Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/c3bce6-58fb-4874-8b3e-3a85ee4c89bc/1/4JbEM2QAPsP398bqgVe4pQ9EDsw.mft
File: 4JbEM2QAPsP398bqgVe4pQ9EDsw.mft (raw, json)
Hash identifier: HRu0/z4X1ar5SO4s/QKUy+uCv3QNvXfht4snM3ZBiTg=
Subject key identifier: B7:87:16:AE:4B:17:B4:B7:20:B7:2C:17:9E:56:54:8D:74:B9:33:3A
Authority key identifier: E0:96:C4:33:64:00:3E:C3:F7:F7:C6:EA:81:57:B8:A5:0F:44:0E:CC
Certificate issuer: /CN=e096c43364003ec3f7f7c6ea8157b8a50f440ecc
Certificate serial: 0199221E3D4A3BE2F470D4E4A68630B606B3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4JbEM2QAPsP398bqgVe4pQ9EDsw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/c3bce6-58fb-4874-8b3e-3a85ee4c89bc/1/4JbEM2QAPsP398bqgVe4pQ9EDsw.mft
Manifest number: 1673
Signing time: Sun 07 Sep 2025 03:00:30 +0000
Manifest this update: Sun 07 Sep 2025 03:00:30 +0000
Manifest next update: Mon 08 Sep 2025 03:00:30 +0000
Files and hashes: 1: 1-3RhAT2YPB0r1ebiXkFnyV6tG8Y.roa (hash: IQS6khxqEbU9ABB49P6SoigiSYTvtS2Iy2GfbbCv2tY=)
2: 4JbEM2QAPsP398bqgVe4pQ9EDsw.crl (hash: RqiqYPXSO6c+LhrxQzcYrBMkufYoBliupnYtOskWu5E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/c3bce6-58fb-4874-8b3e-3a85ee4c89bc/1/4JbEM2QAPsP398bqgVe4pQ9EDsw.crl
rsync://rpki.ripe.net/repository/DEFAULT/ea/c3bce6-58fb-4874-8b3e-3a85ee4c89bc/1/4JbEM2QAPsP398bqgVe4pQ9EDsw.mft
rsync://rpki.ripe.net/repository/DEFAULT/4JbEM2QAPsP398bqgVe4pQ9EDsw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 03:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:1e:3d:4a:3b:e2:f4:70:d4:e4:a6:86:30:b6:06:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e096c43364003ec3f7f7c6ea8157b8a50f440ecc
Validity
Not Before: Sep 7 03:00:30 2025 GMT
Not After : Sep 8 03:00:30 2025 GMT
Subject: CN=b78716ae4b17b4b720b72c179e56548d74b9333a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:ef:ca:25:dd:ec:72:59:a2:c8:39:5b:c6:7c:
e0:b3:a5:a1:49:85:9d:16:81:a7:e2:93:7b:97:8c:
96:b9:0a:55:48:78:79:84:5d:c4:40:4e:79:75:7f:
60:cd:16:1e:ec:a9:5b:a9:d3:81:35:a0:55:3e:e7:
d0:0e:5d:5d:9b:0b:21:3f:f6:f4:88:f5:5d:c2:e2:
13:02:ec:1e:d9:9d:39:d9:21:6f:1e:12:7d:07:77:
04:f6:65:00:4c:38:d4:fd:5c:be:56:35:6c:70:64:
f9:4d:03:e8:16:10:92:79:86:91:df:75:29:64:ba:
37:4b:74:41:4a:39:82:30:35:58:36:6f:ab:fe:2c:
5b:0a:ad:80:c0:f1:80:c4:78:49:5e:6a:9f:34:91:
0b:3d:25:f8:76:fa:2b:0a:75:e5:2c:97:0e:84:bb:
6a:d3:a2:fa:af:a4:08:25:1c:d0:20:f7:be:44:a0:
d9:a1:0c:db:fc:0d:69:54:01:06:9a:d8:2d:f9:c2:
6d:50:19:9e:ce:5e:cf:61:8b:b9:4c:33:1e:e9:d5:
2a:f0:4f:66:a9:a5:2a:4c:5e:22:e6:e1:df:e1:89:
13:ed:22:09:c4:32:36:23:6c:56:af:93:96:a7:90:
9f:d2:43:4b:a9:05:a7:bb:ca:3d:97:4f:36:f8:e0:
30:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:87:16:AE:4B:17:B4:B7:20:B7:2C:17:9E:56:54:8D:74:B9:33:3A
X509v3 Authority Key Identifier:
keyid:E0:96:C4:33:64:00:3E:C3:F7:F7:C6:EA:81:57:B8:A5:0F:44:0E:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4JbEM2QAPsP398bqgVe4pQ9EDsw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/c3bce6-58fb-4874-8b3e-3a85ee4c89bc/1/4JbEM2QAPsP398bqgVe4pQ9EDsw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/c3bce6-58fb-4874-8b3e-3a85ee4c89bc/1/4JbEM2QAPsP398bqgVe4pQ9EDsw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:b6:a6:2c:c7:7c:8c:6a:40:d0:c1:70:19:9f:a3:9c:35:8a:
d1:f7:c1:58:d3:df:c4:35:84:b4:8a:9b:90:0a:67:63:09:c0:
0f:7e:98:99:54:9c:aa:e0:aa:47:71:08:85:fb:e7:f6:ca:5d:
7f:de:dd:c3:1b:5c:c6:f0:49:16:bb:3b:35:02:e8:08:31:14:
77:b7:26:60:af:f9:56:b9:e5:7d:1e:9b:31:9f:28:7c:d4:28:
7d:31:dc:77:82:b2:60:3d:9d:54:2e:c6:61:31:7e:76:a8:4d:
58:7a:3f:a6:0e:19:ad:78:f5:29:38:a8:7f:4b:84:fc:e7:0a:
a5:65:87:cb:2d:04:b3:a1:64:7a:a3:4c:d3:a5:9a:0f:df:61:
04:b0:f4:e4:1d:ff:3e:ee:ce:97:e3:46:92:83:7c:16:e3:80:
f1:2b:8f:f9:f3:38:55:06:ea:bc:32:49:6d:70:58:dd:80:e3:
46:20:82:e8:f9:0c:39:08:03:ec:97:83:1e:a6:06:56:e0:b5:
79:e0:2e:77:c4:c7:62:ca:be:d3:87:0d:7c:94:74:8b:76:d9:
3b:be:4c:98:89:b9:f3:ac:41:60:b2:73:bb:9e:19:2a:82:fa:
92:31:6d:a9:cc:44:eb:c2:3b:22:ff:2a:fa:8a:52:bb:3f:8e:
87:e9:00:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 10:07:33 2025 by rpki-client