Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/28d600-a869-4ab1-9b2e-446019966a19/1/4FdMKHjWtTYTm4lfCMnG2xjhKps.mft
File: 4FdMKHjWtTYTm4lfCMnG2xjhKps.mft (raw, json)
Hash identifier: eBhrnGPH19eeMs9EC+15goAHG/9aoSE9jdf2qEWFdJU=
Subject key identifier: 93:E5:02:D2:A1:90:C4:00:B7:12:ED:F8:B5:42:5B:22:AC:A4:DE:3E
Authority key identifier: E0:57:4C:28:78:D6:B5:36:13:9B:89:5F:08:C9:C6:DB:18:E1:2A:9B
Certificate issuer: /CN=e0574c2878d6b536139b895f08c9c6db18e12a9b
Certificate serial: 019848C0A0A75034EE827FF35ABA57515BA6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4FdMKHjWtTYTm4lfCMnG2xjhKps.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/28d600-a869-4ab1-9b2e-446019966a19/1/4FdMKHjWtTYTm4lfCMnG2xjhKps.mft
Manifest number: 1608
Signing time: Sat 26 Jul 2025 22:00:40 +0000
Manifest this update: Sat 26 Jul 2025 22:00:40 +0000
Manifest next update: Sun 27 Jul 2025 22:00:40 +0000
Files and hashes: 1: 4FdMKHjWtTYTm4lfCMnG2xjhKps.crl (hash: Gorxqj0rFLB7XaadBZSlTG4Z8u+TIJfgpilRLjZQ/6Y=)
2: F5_lNgEgzfWoE5_Cqsta810GUD8.roa (hash: iFMsbMYL1gucfU8DYPuCeVZjMtj1pfRR/WALBk/WmbI=)
3: GPk2iBuHJkhE3vpf7v6PEKywv7w.roa (hash: GWqOVJmjwk1Pn1GbnWABjMV1e5ehhhP81Lyr4q/ji2E=)
4: LNUfeHuP7gnY_85aOJlr0qSJEMQ.roa (hash: YoOtP+EHXOmT+ABly+3o3H4KeOBEs5xmQuWc5ATMUTk=)
5: OflCzXga8ucfjVqp9uUhh7zK_qM.roa (hash: tJ4j/9WnUQafTpRcoYrdjgTWc0yGFpsicsnou7Bw3VU=)
6: SwP1NYlZc5jbDBXXeMNl1hjy1LA.roa (hash: DMSgzACIbB/JZuNfMaMP2kCv3jA/gmECBXJyT4DQzwk=)
7: W6KxeoLPp69-NZgXYljCkgfMzmI.roa (hash: WWTdkNcNGcm7BbXaoCx/steftEF6zzmySvzLX5r6lpM=)
8: aAP3usYXoFfJgmCfE8_VSaJGbTU.roa (hash: x6wsw/R7hONUKg46ARfXmJgysd6wAhjXDI0EDejXv3A=)
9: uGW4wsIIh4UfRdPgdZPrknwT0_s.roa (hash: DewiqU6mTjj3HeFVXlyQsAjNkoAtpsCRp10m8FffrLA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/28d600-a869-4ab1-9b2e-446019966a19/1/4FdMKHjWtTYTm4lfCMnG2xjhKps.crl
rsync://rpki.ripe.net/repository/DEFAULT/e4/28d600-a869-4ab1-9b2e-446019966a19/1/4FdMKHjWtTYTm4lfCMnG2xjhKps.mft
rsync://rpki.ripe.net/repository/DEFAULT/4FdMKHjWtTYTm4lfCMnG2xjhKps.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 22:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:48:c0:a0:a7:50:34:ee:82:7f:f3:5a:ba:57:51:5b:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e0574c2878d6b536139b895f08c9c6db18e12a9b
Validity
Not Before: Jul 26 22:00:40 2025 GMT
Not After : Jul 27 22:00:40 2025 GMT
