Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/689109-1723-4bf1-b63a-dc64ae72578e/1/4bpLKGfa04tzpGkYJB78cqISYvc.mft
File: 4bpLKGfa04tzpGkYJB78cqISYvc.mft (raw, json)
Hash identifier: H8t11QP4GtxOXZ5PGtf+Coy1rMfYqz3lV8kzt4MOCdc=
Subject key identifier: 17:E2:68:FE:24:6B:6C:8B:68:65:C6:D4:74:E5:23:C3:7B:E5:2E:4E
Authority key identifier: E1:BA:4B:28:67:DA:D3:8B:73:A4:69:18:24:1E:FC:72:A2:12:62:F7
Certificate issuer: /CN=e1ba4b2867dad38b73a46918241efc72a21262f7
Certificate serial: 01988166EFC0DC55A79CB483182AF49FA31E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4bpLKGfa04tzpGkYJB78cqISYvc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/689109-1723-4bf1-b63a-dc64ae72578e/1/4bpLKGfa04tzpGkYJB78cqISYvc.mft
Manifest number: 161E
Signing time: Wed 06 Aug 2025 22:01:03 +0000
Manifest this update: Wed 06 Aug 2025 22:01:03 +0000
Manifest next update: Thu 07 Aug 2025 22:01:03 +0000
Files and hashes: 1: 4bpLKGfa04tzpGkYJB78cqISYvc.crl (hash: 9F29FDQebFyv8UHYqkPvCgonBsQhyu+0HzBdDGLjm0A=)
2: MccPojCQ_5aiRX4Myokyw6v--7c.roa (hash: 6zT3oaRUJKtce125U7+EL/be9RKqr09GLQyUToqdrbc=)
3: UJACc2s1J5BaMpYznoUagPO6cuI.roa (hash: 5ImyJpj69YHNVaFZ4EKvt0GWM6aecM/AkpksMF5YZpU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ad/689109-1723-4bf1-b63a-dc64ae72578e/1/4bpLKGfa04tzpGkYJB78cqISYvc.crl
rsync://rpki.ripe.net/repository/DEFAULT/ad/689109-1723-4bf1-b63a-dc64ae72578e/1/4bpLKGfa04tzpGkYJB78cqISYvc.mft
rsync://rpki.ripe.net/repository/DEFAULT/4bpLKGfa04tzpGkYJB78cqISYvc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 20:46:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:81:66:ef:c0:dc:55:a7:9c:b4:83:18:2a:f4:9f:a3:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e1ba4b2867dad38b73a46918241efc72a21262f7
Validity
Not Before: Aug 6 22:01:03 2025 GMT
Not After : Aug 7 22:01:03 2025 GMT
Subject: CN=17e268fe246b6c8b6865c6d474e523c37be52e4e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:6b:a7:90:c8:fd:c9:ec:51:0b:88:7e:4e:40:
62:80:6d:26:63:0c:e7:1e:53:ee:a8:d2:79:ca:5c:
1b:bd:2e:ac:85:7a:13:11:15:08:df:50:80:33:38:
24:ba:fb:8c:22:12:32:15:b8:2f:57:4a:a2:85:8a:
02:9f:75:10:56:ab:09:b8:8e:47:e6:3c:5c:e2:f6:
11:79:8e:ec:fd:0e:43:58:0c:ca:65:6b:b3:34:41:
b9:2b:c5:a6:1e:ff:f8:c7:5a:c1:68:2c:19:27:18:
87:3b:e9:11:95:24:42:c1:01:8a:3f:d1:c1:67:62:
52:70:0e:db:46:e5:97:c5:8d:b8:55:54:13:5e:b5:
26:fc:87:8d:a8:9a:e3:0a:97:a9:b3:96:eb:63:e5:
e6:59:f5:21:fb:91:12:cb:82:1d:45:e3:3e:e5:8c:
31:44:04:b2:fc:30:72:97:71:d6:7d:23:90:73:51:
80:2e:d1:e3:e0:5c:e2:da:e9:a7:ab:fe:77:72:64:
60:5f:46:66:1c:9a:76:f6:75:f3:68:cf:a6:04:35:
10:22:84:f5:24:bb:ec:e9:cd:a2:fd:c5:89:f3:59:
9e:15:97:31:94:da:14:e0:02:71:99:b3:de:81:52:
56:c9:98:b5:36:b9:66:86:15:f8:64:77:70:06:85:
50:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:E2:68:FE:24:6B:6C:8B:68:65:C6:D4:74:E5:23:C3:7B:E5:2E:4E
X509v3 Authority Key Identifier:
keyid:E1:BA:4B:28:67:DA:D3:8B:73:A4:69:18:24:1E:FC:72:A2:12:62:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4bpLKGfa04tzpGkYJB78cqISYvc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/689109-1723-4bf1-b63a-dc64ae72578e/1/4bpLKGfa04tzpGkYJB78cqISYvc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/689109-1723-4bf1-b63a-dc64ae72578e/1/4bpLKGfa04tzpGkYJB78cqISYvc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:34:94:56:7a:6c:df:25:55:8e:93:e6:f7:b0:d6:07:0d:ed:
fc:d6:8e:eb:89:8d:1b:2b:92:da:8c:53:d2:d8:ec:91:d4:eb:
7b:fb:27:2b:b3:83:d7:45:a8:49:e2:c1:11:1a:ca:4b:5a:03:
9b:40:6a:38:00:3e:c1:20:d2:43:22:4c:f5:c0:72:25:bd:04:
d0:4d:25:f0:ae:19:86:33:df:39:96:e9:10:e3:cd:50:68:a2:
35:11:64:b1:2f:56:81:1d:f5:5e:0e:6a:5f:50:56:37:cb:a0:
b0:5e:a1:01:88:67:3e:df:63:dd:35:cc:79:18:54:d5:57:45:
c1:da:62:39:f6:c1:9e:e1:db:c5:74:80:15:14:0d:e4:cf:59:
fb:7b:92:98:b8:62:47:42:fc:83:86:fa:76:da:ee:83:9d:27:
a6:4e:68:2f:dd:07:7d:1b:35:30:24:cb:97:c3:19:7e:7c:b0:
3a:a1:06:81:fe:9d:c2:20:ab:16:e3:44:56:95:e5:9b:40:9e:
4c:5f:3b:99:69:9b:d6:c9:35:7d:cb:27:26:5d:41:0f:d0:f7:
6a:c7:78:5d:98:6b:dc:16:21:73:52:7a:da:30:54:61:3b:8f:
a8:29:69:ab:39:bf:cd:79:42:12:20:e9:d0:4e:9a:23:31:3d:
f1:89:fa:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 04:39:43 2025 by rpki-client