Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/2048e4-818c-4601-b023-743765bd0f3e/1/e4jUpKsYpZtmTauv2ziA3DWyK5E.mft
File: e4jUpKsYpZtmTauv2ziA3DWyK5E.mft (raw, json)
Hash identifier: XQrPLCPXjJD5LJ/2injC7vIFVcRgpxwiH1B+1HbwphY=
Subject key identifier: 33:15:F9:01:BD:72:13:CD:F5:75:FA:DA:67:3D:FC:C5:B4:0A:69:A9
Authority key identifier: 7B:88:D4:A4:AB:18:A5:9B:66:4D:AB:AF:DB:38:80:DC:35:B2:2B:91
Certificate issuer: /CN=7b88d4a4ab18a59b664dabafdb3880dc35b22b91
Certificate serial: 0198D54E6DD45A74EE6DBB11C926CA933DBC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/e4jUpKsYpZtmTauv2ziA3DWyK5E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/2048e4-818c-4601-b023-743765bd0f3e/1/e4jUpKsYpZtmTauv2ziA3DWyK5E.mft
Manifest number: 164F
Signing time: Sat 23 Aug 2025 05:02:23 +0000
Manifest this update: Sat 23 Aug 2025 05:02:23 +0000
Manifest next update: Sun 24 Aug 2025 05:02:23 +0000
Files and hashes: 1: XWu-Cy3k4bG46jzu68jWDU2BUlE.roa (hash: oYNAZflFkpftatNeWIk412xMRJVARxZKG+FJn7voe4M=)
2: e4jUpKsYpZtmTauv2ziA3DWyK5E.crl (hash: tmmDiDE6iT2nF+jscVQ99au1GiEpojEAWHFtDxi5qZk=)
3: jYKhHXV1OB2pC6LjAmSh2r6YUk0.roa (hash: 7C9VKQGPhygAtV4ulo4sNDzQRhMNsoU08LmAQx4ncWw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/04/2048e4-818c-4601-b023-743765bd0f3e/1/e4jUpKsYpZtmTauv2ziA3DWyK5E.crl
rsync://rpki.ripe.net/repository/DEFAULT/04/2048e4-818c-4601-b023-743765bd0f3e/1/e4jUpKsYpZtmTauv2ziA3DWyK5E.mft
rsync://rpki.ripe.net/repository/DEFAULT/e4jUpKsYpZtmTauv2ziA3DWyK5E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:4e:6d:d4:5a:74:ee:6d:bb:11:c9:26:ca:93:3d:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7b88d4a4ab18a59b664dabafdb3880dc35b22b91
Validity
Not Before: Aug 23 05:02:23 2025 GMT
Not After : Aug 24 05:02:23 2025 GMT
Subject: CN=3315f901bd7213cdf575fada673dfcc5b40a69a9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:16:01:d5:6b:3c:33:05:2f:d4:8f:ba:ce:47:
da:1c:c6:32:2b:8b:e2:d4:10:c0:73:a6:cd:ce:1d:
64:c7:7a:78:0f:37:84:85:3b:ee:0f:52:25:e9:d3:
42:9f:7d:c9:d4:49:2d:3c:59:05:19:57:a5:0a:ac:
31:a7:d9:0f:14:85:1b:31:34:26:01:63:db:fd:ef:
ec:74:54:55:59:dc:47:78:69:0c:45:36:a6:98:70:
be:ec:7b:07:7f:d7:13:f3:4b:bd:6d:b1:ec:f4:a0:
69:52:69:df:ec:e9:17:3a:15:c8:f8:3f:6d:10:9e:
e3:b6:d6:bc:c2:60:d3:cc:3a:3f:b9:90:11:e7:78:
aa:57:7c:12:d9:9b:37:ab:ce:47:88:72:6c:be:a8:
d1:98:c9:ac:22:26:d8:0a:2c:fb:7d:08:61:0e:1b:
6e:b0:e6:b2:e1:7a:c6:bf:b2:c9:62:f9:1f:a6:57:
df:1a:9a:43:1e:bd:eb:c4:59:f3:87:3d:85:73:14:
d6:d7:b0:2b:da:07:1e:72:6f:ab:7c:5f:51:81:4b:
19:12:39:15:43:43:e1:47:7a:c6:15:45:a8:26:7e:
78:62:96:b8:d9:10:1f:d2:85:74:3a:a7:f1:37:dc:
81:11:d8:bd:93:88:b7:b0:26:64:4d:20:97:86:fa:
10:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:15:F9:01:BD:72:13:CD:F5:75:FA:DA:67:3D:FC:C5:B4:0A:69:A9
X509v3 Authority Key Identifier:
keyid:7B:88:D4:A4:AB:18:A5:9B:66:4D:AB:AF:DB:38:80:DC:35:B2:2B:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4jUpKsYpZtmTauv2ziA3DWyK5E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/2048e4-818c-4601-b023-743765bd0f3e/1/e4jUpKsYpZtmTauv2ziA3DWyK5E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/04/2048e4-818c-4601-b023-743765bd0f3e/1/e4jUpKsYpZtmTauv2ziA3DWyK5E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:05:8b:d3:c9:d5:f8:47:bb:71:b2:3b:33:7e:04:5b:a6:f0:
f0:6d:a1:d4:ee:a9:36:67:cc:61:cb:6f:b1:c6:a2:b8:1d:44:
86:2b:03:09:d1:e1:3b:da:82:2a:d8:43:73:da:f8:9e:e5:7f:
d7:09:d2:bd:44:4e:eb:9d:98:42:d3:df:6d:2e:45:64:85:f5:
f3:b1:3f:b2:22:24:75:03:79:aa:7f:f9:21:a7:5c:e5:a8:2d:
d5:e7:b2:23:7a:e3:e2:fc:fe:a8:92:a7:30:7f:08:cf:6e:c9:
c5:85:d5:36:23:f4:f1:d5:fb:6a:16:c3:84:6f:2c:c6:6c:0e:
de:75:6d:fd:23:fc:a1:9a:ce:2c:c7:5e:05:da:59:31:70:fa:
d9:67:8d:25:54:1b:6e:f7:08:7a:08:96:cc:9d:af:79:01:ac:
4a:7a:95:8d:f3:e5:3d:25:09:91:4e:15:5a:d7:51:02:0a:e1:
c2:e6:f4:50:8d:5c:63:0d:58:a5:40:b4:27:c7:7b:6a:04:aa:
ad:27:5e:9e:0b:36:f5:e8:db:17:b0:5c:03:c2:ce:df:3c:8c:
90:91:05:6d:2e:47:60:a5:0f:cd:cf:eb:2a:1a:5a:74:f9:d5:
9b:e7:54:de:69:c4:28:83:17:16:30:b6:19:55:9b:4b:c5:b5:
97:46:a8:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:52:04 2025 by rpki-client