Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/4f0551-6922-45bf-97d3-7cf9a5fb6a9c/1/_tf4F9fm3tVu3txESIzUHAUqDcU.mft
File: _tf4F9fm3tVu3txESIzUHAUqDcU.mft (raw, json)
Hash identifier: wZCQ/+6NHDCdx90oui/0Wy89KoJNm3BviR/qkxWnb08=
Subject key identifier: B4:56:CD:5C:96:AE:7C:86:90:02:95:9F:3E:3F:60:01:61:39:D1:BC
Authority key identifier: FE:D7:F8:17:D7:E6:DE:D5:6E:DE:DC:44:48:8C:D4:1C:05:2A:0D:C5
Certificate issuer: /CN=fed7f817d7e6ded56ededc44488cd41c052a0dc5
Certificate serial: 0198496614952C93BCBA038E816B2E711334
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_tf4F9fm3tVu3txESIzUHAUqDcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/4f0551-6922-45bf-97d3-7cf9a5fb6a9c/1/_tf4F9fm3tVu3txESIzUHAUqDcU.mft
Manifest number: 1591
Signing time: Sun 27 Jul 2025 01:01:23 +0000
Manifest this update: Sun 27 Jul 2025 01:01:23 +0000
Manifest next update: Mon 28 Jul 2025 01:01:23 +0000
Files and hashes: 1: _tf4F9fm3tVu3txESIzUHAUqDcU.crl (hash: 5ODaa5tLjgZ7OEa9zl9pbzt7tuqXJxSwte/+iW6ORT4=)
2: jlmeoUxgI0KhFHV99BItMxAYMbc.roa (hash: NI9SzLu0aApCsGkR0hpBvVimZxaK1yHkWwQafkG2nq8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/4f0551-6922-45bf-97d3-7cf9a5fb6a9c/1/_tf4F9fm3tVu3txESIzUHAUqDcU.crl
rsync://rpki.ripe.net/repository/DEFAULT/ea/4f0551-6922-45bf-97d3-7cf9a5fb6a9c/1/_tf4F9fm3tVu3txESIzUHAUqDcU.mft
rsync://rpki.ripe.net/repository/DEFAULT/_tf4F9fm3tVu3txESIzUHAUqDcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 01:01:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:49:66:14:95:2c:93:bc:ba:03:8e:81:6b:2e:71:13:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fed7f817d7e6ded56ededc44488cd41c052a0dc5
Validity
Not Before: Jul 27 01:01:23 2025 GMT
Not After : Jul 28 01:01:23 2025 GMT
Subject: CN=b456cd5c96ae7c869002959f3e3f60016139d1bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:04:61:78:c5:c9:7f:15:6e:1a:cd:64:17:0f:
61:e0:46:6a:24:65:63:15:19:a6:1a:be:32:e6:8a:
39:12:97:1c:61:a1:4c:f0:da:c6:b6:7b:3b:d3:41:
36:6a:47:ba:79:c3:84:9c:ca:64:20:d5:34:69:6a:
5f:3b:ea:ef:21:79:01:f9:d5:ec:95:12:c2:41:25:
aa:99:eb:bf:7c:73:8b:e5:76:e6:64:fc:e8:4e:9b:
a5:2c:af:1b:60:d0:66:71:f2:88:d3:8f:f1:0f:cf:
7e:53:8f:04:9e:e2:3f:76:27:1f:d3:e8:48:f7:69:
aa:d3:e2:3b:93:0b:aa:c4:31:2d:ed:41:c8:0e:ee:
82:65:6c:2f:fc:d1:2c:4b:7b:9d:70:4d:a2:c6:b4:
fe:e6:a8:57:36:0a:ae:a3:67:0d:d6:05:53:0c:d4:
4d:a0:08:64:7a:87:24:16:5f:a9:76:95:19:c6:7b:
02:c5:35:98:7f:09:17:42:ed:14:ec:f3:03:57:c5:
8c:9e:1f:bf:fc:1e:2c:16:60:7b:11:c8:d8:61:c6:
52:f8:17:84:a9:52:92:7b:f6:33:f6:56:04:c7:6d:
76:40:41:08:ef:ea:9f:ae:07:20:7b:61:c9:fa:85:
55:f9:4b:9e:23:fb:66:69:96:f1:27:fc:b0:c6:dc:
cc:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:56:CD:5C:96:AE:7C:86:90:02:95:9F:3E:3F:60:01:61:39:D1:BC
X509v3 Authority Key Identifier:
keyid:FE:D7:F8:17:D7:E6:DE:D5:6E:DE:DC:44:48:8C:D4:1C:05:2A:0D:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_tf4F9fm3tVu3txESIzUHAUqDcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/4f0551-6922-45bf-97d3-7cf9a5fb6a9c/1/_tf4F9fm3tVu3txESIzUHAUqDcU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/4f0551-6922-45bf-97d3-7cf9a5fb6a9c/1/_tf4F9fm3tVu3txESIzUHAUqDcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:38:12:48:97:e2:01:96:e6:ac:aa:b7:04:de:d7:20:23:40:
ce:26:27:c9:6a:fe:08:d5:b8:f3:90:57:fd:60:e6:7d:86:6f:
21:71:bd:e9:c3:4b:24:3d:0c:98:3f:3e:23:34:13:28:2e:32:
1b:ba:31:50:59:fa:35:a2:95:2a:37:5f:cd:8a:45:0b:10:0e:
ef:3c:46:2c:62:2d:c9:47:8d:50:d4:91:02:65:f3:ad:8f:35:
7a:f8:dc:a5:17:bc:9f:a4:bf:17:3c:cf:95:80:d2:ff:59:25:
c1:53:93:a9:35:d6:d2:a1:b8:55:eb:b1:ef:87:df:79:55:1e:
8d:e1:1c:18:93:44:03:40:b8:86:de:f6:6c:89:76:e1:a4:8f:
2f:2f:73:84:a4:6e:98:ba:af:38:61:25:ec:2a:28:7d:bd:03:
d0:c3:83:f8:8c:4e:ea:31:8e:40:4b:a3:9f:1a:10:ea:36:0f:
40:a3:01:f7:a0:9b:76:0f:55:00:ca:6b:a6:cb:3a:10:2a:eb:
34:a0:9e:b7:1b:41:88:a6:da:42:22:74:52:64:55:d9:7d:8b:
4e:a7:a0:94:2a:ab:fb:79:9c:a9:75:90:70:61:41:cf:c8:71:
03:6e:25:06:92:99:18:fe:ed:2b:e3:d5:ec:14:59:28:f9:74:
43:72:63:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 10:34:09 2025 by rpki-client