Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/3f2355-66ff-40b7-98d6-d95a38f0c06e/1/4zQsWGNx1GW881954WYOEeCAUVU.mft
File: 4zQsWGNx1GW881954WYOEeCAUVU.mft (raw, json)
Hash identifier: EDJdIFor6fCntWvHUMnCg7siJrshixPXe9xzKCvtPyA=
Subject key identifier: F1:7A:E9:46:3F:2E:7C:59:89:BE:12:01:B5:7E:21:67:6E:B2:BA:45
Authority key identifier: E3:34:2C:58:63:71:D4:65:BC:F3:5F:79:E1:66:0E:11:E0:80:51:55
Certificate issuer: /CN=e3342c586371d465bcf35f79e1660e11e0805155
Certificate serial: 0198752BAFC1565F1EDF2DC0008672E7ABFF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4zQsWGNx1GW881954WYOEeCAUVU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/3f2355-66ff-40b7-98d6-d95a38f0c06e/1/4zQsWGNx1GW881954WYOEeCAUVU.mft
Manifest number: 84
Signing time: Mon 04 Aug 2025 13:00:53 +0000
Manifest this update: Mon 04 Aug 2025 13:00:53 +0000
Manifest next update: Tue 05 Aug 2025 13:00:53 +0000
Files and hashes: 1: 4zQsWGNx1GW881954WYOEeCAUVU.crl (hash: m2SeFYjyjEkA0UVAotaDZ/4XZNpC0vvPJHhe+Y2TUcs=)
2: Eba-gFj6_KEbGtGz74WD9Qe5r-8.roa (hash: IQzF41AYmHmWyxwMWh8AK7MBgafq4BN6uK+awf+6jdE=)
3: TjLS0-sv5HlbfwuedxiTX3hfr70.roa (hash: Xw4v/XHqrjPEUz2/nVAIr6aO/uYB4Ak47yBZaE0uW0Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6f/3f2355-66ff-40b7-98d6-d95a38f0c06e/1/4zQsWGNx1GW881954WYOEeCAUVU.crl
rsync://rpki.ripe.net/repository/DEFAULT/6f/3f2355-66ff-40b7-98d6-d95a38f0c06e/1/4zQsWGNx1GW881954WYOEeCAUVU.mft
rsync://rpki.ripe.net/repository/DEFAULT/4zQsWGNx1GW881954WYOEeCAUVU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 12:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:75:2b:af:c1:56:5f:1e:df:2d:c0:00:86:72:e7:ab:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e3342c586371d465bcf35f79e1660e11e0805155
Validity
Not Before: Aug 4 13:00:53 2025 GMT
Not After : Aug 5 13:00:53 2025 GMT
Subject: CN=f17ae9463f2e7c5989be1201b57e21676eb2ba45
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:98:45:5b:69:81:22:bb:09:63:29:ad:8c:04:
ad:86:f5:d6:3c:b1:ab:d5:a1:5e:ff:c3:14:e2:06:
eb:b4:73:9d:4a:32:a4:0d:02:d0:06:dd:56:c7:e9:
3e:82:e3:5f:fa:fe:96:c4:ce:93:43:5e:6c:f2:3b:
dd:9a:c7:f5:97:b4:e7:70:b4:af:b2:6d:94:5c:9d:
b2:44:cf:f0:b6:68:26:9c:78:08:4c:ff:b0:04:b1:
6f:cc:0c:b1:da:56:2c:69:5d:9b:dd:60:bc:84:ed:
4f:55:b0:f2:9d:72:2f:a9:f5:66:09:10:25:6a:93:
98:40:7d:6a:c5:a6:dd:69:df:41:bf:87:77:c8:3b:
9d:e1:bb:03:86:98:ef:ba:45:cd:7f:d3:90:60:57:
07:d2:90:71:9b:14:f2:7e:93:9d:8c:d6:d9:be:ff:
55:37:fb:f8:f6:78:cb:31:17:dd:99:97:9e:9b:3a:
eb:9f:d0:d1:5c:ec:1c:40:d2:d6:3f:65:7b:0b:28:
c7:63:8c:07:ba:3d:17:10:c9:6e:03:1f:2b:3f:7a:
0c:9a:d2:9d:4a:0c:7d:ac:be:6f:e9:aa:8c:c0:89:
d1:da:29:45:7e:12:6d:e3:3a:e2:a3:a6:85:22:c3:
9e:31:b7:2d:e0:58:9f:e2:09:64:10:6a:d2:90:e8:
f0:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:7A:E9:46:3F:2E:7C:59:89:BE:12:01:B5:7E:21:67:6E:B2:BA:45
X509v3 Authority Key Identifier:
keyid:E3:34:2C:58:63:71:D4:65:BC:F3:5F:79:E1:66:0E:11:E0:80:51:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4zQsWGNx1GW881954WYOEeCAUVU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/3f2355-66ff-40b7-98d6-d95a38f0c06e/1/4zQsWGNx1GW881954WYOEeCAUVU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/3f2355-66ff-40b7-98d6-d95a38f0c06e/1/4zQsWGNx1GW881954WYOEeCAUVU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:75:a0:ce:af:05:c1:47:89:e3:44:ba:aa:2d:cc:f5:0e:4c:
88:de:f4:c9:f3:f0:71:44:93:0c:50:87:51:f8:a7:e3:d7:49:
00:b9:2f:5b:a9:22:99:0c:cb:00:e2:83:89:d3:6e:03:62:ec:
66:0a:bf:06:ed:b9:d0:88:fb:d4:9a:35:7b:ae:54:75:62:1b:
a0:97:db:61:46:79:d5:53:f9:e1:56:de:51:52:5c:fb:03:36:
f9:c1:d1:0c:df:46:0b:26:ee:2b:85:02:84:a5:08:02:da:42:
6d:30:a2:51:03:9c:d3:3f:58:bf:4b:96:4e:58:fe:b4:0f:eb:
5e:4a:be:b8:80:d0:86:c7:20:44:d2:7b:40:c7:60:2e:cb:33:
eb:07:65:42:cc:97:3f:74:dd:f5:b3:30:06:ad:51:f0:d2:7f:
f2:1b:4e:5c:3c:c8:1e:ba:db:2c:b4:00:9e:eb:7c:54:26:72:
0b:c7:43:66:33:40:a0:b3:91:22:3e:42:f0:d5:a0:fa:35:e8:
91:9f:5b:90:59:34:13:a8:6a:e3:7c:1b:0c:cb:3b:7f:fe:9d:
5e:1e:d6:8f:f9:65:93:2b:9c:46:20:f4:43:a8:76:9a:83:60:
64:c4:66:79:0f:e9:52:9a:d5:87:a1:03:03:60:9e:03:58:ae:
27:fc:47:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 14:58:52 2025 by rpki-client