Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/deebb8-ae86-4694-a972-827a0ac04a9d/1/4toj07kw1MHzrHMGXXGmB8NdKQA.mft
File: 4toj07kw1MHzrHMGXXGmB8NdKQA.mft (raw, json)
Hash identifier: joYWp8qMHuZ1gzYGTBDIHU4dZZzTAaTYThuroioVS3M=
Subject key identifier: 82:4B:CB:AC:37:F6:F6:34:8B:14:0C:D5:CB:BF:F6:E4:1C:20:11:73
Authority key identifier: E2:DA:23:D3:B9:30:D4:C1:F3:AC:73:06:5D:71:A6:07:C3:5D:29:00
Certificate issuer: /CN=e2da23d3b930d4c1f3ac73065d71a607c35d2900
Certificate serial: 019849D33936608AA82165EB54208993D949
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4toj07kw1MHzrHMGXXGmB8NdKQA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/deebb8-ae86-4694-a972-827a0ac04a9d/1/4toj07kw1MHzrHMGXXGmB8NdKQA.mft
Manifest number: 1604
Signing time: Sun 27 Jul 2025 03:00:36 +0000
Manifest this update: Sun 27 Jul 2025 03:00:36 +0000
Manifest next update: Mon 28 Jul 2025 03:00:36 +0000
Files and hashes: 1: 1-rU3n-MmX0x7vSSIglpKrM6p7wc.roa (hash: c73xh5XkAcPFRSo/oWqlfjE2NzFubQ+3BLO5+whFr6o=)
2: 4toj07kw1MHzrHMGXXGmB8NdKQA.crl (hash: a5D5CNEYhxUXtosX82WnUMivzUya+KMRsK+TcrQ5Lik=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/deebb8-ae86-4694-a972-827a0ac04a9d/1/4toj07kw1MHzrHMGXXGmB8NdKQA.crl
rsync://rpki.ripe.net/repository/DEFAULT/12/deebb8-ae86-4694-a972-827a0ac04a9d/1/4toj07kw1MHzrHMGXXGmB8NdKQA.mft
rsync://rpki.ripe.net/repository/DEFAULT/4toj07kw1MHzrHMGXXGmB8NdKQA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 00:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:49:d3:39:36:60:8a:a8:21:65:eb:54:20:89:93:d9:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e2da23d3b930d4c1f3ac73065d71a607c35d2900
Validity
Not Before: Jul 27 03:00:36 2025 GMT
Not After : Jul 28 03:00:36 2025 GMT
Subject: CN=824bcbac37f6f6348b140cd5cbbff6e41c201173
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:a6:cf:56:9a:99:a9:16:75:34:9e:0a:3e:3e:
cc:99:4f:83:a3:03:b8:37:73:e0:96:a2:18:11:1a:
42:08:0c:89:8d:ed:30:16:63:54:14:f6:fc:ea:da:
c8:e7:cb:a2:2b:94:50:67:86:6f:24:b5:5f:1c:39:
cc:c2:f1:3d:0f:9d:31:4c:30:47:06:1e:a1:80:08:
5b:c6:49:30:07:15:f6:a0:3a:37:16:a0:b2:15:49:
92:31:fa:e7:63:00:8f:44:6d:24:03:56:fb:ea:39:
48:fe:73:08:40:b2:24:b8:91:a8:7c:df:6f:5e:a0:
01:98:20:da:11:fc:77:97:0c:70:62:1f:82:07:60:
e6:0f:00:e5:31:bd:52:ad:49:3d:ef:82:1b:ec:30:
47:ab:9d:71:56:16:c5:fb:13:40:c2:3d:21:41:f1:
9c:d8:4f:40:ee:53:30:b0:c6:5a:4e:c1:c9:18:b8:
a8:e4:14:15:1c:97:84:16:fd:c0:91:22:01:5f:54:
fd:9e:95:85:a5:ff:00:5d:e7:43:82:6f:b1:a7:ad:
1e:6f:94:b5:3c:d3:09:b8:28:cf:e9:b7:10:fd:27:
43:55:1f:ad:de:61:52:ca:d4:37:be:56:d9:e0:b1:
5c:0e:f5:d8:0c:36:db:48:15:2f:bb:c3:13:06:0a:
4b:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:4B:CB:AC:37:F6:F6:34:8B:14:0C:D5:CB:BF:F6:E4:1C:20:11:73
X509v3 Authority Key Identifier:
keyid:E2:DA:23:D3:B9:30:D4:C1:F3:AC:73:06:5D:71:A6:07:C3:5D:29:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4toj07kw1MHzrHMGXXGmB8NdKQA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/deebb8-ae86-4694-a972-827a0ac04a9d/1/4toj07kw1MHzrHMGXXGmB8NdKQA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/deebb8-ae86-4694-a972-827a0ac04a9d/1/4toj07kw1MHzrHMGXXGmB8NdKQA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:3c:37:a5:4e:a1:06:5c:f9:60:ce:5f:b5:67:f7:ba:ec:a8:
bd:51:b6:5e:91:5f:2b:d1:0d:31:f6:2d:60:9f:88:a5:66:58:
f3:ee:03:65:92:2e:c5:0f:32:a4:b1:4b:13:9b:19:4f:7a:46:
3e:12:57:91:6a:fe:1f:c6:8a:49:a3:b6:b0:ce:28:da:9b:62:
d0:2c:36:0e:79:88:9b:fb:5c:41:fc:fc:1b:e0:10:90:ca:b6:
62:a4:da:05:2d:73:82:57:e8:55:c0:41:02:28:c9:52:1d:42:
c6:ad:a9:0e:0d:52:83:a4:05:0c:f4:42:3f:26:5f:58:75:0c:
90:34:20:c5:08:ff:9d:0e:b3:33:eb:46:5e:3c:0f:ac:3f:04:
ff:b3:95:a1:84:bd:be:63:1c:45:14:67:6b:51:06:d5:2d:56:
9a:ef:f3:ee:81:20:cc:03:4b:3d:86:32:c3:e5:3e:dc:2d:ba:
d8:6e:42:5f:7c:82:9b:b0:79:ee:61:3d:5a:bf:7a:d8:65:ee:
27:6e:98:9f:86:ef:40:5f:96:16:c0:71:b8:c6:ac:08:fe:23:
6a:e8:1d:f0:e5:b1:49:d9:b3:65:73:6b:f8:e0:75:6b:13:bf:
42:9f:bd:82:33:98:9d:05:31:d8:d5:39:b7:f9:d7:26:93:b4:
92:f7:e3:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 09:46:13 2025 by rpki-client