Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/64ed62-a8ef-4802-a1b4-9f97b0fc4832/1/4kVMRWzmi6j-ytVCqrlhCx7MEuI.mft
File: 4kVMRWzmi6j-ytVCqrlhCx7MEuI.mft (raw, json)
Hash identifier: Hg4CwW3UiI3YdwGwFCcCy/O0R6M2dr9uE/QcyBXO/2I=
Subject key identifier: CE:88:1A:FF:5D:E5:A2:7C:66:DE:97:5C:22:74:97:3E:EF:C0:AC:59
Authority key identifier: E2:45:4C:45:6C:E6:8B:A8:FE:CA:D5:42:AA:B9:61:0B:1E:CC:12:E2
Certificate issuer: /CN=e2454c456ce68ba8fecad542aab9610b1ecc12e2
Certificate serial: 019845F6A5D3B58823C6256275CA16EFFAF7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4kVMRWzmi6j-ytVCqrlhCx7MEuI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/64ed62-a8ef-4802-a1b4-9f97b0fc4832/1/4kVMRWzmi6j-ytVCqrlhCx7MEuI.mft
Manifest number: 1602
Signing time: Sat 26 Jul 2025 09:00:48 +0000
Manifest this update: Sat 26 Jul 2025 09:00:48 +0000
Manifest next update: Sun 27 Jul 2025 09:00:48 +0000
Files and hashes: 1: 4kVMRWzmi6j-ytVCqrlhCx7MEuI.crl (hash: HUIuApEv1XvvNhS5QALVrTueZfLzk6+nhFKqTwGv5cc=)
2: 9wiAjxQ8cKdQoI4k97phXcqjm0U.roa (hash: aw34neSnWmkzi+er/oSuocGYd5WKHEhdmA5jFSEL7u8=)
3: VHke2dRAU413gG-qOq91BqFotnA.roa (hash: tCtViRscoxX/FUXZsRP79cmOS8/23LI5c9CHWFx8Vhg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/aa/64ed62-a8ef-4802-a1b4-9f97b0fc4832/1/4kVMRWzmi6j-ytVCqrlhCx7MEuI.crl
rsync://rpki.ripe.net/repository/DEFAULT/aa/64ed62-a8ef-4802-a1b4-9f97b0fc4832/1/4kVMRWzmi6j-ytVCqrlhCx7MEuI.mft
rsync://rpki.ripe.net/repository/DEFAULT/4kVMRWzmi6j-ytVCqrlhCx7MEuI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 02:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:45:f6:a5:d3:b5:88:23:c6:25:62:75:ca:16:ef:fa:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e2454c456ce68ba8fecad542aab9610b1ecc12e2
Validity
Not Before: Jul 26 09:00:48 2025 GMT
Not After : Jul 27 09:00:48 2025 GMT
Subject: CN=ce881aff5de5a27c66de975c2274973eefc0ac59
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:61:fb:c1:15:f2:2e:34:0c:37:a4:d9:fa:a3:
e6:f7:9b:b9:b5:55:1d:51:77:d0:69:6d:90:1f:01:
5e:9a:d8:25:8b:d2:ea:3d:54:de:f4:94:9a:46:87:
7e:69:b2:07:8c:bc:80:09:73:d2:0f:27:e4:64:a3:
ef:f0:06:04:bd:0c:c3:46:b6:89:50:0d:08:51:79:
2a:b6:11:6a:53:64:60:bc:22:98:b8:b4:7a:11:1e:
3e:61:76:17:99:73:ec:a6:ad:cb:da:dc:8e:1c:d9:
cf:73:3f:a3:e7:e9:3c:ff:e1:bf:e7:38:37:2a:ff:
08:ca:91:b3:19:2e:35:31:90:cd:b4:26:a7:da:7c:
a4:f4:c4:19:c7:ac:2d:9e:d0:87:26:42:67:f4:77:
6c:08:f4:19:8b:84:e6:6e:b7:33:09:70:51:2f:a3:
d4:6f:1f:a6:32:18:b3:e7:fa:bf:b0:13:d3:3b:e9:
3c:5e:78:d7:33:04:31:1a:3c:fc:12:fb:09:cf:65:
2a:f0:01:2b:e2:51:4f:bf:87:4f:70:9e:8c:88:5e:
4f:91:8a:89:b0:a1:4a:dd:5d:2a:78:db:c4:18:46:
93:fc:5d:ef:14:60:06:3d:11:93:7e:65:67:b0:82:
65:e7:19:cb:d8:9f:7d:2f:c5:f5:68:19:43:dc:91:
c0:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:88:1A:FF:5D:E5:A2:7C:66:DE:97:5C:22:74:97:3E:EF:C0:AC:59
X509v3 Authority Key Identifier:
keyid:E2:45:4C:45:6C:E6:8B:A8:FE:CA:D5:42:AA:B9:61:0B:1E:CC:12:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4kVMRWzmi6j-ytVCqrlhCx7MEuI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/64ed62-a8ef-4802-a1b4-9f97b0fc4832/1/4kVMRWzmi6j-ytVCqrlhCx7MEuI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/64ed62-a8ef-4802-a1b4-9f97b0fc4832/1/4kVMRWzmi6j-ytVCqrlhCx7MEuI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:94:b0:6b:04:cd:60:03:cd:fe:27:29:a6:fd:34:98:91:e6:
20:2a:7c:80:68:5e:d4:f2:e5:a6:3d:2e:43:8b:41:1c:bf:a3:
f3:e6:06:84:e4:a3:64:97:67:33:a5:f9:59:8d:04:ab:6a:bf:
41:ff:4a:70:6c:c1:62:40:ad:dc:b9:92:a1:d4:95:81:63:ce:
1b:cb:83:75:dc:2f:a3:5f:6d:79:37:bb:d5:c0:1a:cb:28:3a:
65:28:98:8b:d2:9d:43:47:b6:5d:4e:32:b7:3f:32:ba:d6:2a:
f6:a6:0e:29:3c:02:4a:fe:91:13:f0:b5:b4:62:1b:2a:3c:33:
80:38:89:d7:7c:52:bc:b7:96:a6:18:9e:ef:44:6f:19:34:c3:
a2:10:97:a6:a0:e5:dd:a6:75:1b:aa:c2:f7:27:05:97:34:63:
7b:46:47:c0:95:53:68:96:c3:bd:78:dc:69:85:84:64:c4:e0:
0b:4e:f9:ac:ac:3b:48:09:4e:3e:de:b4:fa:e4:e5:a3:c3:b5:
da:2c:8e:86:2b:e3:f0:9f:c2:7f:8f:7f:9e:e1:26:86:7b:3e:
4e:64:1f:5a:a9:d8:c4:e9:a0:98:70:35:71:62:21:b5:c6:05:
16:d8:28:36:dd:38:07:93:1f:96:d6:06:d7:67:69:1c:8f:aa:
f8:82:b5:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 11:56:57 2025 by rpki-client