Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/28d600-a869-4ab1-9b2e-446019966a19/1/4FdMKHjWtTYTm4lfCMnG2xjhKps.mft
File: 4FdMKHjWtTYTm4lfCMnG2xjhKps.mft (raw, json)
Hash identifier: hVVdCXC+RpZj7KALwfpox6TFTBt6WugW+0n/oYXQXYE=
Subject key identifier: C4:F6:05:12:8F:A6:8A:5A:C4:B1:DD:E2:25:E6:17:FF:43:AF:D3:63
Authority key identifier: E0:57:4C:28:78:D6:B5:36:13:9B:89:5F:08:C9:C6:DB:18:E1:2A:9B
Certificate issuer: /CN=e0574c2878d6b536139b895f08c9c6db18e12a9b
Certificate serial: 01987C0993834179F33310D958A6DF3B2BE1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4FdMKHjWtTYTm4lfCMnG2xjhKps.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/28d600-a869-4ab1-9b2e-446019966a19/1/4FdMKHjWtTYTm4lfCMnG2xjhKps.mft
Manifest number: 1623
Signing time: Tue 05 Aug 2025 21:00:58 +0000
Manifest this update: Tue 05 Aug 2025 21:00:58 +0000
Manifest next update: Wed 06 Aug 2025 21:00:58 +0000
Files and hashes: 1: 4FdMKHjWtTYTm4lfCMnG2xjhKps.crl (hash: sq4zazuJ95vnzydMtsBmvaNpuKSr+AuBQCJodbtUDmU=)
2: F5_lNgEgzfWoE5_Cqsta810GUD8.roa (hash: iFMsbMYL1gucfU8DYPuCeVZjMtj1pfRR/WALBk/WmbI=)
3: GPk2iBuHJkhE3vpf7v6PEKywv7w.roa (hash: GWqOVJmjwk1Pn1GbnWABjMV1e5ehhhP81Lyr4q/ji2E=)
4: OflCzXga8ucfjVqp9uUhh7zK_qM.roa (hash: tJ4j/9WnUQafTpRcoYrdjgTWc0yGFpsicsnou7Bw3VU=)
5: SwP1NYlZc5jbDBXXeMNl1hjy1LA.roa (hash: DMSgzACIbB/JZuNfMaMP2kCv3jA/gmECBXJyT4DQzwk=)
6: W6KxeoLPp69-NZgXYljCkgfMzmI.roa (hash: WWTdkNcNGcm7BbXaoCx/steftEF6zzmySvzLX5r6lpM=)
7: aAP3usYXoFfJgmCfE8_VSaJGbTU.roa (hash: x6wsw/R7hONUKg46ARfXmJgysd6wAhjXDI0EDejXv3A=)
8: uGW4wsIIh4UfRdPgdZPrknwT0_s.roa (hash: DewiqU6mTjj3HeFVXlyQsAjNkoAtpsCRp10m8FffrLA=)
9: x9MROVO0I_4DbRC-cdgvtpUcqSo.roa (hash: nmMjnQZ2GqEE7VMtJSqrjcD6wbWb5UdEwkmJmCMyG7E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/28d600-a869-4ab1-9b2e-446019966a19/1/4FdMKHjWtTYTm4lfCMnG2xjhKps.crl
rsync://rpki.ripe.net/repository/DEFAULT/e4/28d600-a869-4ab1-9b2e-446019966a19/1/4FdMKHjWtTYTm4lfCMnG2xjhKps.mft
rsync://rpki.ripe.net/repository/DEFAULT/4FdMKHjWtTYTm4lfCMnG2xjhKps.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 Aug 2025 17:44:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7c:09:93:83:41:79:f3:33:10:d9:58:a6:df:3b:2b:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e0574c2878d6b536139b895f08c9c6db18e12a9b
Validity
Not Before: Aug 5 21:00:58 2025 GMT
Not After : Aug 6 21:00:58 2025 GMT
