Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/f2db08-c845-41ab-a08a-3375617d4efd/1/4sWGEhDcOL2660d9bacZZkqEprw.mft
File: 4sWGEhDcOL2660d9bacZZkqEprw.mft (raw, json)
Hash identifier: INHogyDH60Zv7R+syilHVxV4g50W/QXMYYu6VCIzDPA=
Subject key identifier: 48:EA:76:A4:1F:7B:11:DB:9E:64:27:19:43:EF:E5:D2:CF:4C:49:44
Authority key identifier: E2:C5:86:12:10:DC:38:BD:BA:EB:47:7D:6D:A7:19:66:4A:84:A6:BC
Certificate issuer: /CN=e2c5861210dc38bdbaeb477d6da719664a84a6bc
Certificate serial: 0198D698230ED6D581B37BE1643900C8DDED
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4sWGEhDcOL2660d9bacZZkqEprw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/de/f2db08-c845-41ab-a08a-3375617d4efd/1/4sWGEhDcOL2660d9bacZZkqEprw.mft
Manifest number: 164B
Signing time: Sat 23 Aug 2025 11:02:31 +0000
Manifest this update: Sat 23 Aug 2025 11:02:31 +0000
Manifest next update: Sun 24 Aug 2025 11:02:31 +0000
Files and hashes: 1: 4sWGEhDcOL2660d9bacZZkqEprw.crl (hash: 7L90f/zRlO3dhk8+hP9CldEJQWFrqFDlYgX6e+F1nvc=)
2: MhYnzmLfZDvOOpTx4DJlD8uvHAw.roa (hash: memj1j1yK6z3c51s+6fk9nq4QfCP9UkOHBbx45J56ck=)
3: V1IYhraqy6GtWLev9Eiy1F0cSC0.roa (hash: OXaQyDbPBz9AsW1XM72kAOArg1kTGFWfPBLrTjWDPns=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/de/f2db08-c845-41ab-a08a-3375617d4efd/1/4sWGEhDcOL2660d9bacZZkqEprw.crl
rsync://rpki.ripe.net/repository/DEFAULT/de/f2db08-c845-41ab-a08a-3375617d4efd/1/4sWGEhDcOL2660d9bacZZkqEprw.mft
rsync://rpki.ripe.net/repository/DEFAULT/4sWGEhDcOL2660d9bacZZkqEprw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:98:23:0e:d6:d5:81:b3:7b:e1:64:39:00:c8:dd:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e2c5861210dc38bdbaeb477d6da719664a84a6bc
Validity
Not Before: Aug 23 11:02:31 2025 GMT
Not After : Aug 24 11:02:31 2025 GMT
Subject: CN=48ea76a41f7b11db9e64271943efe5d2cf4c4944
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:76:c0:d5:2b:ab:08:44:5a:8e:45:c3:5c:c8:
d5:ce:90:63:1e:84:e3:0e:c5:01:a8:3a:a3:78:1a:
05:ce:81:cd:da:36:1c:8a:d0:76:8c:5a:a5:1f:ed:
62:70:4e:5c:f3:d3:2f:67:a9:7c:cf:42:f6:6c:44:
0b:b3:35:b4:ac:35:4a:69:ca:82:ed:9c:e1:04:c4:
0d:2b:3f:a6:a3:a7:84:4e:d6:5c:36:3d:76:57:54:
8d:5f:49:7d:8a:89:5b:ff:03:01:be:63:d0:ed:53:
cc:a4:68:bc:f9:01:3e:49:c2:63:2d:3d:49:8a:f8:
5c:26:cd:a8:e8:a0:50:60:fb:b0:23:b8:5b:bf:67:
40:d9:88:14:0b:f7:5d:a4:24:2c:84:69:c4:3b:9d:
64:d8:18:59:d8:c9:8b:ba:91:42:d3:ad:d3:b1:f9:
52:2e:89:ce:6e:a3:9b:72:ec:8c:aa:8e:90:aa:c1:
b6:74:2c:ce:2c:50:9c:8c:62:13:f8:8c:1b:3a:dc:
48:d1:ea:60:5d:bb:ea:94:bb:de:85:4a:ad:7e:c4:
39:3e:05:cc:c1:bd:60:c0:1b:ff:a0:e1:c6:af:40:
76:30:86:d4:aa:fe:aa:9a:f5:9d:29:00:40:4a:74:
77:2e:91:29:57:48:88:b0:46:47:75:9b:1a:50:7c:
25:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:EA:76:A4:1F:7B:11:DB:9E:64:27:19:43:EF:E5:D2:CF:4C:49:44
X509v3 Authority Key Identifier:
keyid:E2:C5:86:12:10:DC:38:BD:BA:EB:47:7D:6D:A7:19:66:4A:84:A6:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4sWGEhDcOL2660d9bacZZkqEprw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/f2db08-c845-41ab-a08a-3375617d4efd/1/4sWGEhDcOL2660d9bacZZkqEprw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/de/f2db08-c845-41ab-a08a-3375617d4efd/1/4sWGEhDcOL2660d9bacZZkqEprw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:53:07:26:68:9a:38:2e:c2:e1:43:60:31:a6:c1:b9:80:9a:
3c:e2:40:0a:f1:30:a8:52:37:34:68:75:ca:98:ee:45:16:cf:
a4:cd:1b:05:f3:4e:33:02:0a:8c:3d:bb:0b:92:e5:98:3b:9d:
28:9d:a7:8f:5a:25:8a:2d:2f:2a:35:4c:52:e4:ec:56:9d:0a:
b7:21:7b:1a:d9:16:bd:b3:9e:79:e4:18:c2:bf:84:ac:6e:2b:
37:e0:21:8a:21:5a:10:ad:7f:a9:14:2e:62:fc:c6:6b:0f:e6:
f5:8b:cd:8c:c3:f0:32:f6:a3:b8:6d:fa:79:7c:43:12:92:e8:
ab:7d:34:34:d2:fd:41:08:10:74:85:ee:f9:ce:ee:6b:31:be:
3e:e4:41:69:c9:74:c2:af:7e:93:8d:11:75:90:e2:fd:9b:13:
de:35:d4:1f:10:56:98:45:aa:74:5f:12:64:19:16:df:6f:5c:
4a:f7:e6:e2:53:e0:fd:3c:ec:f4:1f:ec:2a:fa:5d:ac:0f:14:
b5:10:62:3c:f2:6f:41:81:3f:a5:f9:84:f6:ec:0e:bc:a4:0a:
41:25:43:db:c0:2d:0f:90:b8:1e:33:b0:8a:69:f4:8e:6b:06:
d2:18:38:a0:5a:53:97:32:76:d1:a5:a3:d5:0f:cf:d9:ca:1d:
0d:7f:73:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 14:20:30 2025 by rpki-client