Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/4ebc33-ee54-437c-8a1b-dec4807cd7e6/1/CP4EAkJlE1PVVrjEJACCGQ8nHRM.mft
File: CP4EAkJlE1PVVrjEJACCGQ8nHRM.mft (raw, json)
Hash identifier: PqEseOKFrCQzZF9uCz4EDIkA4rNwslXcP9zviWBnkKM=
Subject key identifier: BF:B6:79:19:C6:F9:8B:FE:5A:EF:80:1E:FD:A6:58:C9:6D:50:AA:66
Authority key identifier: 08:FE:04:02:42:65:13:53:D5:56:B8:C4:24:00:82:19:0F:27:1D:13
Certificate issuer: /CN=08fe040242651353d556b8c4240082190f271d13
Certificate serial: 01984E54AA5A420E457DE7A549CBDABB3D85
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CP4EAkJlE1PVVrjEJACCGQ8nHRM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/4ebc33-ee54-437c-8a1b-dec4807cd7e6/1/CP4EAkJlE1PVVrjEJACCGQ8nHRM.mft
Manifest number: 1608
Signing time: Mon 28 Jul 2025 00:00:28 +0000
Manifest this update: Mon 28 Jul 2025 00:00:28 +0000
Manifest next update: Tue 29 Jul 2025 00:00:28 +0000
Files and hashes: 1: CP4EAkJlE1PVVrjEJACCGQ8nHRM.crl (hash: imfwi/iOzZNytn1nCbAqdoviRnOy5kG1YNwAdp9aAYk=)
2: Z53TKhtsYia8AaAM7SEuxUzomSo.roa (hash: Y9Eq+3ShcYYBqxEHUekT9D2l2UAArlCFvrOoMzpOskE=)
3: cvkG_y1cL0YAHfjQA7tH3oSS1BM.roa (hash: kvaRsBfAFxeZA6gu+TEc8LHfkCny56mAcc6wJSjFdsU=)
4: gQYzmf6ITShbiQOv-E4IPv9srh4.roa (hash: fi2BKmp1xnFSLXfCDfMkmvC2sWL44Qwu+h1WLCwFISs=)
5: it7IHvJCQfR1gZTQymCzS9Ta2cI.roa (hash: /axHPc2cp+I2aoPIZLPk+zOh5Faet3AVlxLqRnIEWb4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/4ebc33-ee54-437c-8a1b-dec4807cd7e6/1/CP4EAkJlE1PVVrjEJACCGQ8nHRM.crl
rsync://rpki.ripe.net/repository/DEFAULT/e3/4ebc33-ee54-437c-8a1b-dec4807cd7e6/1/CP4EAkJlE1PVVrjEJACCGQ8nHRM.mft
rsync://rpki.ripe.net/repository/DEFAULT/CP4EAkJlE1PVVrjEJACCGQ8nHRM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 23:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4e:54:aa:5a:42:0e:45:7d:e7:a5:49:cb:da:bb:3d:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08fe040242651353d556b8c4240082190f271d13
Validity
Not Before: Jul 28 00:00:28 2025 GMT
Not After : Jul 29 00:00:28 2025 GMT
Subject: CN=bfb67919c6f98bfe5aef801efda658c96d50aa66
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:04:a6:ac:1e:cb:a4:f4:e9:99:a4:8c:af:46:
3a:6b:23:1a:87:10:8d:d5:8b:2f:1b:31:8a:a2:18:
ae:95:72:15:3b:81:3d:c9:c0:5a:9e:2f:c3:00:86:
f7:0d:79:aa:7b:37:8d:be:d3:6c:f2:cf:ad:52:75:
d5:13:40:bb:fe:3e:fa:e4:70:06:43:0f:df:b8:db:
6f:0b:c5:06:2e:73:91:c6:e2:2b:27:49:da:86:33:
84:2f:76:d2:b0:69:4d:9a:c6:b3:7f:ba:e9:84:11:
dc:0b:40:cf:30:39:6c:82:16:74:38:ce:35:c7:12:
a3:fc:80:34:05:eb:57:e5:fa:ab:82:24:22:ab:f7:
7a:f1:58:f1:0d:c5:10:1b:e0:04:8f:13:f9:33:83:
36:df:ae:cc:e4:20:90:6b:9f:15:b6:85:30:37:69:
fa:92:6e:48:56:6f:e4:f1:96:35:c6:1c:07:3e:4a:
f2:17:da:ac:10:c8:4b:72:bd:f3:e7:0e:5c:f6:ba:
46:97:aa:48:ea:bb:43:b3:82:fd:ef:98:25:24:a8:
3f:31:68:0e:8c:d6:14:af:2e:14:23:f7:41:a9:88:
8b:14:65:59:9c:49:e6:d8:ff:11:33:5c:19:94:c0:
8c:a3:00:79:79:58:67:7a:97:1b:85:56:c5:9d:40:
56:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:B6:79:19:C6:F9:8B:FE:5A:EF:80:1E:FD:A6:58:C9:6D:50:AA:66
X509v3 Authority Key Identifier:
keyid:08:FE:04:02:42:65:13:53:D5:56:B8:C4:24:00:82:19:0F:27:1D:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CP4EAkJlE1PVVrjEJACCGQ8nHRM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/4ebc33-ee54-437c-8a1b-dec4807cd7e6/1/CP4EAkJlE1PVVrjEJACCGQ8nHRM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/4ebc33-ee54-437c-8a1b-dec4807cd7e6/1/CP4EAkJlE1PVVrjEJACCGQ8nHRM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:b1:c1:33:bd:ff:8b:9e:51:0c:91:3c:74:df:80:5b:bc:2e:
d8:65:2c:bb:a9:d9:c0:e7:e7:25:05:3f:b9:11:58:7f:b0:37:
6c:f0:75:f6:46:ff:21:0c:9b:28:3b:8d:48:48:09:23:e2:a0:
d6:bf:cd:22:02:79:8b:e3:bc:b3:a3:ff:74:e3:10:7c:ad:c0:
a2:3e:3b:94:dc:05:b5:5e:10:e0:88:06:5d:31:c0:ba:7e:68:
19:54:bb:e3:eb:57:93:cd:41:e0:7a:8c:fc:ec:8e:a8:cd:80:
fe:71:53:13:b3:cd:ce:7c:5f:f2:b4:4e:15:82:1f:9e:a8:d3:
7b:84:5e:e0:41:7e:05:18:eb:4b:65:58:2e:9c:76:0f:22:6e:
ca:45:ae:5a:70:6d:d2:e9:41:7e:39:3f:31:0f:31:3b:8d:53:
25:a5:18:18:4a:c2:a2:42:5c:32:e9:2a:71:32:f0:d4:53:4a:
7f:aa:7b:20:72:89:57:c0:77:39:f1:13:b2:ef:a3:d4:28:e7:
3a:0e:64:27:05:62:f7:7b:d2:93:df:12:bc:4f:6b:fd:9e:97:
42:11:d4:6d:45:9e:84:89:a8:80:42:e6:2c:6d:e4:03:5b:98:
b6:67:9e:42:c8:32:a3:17:84:fa:58:33:b3:b9:eb:a6:cf:60:
3d:3c:5d:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 28 05:58:57 2025 by rpki-client