Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/f12ba1-d826-4662-bed9-c997b87b4b5f/1/4tF62mQ5KIwpcDz3Be9kr7OCCtk.mft
File: 4tF62mQ5KIwpcDz3Be9kr7OCCtk.mft (raw, json)
Hash identifier: UM7SXifQ/DSISUOx8AgFmnXgATH2xhTyhDr6vOqGNTY=
Subject key identifier: 08:56:1A:F6:D2:AE:51:88:C5:EC:89:05:76:4B:25:50:11:41:CD:4C
Authority key identifier: E2:D1:7A:DA:64:39:28:8C:29:70:3C:F7:05:EF:64:AF:B3:82:0A:D9
Certificate issuer: /CN=e2d17ada6439288c29703cf705ef64afb3820ad9
Certificate serial: 01984966E0ED246FCD792C7063AE61E6783C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4tF62mQ5KIwpcDz3Be9kr7OCCtk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/f12ba1-d826-4662-bed9-c997b87b4b5f/1/4tF62mQ5KIwpcDz3Be9kr7OCCtk.mft
Manifest number: 0667
Signing time: Sun 27 Jul 2025 01:02:15 +0000
Manifest this update: Sun 27 Jul 2025 01:02:15 +0000
Manifest next update: Mon 28 Jul 2025 01:02:15 +0000
Files and hashes: 1: 4tF62mQ5KIwpcDz3Be9kr7OCCtk.crl (hash: PTjXSdtDB8Ya1USztZPpHkD6JYdtzIGvv3gDmYt8Yhs=)
2: 6yVMq5BTt8MOOejBYcSjDgADz6M.roa (hash: +lA9zA3W3Yg9Ww1/RHvP0oevwKXOFVEKE6vwlBI3GS8=)
3: r7S4PGOtYK_PBp7kgURvb3XFM1M.roa (hash: oYqwnDt8x2Fy139phL6QrAYp1Cw9URTCQ1HjbcPByVI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/f12ba1-d826-4662-bed9-c997b87b4b5f/1/4tF62mQ5KIwpcDz3Be9kr7OCCtk.crl
rsync://rpki.ripe.net/repository/DEFAULT/1e/f12ba1-d826-4662-bed9-c997b87b4b5f/1/4tF62mQ5KIwpcDz3Be9kr7OCCtk.mft
rsync://rpki.ripe.net/repository/DEFAULT/4tF62mQ5KIwpcDz3Be9kr7OCCtk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 00:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:49:66:e0:ed:24:6f:cd:79:2c:70:63:ae:61:e6:78:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e2d17ada6439288c29703cf705ef64afb3820ad9
Validity
Not Before: Jul 27 01:02:15 2025 GMT
Not After : Jul 28 01:02:15 2025 GMT
Subject: CN=08561af6d2ae5188c5ec8905764b25501141cd4c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:96:17:66:1d:99:ac:e5:81:0d:b2:39:7e:1d:
ec:0f:c7:b1:63:d6:75:4a:c2:c9:fb:0d:35:a5:94:
85:29:12:af:12:16:b9:a5:73:93:44:71:27:98:4a:
12:6a:b4:99:80:e6:1d:74:34:de:a5:67:a8:43:c0:
aa:48:0e:3a:bf:79:f0:4f:98:bb:fd:41:23:04:4b:
cd:3b:8f:59:f5:a6:a2:be:2d:3b:e5:bc:1d:26:5c:
73:63:bb:34:62:88:a8:61:3f:c7:f1:6b:4d:81:e6:
ee:a0:84:59:d0:0d:40:11:4a:5a:89:1c:20:ae:b3:
39:cc:a8:21:8a:95:29:ad:b4:41:9d:15:c8:68:2f:
85:86:36:e0:44:29:dc:2e:eb:fd:97:8e:18:97:79:
0c:9d:a3:4b:22:04:a6:3a:0e:1c:98:f3:90:68:bb:
ce:55:9b:4f:d9:29:a8:aa:f7:eb:f9:85:9c:44:d6:
80:b6:e3:f8:ad:1f:28:9c:39:fb:c7:ab:73:ef:52:
b5:d3:36:b0:d4:a1:5b:a9:31:ea:51:ff:41:e4:b2:
1e:83:23:ef:04:d8:4a:38:ef:22:67:dc:d5:a6:c3:
d6:57:3f:6d:0b:89:15:17:0e:aa:46:e0:d4:e4:70:
e5:d9:dc:34:74:fa:95:3b:66:28:8e:87:00:2a:da:
a4:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:56:1A:F6:D2:AE:51:88:C5:EC:89:05:76:4B:25:50:11:41:CD:4C
X509v3 Authority Key Identifier:
keyid:E2:D1:7A:DA:64:39:28:8C:29:70:3C:F7:05:EF:64:AF:B3:82:0A:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4tF62mQ5KIwpcDz3Be9kr7OCCtk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/f12ba1-d826-4662-bed9-c997b87b4b5f/1/4tF62mQ5KIwpcDz3Be9kr7OCCtk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/f12ba1-d826-4662-bed9-c997b87b4b5f/1/4tF62mQ5KIwpcDz3Be9kr7OCCtk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:cd:72:ca:59:9c:30:1f:50:6f:44:4d:74:dd:aa:9d:60:68:
d3:52:1c:42:1c:2c:52:dd:c9:af:97:bf:1c:67:20:72:53:e5:
d0:9f:b8:07:03:3d:fe:8e:5c:62:e0:8a:9f:55:d5:58:c0:1b:
ed:1f:a9:d2:76:9b:34:d3:e5:10:1a:01:9c:ff:6c:d2:77:04:
d8:23:2c:29:92:d3:05:9e:a2:b3:d3:b2:f4:54:0a:e6:0b:4f:
6b:45:28:a9:89:38:d7:0c:f1:c3:8a:89:1c:f2:dd:0f:a1:54:
5b:a7:b7:11:c1:d1:da:66:36:36:4d:b2:a7:67:31:1f:0e:7f:
5b:c8:cf:4f:5a:61:a3:8e:be:4e:05:ce:0b:78:09:ea:8a:1e:
02:02:1f:86:14:f8:fe:14:42:5f:dc:b0:8c:aa:e7:3f:3b:9b:
59:93:b2:d1:8e:46:11:e6:d1:a8:5f:10:83:60:b7:9b:be:3a:
15:b1:6f:ae:b5:bf:fc:80:16:51:76:fc:2e:02:9d:54:17:58:
3a:20:cc:34:af:67:9c:4d:7f:fc:83:5c:60:b7:cf:14:15:50:
7f:9c:e7:d5:88:94:68:1d:5f:b9:4f:c1:43:1f:05:18:13:a9:
e3:c7:32:1e:04:3f:74:93:4c:95:e4:96:10:b7:e4:e8:e4:e2:
9d:a9:db:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 07:10:36 2025 by rpki-client