Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/be1720-801e-4f9e-a5c1-68a2f0bb5b7a/1/4kvChw3iWZ2vZkl_VynHSzPvmTo.mft
File: 4kvChw3iWZ2vZkl_VynHSzPvmTo.mft (raw, json)
Hash identifier: MVtBZbdrMH+m4jRohed1uRD968QIZbs6yAFFf0GqQtg=
Subject key identifier: FC:E9:BF:74:73:CC:40:92:4C:96:50:C3:48:FE:61:8D:06:2E:77:F8
Authority key identifier: E2:4B:C2:87:0D:E2:59:9D:AF:66:49:7F:57:29:C7:4B:33:EF:99:3A
Certificate issuer: /CN=e24bc2870de2599daf66497f5729c74b33ef993a
Certificate serial: 019873E2ED179E43AA590721E3B1D55A772B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4kvChw3iWZ2vZkl_VynHSzPvmTo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/be1720-801e-4f9e-a5c1-68a2f0bb5b7a/1/4kvChw3iWZ2vZkl_VynHSzPvmTo.mft
Manifest number: 1617
Signing time: Mon 04 Aug 2025 07:01:48 +0000
Manifest this update: Mon 04 Aug 2025 07:01:48 +0000
Manifest next update: Tue 05 Aug 2025 07:01:48 +0000
Files and hashes: 1: 1-rpc7ufolrPPESf1-RPYDxCY_T8.roa (hash: aMrW8McI1AnE66yXNAmSVq0+rlupGq2T5Ly3LIkG59o=)
2: 4kvChw3iWZ2vZkl_VynHSzPvmTo.crl (hash: Ef3tq96GFL8CqoY1l/yOyU8tefhzyyvUKkqwmgqJsVw=)
3: fTOQFI1UvSwnT9wznNbLZs3UG2U.roa (hash: L/h45q4tkE5FoRZ0DX9ltIgAYeRk4jVnxVfoOe4XvCw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/be1720-801e-4f9e-a5c1-68a2f0bb5b7a/1/4kvChw3iWZ2vZkl_VynHSzPvmTo.crl
rsync://rpki.ripe.net/repository/DEFAULT/d8/be1720-801e-4f9e-a5c1-68a2f0bb5b7a/1/4kvChw3iWZ2vZkl_VynHSzPvmTo.mft
rsync://rpki.ripe.net/repository/DEFAULT/4kvChw3iWZ2vZkl_VynHSzPvmTo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:73:e2:ed:17:9e:43:aa:59:07:21:e3:b1:d5:5a:77:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e24bc2870de2599daf66497f5729c74b33ef993a
Validity
Not Before: Aug 4 07:01:48 2025 GMT
Not After : Aug 5 07:01:48 2025 GMT
Subject: CN=fce9bf7473cc40924c9650c348fe618d062e77f8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:be:3e:d8:59:f3:20:fa:62:3e:05:08:02:25:
fe:58:49:b4:3f:3a:52:55:34:44:9e:69:ac:f9:2c:
65:05:75:fa:d4:4a:d3:d4:3e:16:8f:80:cd:8b:bd:
e1:ee:ed:b2:89:30:46:ee:8c:87:ac:db:05:15:43:
ec:04:54:86:cd:6e:13:b1:b9:a8:f8:04:c5:e1:60:
d7:79:90:db:f5:5b:62:cf:e8:8f:e0:ae:04:6c:9b:
95:74:ba:0c:2c:de:17:f7:6f:fa:18:1c:13:4d:1d:
c5:8d:5f:b3:f0:00:f4:f7:8f:c7:58:9f:5d:e8:e0:
f8:62:c1:d1:63:25:67:55:6b:ef:7d:96:9b:3b:13:
34:2c:e7:11:6a:5a:18:1a:ee:07:0d:20:fc:f5:6e:
b3:37:2b:5e:b7:b5:6b:92:d0:2b:79:8d:de:1b:36:
8b:82:4f:44:b0:b0:c4:e8:2b:8f:da:0b:1a:4e:7a:
6f:01:f6:14:73:05:88:94:d1:cb:6e:68:b4:43:64:
35:e0:64:90:5f:24:5b:f1:67:c1:f4:53:12:d9:c3:
35:b8:3f:21:4e:4b:84:31:e2:01:c7:61:a8:d1:01:
7e:bb:2b:0b:4c:55:68:d5:c1:54:b5:d0:a8:5d:4d:
65:6e:06:cd:b2:9e:6c:8f:a6:61:db:13:91:06:37:
a5:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:E9:BF:74:73:CC:40:92:4C:96:50:C3:48:FE:61:8D:06:2E:77:F8
X509v3 Authority Key Identifier:
keyid:E2:4B:C2:87:0D:E2:59:9D:AF:66:49:7F:57:29:C7:4B:33:EF:99:3A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4kvChw3iWZ2vZkl_VynHSzPvmTo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/be1720-801e-4f9e-a5c1-68a2f0bb5b7a/1/4kvChw3iWZ2vZkl_VynHSzPvmTo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/be1720-801e-4f9e-a5c1-68a2f0bb5b7a/1/4kvChw3iWZ2vZkl_VynHSzPvmTo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
aa:35:96:f7:dd:d2:32:b3:8c:1c:d3:32:0c:44:89:2c:f5:04:
6f:8b:9f:95:dc:99:00:0d:df:75:74:3c:4b:f3:a6:1b:c6:92:
24:df:51:e1:2b:86:01:a8:27:f0:a6:1f:dc:56:03:03:ce:c1:
fe:e4:4b:37:2e:88:9b:30:d9:10:4c:b2:05:68:11:d5:3c:ef:
0e:78:50:49:e2:6f:85:87:c9:b8:93:4b:55:2b:7f:87:76:bd:
53:b1:a6:fb:7a:63:2c:f5:c9:03:65:20:35:7d:16:b0:72:2f:
cd:a1:6b:9f:94:a3:15:84:4e:38:09:6e:ea:6c:ef:fc:47:23:
bf:ac:ab:03:9f:e5:b6:95:a3:49:15:66:7c:d9:c8:c7:d9:59:
72:68:57:a5:2c:50:e2:fb:94:23:cf:df:58:26:19:a8:f8:12:
6a:e4:51:73:9c:c6:61:05:e1:da:81:f2:64:b5:f8:bb:d7:2b:
49:cd:05:66:84:78:1a:28:fd:55:43:ae:57:84:fe:c0:2b:a2:
67:d4:17:11:1b:c5:c9:b4:8b:ea:c4:64:db:13:9b:10:8c:3f:
17:a2:b4:30:98:d2:3d:87:7a:52:c1:56:a9:b3:cf:3e:bd:0b:
a8:f3:59:8a:cc:d0:5e:1f:b9:d3:e5:ee:7b:39:25:24:98:96:
4f:a0:47:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 10:58:18 2025 by rpki-client