Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/e6efcf-e5d9-49f0-b11f-d52fdc9e8287/1/4br5DtE9F1RSz15aFjKnlL8fTJo.mft
File: 4br5DtE9F1RSz15aFjKnlL8fTJo.mft (raw, json)
Hash identifier: lVYZxLa/8VNJNw3cWagYgaTjMWnw0O43QyvdHRlOh6U=
Subject key identifier: 76:72:93:43:6D:5D:76:5B:C9:E1:5B:C0:09:81:35:AD:22:CC:C0:B7
Authority key identifier: E1:BA:F9:0E:D1:3D:17:54:52:CF:5E:5A:16:32:A7:94:BF:1F:4C:9A
Certificate issuer: /CN=e1baf90ed13d175452cf5e5a1632a794bf1f4c9a
Certificate serial: 0198D4728D419EB480BB4E6AA3213C1D598C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4br5DtE9F1RSz15aFjKnlL8fTJo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/e6efcf-e5d9-49f0-b11f-d52fdc9e8287/1/4br5DtE9F1RSz15aFjKnlL8fTJo.mft
Manifest number: 164A
Signing time: Sat 23 Aug 2025 01:02:13 +0000
Manifest this update: Sat 23 Aug 2025 01:02:13 +0000
Manifest next update: Sun 24 Aug 2025 01:02:13 +0000
Files and hashes: 1: 4br5DtE9F1RSz15aFjKnlL8fTJo.crl (hash: I2wEoCXbGipkVPCk4cTNnC+noh0jUk5RHn7DuG0yyKQ=)
2: Tli-MNBliT4GZ0SuL6-kYDFipSs.roa (hash: tAZBpKtmJpVB7wLzYFodx1oVBHeaFLGJGQEpb9KD5qs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/e6efcf-e5d9-49f0-b11f-d52fdc9e8287/1/4br5DtE9F1RSz15aFjKnlL8fTJo.crl
rsync://rpki.ripe.net/repository/DEFAULT/64/e6efcf-e5d9-49f0-b11f-d52fdc9e8287/1/4br5DtE9F1RSz15aFjKnlL8fTJo.mft
rsync://rpki.ripe.net/repository/DEFAULT/4br5DtE9F1RSz15aFjKnlL8fTJo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:72:8d:41:9e:b4:80:bb:4e:6a:a3:21:3c:1d:59:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e1baf90ed13d175452cf5e5a1632a794bf1f4c9a
Validity
Not Before: Aug 23 01:02:13 2025 GMT
Not After : Aug 24 01:02:13 2025 GMT
Subject: CN=767293436d5d765bc9e15bc0098135ad22ccc0b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:91:1f:5c:30:73:db:45:39:1c:92:ed:f7:f9:
ac:52:8b:5c:1f:b5:7a:46:84:e9:f8:b1:23:eb:73:
46:83:be:8d:26:61:a8:4e:8e:1d:7f:ae:f3:55:6e:
3e:ca:ba:6f:07:d6:38:6c:50:4c:31:72:f3:f5:72:
52:08:f4:c0:db:85:4d:18:55:b8:be:37:89:05:bf:
02:96:75:76:61:63:de:42:26:df:18:b4:f8:11:a8:
01:5c:b4:7a:d6:9f:ae:41:56:61:db:2a:4c:61:09:
12:ef:5a:94:b8:17:de:ee:c9:88:38:ae:72:fc:4c:
dd:f1:4a:ec:44:f0:b7:aa:66:9d:4d:c4:2f:fa:6b:
8b:ec:fc:eb:10:09:49:b2:d0:e9:cd:9d:81:e1:25:
a6:1a:ce:55:9a:d3:d0:19:db:85:63:ec:40:a0:5f:
d5:e8:d2:b2:8c:a0:0b:c5:1d:20:37:58:d8:d3:47:
85:5c:ee:78:d3:9b:d9:98:64:6f:91:75:7b:32:e8:
64:b8:36:15:4f:b6:18:ec:55:7a:b8:06:a1:3b:9b:
ce:0f:df:b5:e1:dc:43:0e:4d:a1:5a:46:7a:dc:cf:
14:cb:31:28:b7:16:56:25:c8:1e:d2:9b:99:a7:12:
51:6a:e4:83:c2:c4:50:bf:69:1c:33:a0:c5:bd:f1:
6c:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:72:93:43:6D:5D:76:5B:C9:E1:5B:C0:09:81:35:AD:22:CC:C0:B7
X509v3 Authority Key Identifier:
keyid:E1:BA:F9:0E:D1:3D:17:54:52:CF:5E:5A:16:32:A7:94:BF:1F:4C:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4br5DtE9F1RSz15aFjKnlL8fTJo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/e6efcf-e5d9-49f0-b11f-d52fdc9e8287/1/4br5DtE9F1RSz15aFjKnlL8fTJo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/e6efcf-e5d9-49f0-b11f-d52fdc9e8287/1/4br5DtE9F1RSz15aFjKnlL8fTJo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
90:9c:11:ac:7c:15:6d:61:73:32:a6:7f:7f:76:2d:fa:57:eb:
83:46:2a:64:79:d4:0c:17:a5:aa:af:42:0d:0c:f6:70:59:ba:
b7:c9:03:4f:4b:0c:25:da:2d:1d:6c:9f:88:41:c9:11:b2:fa:
0e:93:60:1c:3f:0b:c0:fb:32:d7:b3:cc:8e:59:e9:d6:18:1c:
cf:21:09:81:ce:3c:98:ee:71:06:8a:60:0c:72:de:1c:a9:c2:
70:ae:5a:a1:d4:cd:71:c1:80:24:73:f2:0f:63:a2:3d:d8:f9:
81:49:f8:dc:80:8a:f3:7d:0d:f9:d2:e4:60:ad:cb:c6:76:23:
d8:d4:fd:76:60:64:d8:92:c5:53:88:29:f1:b7:a7:ba:59:00:
1a:e2:88:8b:5b:cd:0f:ab:17:e6:df:7a:b2:d3:b1:d9:2a:28:
62:24:53:5e:18:55:69:8a:1d:18:b9:8b:f7:e0:e5:6e:da:03:
da:74:5d:e6:8c:d1:02:30:a2:f1:e5:fa:e5:4f:39:5e:23:d4:
63:38:3b:cf:2e:af:b2:fc:ec:ea:8b:42:a2:5d:7e:3d:02:d6:
5d:d0:e0:b5:57:bd:fe:ac:ec:28:de:1e:82:57:27:b3:23:33:
ee:2e:30:77:76:2c:1d:13:fe:78:44:60:ff:08:f1:1c:27:b7:
0a:e5:1d:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 09:38:23 2025 by rpki-client