
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/e7d1a9-ac76-4a9f-b175-47c10a5ce534/1/4S9k9_aXqptumYLAt2u3hCEzh2o.mft
File: 4S9k9_aXqptumYLAt2u3hCEzh2o.mft (raw, json)
Hash identifier: RdAo4KyNfaUoZsDEhw08XJZsvP9ORFJniIWwbUkDbuE=
Subject key identifier: 7F:DE:8D:37:EB:1C:A5:5B:04:D6:D0:F3:4A:E5:F0:9A:A7:B2:9F:4D
Authority key identifier: E1:2F:64:F7:F6:97:AA:9B:6E:99:82:C0:B7:6B:B7:84:21:33:87:6A
Certificate issuer: /CN=e12f64f7f697aa9b6e9982c0b76bb7842133876a
Certificate serial: 01987C402209477E0A029A25F1199BB3B41E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4S9k9_aXqptumYLAt2u3hCEzh2o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/e7d1a9-ac76-4a9f-b175-47c10a5ce534/1/4S9k9_aXqptumYLAt2u3hCEzh2o.mft
Manifest number: 0976
Signing time: Tue 05 Aug 2025 22:00:34 +0000
Manifest this update: Tue 05 Aug 2025 22:00:34 +0000
Manifest next update: Wed 06 Aug 2025 22:00:34 +0000
Files and hashes: 1: 4S9k9_aXqptumYLAt2u3hCEzh2o.crl (hash: HNzJScr2NbuZoc12+BKuf5wscSYkhwMK7gtZ1Mv8baE=)
2: mhXII1TmoI3urvchZmrd238HnqI.roa (hash: ymkQlbzHXOVaEGzGKdRpU2whYkKkdIgkhGPuabVJPyU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/e7d1a9-ac76-4a9f-b175-47c10a5ce534/1/4S9k9_aXqptumYLAt2u3hCEzh2o.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/e7d1a9-ac76-4a9f-b175-47c10a5ce534/1/4S9k9_aXqptumYLAt2u3hCEzh2o.mft
rsync://rpki.ripe.net/repository/DEFAULT/4S9k9_aXqptumYLAt2u3hCEzh2o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 Aug 2025 22:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7c:40:22:09:47:7e:0a:02:9a:25:f1:19:9b:b3:b4:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e12f64f7f697aa9b6e9982c0b76bb7842133876a
Validity
Not Before: Aug 5 22:00:34 2025 GMT
Not After : Aug 6 22:00:34 2025 GMT
Subject: CN=7fde8d37eb1ca55b04d6d0f34ae5f09aa7b29f4d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:b1:73:73:98:6f:c4:9a:e8:ae:50:0a:62:93:
a9:7c:0f:bf:7d:9d:56:e4:85:a2:79:60:c5:19:bb:
ae:83:03:68:60:09:b8:6e:b4:73:ff:e9:d3:85:e2:
29:b6:cc:df:cf:b4:c3:ae:45:db:5a:f7:df:20:19:
82:b4:d0:36:de:c3:dc:08:1d:ea:fe:6c:73:d6:ec:
b1:32:58:68:75:33:a5:7b:73:51:14:f4:9b:cd:c7:
fb:79:b1:54:97:7f:4b:df:00:2e:6f:60:f8:b2:53:
88:94:9e:7a:82:1e:a7:2a:c4:3b:5c:42:9b:64:76:
c4:5f:cc:1e:b0:56:bf:f3:ea:a7:4b:41:13:08:b2:
19:9e:2d:1d:66:89:92:03:53:21:d2:de:dd:60:f9:
3c:fc:dc:07:80:a6:f3:d8:0c:f3:f8:1f:62:19:e4:
28:da:d0:31:18:41:e3:69:bc:3e:4d:db:0d:fd:2b:
26:4c:63:c5:4c:12:74:4f:39:f1:c4:e7:82:2f:1b:
c4:0d:f7:18:a9:98:9c:ce:7f:6c:f1:84:a3:a7:b1:
34:86:a0:6d:6c:31:eb:7c:d1:c8:3d:4f:79:0e:0b:
dc:75:e4:42:d4:fb:d1:1d:6a:ca:d3:9c:0c:7c:24:
51:31:2d:ea:f5:65:8d:ed:72:07:69:61:6b:7b:2a:
d1:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:DE:8D:37:EB:1C:A5:5B:04:D6:D0:F3:4A:E5:F0:9A:A7:B2:9F:4D
X509v3 Authority Key Identifier:
keyid:E1:2F:64:F7:F6:97:AA:9B:6E:99:82:C0:B7:6B:B7:84:21:33:87:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4S9k9_aXqptumYLAt2u3hCEzh2o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/e7d1a9-ac76-4a9f-b175-47c10a5ce534/1/4S9k9_aXqptumYLAt2u3hCEzh2o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/e7d1a9-ac76-4a9f-b175-47c10a5ce534/1/4S9k9_aXqptumYLAt2u3hCEzh2o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:15:09:80:63:13:c2:f4:f8:bd:c8:e4:eb:ce:bd:5b:68:6f:
c2:e2:31:2e:c5:16:49:17:25:0d:33:38:74:d5:34:33:44:62:
30:a7:69:70:e4:02:a5:90:7d:b9:0f:56:46:a8:0a:ea:0f:07:
be:e5:6e:ff:46:0d:fe:6f:96:ab:90:39:d3:44:8a:a6:99:65:
c2:bc:88:91:ee:48:24:a2:4b:50:b4:0d:04:48:91:73:ca:65:
05:45:1a:d9:9c:9d:61:c4:bf:32:e6:1c:bf:b1:6d:28:c6:93:
cf:7c:2b:e5:da:cd:7b:ea:fc:97:5b:36:c4:26:f9:ee:b8:8f:
11:73:d0:f5:2d:61:b2:1b:f2:ae:f3:93:94:23:d7:8f:e0:fc:
c4:b1:99:f3:94:25:82:12:5a:65:a0:59:30:0b:85:7a:05:9e:
6a:ec:06:eb:0c:5a:75:95:9e:b0:fc:59:37:7d:ab:6b:d5:b1:
94:9e:f3:70:b4:96:6f:ea:6b:0b:da:b1:2a:ea:f9:e6:b9:a5:
8e:06:de:a9:30:b6:f5:3f:1d:8f:b7:93:0f:aa:93:b7:86:ba:
07:f6:5e:c4:c9:c1:02:e8:24:e7:09:5a:16:c1:eb:86:1f:51:
b2:42:d3:e2:f4:23:d8:b8:bb:9e:26:63:ac:16:2a:bb:d4:2e:
b2:70:63:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 05:18:15 2025 by rpki-client