Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/c06937-93b3-442e-8676-fc43391988f7/1/4njEqqAhvti5JuNZH99QyN9rwXI.mft
File: 4njEqqAhvti5JuNZH99QyN9rwXI.mft (raw, json)
Hash identifier: XVSDrkyi4yzqeY5Py18San/q4bZpEDdy9Vh6h6fcwIo=
Subject key identifier: DE:EB:79:FA:44:79:11:FA:A5:8B:21:4F:39:62:4F:F8:BA:D3:3E:24
Authority key identifier: E2:78:C4:AA:A0:21:BE:D8:B9:26:E3:59:1F:DF:50:C8:DF:6B:C1:72
Certificate issuer: /CN=e278c4aaa021bed8b926e3591fdf50c8df6bc172
Certificate serial: 0198A08401CD32332963476BC2BF8BCC9E71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4njEqqAhvti5JuNZH99QyN9rwXI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/c06937-93b3-442e-8676-fc43391988f7/1/4njEqqAhvti5JuNZH99QyN9rwXI.mft
Manifest number: 08A3
Signing time: Tue 12 Aug 2025 23:01:02 +0000
Manifest this update: Tue 12 Aug 2025 23:01:02 +0000
Manifest next update: Wed 13 Aug 2025 23:01:02 +0000
Files and hashes: 1: 1ypxGUz02dU-GrVHnawwOGAtbp8.roa (hash: s/FzoESG6FigLmQ9qVLEYvChgXRxC5KQ8IrkGKlYCxY=)
2: 4njEqqAhvti5JuNZH99QyN9rwXI.crl (hash: HsGX/1Rlig+v8dMGEafHZLhkVHnRpHiLHOv7D7b4mzY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/c06937-93b3-442e-8676-fc43391988f7/1/4njEqqAhvti5JuNZH99QyN9rwXI.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/c06937-93b3-442e-8676-fc43391988f7/1/4njEqqAhvti5JuNZH99QyN9rwXI.mft
rsync://rpki.ripe.net/repository/DEFAULT/4njEqqAhvti5JuNZH99QyN9rwXI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 Aug 2025 22:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:a0:84:01:cd:32:33:29:63:47:6b:c2:bf:8b:cc:9e:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e278c4aaa021bed8b926e3591fdf50c8df6bc172
Validity
Not Before: Aug 12 23:01:02 2025 GMT
Not After : Aug 13 23:01:02 2025 GMT
Subject: CN=deeb79fa447911faa58b214f39624ff8bad33e24
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:37:ea:f3:8b:7c:97:1b:91:1b:08:da:c5:cb:
8a:a9:6f:e4:37:dd:75:0b:eb:f5:2b:ea:b3:2d:b8:
a9:26:cb:22:f5:f1:c2:6f:38:32:1a:75:b1:21:73:
8e:03:83:aa:81:1a:13:70:87:85:73:d3:33:bc:df:
0d:c7:30:d9:b7:82:81:a7:75:01:58:96:ee:1c:bb:
83:53:21:70:d6:f6:c6:33:3b:b7:3b:1b:ab:69:3a:
21:5c:78:c0:de:87:fa:2a:0f:b2:19:25:f3:f7:ba:
e0:a4:c8:a7:8c:27:85:ac:b0:e4:12:a2:8b:f0:eb:
7b:68:ed:99:54:e6:c4:c3:f4:fd:94:73:0b:a3:84:
e7:fe:07:09:ee:20:d8:08:81:71:f4:91:70:93:80:
60:f5:2b:ee:ba:4b:56:d1:9c:12:6c:45:6d:a4:a0:
4e:a9:f4:a6:b7:49:33:79:ba:b6:6e:36:97:1c:91:
f0:4a:f2:07:bc:79:8e:3d:4c:7f:f7:3b:b1:99:6e:
43:5d:36:d9:1e:c4:07:f3:1c:ed:e7:3c:6f:dd:c9:
01:23:b5:46:d8:a4:64:ed:2a:44:0e:c0:e2:4e:b2:
fe:3b:8f:f4:51:4c:14:c4:e2:18:ae:c2:46:40:a3:
4c:ce:30:68:76:97:dd:e2:cd:ee:a5:53:8d:22:89:
4a:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:EB:79:FA:44:79:11:FA:A5:8B:21:4F:39:62:4F:F8:BA:D3:3E:24
X509v3 Authority Key Identifier:
keyid:E2:78:C4:AA:A0:21:BE:D8:B9:26:E3:59:1F:DF:50:C8:DF:6B:C1:72
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4njEqqAhvti5JuNZH99QyN9rwXI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/c06937-93b3-442e-8676-fc43391988f7/1/4njEqqAhvti5JuNZH99QyN9rwXI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/c06937-93b3-442e-8676-fc43391988f7/1/4njEqqAhvti5JuNZH99QyN9rwXI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:9b:0c:fb:94:c9:c6:79:32:a5:d8:68:1a:a2:c2:3d:fa:d4:
a1:9c:e7:b5:be:05:d0:ea:97:47:a9:38:90:fe:a2:9f:e5:46:
85:39:3c:29:b3:78:7b:fb:6e:83:66:4e:2a:18:2c:e3:d9:ac:
de:36:e2:75:71:38:94:1b:13:0f:15:d5:99:1f:b4:9b:f2:2a:
5f:9e:27:60:f9:18:d1:28:ee:bc:f8:00:fa:f5:38:49:2f:98:
1e:ef:26:d0:26:d2:5e:38:8d:72:5e:48:c8:4e:58:1c:5f:2a:
63:75:22:0e:50:ef:ba:d9:38:5f:f9:30:d4:1b:9e:7b:da:d1:
74:d6:30:92:1a:66:25:c2:c3:77:eb:00:02:e5:09:5c:ae:52:
de:6c:dd:88:f3:ca:66:b4:52:9b:a2:bf:7c:0d:43:0c:d7:fa:
c9:b6:14:97:d4:e1:0b:c8:ac:ff:a3:30:c2:9f:d1:6d:5f:1c:
9a:36:e7:c8:f1:e6:22:6d:a2:62:7f:d4:85:03:f1:31:57:4f:
4f:92:90:74:95:d4:52:7f:b6:bf:bb:63:3b:e5:bc:38:93:0d:
14:c6:a5:ca:4c:bd:3f:46:28:88:c5:3d:41:c5:41:97:71:b0:
6f:d1:66:a8:2a:e9:9d:d5:c9:a3:2b:9f:04:6a:5a:e5:1a:eb:
44:a1:e7:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 13 07:39:52 2025 by rpki-client