Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/655a1c-baf5-475f-a308-932ab341a367/1/4p9JZACcdLuBrtnGcHgBPcho7xc.mft
File: 4p9JZACcdLuBrtnGcHgBPcho7xc.mft (raw, json)
Hash identifier: WLyxnV6/w5y8GzE198tIoTVo+E4+05XhKmTr5mPRsU0=
Subject key identifier: 6C:FE:4B:93:BD:4C:0F:E2:EF:01:A4:4D:E9:DA:64:DA:E4:27:FC:93
Authority key identifier: E2:9F:49:64:00:9C:74:BB:81:AE:D9:C6:70:78:01:3D:C8:68:EF:17
Certificate issuer: /CN=e29f4964009c74bb81aed9c67078013dc868ef17
Certificate serial: 019846D1E12EB94232FFA92B870B093466EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4p9JZACcdLuBrtnGcHgBPcho7xc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/655a1c-baf5-475f-a308-932ab341a367/1/4p9JZACcdLuBrtnGcHgBPcho7xc.mft
Manifest number: 1601
Signing time: Sat 26 Jul 2025 13:00:16 +0000
Manifest this update: Sat 26 Jul 2025 13:00:16 +0000
Manifest next update: Sun 27 Jul 2025 13:00:16 +0000
Files and hashes: 1: 1KTjmYkB3cj_19bwNwOyE5tGxCk.roa (hash: H8xeX/8Uyv31FbjznlcJqitCSYJrp0RSe/v1PmExVLA=)
2: 4p9JZACcdLuBrtnGcHgBPcho7xc.crl (hash: fXqW1ZEi5Tr4vnzMo8qP56acXmv0wa8OrY4iN/WJjb0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/655a1c-baf5-475f-a308-932ab341a367/1/4p9JZACcdLuBrtnGcHgBPcho7xc.crl
rsync://rpki.ripe.net/repository/DEFAULT/d5/655a1c-baf5-475f-a308-932ab341a367/1/4p9JZACcdLuBrtnGcHgBPcho7xc.mft
rsync://rpki.ripe.net/repository/DEFAULT/4p9JZACcdLuBrtnGcHgBPcho7xc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 06:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:46:d1:e1:2e:b9:42:32:ff:a9:2b:87:0b:09:34:66:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e29f4964009c74bb81aed9c67078013dc868ef17
Validity
Not Before: Jul 26 13:00:16 2025 GMT
Not After : Jul 27 13:00:16 2025 GMT
Subject: CN=6cfe4b93bd4c0fe2ef01a44de9da64dae427fc93
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:e2:90:33:fb:80:7f:fd:c5:a2:ef:94:c9:0c:
f2:e2:f6:6d:c1:1a:05:41:56:c8:be:80:bf:e8:0d:
22:64:6f:c7:48:f3:41:76:b2:11:c4:d5:13:41:28:
ab:f1:a0:67:f8:5e:c2:a5:52:3a:f9:82:57:ac:aa:
89:46:44:5f:66:7a:13:92:82:cc:8d:00:6c:99:4a:
85:34:02:7b:94:83:68:c1:45:1c:6d:c9:5e:01:2d:
b3:06:62:10:6c:6d:87:b7:09:54:d7:d3:84:70:75:
1b:d9:25:40:94:ba:0d:7b:36:09:f9:87:eb:1c:6b:
80:ce:e3:c2:94:40:21:b4:5d:5e:f1:0b:32:a7:8c:
d5:92:4b:5d:c2:cf:6d:7a:1f:73:f6:de:4f:f9:21:
e3:6e:c3:39:27:d9:2c:23:59:10:c7:40:31:5b:94:
10:a1:97:ce:6a:a3:2c:92:06:7a:9a:f6:2f:ef:49:
33:d1:a0:1d:c4:e8:bc:dd:be:55:fe:dd:5b:be:02:
7c:c4:c8:b7:f3:c4:c8:58:4d:76:04:a6:07:db:e5:
74:c8:22:24:82:99:30:07:aa:27:31:ef:8f:87:c7:
0d:be:73:c2:66:83:c6:eb:86:bd:81:98:e0:e3:d0:
78:5b:a8:e5:f4:6b:51:e1:88:0d:4e:c4:66:95:8f:
5a:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:FE:4B:93:BD:4C:0F:E2:EF:01:A4:4D:E9:DA:64:DA:E4:27:FC:93
X509v3 Authority Key Identifier:
keyid:E2:9F:49:64:00:9C:74:BB:81:AE:D9:C6:70:78:01:3D:C8:68:EF:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4p9JZACcdLuBrtnGcHgBPcho7xc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/655a1c-baf5-475f-a308-932ab341a367/1/4p9JZACcdLuBrtnGcHgBPcho7xc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/655a1c-baf5-475f-a308-932ab341a367/1/4p9JZACcdLuBrtnGcHgBPcho7xc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:ec:df:33:ef:8f:56:2e:14:89:7f:4b:0e:7a:c1:00:9f:6b:
8c:e2:2f:1c:94:6c:42:0d:de:e5:84:0d:80:f1:9c:19:e7:93:
49:2e:d4:46:e6:0a:09:aa:60:51:d5:f8:6b:52:8b:98:ca:6b:
a1:85:c1:52:f0:16:4d:fb:48:1c:b2:04:09:3c:79:77:fc:1e:
53:96:31:f0:17:06:12:63:60:5c:33:9c:e6:20:9d:63:00:28:
dc:bb:7d:8c:73:2a:fa:ae:27:44:a4:64:b6:77:66:c3:49:1d:
47:98:dc:dc:3d:82:6b:ff:fb:94:b6:45:6c:c6:e3:fa:63:59:
d5:da:c3:8f:f4:4a:12:6d:0d:30:79:31:15:93:23:e3:5b:4b:
4e:42:cf:59:35:33:f4:31:38:a0:e2:2d:af:c3:a8:29:bd:ff:
ea:23:b5:ae:0f:c5:7c:27:dd:5d:3a:9e:28:0f:00:f1:20:53:
d1:e9:b7:01:5d:f6:b5:f0:b5:a4:9c:eb:f1:6b:ac:3f:8f:a8:
82:1f:97:74:6c:6e:3e:c4:0e:fc:b6:42:fb:fd:ba:2e:7f:18:
0c:92:e6:1e:78:5e:96:bb:46:c7:ed:79:6d:be:d9:cd:24:80:
40:d5:97:17:65:0e:c9:32:45:67:7f:8d:27:56:7f:42:10:4e:
7d:1c:03:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 14:59:01 2025 by rpki-client