Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/f2db08-c845-41ab-a08a-3375617d4efd/1/4sWGEhDcOL2660d9bacZZkqEprw.mft
File: 4sWGEhDcOL2660d9bacZZkqEprw.mft (raw, json)
Hash identifier: GOSPKgD3CW6vjE/hJN9xlJ1vdBsYsUD7SWCXv1epI/U=
Subject key identifier: F2:B7:9A:69:58:38:B0:A5:C4:A5:5A:1D:00:1D:43:15:41:4E:15:9D
Authority key identifier: E2:C5:86:12:10:DC:38:BD:BA:EB:47:7D:6D:A7:19:66:4A:84:A6:BC
Certificate issuer: /CN=e2c5861210dc38bdbaeb477d6da719664a84a6bc
Certificate serial: 0198857A6535C26EAD1D2E11BCB06E4CA902
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4sWGEhDcOL2660d9bacZZkqEprw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/de/f2db08-c845-41ab-a08a-3375617d4efd/1/4sWGEhDcOL2660d9bacZZkqEprw.mft
Manifest number: 1621
Signing time: Thu 07 Aug 2025 17:00:47 +0000
Manifest this update: Thu 07 Aug 2025 17:00:47 +0000
Manifest next update: Fri 08 Aug 2025 17:00:47 +0000
Files and hashes: 1: 4sWGEhDcOL2660d9bacZZkqEprw.crl (hash: O2GfQrh+CHJGPWu5MLX3vTGmTwb0LXi8WXXr+eiOD0M=)
2: MhYnzmLfZDvOOpTx4DJlD8uvHAw.roa (hash: memj1j1yK6z3c51s+6fk9nq4QfCP9UkOHBbx45J56ck=)
3: V1IYhraqy6GtWLev9Eiy1F0cSC0.roa (hash: OXaQyDbPBz9AsW1XM72kAOArg1kTGFWfPBLrTjWDPns=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/de/f2db08-c845-41ab-a08a-3375617d4efd/1/4sWGEhDcOL2660d9bacZZkqEprw.crl
rsync://rpki.ripe.net/repository/DEFAULT/de/f2db08-c845-41ab-a08a-3375617d4efd/1/4sWGEhDcOL2660d9bacZZkqEprw.mft
rsync://rpki.ripe.net/repository/DEFAULT/4sWGEhDcOL2660d9bacZZkqEprw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 08 Aug 2025 16:13:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:85:7a:65:35:c2:6e:ad:1d:2e:11:bc:b0:6e:4c:a9:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e2c5861210dc38bdbaeb477d6da719664a84a6bc
Validity
Not Before: Aug 7 17:00:47 2025 GMT
Not After : Aug 8 17:00:47 2025 GMT
Subject: CN=f2b79a695838b0a5c4a55a1d001d4315414e159d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:99:ad:ba:89:de:67:35:b2:ac:93:0d:36:6e:
a5:7c:b8:1a:68:27:ef:d8:99:15:01:39:66:02:ba:
b1:8f:60:84:55:36:fb:ca:14:6f:20:42:78:12:d4:
80:11:d5:8e:64:fc:f4:be:8d:46:b1:5b:84:9a:21:
5f:c9:d9:21:fc:13:77:5f:35:35:01:87:56:7e:92:
df:1e:78:ea:e5:7d:49:24:ca:03:f8:13:a2:5c:c4:
d3:2b:69:7d:6c:46:d0:2b:19:a0:3d:5e:eb:40:4a:
31:1b:0d:cd:ee:56:2a:1e:bb:bb:45:a6:d1:85:73:
bc:3a:2c:2e:30:5c:cf:6c:11:f3:4f:c5:16:ab:04:
81:9f:72:9b:58:21:f3:a0:2f:45:b8:aa:ec:83:1d:
d2:65:c0:f2:a1:72:3c:ac:f5:e0:f1:28:25:78:92:
8e:b0:28:1e:d8:94:21:a3:19:52:64:22:27:5e:cc:
eb:06:54:75:76:8a:92:9c:a7:ee:89:c7:82:e2:0b:
08:03:39:4e:33:54:7a:c2:e6:3c:c7:be:ec:95:fb:
10:ac:ae:4c:7c:dc:8f:6f:33:87:9b:a3:62:6c:c0:
69:2a:12:80:56:be:e8:6a:de:8c:a4:49:46:c8:d1:
75:df:5b:7c:c8:05:9f:13:26:0d:8b:c6:61:c7:d1:
f2:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:B7:9A:69:58:38:B0:A5:C4:A5:5A:1D:00:1D:43:15:41:4E:15:9D
X509v3 Authority Key Identifier:
keyid:E2:C5:86:12:10:DC:38:BD:BA:EB:47:7D:6D:A7:19:66:4A:84:A6:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4sWGEhDcOL2660d9bacZZkqEprw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/f2db08-c845-41ab-a08a-3375617d4efd/1/4sWGEhDcOL2660d9bacZZkqEprw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/de/f2db08-c845-41ab-a08a-3375617d4efd/1/4sWGEhDcOL2660d9bacZZkqEprw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:13:70:db:65:f7:87:68:c4:38:5c:1b:66:54:9d:68:a8:e8:
b6:9d:4e:a5:af:69:de:6d:22:65:86:69:90:9f:22:06:91:6a:
ef:87:a1:e0:3e:8b:1a:17:59:6e:b2:bb:e9:2a:36:52:bf:27:
6f:2a:5e:1c:85:c7:62:c9:f4:a2:fb:25:88:26:5f:c6:b3:e1:
5f:e8:07:8b:0a:6f:af:93:02:79:c2:55:f3:30:d5:db:58:fa:
c7:e1:3a:89:fe:73:19:e2:2a:07:d3:08:a4:ab:59:bc:48:21:
27:92:b8:83:2c:0e:da:d9:a5:5d:84:e4:c0:ed:66:88:05:23:
69:f5:0e:64:22:3b:53:7a:fa:25:85:8e:31:67:88:f0:53:33:
88:46:8c:bf:f6:7c:5c:72:f9:d3:75:3b:7b:48:12:99:82:1b:
6b:e9:45:93:cf:56:0c:46:87:b6:fc:39:3c:cc:ef:77:1e:fb:
8e:f3:84:82:1e:00:30:7b:97:f7:ca:fa:ff:62:45:fd:0c:b8:
5a:a2:42:c5:1f:50:ea:d5:9d:57:5a:7f:83:b7:6d:ff:3d:37:
78:f2:7d:6b:99:d2:f1:e3:dd:bb:0d:0f:52:ae:9a:18:3f:8e:
06:a5:91:4c:1e:6e:6a:24:67:86:51:cd:51:55:5c:5a:07:fa:
69:b8:e1:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 8 00:13:18 2025 by rpki-client