Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/39604e-9748-4c7d-ad5d-563d47a7ab61/1/4-dxd2XkvMcZGyXRpOZtOIycU9k.mft
File: 4-dxd2XkvMcZGyXRpOZtOIycU9k.mft (raw, json)
Hash identifier: tMhq65UOGbc2M62mcQOuLK4WSk/EFy0IKj32z48OCFo=
Subject key identifier: D6:9F:B9:37:67:51:A6:9B:11:7E:0E:C7:2A:90:2D:5A:CA:65:2A:30
Authority key identifier: E3:E7:71:77:65:E4:BC:C7:19:1B:25:D1:A4:E6:6D:38:8C:9C:53:D9
Certificate issuer: /CN=e3e7717765e4bcc7191b25d1a4e66d388c9c53d9
Certificate serial: 01988D6B38E4D55C4A6ED16BFCD1BF4DD719
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4-dxd2XkvMcZGyXRpOZtOIycU9k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/39604e-9748-4c7d-ad5d-563d47a7ab61/1/4-dxd2XkvMcZGyXRpOZtOIycU9k.mft
Manifest number: 07A9
Signing time: Sat 09 Aug 2025 06:01:11 +0000
Manifest this update: Sat 09 Aug 2025 06:01:11 +0000
Manifest next update: Sun 10 Aug 2025 06:01:11 +0000
Files and hashes: 1: 4-dxd2XkvMcZGyXRpOZtOIycU9k.crl (hash: v2IV3htBVo0T7862o9WfJyUdqnFK9DS/IiSbqJJwcn8=)
2: NNXpk59D8TzuvrFY-C-H2t3-Azg.roa (hash: blHgWyvU6BLEqGgFxNZ3azxZxMbkiPWVvdBh5N+A+CQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/39604e-9748-4c7d-ad5d-563d47a7ab61/1/4-dxd2XkvMcZGyXRpOZtOIycU9k.crl
rsync://rpki.ripe.net/repository/DEFAULT/30/39604e-9748-4c7d-ad5d-563d47a7ab61/1/4-dxd2XkvMcZGyXRpOZtOIycU9k.mft
rsync://rpki.ripe.net/repository/DEFAULT/4-dxd2XkvMcZGyXRpOZtOIycU9k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 10 Aug 2025 05:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8d:6b:38:e4:d5:5c:4a:6e:d1:6b:fc:d1:bf:4d:d7:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e3e7717765e4bcc7191b25d1a4e66d388c9c53d9
Validity
Not Before: Aug 9 06:01:11 2025 GMT
Not After : Aug 10 06:01:11 2025 GMT
Subject: CN=d69fb9376751a69b117e0ec72a902d5aca652a30
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:4b:73:3c:e1:12:10:c3:5a:bc:b8:1e:5b:ab:
f3:aa:29:e1:5d:6d:7f:f7:da:19:64:e2:d0:c4:11:
49:75:9e:60:61:f7:ae:e5:60:3c:53:06:44:84:7e:
5a:cd:ef:39:f4:0c:d0:2b:1a:40:a1:e0:44:13:d4:
22:fd:e8:e7:e4:cf:11:01:27:68:ae:a0:75:c1:bb:
06:4e:7c:f9:cd:0f:ff:c1:af:99:58:54:de:bb:26:
37:ac:20:69:bb:a4:e8:05:7e:e0:63:e0:83:9e:d2:
a6:35:59:9e:d8:f1:07:f1:15:17:87:4b:3d:c6:95:
df:1f:db:d4:81:52:95:af:ce:76:7a:4d:c4:55:64:
8d:f0:5b:93:5b:4c:84:f9:7c:8d:49:70:34:ac:e6:
ae:2c:38:c1:38:f6:be:33:ac:cb:65:fd:2f:78:a7:
15:27:95:be:69:5e:e3:a0:a1:6e:37:da:f0:aa:40:
a2:85:12:1f:6e:de:cf:3f:a9:58:40:94:95:c7:16:
e8:da:52:3b:d7:e5:8c:81:dc:c5:42:e6:77:2f:1a:
18:bb:b1:58:42:c9:fd:bc:df:99:dc:a5:f8:5a:59:
fc:82:0a:53:4a:89:da:11:ee:7d:3c:e3:7b:29:70:
36:02:8a:c1:35:b5:e2:53:2a:59:54:b6:86:58:3b:
36:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:9F:B9:37:67:51:A6:9B:11:7E:0E:C7:2A:90:2D:5A:CA:65:2A:30
X509v3 Authority Key Identifier:
keyid:E3:E7:71:77:65:E4:BC:C7:19:1B:25:D1:A4:E6:6D:38:8C:9C:53:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4-dxd2XkvMcZGyXRpOZtOIycU9k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/39604e-9748-4c7d-ad5d-563d47a7ab61/1/4-dxd2XkvMcZGyXRpOZtOIycU9k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/39604e-9748-4c7d-ad5d-563d47a7ab61/1/4-dxd2XkvMcZGyXRpOZtOIycU9k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:a3:1f:a3:a6:e1:32:28:7b:64:2c:33:ac:68:17:81:3a:cd:
47:bf:9e:d1:2d:99:55:bc:ee:90:c9:58:07:92:b5:55:90:74:
84:97:25:ec:de:81:d8:88:d8:7b:3f:1d:b9:ba:64:29:ae:63:
74:e2:b8:71:4b:74:15:c1:ac:f6:e5:32:d8:8d:d4:6f:13:da:
d3:c7:70:39:77:65:1e:18:f4:9d:51:b1:f7:42:2f:b4:ce:21:
2c:d1:9d:ea:c5:ac:bd:c0:f4:90:2f:2e:30:ae:40:3f:e3:7d:
d2:1e:3c:41:e7:6a:e3:e6:b3:0c:a9:96:a4:f5:2f:6c:3e:d5:
96:a9:2b:cc:9b:29:82:e2:63:aa:df:1b:b9:f0:fb:21:92:3c:
e5:6b:8f:f6:c1:4d:8c:a7:be:97:41:b9:8e:93:ec:e1:fd:35:
1f:24:3a:b5:aa:3d:aa:de:e2:a5:5b:80:57:24:22:28:12:6e:
18:64:cf:5b:c9:53:ed:68:f4:89:5e:46:ab:8d:db:87:86:fa:
a3:8d:47:39:70:11:07:6a:05:8e:0f:77:52:58:75:f5:44:1d:
5e:ed:a6:38:9c:34:a5:23:96:54:3a:75:2c:09:4c:b9:c2:b5:
88:55:48:c7:89:6b:07:62:29:b0:2c:07:4c:c7:5c:69:71:e3:
cb:4a:da:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 10:35:42 2025 by rpki-client