Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/46f147-173f-4260-aa7b-3a6bf890a01d/1/4KAQbNKFfvEyNIZ8t_FqI6k_qpM.mft
File: 4KAQbNKFfvEyNIZ8t_FqI6k_qpM.mft (raw, json)
Hash identifier: lLI09l/DGd/cptMURE7Jra96XZiWmBJ/rkYCeM/KwSs=
Subject key identifier: 2A:01:5D:CF:79:8F:24:B6:62:41:10:6C:49:B5:C5:D7:95:50:2B:36
Authority key identifier: E0:A0:10:6C:D2:85:7E:F1:32:34:86:7C:B7:F1:6A:23:A9:3F:AA:93
Certificate issuer: /CN=e0a0106cd2857ef13234867cb7f16a23a93faa93
Certificate serial: 01987419638827CEAF330F0F7FE0B091B0C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4KAQbNKFfvEyNIZ8t_FqI6k_qpM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/46f147-173f-4260-aa7b-3a6bf890a01d/1/4KAQbNKFfvEyNIZ8t_FqI6k_qpM.mft
Manifest number: 1619
Signing time: Mon 04 Aug 2025 08:01:17 +0000
Manifest this update: Mon 04 Aug 2025 08:01:17 +0000
Manifest next update: Tue 05 Aug 2025 08:01:17 +0000
Files and hashes: 1: 4KAQbNKFfvEyNIZ8t_FqI6k_qpM.crl (hash: V2UJQxkcYjHrm09rE3zX4wOxmiBoveqxnHQ7hss9fxk=)
2: NAPyyzZUEw4Zn65wAuFDux_YC9U.roa (hash: lU32nj8CJcUtMjGhuL2rXmP4Es+fbhl1wJhVBrmgarI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c6/46f147-173f-4260-aa7b-3a6bf890a01d/1/4KAQbNKFfvEyNIZ8t_FqI6k_qpM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c6/46f147-173f-4260-aa7b-3a6bf890a01d/1/4KAQbNKFfvEyNIZ8t_FqI6k_qpM.mft
rsync://rpki.ripe.net/repository/DEFAULT/4KAQbNKFfvEyNIZ8t_FqI6k_qpM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:74:19:63:88:27:ce:af:33:0f:0f:7f:e0:b0:91:b0:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e0a0106cd2857ef13234867cb7f16a23a93faa93
Validity
Not Before: Aug 4 08:01:17 2025 GMT
Not After : Aug 5 08:01:17 2025 GMT
Subject: CN=2a015dcf798f24b66241106c49b5c5d795502b36
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:23:af:15:ec:bd:4e:dc:87:4d:c0:8e:27:5c:
19:8c:a6:4e:bc:25:5f:29:ea:f8:09:ca:e2:b5:57:
b7:3e:00:5f:3e:fb:a9:c6:7d:fc:0f:f9:c7:05:28:
0f:c7:3e:26:14:d3:20:c1:54:61:b3:4a:22:61:34:
7e:1d:03:34:ee:46:dc:c0:cc:df:7a:f2:2b:f0:77:
95:13:87:57:2b:ae:0b:d9:90:63:75:5f:89:c6:b9:
03:fe:7e:ae:36:20:55:fb:c2:8d:f6:64:e6:20:a8:
78:7e:c4:e9:e2:f7:49:67:d5:81:47:b3:0d:41:1c:
b5:ae:92:42:40:9d:d0:da:cb:86:82:2e:90:db:dd:
1b:2b:08:7b:2f:19:d4:2e:a4:3b:a6:13:b9:f4:62:
68:e2:fa:8a:96:fa:bb:c6:07:cc:8a:36:7e:f8:2b:
23:6f:ce:bb:52:3b:7c:fd:76:4e:4b:d8:96:3d:07:
7b:88:78:95:d1:ec:b4:db:0f:97:fc:66:2d:ea:dd:
8d:55:37:53:fb:b0:b9:69:39:1f:61:7c:7f:c5:be:
09:5b:36:19:ee:87:f2:be:ed:d5:15:78:c9:20:17:
15:fa:7b:7e:d2:fd:55:aa:03:3b:c6:ac:df:74:b6:
10:82:98:96:af:1b:07:8b:cb:b0:46:bc:d3:dd:73:
68:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:01:5D:CF:79:8F:24:B6:62:41:10:6C:49:B5:C5:D7:95:50:2B:36
X509v3 Authority Key Identifier:
keyid:E0:A0:10:6C:D2:85:7E:F1:32:34:86:7C:B7:F1:6A:23:A9:3F:AA:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4KAQbNKFfvEyNIZ8t_FqI6k_qpM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/46f147-173f-4260-aa7b-3a6bf890a01d/1/4KAQbNKFfvEyNIZ8t_FqI6k_qpM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/46f147-173f-4260-aa7b-3a6bf890a01d/1/4KAQbNKFfvEyNIZ8t_FqI6k_qpM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:ed:67:c7:fc:41:a6:0e:27:66:00:fe:80:4c:3d:4b:0d:db:
3b:b7:c8:20:60:5a:97:f0:35:46:66:f6:a4:dd:f2:98:8c:3d:
4c:98:91:77:96:a3:a2:32:9d:a1:1c:08:52:9d:86:ec:0e:bf:
1b:df:af:15:5d:70:17:ec:61:10:fa:30:c5:d8:66:cf:41:fc:
4c:2f:e4:de:8c:17:17:c9:04:07:76:ce:10:14:72:dd:06:37:
6e:20:02:97:72:1e:05:65:c7:34:38:73:aa:81:db:7d:17:b3:
b3:5f:4a:0f:5f:c1:b4:f8:32:f3:1a:a0:52:d5:02:85:63:f8:
8c:51:7c:aa:d1:c1:72:dd:a7:d1:11:50:c7:a9:18:72:12:2e:
6f:e7:db:f0:55:ec:06:ea:1b:84:7d:36:fd:3f:b7:2d:27:5f:
6d:9c:49:97:c6:9a:64:72:ce:b9:50:3e:aa:c8:d5:ee:c9:73:
f7:d1:d1:2b:66:65:1e:77:89:c5:90:b5:69:73:98:fc:06:eb:
76:21:ea:e9:76:b6:dc:ed:83:0d:2c:62:90:1b:0f:3e:55:78:
24:1f:2e:1d:22:03:32:fb:b3:c2:c1:cd:11:0f:30:da:ef:35:
9b:9b:80:0e:8a:96:0a:d2:84:d4:83:14:6b:c4:ea:ca:e8:43:
db:af:e6:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:01:00 2025 by rpki-client