Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/2dad35-dd0a-4d63-8c1e-b9a36eb9ee21/1/4ddWkNOcgwGAs_VcSdFAoqBNORc.mft
File: 4ddWkNOcgwGAs_VcSdFAoqBNORc.mft (raw, json)
Hash identifier: lh72HU4hl/7L1yBrdJJFaXV9aBTWG+bLc6bS0Gewc9Y=
Subject key identifier: 14:25:10:C0:43:F0:66:64:0D:6C:83:61:29:41:E8:0B:36:C2:34:3D
Authority key identifier: E1:D7:56:90:D3:9C:83:01:80:B3:F5:5C:49:D1:40:A2:A0:4D:39:17
Certificate issuer: /CN=e1d75690d39c830180b3f55c49d140a2a04d3917
Certificate serial: 0198D47437A5E90328487974792001ED688A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4ddWkNOcgwGAs_VcSdFAoqBNORc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/2dad35-dd0a-4d63-8c1e-b9a36eb9ee21/1/4ddWkNOcgwGAs_VcSdFAoqBNORc.mft
Manifest number: 1648
Signing time: Sat 23 Aug 2025 01:04:02 +0000
Manifest this update: Sat 23 Aug 2025 01:04:02 +0000
Manifest next update: Sun 24 Aug 2025 01:04:02 +0000
Files and hashes: 1: 4ddWkNOcgwGAs_VcSdFAoqBNORc.crl (hash: 1uLLLIwM4dQSgnxMG1PcLQYBozFHUtzYdL668UBxabo=)
2: PdBwCNjRTwQhBka9QYTFJ85Levw.roa (hash: 1UzFJNiL/xWD/Kmj2JG8FjTPHthfJspZ/00KC7jKNXw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/2dad35-dd0a-4d63-8c1e-b9a36eb9ee21/1/4ddWkNOcgwGAs_VcSdFAoqBNORc.crl
rsync://rpki.ripe.net/repository/DEFAULT/d4/2dad35-dd0a-4d63-8c1e-b9a36eb9ee21/1/4ddWkNOcgwGAs_VcSdFAoqBNORc.mft
rsync://rpki.ripe.net/repository/DEFAULT/4ddWkNOcgwGAs_VcSdFAoqBNORc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:74:37:a5:e9:03:28:48:79:74:79:20:01:ed:68:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e1d75690d39c830180b3f55c49d140a2a04d3917
Validity
Not Before: Aug 23 01:04:02 2025 GMT
Not After : Aug 24 01:04:02 2025 GMT
Subject: CN=142510c043f066640d6c83612941e80b36c2343d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:82:7f:65:6b:b6:4a:aa:0e:ff:7c:2a:d9:19:
22:b0:e7:e0:c6:71:33:91:75:31:b9:01:08:db:1b:
79:07:54:fa:e0:27:d5:1a:74:0e:3f:09:dd:1b:4c:
6c:52:a3:b8:27:fb:42:2c:36:47:b4:81:2e:73:22:
58:73:00:27:07:43:a3:5a:f3:cc:22:1c:7a:a0:d1:
b3:51:67:6f:5d:1d:a7:85:80:48:e6:02:51:de:d0:
87:7d:f9:bd:14:37:62:7b:4a:67:f8:e5:89:1c:ba:
7c:de:eb:20:76:ab:73:0e:14:d9:c5:78:84:2d:8d:
bd:a1:38:90:75:c2:84:69:a1:0a:de:f4:5a:a8:e6:
fc:73:5b:8e:1b:a9:5f:e7:d9:82:ef:6f:a6:39:5f:
46:3c:3d:72:cd:09:3c:e3:8b:3c:ce:cf:cf:8e:5f:
68:4b:87:cc:0b:5e:9f:0d:c4:9b:46:94:45:df:c7:
23:02:0c:40:03:ad:f5:9c:f0:f3:10:68:4f:56:e3:
98:b4:d4:f0:34:6a:a0:e5:c4:df:67:9d:3f:a9:9c:
0e:48:8e:6c:e7:30:1b:dc:54:d2:1b:fc:fc:04:44:
83:cd:98:01:1f:1d:01:4c:ca:df:34:04:b0:a8:17:
51:07:25:fa:8a:05:e6:4c:09:d2:f5:ba:b6:cf:b8:
79:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:25:10:C0:43:F0:66:64:0D:6C:83:61:29:41:E8:0B:36:C2:34:3D
X509v3 Authority Key Identifier:
keyid:E1:D7:56:90:D3:9C:83:01:80:B3:F5:5C:49:D1:40:A2:A0:4D:39:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4ddWkNOcgwGAs_VcSdFAoqBNORc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/2dad35-dd0a-4d63-8c1e-b9a36eb9ee21/1/4ddWkNOcgwGAs_VcSdFAoqBNORc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/2dad35-dd0a-4d63-8c1e-b9a36eb9ee21/1/4ddWkNOcgwGAs_VcSdFAoqBNORc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:87:69:ac:8a:1a:b0:61:f7:fc:0d:45:bf:a5:d0:bf:b1:5e:
d3:bc:44:30:9b:a0:36:be:1b:68:54:af:99:98:26:23:0f:45:
94:68:24:1d:8a:4e:71:57:24:75:b3:51:a9:dd:0f:58:93:19:
81:32:61:09:a6:d7:aa:58:09:a3:b1:95:23:cb:3a:6d:12:66:
0d:6a:8b:40:5e:eb:c2:35:fb:65:f9:25:14:15:f4:6a:68:2e:
16:5f:6b:f1:24:12:1e:e7:c5:d2:4f:2a:72:d7:e8:f1:d8:14:
a7:16:27:f6:ad:d5:b5:fe:a1:14:5f:6a:9e:8b:94:39:9f:70:
31:fc:c5:66:e6:bb:63:5f:91:7a:a9:ab:58:95:84:b6:ea:6d:
9f:9d:f7:de:52:55:3e:8e:c3:e7:87:b3:cb:c2:f6:5e:df:fe:
e3:f3:a5:a8:2c:50:a8:2d:55:f4:4e:d7:43:9c:b3:c0:18:f8:
38:3a:3c:0d:87:8c:ce:4c:36:e8:ed:59:1e:5e:4e:c5:b1:a7:
a9:32:26:cc:3c:d1:b9:70:e5:60:b2:31:fa:e3:d3:89:44:68:
bd:71:3c:3e:8d:26:2b:22:46:dc:a0:4e:7a:74:9b:43:c2:ca:
0c:0c:9d:0a:f5:c5:cf:1b:e7:ec:b2:73:aa:23:10:61:75:8a:
d9:5e:93:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:16:15 2025 by rpki-client