Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/4ebc33-ee54-437c-8a1b-dec4807cd7e6/1/CP4EAkJlE1PVVrjEJACCGQ8nHRM.mft
File: CP4EAkJlE1PVVrjEJACCGQ8nHRM.mft (raw, json)
Hash identifier: cxlFDO3wL/+JPbyrILgVno+ryf+Rktg7WPqoq+25CkE=
Subject key identifier: 80:F3:75:48:47:DD:AC:DF:15:88:D0:06:B0:E5:3F:FD:EC:F3:F9:67
Authority key identifier: 08:FE:04:02:42:65:13:53:D5:56:B8:C4:24:00:82:19:0F:27:1D:13
Certificate issuer: /CN=08fe040242651353d556b8c4240082190f271d13
Certificate serial: 01987E9C6F4A0F32DC714ACB488F0BE1B9EE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CP4EAkJlE1PVVrjEJACCGQ8nHRM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/4ebc33-ee54-437c-8a1b-dec4807cd7e6/1/CP4EAkJlE1PVVrjEJACCGQ8nHRM.mft
Manifest number: 1621
Signing time: Wed 06 Aug 2025 09:00:37 +0000
Manifest this update: Wed 06 Aug 2025 09:00:37 +0000
Manifest next update: Thu 07 Aug 2025 09:00:37 +0000
Files and hashes: 1: CP4EAkJlE1PVVrjEJACCGQ8nHRM.crl (hash: L9Cip0CEYc7Ltrnu9uqC553I4lLt2fAQrmDt4Fh97yI=)
2: Z53TKhtsYia8AaAM7SEuxUzomSo.roa (hash: Y9Eq+3ShcYYBqxEHUekT9D2l2UAArlCFvrOoMzpOskE=)
3: cvkG_y1cL0YAHfjQA7tH3oSS1BM.roa (hash: kvaRsBfAFxeZA6gu+TEc8LHfkCny56mAcc6wJSjFdsU=)
4: gQYzmf6ITShbiQOv-E4IPv9srh4.roa (hash: fi2BKmp1xnFSLXfCDfMkmvC2sWL44Qwu+h1WLCwFISs=)
5: it7IHvJCQfR1gZTQymCzS9Ta2cI.roa (hash: /axHPc2cp+I2aoPIZLPk+zOh5Faet3AVlxLqRnIEWb4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/4ebc33-ee54-437c-8a1b-dec4807cd7e6/1/CP4EAkJlE1PVVrjEJACCGQ8nHRM.crl
rsync://rpki.ripe.net/repository/DEFAULT/e3/4ebc33-ee54-437c-8a1b-dec4807cd7e6/1/CP4EAkJlE1PVVrjEJACCGQ8nHRM.mft
rsync://rpki.ripe.net/repository/DEFAULT/CP4EAkJlE1PVVrjEJACCGQ8nHRM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 08:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7e:9c:6f:4a:0f:32:dc:71:4a:cb:48:8f:0b:e1:b9:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08fe040242651353d556b8c4240082190f271d13
Validity
Not Before: Aug 6 09:00:37 2025 GMT
Not After : Aug 7 09:00:37 2025 GMT
Subject: CN=80f3754847ddacdf1588d006b0e53ffdecf3f967
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:1e:a5:ec:69:fa:91:e3:a1:60:06:a6:b8:da:
d9:1e:4e:39:e0:7e:ce:3e:cd:ae:41:ba:a5:fc:10:
f2:89:0d:e8:e3:d8:97:a6:91:ca:14:fc:16:a3:69:
60:23:6a:5d:25:5c:da:8f:cd:ce:e0:5c:38:b7:71:
f5:a8:23:b3:4a:56:f4:ac:44:0d:89:83:e1:f4:66:
b5:06:cf:bd:2d:50:e2:03:02:93:9f:2a:17:f2:f8:
75:dd:65:df:d3:df:29:15:80:05:58:72:c6:51:01:
e5:89:1e:c2:cc:4e:da:82:31:b2:30:08:ab:fd:a0:
ee:9d:03:2f:7c:44:c6:b7:88:86:44:45:cb:ed:81:
9f:bb:e7:a4:0f:71:a3:41:9d:7a:f3:04:fe:32:b1:
78:1d:df:67:38:88:a9:47:86:fe:22:a2:51:8a:89:
8c:0c:36:d0:ef:be:27:9a:04:09:f6:58:c3:81:38:
58:99:f4:75:ad:39:20:53:6c:62:c2:fe:32:b9:7e:
3e:e8:fa:b5:c4:55:4a:c6:8e:21:4a:a7:10:a5:df:
58:d3:d3:32:73:3e:07:4f:7e:db:74:4f:5e:f7:e2:
61:48:11:6c:4b:fc:33:13:3c:cb:95:35:64:28:14:
ee:a8:6a:1c:d8:e2:9f:31:cb:c7:9f:81:d6:05:af:
3b:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:F3:75:48:47:DD:AC:DF:15:88:D0:06:B0:E5:3F:FD:EC:F3:F9:67
X509v3 Authority Key Identifier:
keyid:08:FE:04:02:42:65:13:53:D5:56:B8:C4:24:00:82:19:0F:27:1D:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CP4EAkJlE1PVVrjEJACCGQ8nHRM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/4ebc33-ee54-437c-8a1b-dec4807cd7e6/1/CP4EAkJlE1PVVrjEJACCGQ8nHRM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/4ebc33-ee54-437c-8a1b-dec4807cd7e6/1/CP4EAkJlE1PVVrjEJACCGQ8nHRM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:77:7f:48:05:6c:73:b4:b4:14:a8:b6:0a:49:20:44:a7:e9:
04:52:52:7a:32:ce:6f:ca:ee:4e:c3:41:f4:b2:bf:db:87:82:
a7:43:8c:f3:ea:01:8e:5b:4f:99:57:98:8b:4a:65:fa:6c:b7:
5e:13:71:4c:de:1c:b9:ba:da:2b:5d:a5:de:61:78:e3:06:99:
b0:55:95:1a:bd:9d:3f:72:56:10:b7:1a:95:fd:b6:a2:e8:32:
6e:b3:3f:a3:5f:57:ec:4b:e1:04:56:0b:e4:ec:cf:91:9a:4f:
bd:2d:7b:bb:ff:f1:fa:7e:c4:db:01:3f:75:61:cd:e9:bd:0c:
b2:4e:ab:0f:c3:61:82:ff:d6:82:21:1b:bd:c4:f0:3e:7a:ff:
09:15:40:22:dc:1d:49:8d:22:ad:e1:3d:af:b8:cd:59:0f:81:
c7:a1:6b:4d:94:ce:0a:53:ad:13:1f:e3:a0:16:1b:4b:2d:1e:
53:98:60:55:7b:d0:f4:c8:67:9b:f9:85:20:ed:10:c7:32:a2:
7f:43:61:09:59:8a:7c:ce:52:d3:1f:8f:8a:c6:19:9d:24:30:
4a:04:47:68:51:16:23:8b:80:7c:f9:93:e9:2a:6b:8d:2c:91:
75:32:f7:58:d6:12:f9:6d:e7:6c:08:de:2a:58:fc:4b:b0:1f:
fa:02:d6:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 16:13:05 2025 by rpki-client