Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/d46487-43ff-45ee-8228-ba59fb2c4610/1/4OkqeIpBBX0ndk8W87HSo-9jRdY.mft
File: 4OkqeIpBBX0ndk8W87HSo-9jRdY.mft (raw, json)
Hash identifier: zsCCSZLnWfoKOwd0CI7Lvn1Zf0VhgAUsR+v9MjPUXOk=
Subject key identifier: 56:4C:71:C3:A4:5A:FD:9F:10:16:BE:F7:1C:C3:3D:17:DC:89:31:13
Authority key identifier: E0:E9:2A:78:8A:41:05:7D:27:76:4F:16:F3:B1:D2:A3:EF:63:45:D6
Certificate issuer: /CN=e0e92a788a41057d27764f16f3b1d2a3ef6345d6
Certificate serial: 019847E470583D51C4C9161C3F68BEF1A6A3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4OkqeIpBBX0ndk8W87HSo-9jRdY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/d46487-43ff-45ee-8228-ba59fb2c4610/1/4OkqeIpBBX0ndk8W87HSo-9jRdY.mft
Manifest number: 1600
Signing time: Sat 26 Jul 2025 18:00:09 +0000
Manifest this update: Sat 26 Jul 2025 18:00:09 +0000
Manifest next update: Sun 27 Jul 2025 18:00:09 +0000
Files and hashes: 1: 4OkqeIpBBX0ndk8W87HSo-9jRdY.crl (hash: wMwDsdOAUkogs7U98uqE2f6aAV4tfzar4YEc7CS24Zs=)
2: BL-NDYgvhNS3ykN2bZ3XYSmCEZI.roa (hash: fBvbXWPI6WfZJHj+SHtFQme53z0G5Q3tNcbJRdIO7rA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/d46487-43ff-45ee-8228-ba59fb2c4610/1/4OkqeIpBBX0ndk8W87HSo-9jRdY.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/d46487-43ff-45ee-8228-ba59fb2c4610/1/4OkqeIpBBX0ndk8W87HSo-9jRdY.mft
rsync://rpki.ripe.net/repository/DEFAULT/4OkqeIpBBX0ndk8W87HSo-9jRdY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 11:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:47:e4:70:58:3d:51:c4:c9:16:1c:3f:68:be:f1:a6:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e0e92a788a41057d27764f16f3b1d2a3ef6345d6
Validity
Not Before: Jul 26 18:00:09 2025 GMT
Not After : Jul 27 18:00:09 2025 GMT
Subject: CN=564c71c3a45afd9f1016bef71cc33d17dc893113
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:77:aa:18:fe:9d:ff:a1:50:e5:46:13:18:3e:
d5:9c:d5:f7:dd:c6:1a:1b:57:78:41:df:ad:0c:da:
f6:c1:49:a4:99:ee:73:c8:bb:1a:2e:c9:39:5a:90:
d4:d1:01:11:87:22:07:52:46:59:66:ad:bd:9f:fd:
45:07:c7:81:34:4a:64:d9:f1:a5:b8:3a:7c:5a:f3:
21:c5:27:24:d6:06:b5:6a:0a:58:d8:8d:8b:7c:12:
b3:0c:63:60:6f:25:89:96:9b:5e:01:b7:94:ff:da:
1c:f6:1f:b4:db:d0:77:f5:ae:ee:2f:74:2b:04:a9:
3a:60:f9:fc:b3:95:75:00:47:4a:17:c9:99:30:b6:
d1:2d:5b:49:d5:12:81:72:36:e7:de:f9:35:db:13:
1a:1c:0c:ec:17:d6:75:5e:c3:df:08:cb:3e:f9:84:
1a:cf:ce:d8:2d:62:9d:8a:06:69:25:f0:25:3e:ed:
d2:ea:99:6a:19:ee:67:8a:33:11:21:47:c8:f3:a6:
84:e2:43:bf:0f:ab:ee:92:2a:e9:57:7c:07:90:83:
2e:98:0f:23:cf:ca:f0:02:39:7c:7e:32:84:9c:b5:
ab:3a:0a:44:bf:6d:23:5e:cc:03:ff:97:28:b0:0b:
39:ff:11:ba:23:1b:ba:27:79:82:79:cb:52:76:67:
eb:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:4C:71:C3:A4:5A:FD:9F:10:16:BE:F7:1C:C3:3D:17:DC:89:31:13
X509v3 Authority Key Identifier:
keyid:E0:E9:2A:78:8A:41:05:7D:27:76:4F:16:F3:B1:D2:A3:EF:63:45:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4OkqeIpBBX0ndk8W87HSo-9jRdY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/d46487-43ff-45ee-8228-ba59fb2c4610/1/4OkqeIpBBX0ndk8W87HSo-9jRdY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/d46487-43ff-45ee-8228-ba59fb2c4610/1/4OkqeIpBBX0ndk8W87HSo-9jRdY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:59:27:e3:19:5c:e3:00:12:b0:b0:15:98:53:f6:16:92:89:
41:35:37:d1:dc:2a:8e:c6:6a:7c:ba:32:e0:2a:54:e6:0b:54:
4e:a8:08:5f:20:2b:92:cb:08:27:92:f4:a2:44:66:82:ea:b5:
9d:a5:16:4b:6b:80:96:2d:a0:77:11:c0:ce:4e:b3:a0:1b:75:
92:12:89:aa:02:a7:4d:b4:0c:2e:b4:d4:e6:bd:1f:c9:2b:22:
3f:a8:3b:bc:84:f5:28:17:cf:e0:c7:e1:c2:c9:a3:c1:a8:70:
24:d7:da:c0:06:fe:af:be:0b:d0:4f:ad:71:8f:2a:26:de:b6:
88:0a:b1:88:e9:58:12:f1:45:e3:1e:a8:7b:51:59:7f:83:0e:
18:63:26:0f:1b:77:2d:5d:42:f7:f5:0f:15:f7:cf:f1:ab:5f:
40:b3:c3:56:41:f2:fb:0e:84:8f:e9:36:89:94:22:08:24:83:
16:ad:3c:07:68:de:79:aa:1c:e0:82:7a:80:41:9d:90:aa:d1:
77:25:49:60:7b:9f:d3:8a:f4:65:61:e1:fb:a0:5f:e8:86:01:
71:de:e6:ad:d6:01:b0:b1:02:b8:12:1d:9e:f0:16:75:ff:10:
5a:5c:28:33:6c:04:08:09:b8:35:67:28:78:6b:19:37:06:c2:
90:94:53:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 21:01:11 2025 by rpki-client