Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/08aba8-b756-4492-a7ed-6320c460a3f8/1/4cxF6EsHjUWK342GdEXEb4yND64.mft
File: 4cxF6EsHjUWK342GdEXEb4yND64.mft (raw, json)
Hash identifier: MJy9Rn5CZpuC4tVVqW2z+G61rPLK8lt3h+HYiSj7ykw=
Subject key identifier: F3:D9:05:44:1D:D1:95:C3:80:CB:77:17:B6:51:FA:3A:E4:AC:DE:97
Authority key identifier: E1:CC:45:E8:4B:07:8D:45:8A:DF:8D:86:74:45:C4:6F:8C:8D:0F:AE
Certificate issuer: /CN=e1cc45e84b078d458adf8d867445c46f8c8d0fae
Certificate serial: 0198499C2F35781C2B8CA578285D35BFB34D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4cxF6EsHjUWK342GdEXEb4yND64.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/08aba8-b756-4492-a7ed-6320c460a3f8/1/4cxF6EsHjUWK342GdEXEb4yND64.mft
Manifest number: 1481
Signing time: Sun 27 Jul 2025 02:00:29 +0000
Manifest this update: Sun 27 Jul 2025 02:00:29 +0000
Manifest next update: Mon 28 Jul 2025 02:00:29 +0000
Files and hashes: 1: 4cxF6EsHjUWK342GdEXEb4yND64.crl (hash: PGt04YnXFp8RWIhvzY3mwZw5vxF9KzVCk6yMZYskJME=)
2: 5-SCWiXEymbKNvt1s5ha59PuWTI.roa (hash: afbec3zYVioBpbWwP/hx1ExlUGeRDVjKKku3aVOXbVc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/08aba8-b756-4492-a7ed-6320c460a3f8/1/4cxF6EsHjUWK342GdEXEb4yND64.crl
rsync://rpki.ripe.net/repository/DEFAULT/f3/08aba8-b756-4492-a7ed-6320c460a3f8/1/4cxF6EsHjUWK342GdEXEb4yND64.mft
rsync://rpki.ripe.net/repository/DEFAULT/4cxF6EsHjUWK342GdEXEb4yND64.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 20:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:49:9c:2f:35:78:1c:2b:8c:a5:78:28:5d:35:bf:b3:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e1cc45e84b078d458adf8d867445c46f8c8d0fae
Validity
Not Before: Jul 27 02:00:29 2025 GMT
Not After : Jul 28 02:00:29 2025 GMT
Subject: CN=f3d905441dd195c380cb7717b651fa3ae4acde97
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:23:58:3e:f6:63:25:d5:ac:f7:f8:5c:4c:70:
43:f8:f8:31:e8:43:51:d4:15:c5:f9:50:b7:99:5d:
52:0d:75:b3:89:c9:bf:1d:19:48:b3:2d:38:d0:38:
1d:86:78:e1:e3:b7:a0:4e:97:f0:2b:84:34:28:4e:
e4:47:cf:70:c7:df:10:d5:4f:c5:70:3a:5b:df:67:
bc:02:ee:31:81:50:ad:e4:05:b2:b1:3b:f3:d1:07:
0a:55:99:63:17:aa:53:d7:59:9a:8d:89:be:c4:32:
3d:98:42:9d:49:3d:ee:73:e1:b1:76:7f:96:78:fd:
39:f3:9b:3a:99:61:32:41:ef:c6:f7:07:36:b7:19:
b7:4e:ed:ac:a4:54:88:da:1d:00:ba:2e:e5:2d:c9:
65:0e:db:0b:4b:af:d5:10:df:99:05:c7:47:5c:2f:
46:16:15:ed:63:1a:c6:2d:e0:e7:7d:a5:0c:8b:86:
a8:03:e1:ed:c0:94:ed:3d:66:68:fb:e6:6e:68:10:
12:66:ad:2b:1e:e0:b6:b0:fb:60:4a:c4:3f:a1:3c:
e1:73:85:b5:da:b1:2a:f0:d8:d4:b1:40:e6:29:bf:
ce:34:07:6a:28:9e:96:ce:c2:aa:20:f4:8d:b9:0c:
1b:e1:73:a7:e5:99:02:dc:26:13:46:db:f3:1d:ba:
37:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:D9:05:44:1D:D1:95:C3:80:CB:77:17:B6:51:FA:3A:E4:AC:DE:97
X509v3 Authority Key Identifier:
keyid:E1:CC:45:E8:4B:07:8D:45:8A:DF:8D:86:74:45:C4:6F:8C:8D:0F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4cxF6EsHjUWK342GdEXEb4yND64.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/08aba8-b756-4492-a7ed-6320c460a3f8/1/4cxF6EsHjUWK342GdEXEb4yND64.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/08aba8-b756-4492-a7ed-6320c460a3f8/1/4cxF6EsHjUWK342GdEXEb4yND64.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:0e:be:b3:f6:c1:23:84:fb:94:88:eb:d8:95:2c:64:d4:85:
00:f6:cf:9b:73:89:2e:67:63:18:23:fd:5a:f7:4c:af:4b:66:
37:00:83:0d:c1:e4:b3:ae:c1:b0:8d:64:7b:5c:15:ec:3b:43:
d5:79:ad:1f:55:55:5e:40:2b:f5:9f:2d:ee:46:58:1c:a4:6f:
49:48:b3:29:bd:15:ff:a1:80:f8:c2:fd:d6:71:95:61:bc:f4:
e0:58:90:96:e0:93:ae:31:90:ad:c8:58:e4:34:bb:86:26:9d:
78:f3:b3:06:09:b8:e8:6f:7b:dd:d1:c1:49:de:9a:f5:cd:a3:
f5:96:c8:32:a6:3b:a5:d4:4f:74:ad:db:25:62:b5:c8:65:97:
5d:5f:09:c5:ab:22:ce:dc:76:d8:7d:11:3f:18:4b:6d:8d:71:
50:b4:bc:be:d4:ba:38:19:ec:11:21:8b:53:e9:2a:f5:22:e8:
98:c2:ad:c8:a8:b7:e3:e8:1f:d3:41:9e:e4:02:85:b3:b7:c1:
53:07:cc:4f:05:68:ec:28:ea:4f:bd:b6:d2:30:d3:1c:32:ae:
87:a2:40:c0:1d:bb:4c:de:4b:16:93:2e:bd:3a:e9:34:89:68:
bf:d2:a7:b8:13:47:55:cd:01:66:61:2e:32:36:b5:47:b8:95:
0f:35:32:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 04:56:43 2025 by rpki-client