Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/28d600-a869-4ab1-9b2e-446019966a19/1/4FdMKHjWtTYTm4lfCMnG2xjhKps.mft
File: 4FdMKHjWtTYTm4lfCMnG2xjhKps.mft (raw, json)
Hash identifier: no+k7DqetXTzj+oCAc611NXBdWye0PCI94YuWJa/qyA=
Subject key identifier: F6:55:72:D8:A8:18:22:7C:27:56:F5:9F:C4:14:1F:39:12:AC:AF:67
Authority key identifier: E0:57:4C:28:78:D6:B5:36:13:9B:89:5F:08:C9:C6:DB:18:E1:2A:9B
Certificate issuer: /CN=e0574c2878d6b536139b895f08c9c6db18e12a9b
Certificate serial: 0198D4E08A5366F9E46613BDB5171C7BA933
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4FdMKHjWtTYTm4lfCMnG2xjhKps.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/28d600-a869-4ab1-9b2e-446019966a19/1/4FdMKHjWtTYTm4lfCMnG2xjhKps.mft
Manifest number: 1651
Signing time: Sat 23 Aug 2025 03:02:21 +0000
Manifest this update: Sat 23 Aug 2025 03:02:21 +0000
Manifest next update: Sun 24 Aug 2025 03:02:21 +0000
Files and hashes: 1: 4FdMKHjWtTYTm4lfCMnG2xjhKps.crl (hash: 499qZCLvX3p/df+wfoJG/qe3icRNiNxSul7zn154bAM=)
2: F5_lNgEgzfWoE5_Cqsta810GUD8.roa (hash: iFMsbMYL1gucfU8DYPuCeVZjMtj1pfRR/WALBk/WmbI=)
3: GPk2iBuHJkhE3vpf7v6PEKywv7w.roa (hash: GWqOVJmjwk1Pn1GbnWABjMV1e5ehhhP81Lyr4q/ji2E=)
4: OflCzXga8ucfjVqp9uUhh7zK_qM.roa (hash: tJ4j/9WnUQafTpRcoYrdjgTWc0yGFpsicsnou7Bw3VU=)
5: SwP1NYlZc5jbDBXXeMNl1hjy1LA.roa (hash: DMSgzACIbB/JZuNfMaMP2kCv3jA/gmECBXJyT4DQzwk=)
6: W6KxeoLPp69-NZgXYljCkgfMzmI.roa (hash: WWTdkNcNGcm7BbXaoCx/steftEF6zzmySvzLX5r6lpM=)
7: aAP3usYXoFfJgmCfE8_VSaJGbTU.roa (hash: x6wsw/R7hONUKg46ARfXmJgysd6wAhjXDI0EDejXv3A=)
8: uGW4wsIIh4UfRdPgdZPrknwT0_s.roa (hash: DewiqU6mTjj3HeFVXlyQsAjNkoAtpsCRp10m8FffrLA=)
9: x9MROVO0I_4DbRC-cdgvtpUcqSo.roa (hash: nmMjnQZ2GqEE7VMtJSqrjcD6wbWb5UdEwkmJmCMyG7E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/28d600-a869-4ab1-9b2e-446019966a19/1/4FdMKHjWtTYTm4lfCMnG2xjhKps.crl
rsync://rpki.ripe.net/repository/DEFAULT/e4/28d600-a869-4ab1-9b2e-446019966a19/1/4FdMKHjWtTYTm4lfCMnG2xjhKps.mft
rsync://rpki.ripe.net/repository/DEFAULT/4FdMKHjWtTYTm4lfCMnG2xjhKps.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 03:02:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:e0:8a:53:66:f9:e4:66:13:bd:b5:17:1c:7b:a9:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e0574c2878d6b536139b895f08c9c6db18e12a9b
Validity
Not Before: Aug 23 03:02:21 2025 GMT
Not After : Aug 24 03:02:21 2025 GMT
