Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/c3bce6-58fb-4874-8b3e-3a85ee4c89bc/1/4JbEM2QAPsP398bqgVe4pQ9EDsw.mft
File: 4JbEM2QAPsP398bqgVe4pQ9EDsw.mft (raw, json)
Hash identifier: UiI+7qKK8854qdOelO2Y3ABGYbubp8YYtKyWLhbhRGk=
Subject key identifier: 7F:B4:A6:72:3F:31:A5:5D:42:06:5B:EF:61:4F:61:40:4E:D8:FC:89
Authority key identifier: E0:96:C4:33:64:00:3E:C3:F7:F7:C6:EA:81:57:B8:A5:0F:44:0E:CC
Certificate issuer: /CN=e096c43364003ec3f7f7c6ea8157b8a50f440ecc
Certificate serial: 01989712D752556A1A206ECAD13F31A861E8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4JbEM2QAPsP398bqgVe4pQ9EDsw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/c3bce6-58fb-4874-8b3e-3a85ee4c89bc/1/4JbEM2QAPsP398bqgVe4pQ9EDsw.mft
Manifest number: 162B
Signing time: Mon 11 Aug 2025 03:00:50 +0000
Manifest this update: Mon 11 Aug 2025 03:00:50 +0000
Manifest next update: Tue 12 Aug 2025 03:00:50 +0000
Files and hashes: 1: 1-3RhAT2YPB0r1ebiXkFnyV6tG8Y.roa (hash: IQS6khxqEbU9ABB49P6SoigiSYTvtS2Iy2GfbbCv2tY=)
2: 4JbEM2QAPsP398bqgVe4pQ9EDsw.crl (hash: IWu9KHobI9ecUIR/HCsbeBEVMxwcDiaQ3f99FOtrlNs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/c3bce6-58fb-4874-8b3e-3a85ee4c89bc/1/4JbEM2QAPsP398bqgVe4pQ9EDsw.crl
rsync://rpki.ripe.net/repository/DEFAULT/ea/c3bce6-58fb-4874-8b3e-3a85ee4c89bc/1/4JbEM2QAPsP398bqgVe4pQ9EDsw.mft
rsync://rpki.ripe.net/repository/DEFAULT/4JbEM2QAPsP398bqgVe4pQ9EDsw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 12 Aug 2025 02:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:97:12:d7:52:55:6a:1a:20:6e:ca:d1:3f:31:a8:61:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e096c43364003ec3f7f7c6ea8157b8a50f440ecc
Validity
Not Before: Aug 11 03:00:50 2025 GMT
Not After : Aug 12 03:00:50 2025 GMT
Subject: CN=7fb4a6723f31a55d42065bef614f61404ed8fc89
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:1f:6e:90:8e:f8:ff:27:fb:20:4b:78:58:cb:
f6:29:ec:d7:e7:54:00:4c:99:42:eb:17:84:c1:8d:
7a:4b:89:ef:96:ae:d8:40:f8:4e:29:4e:59:4c:61:
48:f5:0a:0d:c1:25:eb:ef:45:2f:a4:34:55:ba:ab:
6a:9d:b4:f8:ad:4d:34:35:40:f4:16:2a:08:7d:1d:
94:44:18:ca:58:19:be:f5:81:4c:f8:ce:1a:f9:97:
82:7d:37:4e:16:9f:02:7a:a2:31:22:54:23:18:bd:
49:b7:75:34:63:fe:03:b4:55:34:8a:7c:01:7c:69:
b6:cb:7a:7f:af:68:a9:c8:0c:be:01:05:9f:7a:c3:
3d:db:72:d6:26:fe:14:0a:14:05:8c:cf:e4:78:8b:
44:55:6d:76:40:23:a4:cf:4a:aa:6a:a0:d9:24:90:
d4:89:46:82:51:d8:e1:de:47:f0:28:95:85:38:9c:
53:dd:bc:c6:5c:a2:36:b3:6c:20:68:d0:93:c7:97:
36:7c:dd:e6:89:2d:8b:c7:8b:60:1b:63:e2:fe:6c:
79:69:41:90:78:69:64:2f:e2:02:59:53:24:ef:02:
2d:5b:3a:55:cb:35:9e:7c:24:d5:13:7c:57:28:99:
2a:5f:71:bb:c9:0e:99:25:c1:59:fa:d8:6b:12:47:
e0:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:B4:A6:72:3F:31:A5:5D:42:06:5B:EF:61:4F:61:40:4E:D8:FC:89
X509v3 Authority Key Identifier:
keyid:E0:96:C4:33:64:00:3E:C3:F7:F7:C6:EA:81:57:B8:A5:0F:44:0E:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4JbEM2QAPsP398bqgVe4pQ9EDsw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/c3bce6-58fb-4874-8b3e-3a85ee4c89bc/1/4JbEM2QAPsP398bqgVe4pQ9EDsw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/c3bce6-58fb-4874-8b3e-3a85ee4c89bc/1/4JbEM2QAPsP398bqgVe4pQ9EDsw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:cd:ad:1b:70:96:13:1e:0a:24:2d:bc:39:b8:79:8f:43:d5:
f4:63:66:e4:29:c3:9c:30:f1:37:b4:51:3e:bc:83:f3:f5:0f:
dc:a8:3b:bd:0b:96:6e:d0:ef:2d:3d:02:a5:e7:b2:1c:f0:29:
eb:a2:e2:47:93:a7:5c:03:0a:77:b5:2c:a1:6c:f1:25:ab:22:
06:c9:3b:fa:78:43:ee:fa:ae:0f:b4:31:aa:ce:e5:54:8b:dd:
60:cb:3e:d5:1f:13:f9:53:d8:0f:cd:a1:d8:08:28:c3:05:70:
fc:b1:2d:a7:c0:88:77:c5:17:18:47:02:6e:61:b1:66:a7:68:
dd:2c:ae:9c:1a:dc:c8:7a:ce:2c:79:ea:98:0c:af:0b:6d:67:
92:d0:94:02:c0:a3:81:fd:96:91:3b:8b:d4:20:d9:97:25:33:
bc:29:39:80:e9:97:5b:87:2d:30:7d:41:35:9a:61:18:bc:ba:
57:f8:42:5e:3b:a5:7c:b2:97:74:41:16:15:68:08:01:c0:ef:
2b:f1:2e:dd:02:68:c4:30:e9:df:01:d5:48:34:a1:ef:aa:e5:
15:25:ae:53:c0:47:71:52:ef:7b:10:31:e7:ce:9a:7c:62:37:
8d:88:ad:9b:16:34:25:3c:4f:d0:68:d6:5e:1f:19:f8:e7:f6:
90:95:e0:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 11 10:08:52 2025 by rpki-client