
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/30b8e9-e7d4-40cc-ad5f-3c741220ea00/1/t4zdv8dr2iagKeqAyJh3mHRfHwI.mft
File: t4zdv8dr2iagKeqAyJh3mHRfHwI.mft (raw, json)
Hash identifier: Y1a6iYgEYn9xCSBXNNS7UMzPMwehdRgyqPMEKuwuKjk=
Subject key identifier: 98:61:49:37:B3:10:2F:23:F2:17:10:B3:5A:5B:DA:25:D2:E8:31:34
Authority key identifier: B7:8C:DD:BF:C7:6B:DA:26:A0:29:EA:80:C8:98:77:98:74:5F:1F:02
Certificate issuer: /CN=b78cddbfc76bda26a029ea80c8987798745f1f02
Certificate serial: 019875D0489BD53F79D025AA2793BB3F5A7D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/t4zdv8dr2iagKeqAyJh3mHRfHwI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/30b8e9-e7d4-40cc-ad5f-3c741220ea00/1/t4zdv8dr2iagKeqAyJh3mHRfHwI.mft
Manifest number: 12CC
Signing time: Mon 04 Aug 2025 16:00:41 +0000
Manifest this update: Mon 04 Aug 2025 16:00:41 +0000
Manifest next update: Tue 05 Aug 2025 16:00:41 +0000
Files and hashes: 1: 4ZMkun0YVKsQhMtugX5PoEy0_rI.roa (hash: fKBmMFAsGdJAHOCtTHbLGukOIg/BNTMMvT6hLSCBWOk=)
2: 9SX4KosI9EGxvqBg-r1JnjKT0ZM.roa (hash: WqcTzSMCYbly9wYW2w55k/ugMgucEMXzGeFeea+G7IU=)
3: t4zdv8dr2iagKeqAyJh3mHRfHwI.crl (hash: hqbxQvdsSz49lBTzu31nHT/tOmLmCfo7eO289xWY2h0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/30b8e9-e7d4-40cc-ad5f-3c741220ea00/1/t4zdv8dr2iagKeqAyJh3mHRfHwI.crl
rsync://rpki.ripe.net/repository/DEFAULT/4a/30b8e9-e7d4-40cc-ad5f-3c741220ea00/1/t4zdv8dr2iagKeqAyJh3mHRfHwI.mft
rsync://rpki.ripe.net/repository/DEFAULT/t4zdv8dr2iagKeqAyJh3mHRfHwI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 12:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:75:d0:48:9b:d5:3f:79:d0:25:aa:27:93:bb:3f:5a:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b78cddbfc76bda26a029ea80c8987798745f1f02
Validity
Not Before: Aug 4 16:00:41 2025 GMT
Not After : Aug 5 16:00:41 2025 GMT
Subject: CN=98614937b3102f23f21710b35a5bda25d2e83134
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:e9:df:f1:bc:29:62:e1:fe:7f:4f:8b:0b:58:
bf:15:af:a8:22:80:69:c5:b3:53:d8:ed:ef:d1:e4:
6c:fb:8f:6e:00:07:c1:a2:fd:93:77:9e:80:29:58:
4a:e9:64:b2:d0:2e:7a:88:c1:62:73:ba:c6:4e:4f:
83:f2:68:5a:1a:df:4e:27:ee:52:87:33:9f:40:9e:
31:06:39:5a:aa:f0:0f:7b:f5:dd:45:03:d6:4a:90:
33:7a:a7:30:97:ea:fd:bd:9b:d1:cc:68:d9:4a:30:
0b:c8:20:c5:fc:ab:75:c5:80:1e:18:05:8f:5b:e7:
0a:36:9d:c8:ff:d3:42:89:a2:84:8c:be:84:cb:29:
2c:89:38:fb:5d:16:f2:47:c9:ba:a1:a2:af:a4:cb:
69:69:56:64:8d:76:60:03:e2:b3:7e:d0:03:42:dd:
95:61:37:16:d3:87:58:84:55:07:1e:5e:24:ff:22:
de:01:30:a1:83:fb:e9:b9:23:d2:c6:84:fe:6b:fb:
f9:12:5a:96:cd:70:c8:fa:6d:56:c9:e9:14:70:79:
20:97:4a:b3:a1:b8:3d:9b:96:08:29:50:4b:08:6f:
a4:6b:7a:8f:99:e8:95:be:ce:9a:be:cd:61:50:d5:
70:95:cb:ee:fc:eb:80:20:49:f6:54:bf:da:6d:23:
13:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:61:49:37:B3:10:2F:23:F2:17:10:B3:5A:5B:DA:25:D2:E8:31:34
X509v3 Authority Key Identifier:
keyid:B7:8C:DD:BF:C7:6B:DA:26:A0:29:EA:80:C8:98:77:98:74:5F:1F:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t4zdv8dr2iagKeqAyJh3mHRfHwI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/30b8e9-e7d4-40cc-ad5f-3c741220ea00/1/t4zdv8dr2iagKeqAyJh3mHRfHwI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/30b8e9-e7d4-40cc-ad5f-3c741220ea00/1/t4zdv8dr2iagKeqAyJh3mHRfHwI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:32:c8:09:18:ad:2f:15:ee:33:0b:3d:83:88:ee:c9:db:2f:
89:9c:cf:6c:75:87:73:3e:d4:6f:52:9a:83:d0:87:f1:ee:3d:
08:27:9d:f6:be:e1:c0:e3:43:42:b1:a8:ba:d2:96:46:2f:fe:
76:f4:73:99:f3:04:c7:ef:e1:ef:ca:b2:ff:9c:3b:a1:6f:1b:
a0:d2:b9:b9:b1:8e:bd:e7:09:3b:b9:73:dd:49:3d:52:8e:df:
72:c8:8f:11:60:8e:76:30:bd:e9:68:67:1e:a1:3c:1a:ef:e8:
11:05:1c:ae:b7:cb:8d:7a:2b:ee:c9:21:e1:67:cc:34:52:7f:
1d:2f:ba:41:57:15:c3:e7:93:70:0e:21:ad:a5:c2:50:08:c9:
77:f2:97:cd:c1:63:3d:e2:3c:a3:16:a4:02:a9:0c:84:60:6e:
b5:f4:b6:fa:82:54:d2:7d:a6:a9:57:31:a2:69:68:cf:79:20:
93:19:4f:02:9f:6b:93:ea:f1:80:fd:d8:05:eb:33:06:84:e2:
db:ff:ec:95:55:80:5b:5a:d0:48:a1:0e:e9:08:e5:bf:41:c8:
a7:cd:c3:4c:1b:9f:2f:2b:6d:9e:26:da:fc:f9:10:33:cb:13:
fd:4a:e9:03:fb:c3:b0:d4:81:3e:c2:8e:15:60:fb:8c:08:0a:
29:88:1e:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 18:32:17 2025 by rpki-client