Subject: CN=93e502d2a190c400b712edf8b5425b22aca4de3e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:ef:c3:90:5f:73:7a:2a:cb:50:83:ff:d2:b9:
19:25:9b:4d:e3:54:89:1c:19:c3:37:8b:74:18:96:
92:3d:3b:03:a3:61:43:87:8f:2f:53:ba:79:ef:61:
68:73:04:a1:15:93:e3:a4:68:00:21:cb:e4:70:94:
3e:e7:c3:a7:23:e4:d9:66:00:b9:93:b4:e6:f9:a7:
19:53:be:07:d6:f9:6d:d3:3b:53:d0:b6:c5:e6:22:
46:e8:7e:76:60:50:e6:b4:35:d6:e3:06:23:a1:da:
31:8c:44:d4:77:1f:59:9e:9a:06:e0:ee:e9:f7:4e:
c8:24:4e:aa:26:39:bc:1b:4e:6b:43:ca:4e:24:af:
46:f7:fd:49:c2:48:a6:30:39:5c:5e:56:41:51:2c:
96:40:36:7f:59:79:0a:24:d5:fb:63:a9:fc:fb:35:
0b:99:d7:02:0e:fe:eb:54:ed:b3:36:5b:ac:6d:79:
2a:36:60:7a:80:f7:0f:f8:f7:aa:c9:d4:3b:ef:76:
0b:2c:3f:7d:2d:e1:34:3f:b8:dd:29:37:e0:71:93:
16:b8:54:e8:35:6a:b5:03:5f:0f:0d:5e:ad:2d:83:
7b:e9:94:a7:67:3e:7f:99:6a:79:97:af:29:df:d9:
31:0b:7b:f7:2b:d1:9a:f8:b0:b6:8a:e6:e6:3d:ee:
51:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:E5:02:D2:A1:90:C4:00:B7:12:ED:F8:B5:42:5B:22:AC:A4:DE:3E
X509v3 Authority Key Identifier:
keyid:E0:57:4C:28:78:D6:B5:36:13:9B:89:5F:08:C9:C6:DB:18:E1:2A:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4FdMKHjWtTYTm4lfCMnG2xjhKps.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/28d600-a869-4ab1-9b2e-446019966a19/1/4FdMKHjWtTYTm4lfCMnG2xjhKps.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/28d600-a869-4ab1-9b2e-446019966a19/1/4FdMKHjWtTYTm4lfCMnG2xjhKps.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:ce:3a:c8:1e:e1:c9:08:0a:1f:60:9d:9d:9a:b2:58:f6:5d:
22:af:f6:58:21:c1:90:b8:b6:7c:9f:95:b7:d8:f2:b0:c6:fe:
b7:b4:02:5e:c3:ab:26:18:78:1e:49:01:ca:59:b2:b2:d6:0e:
e0:a7:6f:2a:e2:90:be:9b:5f:5d:bf:de:e6:78:d8:c5:b8:33:
bc:ca:75:61:b4:d7:4e:43:4a:1a:d4:02:f1:2e:9f:32:54:98:
8b:93:ed:ae:90:ff:c0:c3:9f:0b:7f:13:dd:2e:c7:02:24:01:
5d:bc:33:9d:3b:bc:ae:53:4d:34:a5:9c:a8:ad:6f:07:f2:1a:
34:78:19:6b:72:50:04:75:54:c0:16:72:bb:30:39:da:2b:bb:
9b:98:4d:76:a2:98:60:73:ae:26:81:92:11:24:86:3b:0e:06:
19:2d:45:7b:cb:03:7d:44:3a:b7:c8:ea:9f:f9:21:17:17:22:
b4:e3:12:25:42:15:63:66:eb:50:44:31:6d:5d:fc:2e:a0:18:
9f:a0:6a:5f:af:eb:50:eb:3a:1a:e6:3b:66:6b:bb:0a:25:9d:
a1:1b:f0:bc:de:b2:4a:db:0c:77:5e:61:e8:89:a5:e7:14:6a:
68:61:b2:8f:8b:07:e1:09:97:d8:58:59:b5:a1:1f:39:4e:64:
de:e3:e7:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 07:14:49 2025 by rpki-client