Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/1f68a8-49dd-412b-bba9-0bf539b3b714/1/4IEr3duyOb5jncddzS4pbE_PSpc.mft
File: 4IEr3duyOb5jncddzS4pbE_PSpc.mft (raw, json)
Hash identifier: MApPvDlr2P8FH+OjaZYkfsbimJYj/k+KYMttbhA2PNE=
Subject key identifier: 23:7D:BF:C9:99:25:F2:78:72:89:CA:42:53:59:01:39:33:D1:9E:C4
Authority key identifier: E0:81:2B:DD:DB:B2:39:BE:63:9D:C7:5D:CD:2E:29:6C:4F:CF:4A:97
Certificate issuer: /CN=e0812bdddbb239be639dc75dcd2e296c4fcf4a97
Certificate serial: 0198462D8E5D873469DCFBEFC2E2743494FE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4IEr3duyOb5jncddzS4pbE_PSpc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/1f68a8-49dd-412b-bba9-0bf539b3b714/1/4IEr3duyOb5jncddzS4pbE_PSpc.mft
Manifest number: 1285
Signing time: Sat 26 Jul 2025 10:00:47 +0000
Manifest this update: Sat 26 Jul 2025 10:00:47 +0000
Manifest next update: Sun 27 Jul 2025 10:00:47 +0000
Files and hashes: 1: 4IEr3duyOb5jncddzS4pbE_PSpc.crl (hash: L8e9rjwpnhqNxulP+fo4g1Gk7secb5kUDP1W0DZLXDo=)
2: el5qFDMV5hMW1NAGRbmjGI68Zeg.roa (hash: u+tO/pc49AyT7XnqsS0vc/mFjJM4zzaHLzr71ZyNaRI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/1f68a8-49dd-412b-bba9-0bf539b3b714/1/4IEr3duyOb5jncddzS4pbE_PSpc.crl
rsync://rpki.ripe.net/repository/DEFAULT/70/1f68a8-49dd-412b-bba9-0bf539b3b714/1/4IEr3duyOb5jncddzS4pbE_PSpc.mft
rsync://rpki.ripe.net/repository/DEFAULT/4IEr3duyOb5jncddzS4pbE_PSpc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 02:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:46:2d:8e:5d:87:34:69:dc:fb:ef:c2:e2:74:34:94:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e0812bdddbb239be639dc75dcd2e296c4fcf4a97
Validity
Not Before: Jul 26 10:00:47 2025 GMT
Not After : Jul 27 10:00:47 2025 GMT
Subject: CN=237dbfc99925f2787289ca425359013933d19ec4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:73:fc:df:04:6e:67:09:01:51:81:87:e0:8a:
c1:6a:ec:56:ee:0c:81:35:43:e8:25:4d:e5:6d:32:
93:7a:3c:90:9d:f5:13:74:e6:a1:9f:43:13:d8:c8:
95:71:2a:42:43:d6:bf:33:d3:a7:66:7c:da:11:c4:
ed:07:80:2d:91:f4:e4:1e:b7:90:ba:2c:ee:b5:27:
15:22:71:a1:25:0e:c6:1c:da:08:99:fc:b7:ef:12:
f5:ba:1e:57:10:34:c6:28:09:be:a5:29:65:72:31:
b1:e3:fb:7a:34:a0:fe:9d:ec:ba:23:6a:f4:d8:c0:
50:7e:de:6d:14:a3:31:34:46:f6:a1:b4:10:9a:c4:
ed:dd:15:42:30:1d:02:37:ec:3e:c5:10:a4:06:6d:
e7:87:20:c7:84:fe:94:a8:b3:a1:81:31:61:93:72:
7c:c7:50:cf:18:10:74:c2:d4:b5:70:da:ec:da:83:
f1:95:d7:2d:1c:60:c5:d4:e1:fc:f0:e9:35:44:77:
1f:39:00:5c:68:7d:2a:c2:7b:74:25:f8:c0:57:d9:
9d:64:28:54:10:5e:ac:89:a4:ab:3c:19:21:6b:9e:
73:98:ea:bb:45:ec:b6:1e:86:fe:7b:88:86:ff:59:
01:a3:68:c4:1f:5f:dd:92:9c:ff:95:29:ec:21:14:
ab:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:7D:BF:C9:99:25:F2:78:72:89:CA:42:53:59:01:39:33:D1:9E:C4
X509v3 Authority Key Identifier:
keyid:E0:81:2B:DD:DB:B2:39:BE:63:9D:C7:5D:CD:2E:29:6C:4F:CF:4A:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4IEr3duyOb5jncddzS4pbE_PSpc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/1f68a8-49dd-412b-bba9-0bf539b3b714/1/4IEr3duyOb5jncddzS4pbE_PSpc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/1f68a8-49dd-412b-bba9-0bf539b3b714/1/4IEr3duyOb5jncddzS4pbE_PSpc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b8:ad:64:8b:c0:16:56:13:8f:f5:67:23:d5:e3:7c:3a:59:59:
fe:83:92:83:d3:00:10:e2:6d:2d:f1:8b:7a:87:02:43:b9:94:
7a:ce:f1:96:fa:ba:72:53:56:d5:8c:71:07:75:89:c9:fa:52:
c5:61:b5:5f:aa:4a:3a:0d:1b:78:a3:51:8f:01:f4:3c:13:07:
3c:a0:3e:af:93:13:50:38:cc:a9:e2:5d:64:12:58:93:37:8a:
2f:98:eb:9e:91:4a:09:f3:05:e0:a9:08:f6:fe:0f:e6:cf:f9:
b0:f6:94:b6:43:7b:20:f3:8e:49:4e:28:67:c5:eb:d1:4f:6a:
2f:01:5b:ab:32:d5:f6:8d:44:3e:4d:ad:81:01:71:3b:86:3b:
93:dd:56:a2:0b:e2:93:3e:6b:19:65:35:b3:cb:10:0d:f3:82:
4e:62:b5:d4:c4:ad:75:96:24:9e:f3:a5:70:4b:18:8f:3b:0c:
d5:4e:15:e4:cf:7e:98:a8:6c:00:58:c9:dc:c5:33:87:a8:17:
36:da:81:1e:cb:27:36:ed:98:6b:d3:46:95:9d:c2:bb:c6:e3:
c0:3e:50:b7:f4:ed:48:bd:83:bf:5d:e1:9f:91:9e:6a:ae:9c:
b5:be:7f:67:63:11:f7:9b:c0:c9:19:70:f0:18:2f:08:7e:cb:
37:cb:da:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 11:20:24 2025 by rpki-client