Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/f2db08-c845-41ab-a08a-3375617d4efd/1/4sWGEhDcOL2660d9bacZZkqEprw.mft
File: 4sWGEhDcOL2660d9bacZZkqEprw.mft (raw, json)
Hash identifier: q8ckFk2nd/jky57oF7nFWq1ZEYT6Kjws0b7+QqDWMxk=
Subject key identifier: BE:18:4E:2A:65:8F:55:62:91:B0:91:0B:FA:B3:BC:79:07:90:61:FF
Authority key identifier: E2:C5:86:12:10:DC:38:BD:BA:EB:47:7D:6D:A7:19:66:4A:84:A6:BC
Certificate issuer: /CN=e2c5861210dc38bdbaeb477d6da719664a84a6bc
Certificate serial: 019845BF6C6CBB753CA4676B3A96614E7B8A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4sWGEhDcOL2660d9bacZZkqEprw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/de/f2db08-c845-41ab-a08a-3375617d4efd/1/4sWGEhDcOL2660d9bacZZkqEprw.mft
Manifest number: 1600
Signing time: Sat 26 Jul 2025 08:00:29 +0000
Manifest this update: Sat 26 Jul 2025 08:00:29 +0000
Manifest next update: Sun 27 Jul 2025 08:00:29 +0000
Files and hashes: 1: 4sWGEhDcOL2660d9bacZZkqEprw.crl (hash: 6ds/hK9BFC/tLzLw0PIB6SZmAJ2NYTGXqjUEv+RiY9E=)
2: MhYnzmLfZDvOOpTx4DJlD8uvHAw.roa (hash: memj1j1yK6z3c51s+6fk9nq4QfCP9UkOHBbx45J56ck=)
3: V1IYhraqy6GtWLev9Eiy1F0cSC0.roa (hash: OXaQyDbPBz9AsW1XM72kAOArg1kTGFWfPBLrTjWDPns=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/de/f2db08-c845-41ab-a08a-3375617d4efd/1/4sWGEhDcOL2660d9bacZZkqEprw.crl
rsync://rpki.ripe.net/repository/DEFAULT/de/f2db08-c845-41ab-a08a-3375617d4efd/1/4sWGEhDcOL2660d9bacZZkqEprw.mft
rsync://rpki.ripe.net/repository/DEFAULT/4sWGEhDcOL2660d9bacZZkqEprw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 02:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:45:bf:6c:6c:bb:75:3c:a4:67:6b:3a:96:61:4e:7b:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e2c5861210dc38bdbaeb477d6da719664a84a6bc
Validity
Not Before: Jul 26 08:00:29 2025 GMT
Not After : Jul 27 08:00:29 2025 GMT
Subject: CN=be184e2a658f556291b0910bfab3bc79079061ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:8b:fd:37:14:39:8e:8e:c0:04:2b:d2:05:7c:
18:98:cf:75:9a:8f:e8:3f:54:9b:ca:47:85:a4:f9:
b2:c8:13:27:4f:9e:66:48:26:f7:2c:c7:cd:32:d9:
71:97:62:19:41:df:d9:13:9c:01:c7:68:96:ae:32:
49:15:52:89:09:a8:e5:7c:00:15:46:0e:a4:ac:a8:
a4:24:12:f1:f2:3d:e8:7c:2e:1a:05:3b:b8:7d:5c:
ba:fc:e9:cc:bf:2f:fd:52:61:1a:05:45:b5:cc:22:
2f:33:36:c9:cf:d6:b0:89:99:46:5a:ad:bf:ac:e0:
54:de:47:12:9e:75:5a:da:d1:38:fb:ca:66:04:32:
7c:dc:f9:0e:96:58:33:b3:b3:a3:41:4e:01:62:4f:
c0:89:81:02:c6:81:96:16:c4:8b:29:70:66:89:71:
6d:01:85:6f:0f:62:04:93:da:37:ca:00:5a:7e:fc:
fe:af:58:86:44:67:66:63:73:d3:3f:03:10:5a:ff:
aa:5a:3e:62:cd:f0:38:6d:c6:6f:9f:b7:01:0f:07:
3e:41:98:6d:93:4b:c2:a8:8a:ec:73:40:dd:f1:c7:
af:87:24:e1:b8:6b:41:0d:4f:74:60:27:c1:a3:59:
9d:9a:1c:02:39:48:24:30:c6:e0:a4:30:c2:3d:66:
49:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:18:4E:2A:65:8F:55:62:91:B0:91:0B:FA:B3:BC:79:07:90:61:FF
X509v3 Authority Key Identifier:
keyid:E2:C5:86:12:10:DC:38:BD:BA:EB:47:7D:6D:A7:19:66:4A:84:A6:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4sWGEhDcOL2660d9bacZZkqEprw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/f2db08-c845-41ab-a08a-3375617d4efd/1/4sWGEhDcOL2660d9bacZZkqEprw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/de/f2db08-c845-41ab-a08a-3375617d4efd/1/4sWGEhDcOL2660d9bacZZkqEprw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
08:e8:88:2a:33:cc:a3:ef:7f:86:f6:23:aa:78:00:90:ea:0f:
d3:d7:9c:f3:54:ea:c8:ef:4f:43:0a:62:2f:3c:af:76:d5:ea:
d4:62:92:bb:10:77:73:c7:30:e7:4e:89:f1:ea:b3:fe:74:0c:
fb:29:31:b0:60:6b:11:40:15:82:24:cf:b7:a0:5d:f9:dc:d3:
61:96:fd:d1:9f:5a:40:9a:f8:92:48:11:ad:03:2e:07:7b:2b:
bd:bd:ed:30:c0:2d:f3:c7:ae:ae:75:44:92:23:47:9f:40:1d:
f5:f0:98:5d:68:ee:5b:02:fd:55:bf:a5:6c:11:ce:b1:4d:57:
5a:da:0e:fd:a3:f8:72:69:e0:ac:ca:34:fa:f9:08:8c:4d:cf:
c9:b4:07:24:35:5d:c8:02:16:a4:db:74:fc:90:c2:e0:88:90:
ea:ec:10:74:50:ef:ea:be:0c:a3:93:51:cd:9a:18:80:16:de:
6b:30:49:b1:5b:22:da:8c:ea:78:b3:b5:78:cb:8d:3c:80:ac:
b3:be:12:c7:cb:75:78:05:73:d1:56:18:ea:a8:98:1d:1d:ba:
ef:31:ce:0c:d5:c7:1d:72:e0:f5:83:70:d3:0f:df:0b:dd:0d:
49:9d:47:66:8b:cb:66:44:8f:ed:f8:76:cc:b4:fd:d9:61:df:
aa:fe:93:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 11:48:36 2025 by rpki-client