Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/852221-d616-4e12-8fa4-9a72d9903eb8/1/4IqtwGlVWhq-Ax_QoCgGnI-4mys.mft
File: 4IqtwGlVWhq-Ax_QoCgGnI-4mys.mft (raw, json)
Hash identifier: FMyTR5q8ouUAn8dQk2B+2YtGp5xiKaOsT38i2E6JzKI=
Subject key identifier: DF:D9:8D:91:7F:1A:50:27:D5:44:1B:E2:C8:8A:C6:4A:CC:06:D3:1A
Authority key identifier: E0:8A:AD:C0:69:55:5A:1A:BE:03:1F:D0:A0:28:06:9C:8F:B8:9B:2B
Certificate issuer: /CN=e08aadc069555a1abe031fd0a028069c8fb89b2b
Certificate serial: 019849D2FD24176B8299D12D1F3DD265C468
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4IqtwGlVWhq-Ax_QoCgGnI-4mys.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/852221-d616-4e12-8fa4-9a72d9903eb8/1/4IqtwGlVWhq-Ax_QoCgGnI-4mys.mft
Manifest number: 1593
Signing time: Sun 27 Jul 2025 03:00:20 +0000
Manifest this update: Sun 27 Jul 2025 03:00:20 +0000
Manifest next update: Mon 28 Jul 2025 03:00:20 +0000
Files and hashes: 1: 4IqtwGlVWhq-Ax_QoCgGnI-4mys.crl (hash: bNEisFVd0oxMPiwLwXprQzgfuobxB4fCkKl5VCcMv00=)
2: 8eT8mItdm-eFNRvcC95AKoGdkEY.roa (hash: V3x7HEHI2C6TpwyRaJQsDy3CR99xipPFrG4gu0IK5ZM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/852221-d616-4e12-8fa4-9a72d9903eb8/1/4IqtwGlVWhq-Ax_QoCgGnI-4mys.crl
rsync://rpki.ripe.net/repository/DEFAULT/87/852221-d616-4e12-8fa4-9a72d9903eb8/1/4IqtwGlVWhq-Ax_QoCgGnI-4mys.mft
rsync://rpki.ripe.net/repository/DEFAULT/4IqtwGlVWhq-Ax_QoCgGnI-4mys.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 00:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:49:d2:fd:24:17:6b:82:99:d1:2d:1f:3d:d2:65:c4:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e08aadc069555a1abe031fd0a028069c8fb89b2b
Validity
Not Before: Jul 27 03:00:20 2025 GMT
Not After : Jul 28 03:00:20 2025 GMT
Subject: CN=dfd98d917f1a5027d5441be2c88ac64acc06d31a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:e6:f5:2b:17:57:59:b2:bf:b3:84:98:e2:de:
96:8c:a8:97:59:fc:47:c8:b2:6f:ff:70:4a:a9:2c:
72:14:06:da:f3:18:3f:9c:f6:58:63:de:85:f4:47:
8a:b0:e8:bf:f3:0d:41:d6:1c:85:33:f5:3c:4a:36:
ad:21:77:3c:69:1e:8f:4f:b8:4a:0a:e0:c1:ba:b9:
5a:96:93:a0:bc:97:90:88:0e:c2:4e:17:78:f1:ab:
62:4a:f5:41:6a:f3:99:d8:33:95:d3:fb:67:8e:01:
93:56:8a:86:49:33:55:b6:e1:d5:30:45:92:95:92:
a2:15:a5:e6:24:12:ff:52:ef:44:9c:f2:72:92:56:
a3:f8:49:de:54:40:a3:47:dc:95:e5:18:66:52:19:
f3:e1:d8:06:e7:33:8a:15:f2:30:7a:3d:d8:3a:a5:
07:6d:5d:60:f8:bb:3a:dc:ab:7c:6f:40:4e:09:a7:
e3:cc:a0:d9:f2:b9:e4:2f:25:e8:28:60:f4:fa:24:
ea:b6:d5:b5:5d:f7:a8:15:0d:c9:d5:84:47:80:73:
67:b6:58:05:ce:6c:6e:62:ec:27:f4:66:1e:16:1a:
98:8f:a4:ab:58:3d:b0:34:0c:e0:fe:dd:f2:42:4f:
bb:89:ea:49:33:2b:a1:ae:90:b7:f0:92:28:3d:00:
87:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:D9:8D:91:7F:1A:50:27:D5:44:1B:E2:C8:8A:C6:4A:CC:06:D3:1A
X509v3 Authority Key Identifier:
keyid:E0:8A:AD:C0:69:55:5A:1A:BE:03:1F:D0:A0:28:06:9C:8F:B8:9B:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4IqtwGlVWhq-Ax_QoCgGnI-4mys.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/852221-d616-4e12-8fa4-9a72d9903eb8/1/4IqtwGlVWhq-Ax_QoCgGnI-4mys.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/852221-d616-4e12-8fa4-9a72d9903eb8/1/4IqtwGlVWhq-Ax_QoCgGnI-4mys.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:c3:1e:b6:ad:b4:f7:48:58:40:fe:55:79:93:73:57:0e:a1:
30:37:39:3c:ca:86:61:eb:0e:4b:07:ff:5f:ff:1e:72:22:83:
1b:a2:6e:00:1a:06:fc:50:4f:56:54:cd:49:69:3d:fa:a4:63:
f9:64:a9:1a:e6:a9:58:3b:65:6d:74:ca:93:e5:bc:67:5c:01:
5e:65:8a:90:10:af:49:d1:f0:b9:f2:5f:82:c9:f8:e5:bc:86:
f2:e0:11:86:e7:38:06:3d:e8:7b:41:9e:bb:f6:9b:7c:56:47:
39:21:c5:db:b8:df:11:1a:c2:51:d8:06:05:32:fd:66:5d:11:
51:cc:be:90:32:fb:64:d5:f1:a2:f9:d7:e0:eb:89:12:f9:e1:
ce:91:61:1c:07:44:cf:6e:46:2a:63:7a:4c:0b:ee:9b:3a:0c:
50:bf:1b:61:a3:fb:9c:4c:c6:29:cf:19:da:7c:81:fe:94:be:
81:36:8e:25:91:6f:22:11:72:8d:78:31:66:f3:2f:f4:fd:38:
c7:ff:3a:99:dc:aa:f5:52:01:ea:04:42:e5:a4:74:21:95:fc:
6d:ca:49:bb:05:f8:8e:74:7e:55:2b:c5:c5:6f:51:c3:97:2c:
d6:17:98:8f:9e:53:70:3c:7a:e7:65:a8:02:71:52:b0:f1:30:
96:89:99:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 09:38:39 2025 by rpki-client