Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/a5881a-98e8-4e45-bcb8-71eecf898d42/1/4r2Sdqb3jawQAsN4OhjUXsFLXUM.mft
File: 4r2Sdqb3jawQAsN4OhjUXsFLXUM.mft (raw, json)
Hash identifier: ipwA4O2tmI6yTS3aC67dMANE5eFdAJUHXfmWWyjaAU4=
Subject key identifier: 1C:E9:04:79:F8:8B:8C:D8:A8:AC:28:B9:1D:80:13:EC:87:B0:35:4F
Authority key identifier: E2:BD:92:76:A6:F7:8D:AC:10:02:C3:78:3A:18:D4:5E:C1:4B:5D:43
Certificate issuer: /CN=e2bd9276a6f78dac1002c3783a18d45ec14b5d43
Certificate serial: 0198D6298FDD3A965B305C4AD31C441675D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4r2Sdqb3jawQAsN4OhjUXsFLXUM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/a5881a-98e8-4e45-bcb8-71eecf898d42/1/4r2Sdqb3jawQAsN4OhjUXsFLXUM.mft
Manifest number: 1282
Signing time: Sat 23 Aug 2025 09:01:44 +0000
Manifest this update: Sat 23 Aug 2025 09:01:44 +0000
Manifest next update: Sun 24 Aug 2025 09:01:44 +0000
Files and hashes: 1: 1yffeEAlkHpCSPofwopCAZ2rRWc.roa (hash: oLYYyh0+bRIg5caImko3WBrhuFPOBEoNn3gpu+iT4Rs=)
2: 4r2Sdqb3jawQAsN4OhjUXsFLXUM.crl (hash: KYCPgvu0OUpkF1YU4ujogoLJ9AJ37Ui+yFjpNeTYvdM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/a5881a-98e8-4e45-bcb8-71eecf898d42/1/4r2Sdqb3jawQAsN4OhjUXsFLXUM.crl
rsync://rpki.ripe.net/repository/DEFAULT/1e/a5881a-98e8-4e45-bcb8-71eecf898d42/1/4r2Sdqb3jawQAsN4OhjUXsFLXUM.mft
rsync://rpki.ripe.net/repository/DEFAULT/4r2Sdqb3jawQAsN4OhjUXsFLXUM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:29:8f:dd:3a:96:5b:30:5c:4a:d3:1c:44:16:75:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e2bd9276a6f78dac1002c3783a18d45ec14b5d43
Validity
Not Before: Aug 23 09:01:44 2025 GMT
Not After : Aug 24 09:01:44 2025 GMT
Subject: CN=1ce90479f88b8cd8a8ac28b91d8013ec87b0354f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:3c:de:ea:f6:6b:40:d2:97:3d:1e:05:c8:31:
2d:cd:a3:6e:ad:86:4e:71:1b:2f:5a:8e:69:29:fc:
48:3a:f5:0c:03:df:54:97:53:0a:5c:99:9c:4d:80:
47:73:e1:66:91:c1:22:43:5f:2d:54:5c:bc:61:79:
29:eb:c6:8a:f8:7d:38:03:8e:e9:b9:51:9b:73:8c:
75:6b:c2:17:71:70:44:d3:1a:49:9a:5c:c7:f1:f3:
51:1c:90:7d:18:cf:0c:78:4d:94:db:34:34:00:7a:
52:ae:c0:f5:04:4c:67:04:4d:7d:e6:08:44:4e:6d:
bf:fb:5f:69:c7:b6:14:cc:05:05:74:0b:88:30:23:
2e:85:93:4d:0f:45:d5:b3:b1:f8:7d:20:e4:31:34:
f6:7a:f4:10:75:14:d5:7d:ec:a4:4d:21:8c:e0:d6:
a9:bd:d9:08:80:2e:9f:6f:46:48:6a:2a:40:de:26:
17:34:d9:00:12:20:fc:36:b2:51:d5:97:af:37:a5:
fb:92:c2:46:2a:ff:ac:c6:b7:25:4c:7e:41:3b:e1:
a9:fa:f1:a7:8b:b9:ff:06:dd:4e:a6:f0:e8:22:8b:
c9:ef:02:8e:af:fb:3b:99:5c:2b:33:11:3e:44:62:
78:8a:e7:b6:bd:66:15:24:c6:c9:be:ce:ff:ac:45:
03:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:E9:04:79:F8:8B:8C:D8:A8:AC:28:B9:1D:80:13:EC:87:B0:35:4F
X509v3 Authority Key Identifier:
keyid:E2:BD:92:76:A6:F7:8D:AC:10:02:C3:78:3A:18:D4:5E:C1:4B:5D:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4r2Sdqb3jawQAsN4OhjUXsFLXUM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/a5881a-98e8-4e45-bcb8-71eecf898d42/1/4r2Sdqb3jawQAsN4OhjUXsFLXUM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/a5881a-98e8-4e45-bcb8-71eecf898d42/1/4r2Sdqb3jawQAsN4OhjUXsFLXUM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9d:67:b5:42:23:41:0c:9b:82:35:bc:06:ab:b4:29:60:9b:fd:
e8:26:79:0a:c6:a7:60:bd:ac:e0:53:26:3e:63:c1:c5:20:4e:
69:1d:e8:20:2a:e8:41:5e:44:0c:52:74:fb:25:2b:6f:8b:68:
b3:4c:d9:5b:cd:10:5e:2d:72:fb:59:41:1f:a5:11:99:ce:b4:
56:f6:4e:63:48:db:3b:13:3d:46:fa:99:50:95:8e:d1:8f:dd:
02:1b:c4:5c:7d:51:1d:0e:eb:62:fb:0f:00:ef:96:20:a9:4b:
52:88:b2:4e:72:b9:fd:f0:7b:0a:5b:4c:1c:94:bb:f1:10:9a:
1b:e0:51:0a:9d:3b:b8:8d:d6:db:4d:3e:95:68:4d:6c:7c:ca:
b3:20:b7:28:7c:2b:5d:97:e5:85:5a:21:80:71:84:5d:87:d3:
34:5c:61:22:30:c8:6a:83:a1:57:ab:56:5a:41:27:6a:35:52:
a6:14:a6:66:76:bc:4d:25:ff:4f:6a:15:8a:f8:6c:57:f7:1d:
5a:a3:be:96:57:d9:e4:3e:58:ff:a8:52:5b:6d:ba:5b:bb:a6:
21:49:7e:28:81:be:1c:81:b5:cf:4e:7b:3e:68:53:f4:9a:39:
9f:38:97:3e:16:0c:0b:26:e3:41:b6:11:ef:97:9c:fb:d7:87:
cb:99:ad:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 14:13:19 2025 by rpki-client