Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/59e14e-415f-401a-adce-e1df45980c78/1/4sFE7jL911AT5_G4wtgH09rti74.mft
File: 4sFE7jL911AT5_G4wtgH09rti74.mft (raw, json)
Hash identifier: FOIAYk9wHq13vLlnkAv8N9dZVi21ZBpFC6NFTg+3NHE=
Subject key identifier: 23:41:14:75:5B:C9:D5:16:42:28:6E:0C:4E:D1:AB:3E:28:8D:95:95
Authority key identifier: E2:C1:44:EE:32:FD:D7:50:13:E7:F1:B8:C2:D8:07:D3:DA:ED:8B:BE
Certificate issuer: /CN=e2c144ee32fdd75013e7f1b8c2d807d3daed8bbe
Certificate serial: 0198D54E26400C322EDA7688AF58A62C259E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4sFE7jL911AT5_G4wtgH09rti74.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/88/59e14e-415f-401a-adce-e1df45980c78/1/4sFE7jL911AT5_G4wtgH09rti74.mft
Manifest number: 1649
Signing time: Sat 23 Aug 2025 05:02:05 +0000
Manifest this update: Sat 23 Aug 2025 05:02:05 +0000
Manifest next update: Sun 24 Aug 2025 05:02:05 +0000
Files and hashes: 1: 4sFE7jL911AT5_G4wtgH09rti74.crl (hash: lSJcDwhiK/vBNQfx3p2fDxu8Pv54U2E6RQiQN+R3Hok=)
2: at7Oxyqw1YSxEoUOaW5RKvIjf0s.roa (hash: yOhpw2razZhrT29WlGA/CY3Yi3Lil58jkjnW17t8rig=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/88/59e14e-415f-401a-adce-e1df45980c78/1/4sFE7jL911AT5_G4wtgH09rti74.crl
rsync://rpki.ripe.net/repository/DEFAULT/88/59e14e-415f-401a-adce-e1df45980c78/1/4sFE7jL911AT5_G4wtgH09rti74.mft
rsync://rpki.ripe.net/repository/DEFAULT/4sFE7jL911AT5_G4wtgH09rti74.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:4e:26:40:0c:32:2e:da:76:88:af:58:a6:2c:25:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e2c144ee32fdd75013e7f1b8c2d807d3daed8bbe
Validity
Not Before: Aug 23 05:02:05 2025 GMT
Not After : Aug 24 05:02:05 2025 GMT
Subject: CN=234114755bc9d51642286e0c4ed1ab3e288d9595
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:f6:f9:25:01:8c:49:b2:5b:1e:c0:c6:47:fa:
df:83:30:49:ce:85:fb:7a:2e:6c:d6:62:86:2e:94:
b0:ed:c0:f1:8e:e0:b1:97:9e:7f:ed:54:cb:85:2d:
22:26:e8:94:01:f7:72:64:17:e1:e1:b6:c2:96:b3:
75:f6:46:c1:60:d0:42:ea:fb:80:a4:a6:0d:28:d0:
99:8e:74:e5:4a:07:ae:c5:88:39:7a:9e:af:ab:34:
df:a2:ac:64:c3:89:c9:9f:ee:a9:b7:35:a0:67:12:
c4:20:69:64:54:74:24:e4:9b:7f:cf:e3:99:bf:8b:
a0:36:f3:bd:ff:72:e8:3a:4f:73:6a:2e:fe:0e:3b:
65:ac:3f:ee:15:58:16:d7:e8:07:ac:0d:27:e3:0a:
98:bd:55:3a:77:85:90:dd:5d:2f:88:42:d4:0a:2c:
a7:64:55:3d:e0:30:f2:c8:e5:d8:9e:92:38:d0:fe:
d4:d3:07:a2:37:25:06:d2:1c:66:c4:c0:c0:79:0b:
ff:e1:9d:e4:1b:5c:46:44:b5:55:30:3a:a4:ee:74:
17:5e:64:ad:b1:12:fc:3d:4d:8f:ef:1a:67:22:60:
cc:24:29:3c:d2:ef:d6:4b:ab:bb:4b:f9:54:f9:a1:
d1:e9:66:3f:11:9e:de:6b:cc:21:9d:23:d2:6b:38:
b9:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:41:14:75:5B:C9:D5:16:42:28:6E:0C:4E:D1:AB:3E:28:8D:95:95
X509v3 Authority Key Identifier:
keyid:E2:C1:44:EE:32:FD:D7:50:13:E7:F1:B8:C2:D8:07:D3:DA:ED:8B:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4sFE7jL911AT5_G4wtgH09rti74.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/59e14e-415f-401a-adce-e1df45980c78/1/4sFE7jL911AT5_G4wtgH09rti74.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/88/59e14e-415f-401a-adce-e1df45980c78/1/4sFE7jL911AT5_G4wtgH09rti74.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:32:d6:ac:29:7a:bd:e8:1b:c4:04:eb:1d:f9:51:72:9b:d1:
e2:07:e7:dd:c5:58:a9:39:73:2e:94:46:5b:a6:ff:ba:ee:30:
91:4e:7c:4d:0f:29:d8:e5:e0:45:63:c2:25:0f:f2:6f:95:79:
57:ee:96:5d:59:0d:ec:cb:04:b2:1b:11:34:fb:3a:6b:22:c1:
5b:47:c8:20:f1:b4:1b:c3:0b:eb:f4:49:88:76:67:2b:41:9d:
32:bf:50:ce:40:a0:e4:6b:80:59:cb:3e:f5:9f:17:98:cb:35:
a9:55:64:47:b2:9a:4a:65:10:a5:26:16:eb:02:d2:7a:71:d0:
1d:ef:18:d9:2c:9b:9a:cd:a4:bf:1b:fd:91:04:ca:5f:c2:5e:
d0:36:2e:f2:31:02:cb:7b:dc:9e:ab:a9:13:3b:d6:fb:0b:86:
e8:88:e8:a1:0b:cc:a0:58:c7:35:f3:3f:89:97:99:c0:56:82:
8e:48:e0:1e:41:89:bd:29:2d:5b:1b:f1:f3:2a:ac:1c:c1:db:
23:02:74:1c:43:68:7d:c0:bc:b0:4a:d1:e3:64:0a:7b:8f:71:
b1:c7:8a:b6:b0:09:ca:59:2f:c2:0c:00:e9:c7:f5:82:87:63:
ca:17:1c:ec:0e:fa:a7:33:67:0e:eb:f0:58:d6:6f:a7:8f:cf:
b1:12:05:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 11:37:06 2025 by rpki-client