Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/cda8f7-8b87-4c6e-bd56-acf04481064d/1/4EsooZ2_U0rWHLBJmG5UJMMoTeI.mft
File: 4EsooZ2_U0rWHLBJmG5UJMMoTeI.mft (raw, json)
Hash identifier: +3r3HnNsEidOLIa1EhePpZsHpliItIEe8G1qkK/oABI=
Subject key identifier: B6:DE:79:8D:6E:EF:A3:1E:2E:38:2C:9B:F0:13:DC:BC:74:1C:73:F5
Authority key identifier: E0:4B:28:A1:9D:BF:53:4A:D6:1C:B0:49:98:6E:54:24:C3:28:4D:E2
Certificate issuer: /CN=e04b28a19dbf534ad61cb049986e5424c3284de2
Certificate serial: 0198D5BC3BE8988A2B49A12B4837EDC9480A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4EsooZ2_U0rWHLBJmG5UJMMoTeI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/cda8f7-8b87-4c6e-bd56-acf04481064d/1/4EsooZ2_U0rWHLBJmG5UJMMoTeI.mft
Manifest number: 0472
Signing time: Sat 23 Aug 2025 07:02:19 +0000
Manifest this update: Sat 23 Aug 2025 07:02:19 +0000
Manifest next update: Sun 24 Aug 2025 07:02:19 +0000
Files and hashes: 1: 2G3KAngu1j7cVjl09bHkVR1Q8mU.roa (hash: U0mdK9ze04Jz/Qx2ufdQLy/tw5yhbjVYG2kiEygUxAU=)
2: 4EsooZ2_U0rWHLBJmG5UJMMoTeI.crl (hash: pBrrj97Eas+pVuSo1JllFifft672Szry0MVI3aJNNvk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/cda8f7-8b87-4c6e-bd56-acf04481064d/1/4EsooZ2_U0rWHLBJmG5UJMMoTeI.crl
rsync://rpki.ripe.net/repository/DEFAULT/f8/cda8f7-8b87-4c6e-bd56-acf04481064d/1/4EsooZ2_U0rWHLBJmG5UJMMoTeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/4EsooZ2_U0rWHLBJmG5UJMMoTeI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:bc:3b:e8:98:8a:2b:49:a1:2b:48:37:ed:c9:48:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e04b28a19dbf534ad61cb049986e5424c3284de2
Validity
Not Before: Aug 23 07:02:19 2025 GMT
Not After : Aug 24 07:02:19 2025 GMT
Subject: CN=b6de798d6eefa31e2e382c9bf013dcbc741c73f5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:8d:96:1b:0d:af:ce:fc:06:c1:48:b5:46:19:
be:cd:1a:ad:cf:ec:e0:ed:8d:3d:ed:d0:d1:71:1f:
80:a7:13:33:93:0f:22:45:2f:6b:67:2b:e4:4b:ee:
c3:8d:ad:ec:06:16:65:38:85:e8:09:ab:4e:32:ac:
ea:d3:b2:6d:59:2a:80:ba:5e:b2:d9:fc:2e:95:dc:
46:82:59:7e:c6:5a:0f:36:65:0d:be:15:a1:58:12:
be:26:ed:db:17:b9:46:5b:a9:92:72:1a:86:b3:71:
b5:1e:95:98:99:dd:9f:4b:36:42:11:57:bc:67:19:
a9:d0:4d:ae:1f:2e:d8:87:9a:5d:17:17:8e:26:8f:
16:d7:cd:19:2d:b6:69:8d:2b:2a:77:e8:f8:2f:6a:
d1:de:00:2c:b2:94:3a:64:66:a9:1f:a5:77:40:64:
a8:21:84:ef:53:c6:7c:86:48:ab:57:1a:d8:9c:75:
d7:21:c5:05:ee:4f:f2:15:7c:ef:53:cc:38:da:85:
2f:16:05:71:d8:d6:8c:0b:09:12:be:c6:ec:8b:ce:
2c:45:4c:da:f3:cd:31:fd:ed:7b:1a:1b:58:db:14:
b3:8b:ae:4e:78:b1:51:82:99:81:59:64:98:d2:60:
27:8d:03:b1:1a:5c:ca:cb:83:99:ec:98:72:53:4a:
c2:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:DE:79:8D:6E:EF:A3:1E:2E:38:2C:9B:F0:13:DC:BC:74:1C:73:F5
X509v3 Authority Key Identifier:
keyid:E0:4B:28:A1:9D:BF:53:4A:D6:1C:B0:49:98:6E:54:24:C3:28:4D:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4EsooZ2_U0rWHLBJmG5UJMMoTeI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/cda8f7-8b87-4c6e-bd56-acf04481064d/1/4EsooZ2_U0rWHLBJmG5UJMMoTeI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/cda8f7-8b87-4c6e-bd56-acf04481064d/1/4EsooZ2_U0rWHLBJmG5UJMMoTeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:b0:ad:0a:ce:b1:80:a3:57:33:54:45:cd:64:e7:8c:7a:ac:
e0:b5:4d:6a:a5:a4:bb:4f:c2:22:54:af:77:01:ea:d8:4a:6a:
28:d3:ae:a3:b9:14:0e:d5:7c:67:5c:5a:bf:1f:de:a8:90:8c:
f3:41:16:f7:de:53:36:4a:e7:35:f3:90:14:e1:60:55:ce:9f:
7f:81:ca:7b:47:28:8f:09:b9:da:ec:4e:72:76:ba:a0:01:66:
03:53:c9:e7:5b:6a:cb:9c:cc:41:b6:fd:99:6d:39:0c:6a:13:
38:7c:f3:7c:a8:78:8a:20:47:92:50:0c:f7:ce:d2:7c:6a:e8:
21:43:07:f4:48:28:e9:62:48:20:ff:58:f5:be:f7:6a:82:41:
e9:8b:00:35:17:1a:6f:29:76:92:85:0f:91:2f:9b:34:2e:8c:
4f:83:42:f7:99:21:91:05:55:5e:ee:59:42:89:bf:ab:ac:90:
96:cd:c4:e7:f1:73:f7:17:35:28:2f:bb:3a:47:de:aa:bb:96:
9a:b2:cd:7c:68:34:78:6d:2a:b9:97:12:f6:1e:e0:f6:2d:1e:
d1:d9:6a:71:55:c0:2c:77:4c:ce:42:8c:ef:a6:c9:6c:c1:71:
d1:3d:0f:5f:a4:4c:42:66:ca:5c:75:50:0c:d4:7e:af:af:be:
1d:c6:71:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 13:28:52 2025 by rpki-client