Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/7c9bb7-268a-4362-bd08-901a373df080/1/4oTj0vGiHIK7s9ZvdvC9kzNRPJo.mft
File: 4oTj0vGiHIK7s9ZvdvC9kzNRPJo.mft (raw, json)
Hash identifier: nfcuk5YFRW/wWupc84M+bOkdCWKbmTcU8vSRLsSQGo4=
Subject key identifier: 49:CA:AB:AF:CA:C1:FB:9B:07:75:95:1A:D6:EA:75:CE:39:34:A5:B0
Authority key identifier: E2:84:E3:D2:F1:A2:1C:82:BB:B3:D6:6F:76:F0:BD:93:33:51:3C:9A
Certificate issuer: /CN=e284e3d2f1a21c82bbb3d66f76f0bd9333513c9a
Certificate serial: 0198D4044CE0B961F8951E3AAF917D32DCF2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4oTj0vGiHIK7s9ZvdvC9kzNRPJo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/7c9bb7-268a-4362-bd08-901a373df080/1/4oTj0vGiHIK7s9ZvdvC9kzNRPJo.mft
Manifest number: 1147
Signing time: Fri 22 Aug 2025 23:01:48 +0000
Manifest this update: Fri 22 Aug 2025 23:01:48 +0000
Manifest next update: Sat 23 Aug 2025 23:01:48 +0000
Files and hashes: 1: 4oTj0vGiHIK7s9ZvdvC9kzNRPJo.crl (hash: 13mx1QEtCsf/DgzPln3TppV2lXKYp30bI3H3OhihBz4=)
2: q2EHI1QqAri510M2ZcKkjLI2cEU.roa (hash: 404e8//wzDitUa6OCGaYRBgvvc05hb46lBTtLtVyVk8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/7c9bb7-268a-4362-bd08-901a373df080/1/4oTj0vGiHIK7s9ZvdvC9kzNRPJo.crl
rsync://rpki.ripe.net/repository/DEFAULT/d7/7c9bb7-268a-4362-bd08-901a373df080/1/4oTj0vGiHIK7s9ZvdvC9kzNRPJo.mft
rsync://rpki.ripe.net/repository/DEFAULT/4oTj0vGiHIK7s9ZvdvC9kzNRPJo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Aug 2025 23:01:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:04:4c:e0:b9:61:f8:95:1e:3a:af:91:7d:32:dc:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e284e3d2f1a21c82bbb3d66f76f0bd9333513c9a
Validity
Not Before: Aug 22 23:01:48 2025 GMT
Not After : Aug 23 23:01:48 2025 GMT
Subject: CN=49caabafcac1fb9b0775951ad6ea75ce3934a5b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:dc:a7:7b:58:e2:96:e6:4d:69:c4:69:d9:1f:
3c:9b:27:31:89:e8:8f:b0:a7:f1:58:bf:7b:cf:1a:
80:a5:27:6e:d8:23:b7:60:73:08:66:e7:2e:fa:53:
41:08:e9:8c:73:c0:39:71:58:c7:d3:ad:87:d1:9c:
0b:38:f7:14:2d:79:1d:94:23:30:0a:f3:14:fe:3b:
25:ec:d0:a5:99:95:75:87:dd:06:83:90:a2:e5:ad:
e8:b8:cb:f7:68:72:6f:9b:b2:3e:05:1b:92:52:c7:
10:42:26:90:61:19:9a:52:d1:4e:6a:e2:9d:ca:90:
5a:f0:a1:c2:3c:18:17:98:11:a4:12:87:b7:e7:a4:
d8:9c:67:88:0d:f3:f0:f9:47:9d:8a:ba:0e:93:cc:
a0:56:3e:70:4c:40:b3:17:bc:71:15:cf:00:85:c8:
d6:50:83:b5:be:ab:ac:89:89:ef:98:e3:53:60:36:
60:a0:1a:57:9e:63:92:8a:04:10:c5:48:b4:8e:fd:
9c:70:ab:fe:02:00:ec:b0:59:f1:ee:05:23:92:a9:
b7:a8:4a:a5:25:57:14:2b:97:58:ba:50:dd:ca:4a:
0f:4d:2f:db:8b:ed:ee:b6:fd:ee:7e:16:4e:8a:55:
2e:24:ad:72:c8:b1:9e:73:09:a8:1a:09:1b:63:14:
8f:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:CA:AB:AF:CA:C1:FB:9B:07:75:95:1A:D6:EA:75:CE:39:34:A5:B0
X509v3 Authority Key Identifier:
keyid:E2:84:E3:D2:F1:A2:1C:82:BB:B3:D6:6F:76:F0:BD:93:33:51:3C:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4oTj0vGiHIK7s9ZvdvC9kzNRPJo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/7c9bb7-268a-4362-bd08-901a373df080/1/4oTj0vGiHIK7s9ZvdvC9kzNRPJo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/7c9bb7-268a-4362-bd08-901a373df080/1/4oTj0vGiHIK7s9ZvdvC9kzNRPJo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:21:bb:fa:eb:ac:e4:74:22:f2:1a:85:f0:8d:29:2a:2e:21:
df:43:11:86:6e:5e:85:89:ed:9e:3a:47:4b:07:f5:f5:6d:ed:
aa:88:1c:9f:0b:f0:fb:95:ef:1d:23:41:ea:77:27:d4:60:38:
9a:77:fb:1f:db:9b:34:53:96:ea:94:34:2a:ad:92:2a:dc:1d:
94:00:3a:57:d9:99:3a:bf:59:6d:ab:57:40:dd:4b:75:76:14:
30:37:42:bb:fe:91:25:a5:ea:56:45:3f:c9:bc:32:bf:e3:fd:
ab:71:82:f3:b3:55:34:94:92:54:c8:31:72:4a:40:d1:12:08:
f7:22:23:d6:d5:a9:c3:7d:fe:5f:d0:0c:7f:a4:cc:56:e9:1a:
08:44:d2:91:fb:82:de:dc:31:68:66:9e:9b:de:90:21:65:42:
8e:af:53:65:42:4f:72:91:3b:ad:95:0a:2e:a7:63:c8:d2:7c:
05:b7:5e:a7:77:5d:40:77:56:e5:dc:b7:44:d6:7d:69:e2:89:
a9:f3:4d:cd:e6:1c:02:dc:64:20:f1:83:68:e7:62:31:2d:b6:
a1:2b:10:8f:2c:a3:b4:b3:57:86:79:ec:ec:7e:b8:30:96:c5:
8b:8a:96:4b:bb:fc:54:15:96:70:eb:a2:5a:76:fd:6d:4b:d4:
00:f2:95:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:24:13 2025 by rpki-client