Subject: CN=c4f605128fa68a5ac4b1dde225e617ff43afd363
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:2f:86:9a:d1:ed:9e:df:e5:60:ac:b8:a1:00:
df:4d:16:58:6b:72:40:2b:b6:21:cd:a6:a3:98:57:
a3:a5:99:d5:60:23:13:65:eb:d0:96:49:d4:33:25:
6d:f4:d7:ef:b8:00:69:c7:a7:5d:94:8d:04:d4:c8:
c8:ee:7a:12:83:35:08:00:31:d6:b8:65:c8:a7:f2:
eb:77:1b:20:f2:6d:6a:bd:3c:2d:9e:4c:50:e5:c3:
23:5b:c5:8d:34:13:23:24:2e:8f:3f:1c:5b:cf:11:
55:52:67:9b:f1:e9:99:18:6f:12:33:eb:cb:09:f0:
ed:83:bc:33:8e:fe:67:bf:97:5f:91:c8:70:84:2b:
30:48:b5:c2:0c:8c:57:0c:f5:50:aa:66:a8:96:0f:
d5:d1:53:41:f7:6d:87:42:f2:54:1e:ff:47:73:b6:
19:56:ff:d8:f2:58:4e:50:d1:1e:c6:8c:f1:1e:4f:
2f:80:00:50:50:78:e5:a9:8b:e7:52:3b:63:59:90:
a7:77:62:d3:ea:41:16:09:f6:45:f2:88:12:ce:03:
a1:e7:a7:13:5e:db:7f:d1:13:5c:4d:eb:ff:30:1d:
0a:63:dc:f8:6f:a7:02:36:fe:09:4b:77:02:2d:8e:
fb:e1:81:da:39:9d:0d:70:ad:8c:36:4f:11:05:4c:
46:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:F6:05:12:8F:A6:8A:5A:C4:B1:DD:E2:25:E6:17:FF:43:AF:D3:63
X509v3 Authority Key Identifier:
keyid:E0:57:4C:28:78:D6:B5:36:13:9B:89:5F:08:C9:C6:DB:18:E1:2A:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4FdMKHjWtTYTm4lfCMnG2xjhKps.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/28d600-a869-4ab1-9b2e-446019966a19/1/4FdMKHjWtTYTm4lfCMnG2xjhKps.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/28d600-a869-4ab1-9b2e-446019966a19/1/4FdMKHjWtTYTm4lfCMnG2xjhKps.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:e9:26:1a:ed:a7:73:74:e2:10:33:4a:9b:20:58:c2:e8:8a:
e9:24:31:54:f6:15:a1:95:c3:95:1f:de:3b:09:59:16:7d:16:
0b:31:f0:51:ef:3c:b8:a2:3d:36:9f:3b:84:06:df:30:29:c9:
59:e8:bd:c6:8f:37:d0:9e:ae:22:cb:d7:fd:f9:c0:4e:cf:b0:
dd:69:53:89:7d:ae:b6:f4:a3:f0:ee:47:5d:09:02:8d:7d:4f:
b7:19:af:9c:29:0e:e3:00:19:49:f9:b9:f2:1e:0e:7b:1f:9b:
dd:3b:90:5f:36:17:c2:38:8f:81:4a:06:c4:7b:9f:88:d5:e3:
ed:11:15:78:c2:a0:72:78:09:45:6d:1f:b7:a2:e0:ce:6c:0f:
d2:68:4f:3c:c3:bb:02:cb:09:0f:d1:4d:a0:dc:9a:0e:c6:65:
4c:c8:ac:4f:fb:42:ac:8b:cf:cf:f5:24:6d:3b:80:c4:ec:0c:
51:b3:14:70:f8:30:01:cb:7e:b1:ed:52:8f:bf:1b:5d:c5:28:
4a:87:ca:09:40:ec:b3:3b:a4:d0:ab:40:1e:4d:ec:87:ac:3a:
1a:c1:45:43:24:2b:47:d9:22:69:0a:51:8a:c9:25:90:d4:14:
50:f0:48:5c:86:18:85:32:48:7f:b0:00:f4:48:3d:ef:0c:60:
4e:98:92:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 03:59:58 2025 by rpki-client