Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/cda8f7-8b87-4c6e-bd56-acf04481064d/1/4EsooZ2_U0rWHLBJmG5UJMMoTeI.mft
File: 4EsooZ2_U0rWHLBJmG5UJMMoTeI.mft (raw, json)
Hash identifier: cv6UG683wNMWnW1E/Bw6B2MEGtr4elslVkPVrsFR3Q4=
Subject key identifier: CA:14:B6:25:7B:A9:00:73:89:93:24:D4:DB:2F:4B:6E:45:B0:B3:42
Authority key identifier: E0:4B:28:A1:9D:BF:53:4A:D6:1C:B0:49:98:6E:54:24:C3:28:4D:E2
Certificate issuer: /CN=e04b28a19dbf534ad61cb049986e5424c3284de2
Certificate serial: 01984AAF3D622BC766B881863E5CBF439DF6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4EsooZ2_U0rWHLBJmG5UJMMoTeI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/cda8f7-8b87-4c6e-bd56-acf04481064d/1/4EsooZ2_U0rWHLBJmG5UJMMoTeI.mft
Manifest number: 042A
Signing time: Sun 27 Jul 2025 07:00:55 +0000
Manifest this update: Sun 27 Jul 2025 07:00:55 +0000
Manifest next update: Mon 28 Jul 2025 07:00:55 +0000
Files and hashes: 1: 2G3KAngu1j7cVjl09bHkVR1Q8mU.roa (hash: U0mdK9ze04Jz/Qx2ufdQLy/tw5yhbjVYG2kiEygUxAU=)
2: 4EsooZ2_U0rWHLBJmG5UJMMoTeI.crl (hash: M2IfYp8139S+pGDFCk+Txy4+GcGncex4j7Yg+i+1LOQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/cda8f7-8b87-4c6e-bd56-acf04481064d/1/4EsooZ2_U0rWHLBJmG5UJMMoTeI.crl
rsync://rpki.ripe.net/repository/DEFAULT/f8/cda8f7-8b87-4c6e-bd56-acf04481064d/1/4EsooZ2_U0rWHLBJmG5UJMMoTeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/4EsooZ2_U0rWHLBJmG5UJMMoTeI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 00:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4a:af:3d:62:2b:c7:66:b8:81:86:3e:5c:bf:43:9d:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e04b28a19dbf534ad61cb049986e5424c3284de2
Validity
Not Before: Jul 27 07:00:55 2025 GMT
Not After : Jul 28 07:00:55 2025 GMT
Subject: CN=ca14b6257ba90073899324d4db2f4b6e45b0b342
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:5b:b4:2b:fc:68:2c:22:ca:09:5a:c9:5f:8d:
ca:ab:ba:72:fe:a4:2d:bf:46:7c:40:09:1b:54:f0:
0d:b4:8a:ac:9c:26:68:b1:de:a6:1b:54:51:14:c7:
10:51:6c:11:f6:2c:ca:c8:a5:a9:73:1a:f1:d3:84:
c8:83:8a:2a:ae:15:8c:cb:86:01:ca:1b:97:31:be:
44:c3:b2:8e:57:4a:25:6f:b2:dd:3e:2c:ce:67:5e:
a3:04:5e:75:4c:d7:9a:78:12:be:80:be:d5:f1:f5:
41:1f:1d:c4:07:01:23:bd:8e:8e:91:10:61:37:6f:
1f:03:46:a2:3b:e6:a2:0e:b0:07:db:82:ab:b8:64:
af:8f:e0:a6:88:12:a1:44:a7:35:54:89:da:ee:47:
b7:44:dd:56:92:7a:9b:fe:f2:83:87:c0:25:75:61:
90:f7:04:29:42:61:70:93:00:d8:6c:c3:5b:c3:bd:
28:5d:74:c0:48:3e:83:7b:c2:02:fa:74:85:71:c2:
e1:a8:f8:6f:64:22:e3:89:9e:08:35:52:8e:b8:50:
ca:c6:e4:fe:b0:7d:cb:00:b2:59:e1:3f:53:b1:d4:
10:de:37:db:7b:41:6e:93:75:ab:93:d9:f2:71:43:
5c:4f:a2:e0:8b:04:c6:50:c1:70:c0:43:a0:f6:2a:
5c:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:14:B6:25:7B:A9:00:73:89:93:24:D4:DB:2F:4B:6E:45:B0:B3:42
X509v3 Authority Key Identifier:
keyid:E0:4B:28:A1:9D:BF:53:4A:D6:1C:B0:49:98:6E:54:24:C3:28:4D:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4EsooZ2_U0rWHLBJmG5UJMMoTeI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/cda8f7-8b87-4c6e-bd56-acf04481064d/1/4EsooZ2_U0rWHLBJmG5UJMMoTeI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/cda8f7-8b87-4c6e-bd56-acf04481064d/1/4EsooZ2_U0rWHLBJmG5UJMMoTeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:1b:7d:60:45:40:ab:a0:1d:ae:8d:08:c2:d0:22:f9:0b:4e:
7f:f9:d0:58:e3:90:b9:d2:74:b2:2e:36:c8:76:69:fe:8d:d6:
9e:bc:54:4c:c9:c6:64:46:fb:91:ca:01:df:2e:15:81:bb:c3:
03:f6:72:30:c7:15:be:46:b8:09:3d:39:08:26:29:69:b4:e9:
07:2a:05:4d:bf:01:a5:73:47:03:7f:a9:99:33:6f:4f:1f:39:
a4:c5:d2:32:d3:9e:c8:71:65:b7:eb:a8:88:24:7c:d9:f0:b1:
79:92:e4:82:56:1a:e4:33:eb:1f:94:d9:49:90:77:e3:92:5c:
1a:be:ec:55:76:28:f1:24:ce:00:e7:64:c3:1f:85:a1:9b:5e:
29:20:84:a6:9d:85:47:3a:a1:f0:7c:cc:72:b6:dd:88:05:ac:
32:9d:42:26:e5:42:20:bb:ed:cb:64:0e:84:74:8b:e0:5f:e5:
d4:c5:fe:04:5f:36:0e:05:0e:2a:e1:5e:ce:b8:30:b0:e8:35:
69:75:c2:dd:fc:61:dd:2a:05:ca:ba:7f:20:7b:9d:00:ee:d1:
6d:eb:b5:cc:c3:f8:62:f5:a5:97:06:6f:dd:dc:18:7d:fb:74:
e1:cc:98:35:dd:cd:3b:ca:21:d3:a1:d0:db:5a:75:f0:7e:41:
42:3d:65:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 08:54:17 2025 by rpki-client