Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/6b78a5-4c5c-4383-87fd-0cf74be303ff/1/4Z2wxbLZYQ71hul_uh_Kh1AG89o.mft
File: 4Z2wxbLZYQ71hul_uh_Kh1AG89o.mft (raw, json)
Hash identifier: /CYQXmnK85R2PgP0BtR0ONl+FvFE1SwKNKnxeWdcvg0=
Subject key identifier: E2:60:06:40:4A:A4:99:C2:A6:44:E6:08:38:A0:77:E9:02:15:6A:03
Authority key identifier: E1:9D:B0:C5:B2:D9:61:0E:F5:86:E9:7F:BA:1F:CA:87:50:06:F3:DA
Certificate issuer: /CN=e19db0c5b2d9610ef586e97fba1fca875006f3da
Certificate serial: 0198D4049A6060D45B5A7E9A9DCB667C67A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4Z2wxbLZYQ71hul_uh_Kh1AG89o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/6b78a5-4c5c-4383-87fd-0cf74be303ff/1/4Z2wxbLZYQ71hul_uh_Kh1AG89o.mft
Manifest number: 1179
Signing time: Fri 22 Aug 2025 23:02:08 +0000
Manifest this update: Fri 22 Aug 2025 23:02:08 +0000
Manifest next update: Sat 23 Aug 2025 23:02:08 +0000
Files and hashes: 1: 4Z2wxbLZYQ71hul_uh_Kh1AG89o.crl (hash: BpuYjASm4FoKH8RAMGsuCWiyP9loOxIwDvGVOkbOPGY=)
2: WX9ifdPc509PIWH1MshzaQ9gKs4.roa (hash: N2NEfXL50JrESYal+4AtaFkCctqevfpLSA3CNFTMaFM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/6b78a5-4c5c-4383-87fd-0cf74be303ff/1/4Z2wxbLZYQ71hul_uh_Kh1AG89o.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/6b78a5-4c5c-4383-87fd-0cf74be303ff/1/4Z2wxbLZYQ71hul_uh_Kh1AG89o.mft
rsync://rpki.ripe.net/repository/DEFAULT/4Z2wxbLZYQ71hul_uh_Kh1AG89o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Aug 2025 23:02:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:04:9a:60:60:d4:5b:5a:7e:9a:9d:cb:66:7c:67:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e19db0c5b2d9610ef586e97fba1fca875006f3da
Validity
Not Before: Aug 22 23:02:08 2025 GMT
Not After : Aug 23 23:02:08 2025 GMT
Subject: CN=e26006404aa499c2a644e60838a077e902156a03
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:c7:ef:ec:54:e6:5d:24:36:59:3c:1d:af:34:
9e:c1:00:04:9d:be:4e:d8:d3:0b:f1:e3:f4:d3:e2:
11:1a:f8:b5:9b:f3:ff:6f:80:63:d0:fc:36:9d:32:
ae:fb:e0:05:d6:16:93:ed:db:55:78:22:f9:7e:94:
a1:47:ce:6a:39:00:e2:db:77:b7:9e:2a:15:cf:bb:
08:70:75:45:f0:54:07:0c:31:11:88:7d:c9:b0:a3:
5f:89:ed:bd:f7:ff:9d:51:7c:c2:15:bf:79:b3:7a:
92:36:5a:ec:b0:d1:1d:8e:52:f4:9f:5d:48:b6:b9:
88:2a:15:bb:03:26:53:02:3b:83:82:91:1a:a2:23:
ce:62:b9:89:25:f4:4c:12:0d:ff:27:c6:b7:3e:f4:
a5:02:50:f0:fb:09:ae:92:5e:c7:cc:ca:50:2a:49:
da:af:3f:ee:17:6d:28:e9:55:82:1a:54:9d:00:e3:
ec:7e:f5:52:7a:0e:1a:b1:5f:85:bc:10:92:51:0d:
01:9a:1b:35:37:66:48:6d:a9:d3:18:80:1d:21:6b:
59:9b:01:e9:87:55:2d:ff:65:67:f7:9e:cf:d6:31:
93:55:68:74:2c:31:c5:96:ae:8a:93:24:50:68:2d:
2f:d9:f1:b0:64:de:44:35:90:b3:2a:c4:fd:b2:eb:
7c:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:60:06:40:4A:A4:99:C2:A6:44:E6:08:38:A0:77:E9:02:15:6A:03
X509v3 Authority Key Identifier:
keyid:E1:9D:B0:C5:B2:D9:61:0E:F5:86:E9:7F:BA:1F:CA:87:50:06:F3:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4Z2wxbLZYQ71hul_uh_Kh1AG89o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/6b78a5-4c5c-4383-87fd-0cf74be303ff/1/4Z2wxbLZYQ71hul_uh_Kh1AG89o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/6b78a5-4c5c-4383-87fd-0cf74be303ff/1/4Z2wxbLZYQ71hul_uh_Kh1AG89o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
08:5d:53:18:8e:d6:ab:2b:3d:4c:5f:11:ea:ec:65:8b:86:7c:
a6:d2:3d:5f:3b:99:53:38:a9:88:4c:82:b0:86:eb:42:93:31:
06:fb:af:20:af:52:df:ce:69:25:82:0e:62:11:27:5a:eb:d2:
5e:3f:9c:93:32:26:2b:2f:7d:f6:fa:25:9f:3a:e7:31:97:2e:
b3:0c:8f:94:74:2c:34:31:ca:f0:42:7d:c5:bf:ec:78:a8:36:
25:57:af:98:d6:cb:b9:cf:3d:71:dd:16:73:54:26:46:a6:de:
2e:86:58:0e:05:f0:30:8b:9d:c9:21:af:eb:28:af:79:90:2d:
2f:fe:96:c7:0d:82:7a:b3:28:80:ea:6a:66:d3:d3:b9:5e:21:
d1:a3:de:bc:16:88:04:64:aa:55:82:d5:41:ed:5e:c0:3d:73:
8f:76:e0:d7:ea:45:87:7a:64:1c:35:26:4d:78:be:84:79:b6:
5c:8d:fb:c5:8e:83:a0:5e:a3:54:79:6a:ee:2f:6c:bb:f9:f3:
b4:ea:e1:a9:7a:22:1a:ca:ba:22:5e:84:b9:23:3c:57:59:fb:
06:25:ad:71:ee:3c:d2:7e:5d:a9:f1:65:1b:0e:af:ab:7f:2e:
58:b1:5f:8c:dc:bb:e4:d5:fc:eb:ff:2a:8d:ec:c1:24:3d:8a:
58:88:61:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:27:42 2025 by rpki-client