Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/be1720-801e-4f9e-a5c1-68a2f0bb5b7a/1/4kvChw3iWZ2vZkl_VynHSzPvmTo.mft
File: 4kvChw3iWZ2vZkl_VynHSzPvmTo.mft (raw, json)
Hash identifier: +AIrKmxm6cHquwT0UX0G/m3LQfxYZ/XyyEviIrNTrJ0=
Subject key identifier: 4C:BF:75:86:37:30:F3:16:FB:90:95:25:7B:69:6C:ED:22:64:8E:F4
Authority key identifier: E2:4B:C2:87:0D:E2:59:9D:AF:66:49:7F:57:29:C7:4B:33:EF:99:3A
Certificate issuer: /CN=e24bc2870de2599daf66497f5729c74b33ef993a
Certificate serial: 0198D6608BB543F06213B85F5CB45155E4EB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4kvChw3iWZ2vZkl_VynHSzPvmTo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/be1720-801e-4f9e-a5c1-68a2f0bb5b7a/1/4kvChw3iWZ2vZkl_VynHSzPvmTo.mft
Manifest number: 164A
Signing time: Sat 23 Aug 2025 10:01:48 +0000
Manifest this update: Sat 23 Aug 2025 10:01:48 +0000
Manifest next update: Sun 24 Aug 2025 10:01:48 +0000
Files and hashes: 1: 1-rpc7ufolrPPESf1-RPYDxCY_T8.roa (hash: aMrW8McI1AnE66yXNAmSVq0+rlupGq2T5Ly3LIkG59o=)
2: 4kvChw3iWZ2vZkl_VynHSzPvmTo.crl (hash: GubU/xlcAlmFmZPB09Ro2SeYqMbybmZd3qIjFSX7308=)
3: fTOQFI1UvSwnT9wznNbLZs3UG2U.roa (hash: L/h45q4tkE5FoRZ0DX9ltIgAYeRk4jVnxVfoOe4XvCw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/be1720-801e-4f9e-a5c1-68a2f0bb5b7a/1/4kvChw3iWZ2vZkl_VynHSzPvmTo.crl
rsync://rpki.ripe.net/repository/DEFAULT/d8/be1720-801e-4f9e-a5c1-68a2f0bb5b7a/1/4kvChw3iWZ2vZkl_VynHSzPvmTo.mft
rsync://rpki.ripe.net/repository/DEFAULT/4kvChw3iWZ2vZkl_VynHSzPvmTo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 10:01:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:60:8b:b5:43:f0:62:13:b8:5f:5c:b4:51:55:e4:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e24bc2870de2599daf66497f5729c74b33ef993a
Validity
Not Before: Aug 23 10:01:48 2025 GMT
Not After : Aug 24 10:01:48 2025 GMT
Subject: CN=4cbf75863730f316fb9095257b696ced22648ef4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:38:fa:ed:57:8a:37:a2:d3:8f:e8:8f:a9:4a:
2b:48:65:c4:48:57:27:98:23:6c:f1:dd:6e:fe:82:
f3:0c:6b:0e:20:af:6d:be:a1:14:4d:a5:44:2d:2e:
d1:5a:2c:37:d5:4d:39:35:37:fe:32:d0:34:3e:1d:
79:2f:d3:50:d6:5a:88:7c:4e:9d:ca:c7:fd:a5:aa:
a5:9f:35:c7:f1:56:fc:6c:71:72:b8:36:ab:a1:d1:
8b:48:88:1e:62:52:8e:79:5d:06:9b:7d:5a:a7:05:
ce:dc:3b:92:63:f9:a8:43:dc:0d:f5:ba:4d:21:98:
1e:06:92:2a:1d:53:44:ee:5a:62:52:c4:dc:ac:4f:
7f:9b:8b:ce:f4:f5:a8:50:4e:bf:b7:45:55:ad:fb:
40:df:e4:44:5d:dd:9c:21:0e:de:e6:02:a2:f9:9a:
b5:71:4e:53:b4:02:aa:b1:d5:03:bf:fb:ac:17:4c:
b3:f6:e1:a6:9c:ce:05:b1:40:72:bf:e2:8c:9d:05:
5a:c9:fc:c8:d0:fe:e3:27:56:e8:7c:21:94:11:19:
ef:05:c9:e9:3e:83:1a:7d:f1:d8:53:44:dd:c4:b3:
8e:62:b5:02:ec:be:41:b8:21:5a:57:dc:7b:1f:cd:
d2:f2:f3:c6:4d:ba:78:f8:92:a1:8e:e1:24:66:12:
d3:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:BF:75:86:37:30:F3:16:FB:90:95:25:7B:69:6C:ED:22:64:8E:F4
X509v3 Authority Key Identifier:
keyid:E2:4B:C2:87:0D:E2:59:9D:AF:66:49:7F:57:29:C7:4B:33:EF:99:3A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4kvChw3iWZ2vZkl_VynHSzPvmTo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/be1720-801e-4f9e-a5c1-68a2f0bb5b7a/1/4kvChw3iWZ2vZkl_VynHSzPvmTo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/be1720-801e-4f9e-a5c1-68a2f0bb5b7a/1/4kvChw3iWZ2vZkl_VynHSzPvmTo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:d4:40:ab:12:02:30:93:82:e8:e6:6f:2b:8d:fe:ef:2d:2f:
7b:bd:f7:c4:5e:b3:2a:47:c3:22:3b:1e:48:e4:88:47:b9:8a:
bc:6e:55:bd:49:51:f0:2b:06:ec:7e:b4:f6:2f:5e:06:3f:27:
e9:80:ab:64:b3:1c:1e:8b:08:d4:e9:e3:9d:38:6c:bf:af:ff:
e3:7e:6d:77:cc:1b:66:9e:74:7a:23:6b:5a:7a:7b:22:0d:83:
3a:e1:3c:90:51:f3:de:4d:5f:99:5d:c7:a1:3e:3c:67:55:e5:
d3:ff:34:87:f0:ae:99:8d:e2:a0:e1:82:e6:cf:f6:d2:a6:57:
ab:b7:fa:73:b7:78:6a:f9:49:53:c5:6c:66:35:39:c4:80:6c:
54:2d:77:d2:57:a0:f5:fb:a9:9d:35:c9:45:e1:0a:24:29:ce:
13:b4:f8:dd:18:a2:9e:fd:ec:ef:1b:95:2e:40:35:4a:5d:3f:
9f:76:ed:e3:97:89:3f:c5:66:a5:42:7b:b9:19:fc:5a:c3:72:
37:7d:eb:98:84:03:9c:79:fc:31:cb:d4:90:1c:dd:21:67:08:
71:f3:87:24:5c:9a:cf:ca:62:f7:18:11:eb:20:3a:16:33:3e:
01:25:bf:90:ec:8c:1a:66:58:fd:6a:e9:90:5a:17:f3:75:b9:
59:02:48:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 20:46:00 2025 by rpki-client