Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/ebe8e1-539b-4004-8d4c-a00b5713c6aa/1/4kjVvwGw4pW9CIX8XE34J1Q4Iu0.mft
File: 4kjVvwGw4pW9CIX8XE34J1Q4Iu0.mft (raw, json)
Hash identifier: DA33IkmkkB5CBnMb47rDPyPQUz4OtjnpH7KquUjg1R4=
Subject key identifier: FF:87:1F:5B:CB:E9:87:6A:C3:8A:37:68:A6:30:0F:55:D8:0F:24:2A
Authority key identifier: E2:48:D5:BF:01:B0:E2:95:BD:08:85:FC:5C:4D:F8:27:54:38:22:ED
Certificate issuer: /CN=e248d5bf01b0e295bd0885fc5c4df827543822ed
Certificate serial: 0198548DACA4C9012034D48DA18313F83BF0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4kjVvwGw4pW9CIX8XE34J1Q4Iu0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/ebe8e1-539b-4004-8d4c-a00b5713c6aa/1/4kjVvwGw4pW9CIX8XE34J1Q4Iu0.mft
Manifest number: 1608
Signing time: Tue 29 Jul 2025 05:00:27 +0000
Manifest this update: Tue 29 Jul 2025 05:00:27 +0000
Manifest next update: Wed 30 Jul 2025 05:00:27 +0000
Files and hashes: 1: 4kjVvwGw4pW9CIX8XE34J1Q4Iu0.crl (hash: 1FmGfTYMYjUC9A4LyFTYMpPIE+Y8ZI1AUuWXMV/afZw=)
2: dcj_O6LOhrZyjlYfbFWKtd8afLs.roa (hash: 6QlVZfYgCQ+Co7hd7hXUtwQRQFR7TWRFQKMzrXC6rV4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/97/ebe8e1-539b-4004-8d4c-a00b5713c6aa/1/4kjVvwGw4pW9CIX8XE34J1Q4Iu0.crl
rsync://rpki.ripe.net/repository/DEFAULT/97/ebe8e1-539b-4004-8d4c-a00b5713c6aa/1/4kjVvwGw4pW9CIX8XE34J1Q4Iu0.mft
rsync://rpki.ripe.net/repository/DEFAULT/4kjVvwGw4pW9CIX8XE34J1Q4Iu0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Jul 2025 23:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:54:8d:ac:a4:c9:01:20:34:d4:8d:a1:83:13:f8:3b:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e248d5bf01b0e295bd0885fc5c4df827543822ed
Validity
Not Before: Jul 29 05:00:27 2025 GMT
Not After : Jul 30 05:00:27 2025 GMT
Subject: CN=ff871f5bcbe9876ac38a3768a6300f55d80f242a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:d2:25:66:c0:9b:1a:d8:eb:13:df:ce:e6:77:
58:a9:3f:35:1f:2d:24:d7:5f:f6:fa:c0:6b:f4:8f:
ee:88:de:c8:c5:cd:2b:a5:fe:e1:22:c9:a7:e6:ba:
e3:c5:5c:18:0d:a4:de:04:92:0c:bf:b0:b6:d2:12:
3a:7c:31:5e:e2:8c:0f:af:63:e8:a9:c3:ec:4b:ee:
e5:4f:48:d3:06:5b:16:84:f2:50:87:39:6f:b9:88:
a6:8c:46:6e:27:2a:57:54:95:6e:77:d7:fc:62:b0:
50:29:1a:01:a7:44:fc:4c:13:5f:d4:13:4a:bb:52:
20:b3:f5:24:36:1a:4a:03:5a:d5:69:ae:1b:81:76:
1e:fa:48:ee:1d:fd:f8:df:20:b7:70:ad:3b:f4:c2:
99:69:af:88:3a:c7:99:59:a7:d2:e8:bc:8d:20:a3:
79:12:3f:46:4c:7f:5a:18:de:1b:93:f5:a2:d4:95:
36:c5:58:83:74:e1:5c:f9:62:18:38:c5:00:58:f2:
73:2c:db:04:3a:3b:8f:ec:02:86:07:0a:ef:2f:b9:
3b:72:f0:15:14:ad:a4:53:27:41:51:fb:b9:9f:64:
8b:7e:43:df:de:ea:8d:fe:87:02:a8:8e:87:49:50:
7f:9c:b7:42:99:5a:0d:63:b8:8f:6e:69:b0:35:4f:
d6:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:87:1F:5B:CB:E9:87:6A:C3:8A:37:68:A6:30:0F:55:D8:0F:24:2A
X509v3 Authority Key Identifier:
keyid:E2:48:D5:BF:01:B0:E2:95:BD:08:85:FC:5C:4D:F8:27:54:38:22:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4kjVvwGw4pW9CIX8XE34J1Q4Iu0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/ebe8e1-539b-4004-8d4c-a00b5713c6aa/1/4kjVvwGw4pW9CIX8XE34J1Q4Iu0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/97/ebe8e1-539b-4004-8d4c-a00b5713c6aa/1/4kjVvwGw4pW9CIX8XE34J1Q4Iu0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
aa:20:22:05:b9:12:ca:24:f9:7c:b2:77:d2:a9:eb:d6:01:5e:
16:38:1f:b0:8f:0f:ee:d1:91:be:ad:f7:e0:f6:96:5a:fd:6d:
0d:a2:d1:f5:16:5f:c2:47:6c:69:53:a7:6c:50:56:31:90:6f:
4e:4a:ae:a0:2a:79:ac:16:f3:e5:1b:cb:b9:d8:e0:7c:2a:58:
9a:e1:98:45:74:d7:c3:63:cd:3e:d3:4a:54:47:c2:59:5b:c2:
f9:15:f9:8d:c4:b0:38:66:73:29:c1:bc:e4:4b:c8:d6:97:52:
22:d6:96:cd:ff:1b:63:57:0d:b9:21:af:be:54:b2:db:1f:42:
b7:0b:05:bb:b7:be:18:dc:62:f8:42:dc:73:c4:56:18:7a:4c:
55:ad:db:b1:7b:c9:56:be:a6:ab:1b:d3:f4:d1:e7:79:e8:38:
33:b9:6b:d9:65:59:64:d3:d1:f7:45:de:44:a1:94:6b:61:d8:
ba:43:6e:c0:5c:01:e5:70:21:65:ea:c2:88:48:47:0b:31:a2:
ca:d2:d0:88:67:e6:e1:73:9e:ce:74:97:df:68:62:11:e1:93:
47:c4:ae:e4:12:f0:91:48:83:09:07:8c:72:93:4d:b0:ca:f2:
01:61:fb:d5:db:b9:15:ca:29:eb:06:0b:d2:cf:9e:0d:c9:59:
67:75:e8:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 29 07:15:17 2025 by rpki-client