Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/01608d-08f1-4ab5-a926-be561ccded2c/1/_4ztOwmpBeuWhpxY9mtPi1kVA7A.mft
File: _4ztOwmpBeuWhpxY9mtPi1kVA7A.mft (raw, json)
Hash identifier: 3EZHv9d12t3jjuPGGw4DuaKDgvJPxPCtV7qoKAy6ObU=
Subject key identifier: EC:FE:FC:F1:79:6D:44:68:16:AA:31:34:D4:77:DC:A2:DC:F7:CA:3F
Authority key identifier: FF:8C:ED:3B:09:A9:05:EB:96:86:9C:58:F6:6B:4F:8B:59:15:03:B0
Certificate issuer: /CN=ff8ced3b09a905eb96869c58f66b4f8b591503b0
Certificate serial: 0198D473FE1EF779FA04BB158AA47CE85D77
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_4ztOwmpBeuWhpxY9mtPi1kVA7A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/01608d-08f1-4ab5-a926-be561ccded2c/1/_4ztOwmpBeuWhpxY9mtPi1kVA7A.mft
Manifest number: 1649
Signing time: Sat 23 Aug 2025 01:03:48 +0000
Manifest this update: Sat 23 Aug 2025 01:03:48 +0000
Manifest next update: Sun 24 Aug 2025 01:03:48 +0000
Files and hashes: 1: _4ztOwmpBeuWhpxY9mtPi1kVA7A.crl (hash: vpaQ2p2LiIv7SJ1BPp3hn5NbzUhYii/ugJ7KnXKE/7E=)
2: xOQc72Z94YWZ0x4WXA9ac2DfTkA.roa (hash: JOazIpcEkdoXe7dHpDJ/1wfs3pC+0YfgMICoYiHagPk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/01608d-08f1-4ab5-a926-be561ccded2c/1/_4ztOwmpBeuWhpxY9mtPi1kVA7A.crl
rsync://rpki.ripe.net/repository/DEFAULT/f5/01608d-08f1-4ab5-a926-be561ccded2c/1/_4ztOwmpBeuWhpxY9mtPi1kVA7A.mft
rsync://rpki.ripe.net/repository/DEFAULT/_4ztOwmpBeuWhpxY9mtPi1kVA7A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 01:03:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:73:fe:1e:f7:79:fa:04:bb:15:8a:a4:7c:e8:5d:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ff8ced3b09a905eb96869c58f66b4f8b591503b0
Validity
Not Before: Aug 23 01:03:48 2025 GMT
Not After : Aug 24 01:03:48 2025 GMT
Subject: CN=ecfefcf1796d446816aa3134d477dca2dcf7ca3f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:83:26:f5:23:46:30:eb:69:5e:36:89:05:f1:
4f:6b:40:b6:49:b2:47:6b:b2:db:73:63:57:7e:50:
dd:c1:dc:67:be:91:29:d0:bb:10:1e:fa:3b:39:eb:
21:84:0c:1a:2c:99:0a:4b:67:28:31:57:84:fe:8c:
3e:8e:3c:c5:09:25:ee:f6:88:a5:dd:52:59:c8:0b:
c8:2d:5b:85:11:66:ff:ae:53:56:53:e7:4f:4e:8a:
ef:5a:57:d1:61:de:27:b0:c0:6b:94:a1:fb:ae:08:
57:56:ba:aa:01:bc:21:d5:4a:99:f7:87:b2:f1:ec:
49:8b:b7:2d:4c:f2:65:1f:71:d0:96:9b:b4:73:4f:
83:1e:fd:b6:f8:42:55:4e:8a:ec:c1:a4:93:84:d2:
ce:9c:78:69:d5:70:01:14:31:a6:6d:73:89:1f:b6:
70:cc:c2:c4:f2:01:94:95:90:bb:54:94:07:05:22:
b3:23:81:dc:2a:e4:29:a5:cf:0e:97:bc:67:d1:11:
66:e1:db:b8:a0:11:ed:70:c2:ff:ac:43:de:12:63:
4d:e7:d2:0f:21:68:26:94:b9:b1:a6:5b:b3:12:3f:
44:8c:bd:14:fe:36:5b:34:4f:18:98:b1:18:d8:13:
37:e8:8f:d9:dc:ec:29:f8:e9:b5:6d:35:a8:96:4d:
32:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:FE:FC:F1:79:6D:44:68:16:AA:31:34:D4:77:DC:A2:DC:F7:CA:3F
X509v3 Authority Key Identifier:
keyid:FF:8C:ED:3B:09:A9:05:EB:96:86:9C:58:F6:6B:4F:8B:59:15:03:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_4ztOwmpBeuWhpxY9mtPi1kVA7A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/01608d-08f1-4ab5-a926-be561ccded2c/1/_4ztOwmpBeuWhpxY9mtPi1kVA7A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/01608d-08f1-4ab5-a926-be561ccded2c/1/_4ztOwmpBeuWhpxY9mtPi1kVA7A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:0f:48:95:61:56:ae:0a:0a:79:e6:07:04:a2:52:1c:4d:e4:
d9:34:73:05:55:19:3f:6a:b2:0e:a2:fe:a7:07:79:48:01:54:
42:56:f3:1c:62:97:8a:31:d4:31:ad:c1:31:64:40:b9:6e:9b:
2e:f7:a0:cc:00:93:86:dc:2d:cf:00:0c:b5:7c:84:38:e4:c7:
c7:df:d9:b7:c0:51:25:e1:aa:6e:a9:ae:48:87:fb:be:f5:0a:
c8:eb:9c:71:18:ec:f5:1b:3e:0b:87:b7:81:c4:4a:be:37:87:
2e:03:86:78:77:c0:dc:a8:bf:a3:5a:b3:b0:95:84:8f:44:75:
87:ac:83:9a:c6:7b:43:33:15:d0:ea:16:85:a1:33:2c:6b:49:
83:fb:9c:07:89:59:6a:3c:fe:71:d8:81:07:fd:8b:87:f0:3a:
bb:13:89:ef:27:62:2d:c1:0d:8b:ca:3e:42:a8:15:b9:6c:c8:
0b:f2:53:94:b3:12:c7:ad:da:28:6d:35:d7:14:18:fb:a6:bc:
0e:56:a8:19:8d:30:f5:64:d6:97:dd:e9:b7:41:0d:b9:a5:90:
df:06:3d:4d:a6:83:2c:40:f6:31:08:5c:89:3c:d9:8a:84:b6:
b2:2e:ad:31:7f:a6:72:68:e8:69:da:6e:20:bf:9d:b6:e5:2b:
9f:ce:10:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:48:48 2025 by rpki-client