Subject: CN=f65572d8a818227c2756f59fc4141f3912acaf67
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:56:36:f0:bb:11:1a:63:c1:ba:2a:36:42:d1:
02:db:55:59:b8:e6:7e:9d:a2:08:2d:54:65:52:ac:
a5:0e:5e:ec:03:24:c4:6e:c2:01:63:ce:4a:70:a6:
4a:5f:a9:10:9d:b8:cd:d0:b8:1d:d3:15:a8:a9:32:
5f:c7:45:93:34:0d:96:43:e1:a2:b2:f0:86:13:8e:
2b:52:bd:64:7b:ca:cd:4f:e6:00:77:f5:43:90:73:
8a:70:5e:c8:43:db:29:2e:4c:c0:d8:33:ed:8e:f7:
88:80:92:c3:4a:8f:6e:fa:37:20:81:16:bb:52:64:
70:53:d4:d8:c4:cc:88:c6:08:51:d9:34:b2:a4:b0:
92:65:33:35:c8:ee:25:67:8d:f6:eb:36:c5:d1:21:
d5:50:b9:6a:34:0d:9a:d2:4c:69:08:ba:f7:e3:56:
f2:fc:f1:b2:af:27:c1:46:13:09:24:3a:c9:12:ba:
b1:00:d4:a8:a6:a6:70:50:18:a5:99:f4:2e:85:71:
1e:19:1b:1c:f5:3b:4a:61:df:6f:7b:17:25:68:8e:
cd:94:01:62:3c:73:0c:04:55:c8:ca:df:72:6d:c2:
ac:32:57:b1:dc:4a:bf:69:df:a3:68:e8:1f:84:61:
cc:57:9f:15:da:4d:07:9d:f0:eb:60:7b:bd:9b:e9:
47:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:55:72:D8:A8:18:22:7C:27:56:F5:9F:C4:14:1F:39:12:AC:AF:67
X509v3 Authority Key Identifier:
keyid:E0:57:4C:28:78:D6:B5:36:13:9B:89:5F:08:C9:C6:DB:18:E1:2A:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4FdMKHjWtTYTm4lfCMnG2xjhKps.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/28d600-a869-4ab1-9b2e-446019966a19/1/4FdMKHjWtTYTm4lfCMnG2xjhKps.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/28d600-a869-4ab1-9b2e-446019966a19/1/4FdMKHjWtTYTm4lfCMnG2xjhKps.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:8c:be:26:41:a8:04:02:11:97:4c:1c:91:99:93:ef:ec:b2:
6d:6e:c7:81:97:0d:5e:d5:40:a0:6a:89:73:cf:e8:8c:bb:56:
a2:b4:85:c4:eb:c5:7c:1d:34:8e:99:d4:38:3b:c5:23:6d:34:
f2:ea:f5:c3:4e:e7:94:f4:80:ac:06:28:5e:21:7a:d0:64:61:
9f:22:d1:38:00:45:3a:cf:e5:05:37:ef:90:2a:6c:a3:d9:ed:
73:d5:22:51:03:2c:97:03:b2:58:31:16:e9:6a:c5:4a:10:4b:
04:30:bb:04:8e:b4:a1:4c:fa:5e:8a:76:65:61:e1:fb:77:ea:
8c:cd:51:78:b0:57:f4:d3:42:c3:0f:14:9e:33:6e:8a:8a:7c:
53:da:c2:75:91:72:96:6f:cd:66:5a:6b:a3:a9:10:36:48:ce:
e7:e0:bc:d2:e1:e4:5b:d3:5f:bb:58:b3:36:85:2a:a3:eb:10:
fb:d8:90:a2:fb:1d:f3:38:d4:3a:c9:3d:05:e4:24:fe:6e:9e:
30:2a:72:74:f5:5d:8f:84:a6:db:fb:f4:90:0d:4b:a4:c0:27:
0a:5b:9a:20:02:26:19:09:eb:ae:22:f6:b7:01:11:d0:5c:6c:
46:50:cb:22:09:0c:d8:7a:02:16:b0:d2:8e:05:1a:3f:09:49:
8a:e6:33:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 14:11:12 2025 by rpki-client