Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/683ffb-65eb-4972-997a-5f29c9f549e8/1/4sP8GYx3L1m47eUphWtS6heaTjg.mft
File: 4sP8GYx3L1m47eUphWtS6heaTjg.mft (raw, json)
Hash identifier: fWFrGbgDDk3UrVM9OArRc5IAKaPxd3oJXNiiZctNE78=
Subject key identifier: 45:0B:A6:C9:6C:70:8B:2A:1E:EA:C9:41:D1:F8:DD:EE:7E:BE:6F:E0
Authority key identifier: E2:C3:FC:19:8C:77:2F:59:B8:ED:E5:29:85:6B:52:EA:17:9A:4E:38
Certificate issuer: /CN=e2c3fc198c772f59b8ede529856b52ea179a4e38
Certificate serial: 019883C3BB930A79D7EF291C3EA43F57DBB5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4sP8GYx3L1m47eUphWtS6heaTjg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/683ffb-65eb-4972-997a-5f29c9f549e8/1/4sP8GYx3L1m47eUphWtS6heaTjg.mft
Manifest number: 161F
Signing time: Thu 07 Aug 2025 09:01:39 +0000
Manifest this update: Thu 07 Aug 2025 09:01:39 +0000
Manifest next update: Fri 08 Aug 2025 09:01:39 +0000
Files and hashes: 1: 4sP8GYx3L1m47eUphWtS6heaTjg.crl (hash: +x4lwmKIddauwlm9xXYKNoPGGCtME5v0fFfBnkkP3TU=)
2: psTRvusZFk5Ps_Sd4pnp1hlanU8.roa (hash: 2FkietEjo3H8sm7po2MUV7JtW5puIthhRvn1WmaMes0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/683ffb-65eb-4972-997a-5f29c9f549e8/1/4sP8GYx3L1m47eUphWtS6heaTjg.crl
rsync://rpki.ripe.net/repository/DEFAULT/dc/683ffb-65eb-4972-997a-5f29c9f549e8/1/4sP8GYx3L1m47eUphWtS6heaTjg.mft
rsync://rpki.ripe.net/repository/DEFAULT/4sP8GYx3L1m47eUphWtS6heaTjg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 08 Aug 2025 08:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:83:c3:bb:93:0a:79:d7:ef:29:1c:3e:a4:3f:57:db:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e2c3fc198c772f59b8ede529856b52ea179a4e38
Validity
Not Before: Aug 7 09:01:39 2025 GMT
Not After : Aug 8 09:01:39 2025 GMT
Subject: CN=450ba6c96c708b2a1eeac941d1f8ddee7ebe6fe0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:4f:c9:2c:c9:0d:bb:c7:a8:20:ca:af:65:bd:
46:08:35:b0:f7:40:55:81:3d:58:d3:3d:d9:db:d1:
4d:72:9e:2e:f7:b7:21:64:44:a8:65:5d:f0:62:a6:
62:6f:64:0a:d1:b1:c4:27:51:82:a3:84:1f:57:f9:
c9:df:b8:e7:5f:2f:30:95:ce:0f:0f:cc:f1:c8:a9:
d2:a0:85:77:1b:76:d4:e7:44:7e:eb:7e:41:54:aa:
39:53:82:2b:83:38:e2:82:ed:5c:c4:67:99:b8:40:
fc:e2:9e:c0:cd:aa:fc:03:4c:82:bc:9b:aa:07:86:
8a:ab:b3:2e:a6:0d:28:ed:6f:3e:02:e7:70:75:b8:
74:be:9f:e9:bf:24:bf:6d:56:ba:a3:42:30:a1:2d:
db:a1:9b:70:1d:2c:3b:06:62:80:8d:03:fe:ed:06:
79:6d:2f:2f:c5:f4:52:22:45:f5:91:f5:cd:fd:aa:
8e:d1:4a:e1:8c:db:eb:bf:92:7d:b1:56:5d:11:fe:
05:6c:b9:13:76:01:73:80:90:69:70:0e:49:ed:0a:
c4:28:c9:69:68:4a:5c:a6:6c:50:d4:08:5e:f6:d0:
da:c0:10:60:d4:e0:2a:77:9e:d1:87:e4:bf:05:45:
b2:db:83:11:bb:88:9b:de:ea:54:a0:f2:09:5f:89:
78:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:0B:A6:C9:6C:70:8B:2A:1E:EA:C9:41:D1:F8:DD:EE:7E:BE:6F:E0
X509v3 Authority Key Identifier:
keyid:E2:C3:FC:19:8C:77:2F:59:B8:ED:E5:29:85:6B:52:EA:17:9A:4E:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4sP8GYx3L1m47eUphWtS6heaTjg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/683ffb-65eb-4972-997a-5f29c9f549e8/1/4sP8GYx3L1m47eUphWtS6heaTjg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/683ffb-65eb-4972-997a-5f29c9f549e8/1/4sP8GYx3L1m47eUphWtS6heaTjg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:08:bf:32:08:12:ab:c8:a6:06:a4:bb:c9:71:47:7b:b5:5d:
83:96:1e:33:cb:d1:13:ed:b1:77:12:27:c2:48:c8:f3:e1:50:
64:15:a0:43:e3:52:d1:d0:f1:cc:eb:be:87:18:aa:7e:34:80:
96:61:fb:72:3c:30:8e:d1:d1:6f:f5:fd:82:fb:1b:23:82:31:
9a:63:0d:72:9c:00:46:8e:9e:73:b5:94:86:81:5b:f7:1e:6a:
d1:ab:18:32:da:0d:16:94:46:68:3e:5b:3b:c1:c8:82:95:a0:
b8:97:9f:3e:1d:69:7d:aa:a5:32:0c:f3:c5:fd:95:43:8f:94:
87:68:8d:71:88:2f:e4:fe:0e:e6:96:ca:a3:fd:86:55:66:23:
c0:df:0b:d0:87:2c:4a:4d:74:a9:48:80:a6:ce:b5:ae:81:24:
ad:bd:1c:65:41:4a:b4:b5:b9:14:0d:cc:46:bf:ea:89:e4:5e:
74:51:d5:82:94:55:f2:e4:31:53:19:4a:a1:e2:15:97:db:4d:
61:18:5a:3a:af:bc:10:66:0b:a9:08:08:86:bb:54:15:e6:4d:
ae:d7:c5:8a:60:d1:bf:9c:c5:fc:f7:d8:d1:20:35:ab:44:59:
06:e6:ed:12:d0:89:e2:d4:57:93:d1:de:67:2f:c7:d1:c6:c7:
e6:6d:87:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 12:55:17 2025 by rpki-client