Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/ba2391-05a1-4bcb-a61d-e5d8e3750009/1/r4Tj0j_2C4KeFG69q0oK5h3g9Ps.mft
File: r4Tj0j_2C4KeFG69q0oK5h3g9Ps.mft (raw, json)
Hash identifier: AqCvdItbcgY2PMQDCpez53ZXD9IMoP21Mx/269woReg=
Subject key identifier: A5:E8:3F:0A:9B:59:AF:7D:3C:C9:38:41:D5:45:11:91:E5:72:63:18
Authority key identifier: AF:84:E3:D2:3F:F6:0B:82:9E:14:6E:BD:AB:4A:0A:E6:1D:E0:F4:FB
Certificate issuer: /CN=af84e3d23ff60b829e146ebdab4a0ae61de0f4fb
Certificate serial: 019896A68462508DFA1DB00C145D526D9C8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r4Tj0j_2C4KeFG69q0oK5h3g9Ps.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/ba2391-05a1-4bcb-a61d-e5d8e3750009/1/r4Tj0j_2C4KeFG69q0oK5h3g9Ps.mft
Manifest number: C9
Signing time: Mon 11 Aug 2025 01:02:31 +0000
Manifest this update: Mon 11 Aug 2025 01:02:31 +0000
Manifest next update: Tue 12 Aug 2025 01:02:31 +0000
Files and hashes: 1: Sj_-Ptmp5l-zNzTgHXDKWr6DNsQ.roa (hash: S/l02EQhWoa3TBsVB+OnLc92uLdAeVgn7Z4178pnmT4=)
2: r4Tj0j_2C4KeFG69q0oK5h3g9Ps.crl (hash: 6FyqQBgh8cK0OKV2RUthRvcu9VoN2H1uNuqeol4rs+s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/ba2391-05a1-4bcb-a61d-e5d8e3750009/1/r4Tj0j_2C4KeFG69q0oK5h3g9Ps.crl
rsync://rpki.ripe.net/repository/DEFAULT/15/ba2391-05a1-4bcb-a61d-e5d8e3750009/1/r4Tj0j_2C4KeFG69q0oK5h3g9Ps.mft
rsync://rpki.ripe.net/repository/DEFAULT/r4Tj0j_2C4KeFG69q0oK5h3g9Ps.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 12 Aug 2025 01:02:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:96:a6:84:62:50:8d:fa:1d:b0:0c:14:5d:52:6d:9c:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=af84e3d23ff60b829e146ebdab4a0ae61de0f4fb
Validity
Not Before: Aug 11 01:02:31 2025 GMT
Not After : Aug 12 01:02:31 2025 GMT
Subject: CN=a5e83f0a9b59af7d3cc93841d5451191e5726318
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:c3:af:b4:d2:e8:04:de:53:d9:51:5b:c1:c6:
93:d0:4f:47:bf:45:83:da:9a:05:b7:3a:72:4c:3e:
91:22:80:53:5a:b3:6b:2e:d7:10:3b:c0:b3:25:43:
14:52:a0:11:12:39:b7:75:24:56:45:25:e7:98:a1:
11:e3:cb:a3:2d:ea:2c:01:0c:45:8e:0e:34:d2:50:
dd:e3:83:d3:eb:d7:41:9b:73:09:70:15:e7:a5:27:
ff:e2:e1:63:f3:c5:4e:3a:eb:bc:e6:7a:9e:bb:dc:
a8:e1:89:fd:6a:f0:9f:34:41:01:4a:ef:d0:dd:f0:
50:e0:ca:a1:49:b3:b6:0d:e0:cf:5b:b6:9b:49:d3:
54:01:08:3d:64:fb:1a:fb:18:b3:8b:c0:ea:6f:c6:
08:1f:4c:df:e8:73:10:a0:b5:f1:4f:94:c1:5c:6b:
ed:af:ad:18:b4:b8:47:6f:e7:fb:64:2a:1e:7a:7a:
38:b3:7e:c6:92:eb:86:80:79:90:6f:9b:f0:94:79:
60:f8:96:57:49:4c:82:c3:9a:90:80:96:1e:14:cf:
4a:c9:12:2e:45:1a:65:6d:d5:6b:5c:00:5e:8b:26:
79:23:d9:01:0d:a5:1d:3f:eb:4c:3f:b8:a7:56:ee:
ce:84:4f:eb:ca:ad:6a:5e:4a:7f:c1:b4:8c:70:c6:
5f:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:E8:3F:0A:9B:59:AF:7D:3C:C9:38:41:D5:45:11:91:E5:72:63:18
X509v3 Authority Key Identifier:
keyid:AF:84:E3:D2:3F:F6:0B:82:9E:14:6E:BD:AB:4A:0A:E6:1D:E0:F4:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r4Tj0j_2C4KeFG69q0oK5h3g9Ps.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/ba2391-05a1-4bcb-a61d-e5d8e3750009/1/r4Tj0j_2C4KeFG69q0oK5h3g9Ps.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/ba2391-05a1-4bcb-a61d-e5d8e3750009/1/r4Tj0j_2C4KeFG69q0oK5h3g9Ps.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a8:78:46:d1:ac:8f:12:33:93:12:76:66:35:3e:7d:13:04:34:
04:5b:b3:8a:ca:46:c4:0c:08:b8:10:b8:03:bc:00:de:f0:2d:
11:a2:67:dc:ba:81:d0:a7:c4:09:09:15:0f:d1:de:15:07:42:
3a:7e:99:38:bc:4e:2e:16:32:08:5d:e6:e5:95:9e:f4:ca:3d:
3d:1f:6b:af:a3:4e:73:c6:c9:c7:5c:86:a2:a0:4b:17:0c:21:
de:00:9f:0e:85:f7:c3:7d:fb:a5:35:bb:b3:a4:c3:65:1a:9a:
25:24:87:a8:e3:b7:b0:fc:16:78:15:9a:4b:cd:7f:a7:98:b1:
8b:19:ce:68:c3:f3:9e:33:91:a1:cc:b0:0c:ff:41:e4:da:d9:
3e:88:56:51:2e:88:1f:d0:74:5e:e2:78:6d:a2:27:02:9b:7d:
70:8b:c9:86:fc:1d:22:1a:f2:1d:4f:c3:eb:37:78:f9:95:0a:
14:df:f3:0a:d5:ce:ea:44:11:60:d7:d5:10:cb:57:f7:6d:70:
36:c8:4c:7d:18:cc:b8:14:9a:06:48:03:3a:e5:7d:ce:14:56:
01:fb:fa:16:9f:7a:95:70:ec:d2:57:03:de:7a:21:e2:52:4b:
8e:8d:39:8a:f4:45:71:72:00:bd:7b:34:80:d9:23:17:f4:fb:
3c:34:3b:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 11 10:30:27 2025 by rpki-client