Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/830b5c-b6c8-4979-a53e-494e26491796/1/4QBqBtxJCZf_j8OkLs84m-090Xg.mft
File: 4QBqBtxJCZf_j8OkLs84m-090Xg.mft (raw, json)
Hash identifier: IVetaj2gLyoRuzWRGTDAg24heb2Dh//JoJb2WrtiIxs=
Subject key identifier: F3:1D:1F:E3:16:77:38:4B:AE:7B:F5:82:14:ED:C0:AF:E0:BE:53:D5
Authority key identifier: E1:00:6A:06:DC:49:09:97:FF:8F:C3:A4:2E:CF:38:9B:ED:3D:D1:78
Certificate issuer: /CN=e1006a06dc490997ff8fc3a42ecf389bed3dd178
Certificate serial: 0198D4E0BD335BCC42E2CD73733622F928BA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4QBqBtxJCZf_j8OkLs84m-090Xg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/830b5c-b6c8-4979-a53e-494e26491796/1/4QBqBtxJCZf_j8OkLs84m-090Xg.mft
Manifest number: 1649
Signing time: Sat 23 Aug 2025 03:02:34 +0000
Manifest this update: Sat 23 Aug 2025 03:02:34 +0000
Manifest next update: Sun 24 Aug 2025 03:02:34 +0000
Files and hashes: 1: 4QBqBtxJCZf_j8OkLs84m-090Xg.crl (hash: H6cW/6rTXxdQ4yQ4ead9QoAsTD9Dh/AcQhSdz7VPuA0=)
2: LnqHoulK3VATGmKEAn72iWxo7SM.roa (hash: yf2dP1AEzVPcio054NYKJ4SAhZkRjptLQTGykKC3qEs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/830b5c-b6c8-4979-a53e-494e26491796/1/4QBqBtxJCZf_j8OkLs84m-090Xg.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/830b5c-b6c8-4979-a53e-494e26491796/1/4QBqBtxJCZf_j8OkLs84m-090Xg.mft
rsync://rpki.ripe.net/repository/DEFAULT/4QBqBtxJCZf_j8OkLs84m-090Xg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:e0:bd:33:5b:cc:42:e2:cd:73:73:36:22:f9:28:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e1006a06dc490997ff8fc3a42ecf389bed3dd178
Validity
Not Before: Aug 23 03:02:34 2025 GMT
Not After : Aug 24 03:02:34 2025 GMT
Subject: CN=f31d1fe31677384bae7bf58214edc0afe0be53d5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:79:e8:af:cf:cb:3d:d3:be:f8:46:d0:20:78:
16:63:5b:6f:93:d7:1f:39:22:e0:09:e1:d3:55:b2:
3c:e1:46:da:bd:04:31:db:49:9c:f6:29:53:c0:e7:
8e:64:90:86:0b:fc:ae:cc:67:1a:de:90:87:2e:ed:
d8:93:56:38:e6:f1:60:21:11:07:17:80:a0:a7:c9:
c0:fe:a6:97:40:cc:40:28:30:80:91:24:98:07:18:
bc:aa:2d:9d:b1:e8:35:5b:d5:51:57:ea:e9:9e:9c:
bc:53:f3:f8:a5:f8:f7:8a:5f:ce:58:43:76:0c:51:
bb:be:92:5b:40:56:ef:f2:14:8f:9d:ce:4a:d6:2e:
5a:0d:14:fb:e4:3a:98:ce:ee:36:01:f1:ae:28:14:
d8:ec:0c:74:48:a6:cb:2a:a6:69:3f:67:ba:45:6e:
56:a5:8d:84:f9:8c:81:b3:38:4c:7c:33:a5:f9:cb:
c7:02:d8:c6:c2:8e:77:2f:b5:d8:ba:3f:9c:1d:21:
10:8d:76:92:fa:35:f1:9a:8d:28:bf:9e:ab:30:bc:
e0:d3:fe:bf:06:d5:26:86:eb:09:54:e6:24:8d:43:
7d:42:9f:1d:b8:e1:ba:fa:0f:1c:fc:01:e3:38:60:
6f:a1:70:f7:e3:dc:45:85:ac:bb:5b:83:c1:31:5a:
54:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:1D:1F:E3:16:77:38:4B:AE:7B:F5:82:14:ED:C0:AF:E0:BE:53:D5
X509v3 Authority Key Identifier:
keyid:E1:00:6A:06:DC:49:09:97:FF:8F:C3:A4:2E:CF:38:9B:ED:3D:D1:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4QBqBtxJCZf_j8OkLs84m-090Xg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/830b5c-b6c8-4979-a53e-494e26491796/1/4QBqBtxJCZf_j8OkLs84m-090Xg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/830b5c-b6c8-4979-a53e-494e26491796/1/4QBqBtxJCZf_j8OkLs84m-090Xg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:87:b8:7a:54:41:2a:af:93:93:04:9b:86:bd:4f:2e:91:a3:
df:0a:6b:aa:24:2e:e5:b0:98:ef:a0:ca:22:4a:b7:3a:78:c5:
ed:80:ff:79:f9:b4:a0:5d:bc:7f:82:94:6a:ea:a5:14:21:86:
48:90:e8:7c:a0:09:15:9c:39:e0:ab:b8:55:04:27:cd:27:f4:
ce:58:a1:bb:88:6a:2f:d6:6e:42:07:8b:b9:32:90:e4:3b:c4:
e3:05:09:9a:50:93:cf:9b:92:0f:fe:70:0f:a6:6a:af:ba:57:
9b:d8:be:df:cb:71:31:8b:7c:b7:3d:3c:04:3a:d0:4f:ee:67:
f2:da:1a:84:8b:27:76:4b:89:77:02:1d:15:42:a2:7c:eb:bd:
88:89:89:d8:77:bc:01:31:7e:d3:24:8d:75:cd:be:0f:63:e9:
a5:56:cd:61:05:6c:7f:04:b7:6e:8b:9a:63:9f:bf:25:7e:6a:
94:92:7a:1d:5f:c6:17:55:fe:b7:67:0d:f4:e0:7b:59:ef:c8:
13:51:3c:69:c0:5e:bd:44:fb:bc:c6:c7:1e:5a:ac:62:f3:04:
58:d3:36:c5:4a:1d:8e:c0:61:fe:48:a6:22:08:8a:43:fe:ca:
5f:8d:21:eb:79:2f:19:fe:19:3a:3f:c4:08:69:b3:e0:06:44:
fc:24:2b:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 09:37:52 2025 by rpki-client