Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/ecb197-e0f5-438d-8fc5-e4d45971b13d/1/e4J6zGgKop3ayCOInYeGPkFLJBE.mft
File: e4J6zGgKop3ayCOInYeGPkFLJBE.mft (raw, json)
Hash identifier: fPAIWpli6B6pgiQnSzGqutp/+6CJ0oLSH1lOlvEJSmM=
Subject key identifier: 2A:1E:15:FF:4D:42:17:F3:BE:99:73:D9:72:79:EE:FA:AA:F0:5D:32
Authority key identifier: 7B:82:7A:CC:68:0A:A2:9D:DA:C8:23:88:9D:87:86:3E:41:4B:24:11
Certificate issuer: /CN=7b827acc680aa29ddac823889d87863e414b2411
Certificate serial: 0198523165C8464F7B36A909374436C8EE18
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/e4J6zGgKop3ayCOInYeGPkFLJBE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/ecb197-e0f5-438d-8fc5-e4d45971b13d/1/e4J6zGgKop3ayCOInYeGPkFLJBE.mft
Manifest number: 1606
Signing time: Mon 28 Jul 2025 18:00:25 +0000
Manifest this update: Mon 28 Jul 2025 18:00:25 +0000
Manifest next update: Tue 29 Jul 2025 18:00:25 +0000
Files and hashes: 1: e4J6zGgKop3ayCOInYeGPkFLJBE.crl (hash: aH1HripSl7PLwW1zQRJU6vDKKTIgo2BkCJBFKFlBDAo=)
2: vAUqTPB1ggTD55ydvicj8MOXqzU.roa (hash: ANS6SkWw8/TFy8xaxFG7MJ7RE0vAnysZgfuBquUIKSM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/ecb197-e0f5-438d-8fc5-e4d45971b13d/1/e4J6zGgKop3ayCOInYeGPkFLJBE.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/ecb197-e0f5-438d-8fc5-e4d45971b13d/1/e4J6zGgKop3ayCOInYeGPkFLJBE.mft
rsync://rpki.ripe.net/repository/DEFAULT/e4J6zGgKop3ayCOInYeGPkFLJBE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Jul 2025 18:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:52:31:65:c8:46:4f:7b:36:a9:09:37:44:36:c8:ee:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7b827acc680aa29ddac823889d87863e414b2411
Validity
Not Before: Jul 28 18:00:25 2025 GMT
Not After : Jul 29 18:00:25 2025 GMT
Subject: CN=2a1e15ff4d4217f3be9973d97279eefaaaf05d32
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:3b:52:3e:9d:8e:d0:4c:76:f8:10:53:e9:23:
a9:03:f3:4c:6e:e4:2e:8b:f7:5a:6d:0d:e0:89:9a:
f1:79:45:f5:af:cb:a2:2d:7a:dc:2c:30:eb:99:ca:
70:61:39:00:1e:3e:43:93:68:6d:ab:8e:80:5d:ec:
73:a9:96:c1:6d:1d:5f:8b:12:95:3d:18:5e:17:54:
04:dd:ad:41:8e:0d:5b:76:89:2f:c4:c2:fe:fb:31:
e0:42:d1:29:8f:38:3e:49:6e:7c:a9:b1:ca:4d:d4:
34:84:22:81:75:49:d9:4a:cf:b8:33:54:03:25:e8:
85:48:d1:f5:6c:f0:fc:2b:4c:b8:f5:2c:b4:e0:b9:
24:c7:20:24:ae:48:11:85:b6:14:20:63:a2:94:09:
f7:a3:57:38:a6:01:5a:c7:f8:51:e8:62:95:70:f2:
4e:e6:93:ef:e0:af:5d:8d:fd:25:45:a5:4e:13:f7:
e2:ea:0b:86:63:56:ba:ec:3f:8b:33:7c:04:9e:9d:
e1:0c:2a:8a:55:3a:99:87:e2:ec:7f:95:1e:d1:1a:
c9:5b:5e:40:c6:cc:00:2c:84:fb:ba:3a:b5:30:22:
5d:23:d4:8a:5c:72:49:2a:9e:dd:16:72:b5:c7:e2:
c0:9d:d2:58:d6:78:cb:fa:b8:0f:b8:f5:ca:d8:55:
1f:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:1E:15:FF:4D:42:17:F3:BE:99:73:D9:72:79:EE:FA:AA:F0:5D:32
X509v3 Authority Key Identifier:
keyid:7B:82:7A:CC:68:0A:A2:9D:DA:C8:23:88:9D:87:86:3E:41:4B:24:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4J6zGgKop3ayCOInYeGPkFLJBE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/ecb197-e0f5-438d-8fc5-e4d45971b13d/1/e4J6zGgKop3ayCOInYeGPkFLJBE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/ecb197-e0f5-438d-8fc5-e4d45971b13d/1/e4J6zGgKop3ayCOInYeGPkFLJBE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9d:f9:5e:f2:30:07:3b:89:95:e6:b8:4b:af:16:d6:37:38:cd:
0a:47:d8:1c:6a:af:ad:bd:90:49:a3:3c:da:f8:dd:c8:32:06:
85:ad:c2:6b:c6:d0:4f:dc:34:e1:4c:64:c3:1f:fd:68:4a:14:
5d:32:9f:c0:ba:41:b9:4f:37:d2:2e:8d:b5:1a:b5:d7:d7:3e:
ea:20:40:0d:8a:dd:a9:94:21:88:4f:f1:1d:24:5d:dd:3e:eb:
a1:b2:0c:28:d4:5d:c0:36:d8:b3:8f:5c:c4:2d:e2:ba:83:38:
69:49:3d:ac:87:ee:48:b5:37:d0:5b:06:fd:b6:85:bc:d7:80:
5d:30:8e:e9:63:92:27:df:52:ab:32:fd:17:2b:2c:48:bc:fa:
36:7b:97:5a:04:82:15:d1:94:db:88:92:30:1f:be:15:d6:3e:
30:46:2a:01:77:2a:8e:bf:a9:6f:da:94:3d:f2:34:58:4e:30:
ad:79:46:ae:7c:36:7e:b6:1a:d9:20:e8:8d:2e:fd:05:b6:b2:
21:5d:84:1c:79:0e:55:20:ed:61:97:65:55:46:93:6c:86:3a:
2a:2d:f9:60:40:54:b1:77:c7:94:e0:ad:37:2a:fe:9e:91:43:
a5:2e:09:f8:46:1d:f4:d2:37:f6:b2:21:72:2d:84:c2:83:7b:
85:17:b2:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 29 03:50:04 2025 by rpki-client