Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/b65e33-f947-4968-a27c-dd99d397e4d6/1/rN4jWPV0OcRPaxZi9VYVoKq2uss.mft
File: rN4jWPV0OcRPaxZi9VYVoKq2uss.mft (raw, json)
Hash identifier: 7EgTS/YmR+w7eyuRsPoyujY18kk6MXsSUfYCIJZE7YM=
Subject key identifier: 41:9D:33:84:DD:9F:85:C2:C4:0C:AB:D7:13:16:21:FF:10:06:12:ED
Authority key identifier: AC:DE:23:58:F5:74:39:C4:4F:6B:16:62:F5:56:15:A0:AA:B6:BA:CB
Certificate issuer: /CN=acde2358f57439c44f6b1662f55615a0aab6bacb
Certificate serial: 019848896E4A4FF5A490A2F57BDC7A3094F9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rN4jWPV0OcRPaxZi9VYVoKq2uss.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/76/b65e33-f947-4968-a27c-dd99d397e4d6/1/rN4jWPV0OcRPaxZi9VYVoKq2uss.mft
Manifest number: 1602
Signing time: Sat 26 Jul 2025 21:00:22 +0000
Manifest this update: Sat 26 Jul 2025 21:00:22 +0000
Manifest next update: Sun 27 Jul 2025 21:00:22 +0000
Files and hashes: 1: 1-XA6Oyh0n7DlBmRcqaq5JPobRBQ.roa (hash: 4xRutx43UVc6W0el47UeYIWEsInjaHlLdoMFA8q84mY=)
2: 2IN1Er2MsTzD9JeH28eRdl-c7u0.roa (hash: 02dSVlb8MKuiq6SZlhNvmzUoRJ0PeDVGS4rbsaqtZBI=)
3: rN4jWPV0OcRPaxZi9VYVoKq2uss.crl (hash: 1Q4RJ6znpBuCUDvXrEzI3x32ZfVh1YwVQJX3y5+xTMg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/76/b65e33-f947-4968-a27c-dd99d397e4d6/1/rN4jWPV0OcRPaxZi9VYVoKq2uss.crl
rsync://rpki.ripe.net/repository/DEFAULT/76/b65e33-f947-4968-a27c-dd99d397e4d6/1/rN4jWPV0OcRPaxZi9VYVoKq2uss.mft
rsync://rpki.ripe.net/repository/DEFAULT/rN4jWPV0OcRPaxZi9VYVoKq2uss.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 20:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:48:89:6e:4a:4f:f5:a4:90:a2:f5:7b:dc:7a:30:94:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=acde2358f57439c44f6b1662f55615a0aab6bacb
Validity
Not Before: Jul 26 21:00:22 2025 GMT
Not After : Jul 27 21:00:22 2025 GMT
Subject: CN=419d3384dd9f85c2c40cabd7131621ff100612ed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:d9:05:27:7e:00:58:5c:68:13:4e:c4:e4:1c:
d8:bd:a4:c6:e0:86:3d:97:4a:ae:92:3f:d9:15:7f:
b8:ca:5f:7e:26:94:51:02:24:90:10:68:50:c9:aa:
ce:b2:5e:64:aa:d0:df:e7:fd:fc:60:cd:9f:8c:85:
e2:37:e5:cb:64:db:74:40:cd:31:0e:b8:f1:5d:72:
1f:c9:2d:fb:5e:e0:39:2e:fa:b7:15:dd:59:70:21:
d6:b5:59:af:89:1e:95:da:89:30:f3:2c:00:45:01:
e3:ca:2d:dc:39:c3:64:e2:63:76:73:25:85:af:31:
eb:b0:f5:1e:06:6e:81:0c:87:45:19:ea:cf:2c:0a:
d5:b6:6d:64:1f:ed:49:36:ab:2d:75:9d:a4:7c:c1:
5c:60:75:9b:e7:07:be:be:72:51:3c:4a:ea:a6:e1:
ee:d8:4d:e0:67:30:bb:9f:9c:3e:4b:86:ae:89:f5:
98:ff:af:b3:e1:03:81:4c:a3:49:83:87:05:41:1e:
e3:42:a4:92:96:3d:6e:3c:37:69:23:fb:cd:72:04:
94:fc:cb:ca:79:2a:f5:7e:63:5b:d0:09:3f:43:bb:
ff:0d:0d:ca:d5:e2:cd:cc:ac:8e:26:b0:ec:f4:72:
d2:05:e6:28:4f:36:40:71:57:78:5d:67:14:ba:21:
b8:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:9D:33:84:DD:9F:85:C2:C4:0C:AB:D7:13:16:21:FF:10:06:12:ED
X509v3 Authority Key Identifier:
keyid:AC:DE:23:58:F5:74:39:C4:4F:6B:16:62:F5:56:15:A0:AA:B6:BA:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rN4jWPV0OcRPaxZi9VYVoKq2uss.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/b65e33-f947-4968-a27c-dd99d397e4d6/1/rN4jWPV0OcRPaxZi9VYVoKq2uss.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/76/b65e33-f947-4968-a27c-dd99d397e4d6/1/rN4jWPV0OcRPaxZi9VYVoKq2uss.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bc:25:e5:af:a9:cb:5c:86:60:4a:af:02:87:a5:48:36:5c:5b:
de:ae:96:94:51:79:8c:6d:93:69:89:f8:b5:a3:df:6d:a2:1b:
6e:90:c9:3d:65:48:45:3c:74:41:ca:53:d5:f1:0a:a7:4b:f1:
84:09:67:03:5b:0b:98:ad:27:0e:f6:70:51:35:09:47:51:ef:
cf:ba:75:07:d7:e1:75:17:bb:89:c0:b6:00:02:2d:e7:36:96:
4e:1c:75:92:56:59:e5:7f:cc:13:1e:b5:0b:26:ba:56:ed:10:
d3:0a:1b:0c:71:1b:fb:d2:0c:68:cd:90:48:1f:ab:99:e5:47:
b7:59:b9:af:d2:25:a6:9d:24:35:6d:33:b2:ed:bb:c4:e3:63:
6a:92:77:e7:63:1d:2d:1e:b4:9b:f5:9b:32:2b:d5:24:09:5c:
f7:bc:5a:c3:4a:af:91:53:0a:6e:8d:0b:54:7a:ad:39:92:97:
c2:e0:fb:2d:06:c2:d7:70:35:6d:df:2a:fc:a0:75:36:27:ac:
84:6e:db:b1:90:f1:37:f5:d3:e3:a7:3e:d1:55:dd:40:37:c4:
9e:ff:e7:0b:66:9a:82:9c:2f:79:20:9c:b0:66:2b:ca:21:77:
7b:48:8f:59:4c:ea:b4:2c:e7:ec:1f:41:92:e2:df:61:25:fd:
b4:9b:52:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 05:18:07 2025 by rpki-client