Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/a5881a-98e8-4e45-bcb8-71eecf898d42/1/4r2Sdqb3jawQAsN4OhjUXsFLXUM.mft
File: 4r2Sdqb3jawQAsN4OhjUXsFLXUM.mft (raw, json)
Hash identifier: CmqpwRcez/UcqTAqGZjbDyX0wmSkuwkgi0GIl5p1mTQ=
Subject key identifier: 30:C7:77:EA:79:77:CE:B5:D4:56:A5:71:80:67:D2:7B:35:12:7A:56
Authority key identifier: E2:BD:92:76:A6:F7:8D:AC:10:02:C3:78:3A:18:D4:5E:C1:4B:5D:43
Certificate issuer: /CN=e2bd9276a6f78dac1002c3783a18d45ec14b5d43
Certificate serial: 01985D24043D200274B3CCDBE923581EEAD6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4r2Sdqb3jawQAsN4OhjUXsFLXUM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/a5881a-98e8-4e45-bcb8-71eecf898d42/1/4r2Sdqb3jawQAsN4OhjUXsFLXUM.mft
Manifest number: 1243
Signing time: Wed 30 Jul 2025 21:01:38 +0000
Manifest this update: Wed 30 Jul 2025 21:01:38 +0000
Manifest next update: Thu 31 Jul 2025 21:01:38 +0000
Files and hashes: 1: 4r2Sdqb3jawQAsN4OhjUXsFLXUM.crl (hash: czSlAl64W+A4/xEVrMmZL/jEi5f8d/Nf7h3kAa85kBw=)
2: mOT0OYFh_GTToGk2uZIA05IaKkw.roa (hash: GG4lCtM4E3X4xtxRGjZF0g1O2sssvUKDA/6mYRaIOI0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/a5881a-98e8-4e45-bcb8-71eecf898d42/1/4r2Sdqb3jawQAsN4OhjUXsFLXUM.crl
rsync://rpki.ripe.net/repository/DEFAULT/1e/a5881a-98e8-4e45-bcb8-71eecf898d42/1/4r2Sdqb3jawQAsN4OhjUXsFLXUM.mft
rsync://rpki.ripe.net/repository/DEFAULT/4r2Sdqb3jawQAsN4OhjUXsFLXUM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 31 Jul 2025 21:01:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:5d:24:04:3d:20:02:74:b3:cc:db:e9:23:58:1e:ea:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e2bd9276a6f78dac1002c3783a18d45ec14b5d43
Validity
Not Before: Jul 30 21:01:38 2025 GMT
Not After : Jul 31 21:01:38 2025 GMT
Subject: CN=30c777ea7977ceb5d456a5718067d27b35127a56
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:3d:b4:7c:46:8c:7c:bb:68:29:bb:9b:82:22:
dd:a4:fd:62:7a:a2:16:35:a3:af:4b:9b:52:3e:b1:
6e:91:4f:66:56:7c:fd:f6:2e:85:e5:6d:22:c8:c0:
fb:d9:b3:85:2b:f1:fc:4f:c2:d5:43:8f:b6:b9:c1:
b5:67:87:b4:15:45:61:e2:7d:6f:4e:87:1a:6e:6d:
fe:50:ef:ae:ff:c3:df:84:36:00:43:42:6a:ea:fa:
16:6d:da:89:47:ad:c0:c4:26:2d:64:1a:86:ce:0a:
04:80:6e:ee:55:16:91:32:b8:ee:fa:9e:06:0d:d6:
06:ea:88:3f:c3:c6:cd:9d:ba:1f:75:07:90:28:26:
2f:67:34:62:e4:71:fc:76:11:0b:7f:5a:2a:88:ea:
c8:f9:13:87:65:86:02:73:fb:d5:1e:b7:9a:23:7f:
29:73:9b:c4:79:9b:32:62:ac:7c:2c:5b:71:56:d0:
07:73:7f:9c:1d:99:36:fe:ef:a2:c6:d4:94:22:d8:
ac:9d:62:12:fd:dd:ae:eb:d6:f8:3b:30:27:40:46:
51:a9:57:97:d3:cc:12:cd:2c:7e:a6:d5:ce:d6:62:
3e:e7:53:24:ac:06:ff:f2:e5:97:51:41:ad:48:77:
e8:10:0d:97:a1:41:d8:7b:bd:fe:e6:da:6e:92:28:
00:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:C7:77:EA:79:77:CE:B5:D4:56:A5:71:80:67:D2:7B:35:12:7A:56
X509v3 Authority Key Identifier:
keyid:E2:BD:92:76:A6:F7:8D:AC:10:02:C3:78:3A:18:D4:5E:C1:4B:5D:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4r2Sdqb3jawQAsN4OhjUXsFLXUM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/a5881a-98e8-4e45-bcb8-71eecf898d42/1/4r2Sdqb3jawQAsN4OhjUXsFLXUM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/a5881a-98e8-4e45-bcb8-71eecf898d42/1/4r2Sdqb3jawQAsN4OhjUXsFLXUM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:cc:f7:60:cd:fd:41:83:93:f0:04:60:f8:b2:67:a2:79:85:
d4:1f:a1:5c:06:1d:d3:54:40:50:41:13:ea:9d:82:03:c3:81:
eb:26:2e:8a:db:8e:25:3c:90:f8:a3:e3:c0:4d:b4:84:2c:f7:
ce:46:9a:ab:32:ab:e1:84:b2:77:24:fd:00:9b:0f:6b:5c:14:
30:78:99:53:23:96:df:c9:4c:bb:9f:41:c8:bc:a1:a6:00:0f:
e9:3c:c6:e9:67:44:73:e3:68:a9:62:9c:87:8a:88:26:94:a4:
c4:11:a8:43:7d:48:ce:fd:54:9b:84:d5:7b:1f:88:2b:66:8c:
62:ae:50:01:cc:7b:3f:7a:f3:e5:d7:06:aa:95:84:df:4c:b6:
09:22:df:ad:86:14:42:ac:48:cb:81:b9:ee:f0:66:c8:46:94:
36:d7:b8:e0:b4:1b:1b:06:66:6e:e1:7a:d5:ce:54:4c:c7:ce:
fc:33:22:f8:1b:eb:63:49:cc:27:fa:5a:3c:f6:d2:fc:fa:22:
dc:44:7b:29:02:20:51:f2:2f:4c:f5:6e:05:36:2e:d0:7f:3e:
61:75:68:94:26:ab:bf:c3:a1:f0:bb:ae:fb:54:b9:75:4c:4c:
21:d8:a7:41:9d:6d:07:54:da:6e:9c:fb:6d:d9:63:96:c9:32:
e7:a3:0d:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 31 01:36:17 2025 by rpki-client