Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/b9df5a-a454-4e27-86af-13d380715cef/1/4gThwgEU13MWlN3E8nfE3xv_xPg.mft
File: 4gThwgEU13MWlN3E8nfE3xv_xPg.mft (raw, json)
Hash identifier: 0HkaeXQB3bF9gku4Yre1f1Z/fB5QvI14W7/trz87YSc=
Subject key identifier: AA:CA:B8:ED:41:1F:2D:46:6D:FB:6F:23:B8:D6:5C:89:C8:00:4F:64
Authority key identifier: E2:04:E1:C2:01:14:D7:73:16:94:DD:C4:F2:77:C4:DF:1B:FF:C4:F8
Certificate issuer: /CN=e204e1c20114d7731694ddc4f277c4df1bffc4f8
Certificate serial: 0198A04E5F61487DB21AE4E7FE285B5E409B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4gThwgEU13MWlN3E8nfE3xv_xPg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/b9df5a-a454-4e27-86af-13d380715cef/1/4gThwgEU13MWlN3E8nfE3xv_xPg.mft
Manifest number: 1630
Signing time: Tue 12 Aug 2025 22:02:27 +0000
Manifest this update: Tue 12 Aug 2025 22:02:27 +0000
Manifest next update: Wed 13 Aug 2025 22:02:27 +0000
Files and hashes: 1: 4gThwgEU13MWlN3E8nfE3xv_xPg.crl (hash: n6Wm+Zo5L8FMSPSTYAI/210JR2UX5yTBHapu3CdswRs=)
2: BDxLMkKnaceqpe6Gqca_PK3aI0Q.roa (hash: g477khgykIY2Mcl6yKjre2phFpHAMbTwNboQthw3CVw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ec/b9df5a-a454-4e27-86af-13d380715cef/1/4gThwgEU13MWlN3E8nfE3xv_xPg.crl
rsync://rpki.ripe.net/repository/DEFAULT/ec/b9df5a-a454-4e27-86af-13d380715cef/1/4gThwgEU13MWlN3E8nfE3xv_xPg.mft
rsync://rpki.ripe.net/repository/DEFAULT/4gThwgEU13MWlN3E8nfE3xv_xPg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 Aug 2025 22:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:a0:4e:5f:61:48:7d:b2:1a:e4:e7:fe:28:5b:5e:40:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e204e1c20114d7731694ddc4f277c4df1bffc4f8
Validity
Not Before: Aug 12 22:02:27 2025 GMT
Not After : Aug 13 22:02:27 2025 GMT
Subject: CN=aacab8ed411f2d466dfb6f23b8d65c89c8004f64
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:d4:d3:3c:9e:d6:71:f7:27:62:8e:1b:da:d2:
6b:15:db:8c:43:16:60:d6:00:78:3b:45:cd:7b:c9:
d4:9a:89:d8:7c:06:b7:80:a1:4a:8e:e8:9e:da:0b:
cd:c5:c7:88:56:9f:40:c1:ba:38:06:ba:f9:71:89:
ad:02:ff:c7:b3:e7:d5:da:ff:09:34:5d:98:cc:78:
63:06:e0:9c:05:85:89:b9:d2:04:e7:f2:36:9f:ac:
ee:b1:80:95:4d:1f:a6:87:01:1e:24:a8:b4:b3:05:
f1:b0:ef:52:b0:b2:dd:1f:96:ba:69:ad:ac:20:90:
26:6f:a3:a1:88:dc:16:7c:c4:78:3a:e6:37:ca:67:
31:c0:10:68:fd:47:6c:b6:d9:53:b5:65:8a:7d:18:
08:c9:6b:b8:84:8a:9e:9b:44:02:78:89:ad:98:e2:
28:f7:41:f2:05:4f:c3:da:48:8d:57:0b:e5:c3:f3:
cc:08:6e:cc:51:cb:5f:80:14:98:94:0e:4c:79:fd:
9d:9d:7a:22:9d:71:6a:c3:60:49:31:33:00:7f:71:
cb:a0:2d:a4:3f:32:e8:ad:b9:fc:e7:94:d7:10:c6:
5a:5f:12:91:3c:3c:c0:dd:ae:1a:cb:63:28:66:c9:
d3:2c:c7:39:ac:02:5c:c3:6e:02:d1:5f:5e:2c:ee:
81:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:CA:B8:ED:41:1F:2D:46:6D:FB:6F:23:B8:D6:5C:89:C8:00:4F:64
X509v3 Authority Key Identifier:
keyid:E2:04:E1:C2:01:14:D7:73:16:94:DD:C4:F2:77:C4:DF:1B:FF:C4:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4gThwgEU13MWlN3E8nfE3xv_xPg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/b9df5a-a454-4e27-86af-13d380715cef/1/4gThwgEU13MWlN3E8nfE3xv_xPg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/b9df5a-a454-4e27-86af-13d380715cef/1/4gThwgEU13MWlN3E8nfE3xv_xPg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:12:dd:78:bc:3d:cd:d3:0c:e7:8e:cf:cd:90:96:63:82:24:
7e:2f:c8:2f:8f:30:8a:fd:fc:d6:a6:88:2a:b6:9b:8d:ea:53:
70:26:75:a5:ff:ea:c7:52:1c:24:48:a5:17:56:12:e0:30:16:
e0:6b:f1:46:a7:62:ca:ad:d3:48:5d:2b:91:d2:5e:ca:85:33:
6a:27:c6:62:ee:c8:7c:6e:66:11:a6:36:11:83:6f:14:ab:83:
1e:28:66:b8:16:e1:ed:ed:76:ca:e1:bf:cf:1c:3a:0a:7e:bb:
3f:9b:55:a6:13:0a:95:b8:74:12:4d:d1:36:9a:76:f7:ff:9d:
33:25:b7:0a:cf:57:a5:5b:13:17:df:9c:1e:9f:f6:3a:b4:c4:
ff:a6:e1:65:ee:e0:83:21:2e:9a:f9:9a:40:2f:1e:f7:60:91:
d3:97:3b:07:a5:99:a3:ea:0e:3a:58:7d:eb:2e:d4:eb:9e:c0:
52:21:96:c7:02:21:b2:ce:f0:5f:31:f9:60:77:6f:21:ca:74:
68:b6:4d:35:d3:b8:96:46:d4:50:1c:9d:de:b2:62:8e:05:d1:
63:6e:9a:98:5b:f5:60:79:64:03:f4:ad:7a:74:b3:8f:d9:ca:
03:8b:d1:19:f3:5b:ba:dc:04:ee:b9:7d:1c:cc:1e:a8:ac:8f:
25:d8:b0:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 13 04:24:25 2025 by rpki-client