/4kVMRWzmi6j-ytVCqrlhCx7MEuI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a4:35:35:28:24:b5:f1:79:bb:52:9d:a6:ee:02:c4:59:7b:ee:
82:e7:f1:a5:ac:8d:e5:64:cc:f1:f4:81:d8:bd:a5:d2:92:ce:
ef:99:d6:92:cd:ac:96:97:25:da:91:88:64:fc:04:6d:5f:53:
e4:bc:63:39:16:e9:b6:c3:ab:d5:f4:95:31:7f:79:b7:dd:d8:
24:0d:b6:3d:de:ad:9b:9c:82:70:0b:f6:6d:93:8e:92:8c:1b:
bd:73:23:16:8d:eb:c7:74:79:83:71:33:46:92:b6:b0:7d:4b:
09:54:1b:a1:6f:5a:12:d3:54:b0:2f:f6:2d:19:1f:e8:2f:8c:
c3:c0:11:0f:22:3e:01:6f:f1:43:2b:f6:0f:95:94:3e:ce:9a:
aa:02:03:6e:63:65:c0:ce:27:32:e5:ce:c1:08:6e:b4:cf:d1:
a5:73:2d:fc:0c:e5:67:f9:71:d1:2c:a7:0e:7c:e1:33:ba:bf:
c9:5d:88:f7:fe:5a:23:e7:7f:c2:1e:23:f8:13:50:f1:e3:f2:
7b:b4:f8:10:72:07:58:1d:0e:01:29:eb:a3:b4:5c:1a:59:46:
e6:78:8e:ad:d7:84:b4:89:44:04:0c:56:c8:e4:4d:5e:a0:a3:
47:34:35:61:13:fd:37:fa:a9:0a:41:38:6a:44:13:36:92:c4:
05:35:09:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 07:31:53 2025 by rpki-client