Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/3dc879-11b9-4fa6-841d-906a91ee9fe4/1/4gRJ_n9LLPH3_WcOWC68yX5F9_8.mft
File: 4gRJ_n9LLPH3_WcOWC68yX5F9_8.mft (raw, json)
Hash identifier: 2Xv9ix+o/7NRveu7Fj2KKwswwvDfebJOut/VGChN3p4=
Subject key identifier: 03:68:2C:89:6B:3B:1D:44:0A:49:46:DC:07:57:93:CE:70:F9:CF:BD
Authority key identifier: E2:04:49:FE:7F:4B:2C:F1:F7:FD:67:0E:58:2E:BC:C9:7E:45:F7:FF
Certificate issuer: /CN=e20449fe7f4b2cf1f7fd670e582ebcc97e45f7ff
Certificate serial: 01987ED404CF4DB5034E8A6CC8FB3656E432
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4gRJ_n9LLPH3_WcOWC68yX5F9_8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/3dc879-11b9-4fa6-841d-906a91ee9fe4/1/4gRJ_n9LLPH3_WcOWC68yX5F9_8.mft
Manifest number: 161E
Signing time: Wed 06 Aug 2025 10:01:20 +0000
Manifest this update: Wed 06 Aug 2025 10:01:20 +0000
Manifest next update: Thu 07 Aug 2025 10:01:20 +0000
Files and hashes: 1: 4gRJ_n9LLPH3_WcOWC68yX5F9_8.crl (hash: VP7WuXngFod51zj1iyNLooi2nrXx7Ppm6ZhmJk/QfHM=)
2: GfCJvI9nayXOG-c9-kNZYMtGvRY.roa (hash: iErUIkofrDIWovm2VEktlTu0LGFlXqiT+Jb2IEFCjN4=)
3: b6PxSRMMpYMDelZhlHVJswnGzlY.roa (hash: 2hbPovorwIzKGKG+8Z0PbXVcSz91V4CX1uoPUPOxcMk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/3dc879-11b9-4fa6-841d-906a91ee9fe4/1/4gRJ_n9LLPH3_WcOWC68yX5F9_8.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/3dc879-11b9-4fa6-841d-906a91ee9fe4/1/4gRJ_n9LLPH3_WcOWC68yX5F9_8.mft
rsync://rpki.ripe.net/repository/DEFAULT/4gRJ_n9LLPH3_WcOWC68yX5F9_8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 10:01:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7e:d4:04:cf:4d:b5:03:4e:8a:6c:c8:fb:36:56:e4:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e20449fe7f4b2cf1f7fd670e582ebcc97e45f7ff
Validity
Not Before: Aug 6 10:01:20 2025 GMT
Not After : Aug 7 10:01:20 2025 GMT
Subject: CN=03682c896b3b1d440a4946dc075793ce70f9cfbd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:ad:27:03:45:5d:a8:27:56:0a:c9:8c:4f:65:
4c:af:56:00:24:74:e2:a8:cb:f7:f1:f8:20:45:79:
1c:8f:1e:cc:51:ba:cb:83:fd:b9:91:fe:29:81:fd:
ae:7b:d8:7b:e1:51:aa:3e:de:e8:da:46:a0:5c:1d:
3e:41:a7:e0:36:38:a3:ac:2d:ec:68:d0:bb:a1:48:
dc:59:b1:5a:d1:0f:83:fb:28:6b:c2:27:70:e2:c2:
8e:ff:34:d6:ae:05:5d:b0:7d:4d:27:b1:f1:95:30:
39:c4:94:72:a8:8a:e5:74:89:a4:59:b2:40:4b:70:
70:7d:b7:5a:b5:ba:44:e8:64:fd:93:39:04:ef:4e:
ea:25:5d:38:30:1b:7d:0e:67:77:ef:5f:6f:bd:1b:
32:c7:c4:2a:a3:a8:d8:17:79:c5:40:6a:f4:3a:1f:
a2:13:56:9f:c4:f5:a2:a4:e2:44:38:bf:20:dd:24:
8f:16:08:d3:a1:c1:c7:b4:a4:ad:f4:6c:f1:bc:a2:
45:b1:4e:9d:79:a1:79:1d:ab:c0:1d:9b:13:5a:01:
81:75:ee:3e:3f:2d:d6:14:ad:4d:e0:f4:34:fd:db:
de:33:f0:20:ff:d6:0e:f7:aa:de:e9:dc:5e:7f:97:
ee:01:bb:f8:f4:52:0c:61:1d:80:d6:3f:01:44:78:
37:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:68:2C:89:6B:3B:1D:44:0A:49:46:DC:07:57:93:CE:70:F9:CF:BD
X509v3 Authority Key Identifier:
keyid:E2:04:49:FE:7F:4B:2C:F1:F7:FD:67:0E:58:2E:BC:C9:7E:45:F7:FF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4gRJ_n9LLPH3_WcOWC68yX5F9_8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/3dc879-11b9-4fa6-841d-906a91ee9fe4/1/4gRJ_n9LLPH3_WcOWC68yX5F9_8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/3dc879-11b9-4fa6-841d-906a91ee9fe4/1/4gRJ_n9LLPH3_WcOWC68yX5F9_8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:3e:1a:2a:9f:20:7b:76:31:b7:31:01:0e:0f:09:fd:da:80:
22:d6:2f:5a:a9:6a:66:e4:93:03:c1:87:a6:94:e1:17:96:79:
fc:96:e6:07:21:64:93:fa:01:a0:1c:c9:b9:69:f2:79:c8:0c:
53:fe:99:d2:17:8e:f5:98:ba:5b:ee:51:18:f4:28:90:dc:df:
49:dc:1d:c2:94:93:ed:1b:c3:c9:ee:76:97:e1:d4:5a:f4:98:
5f:64:53:31:57:7f:db:fa:42:86:71:ec:bf:91:ef:f6:b8:2f:
52:e2:50:86:d8:67:f1:62:30:dc:2f:b7:bf:f7:86:75:0d:f0:
b9:39:dd:ae:b2:19:f5:ec:94:33:03:00:63:12:fa:70:c9:10:
65:f7:62:a8:1a:b5:75:bc:27:1f:9b:16:1a:c8:37:79:7a:20:
b0:18:8d:e1:dd:23:d2:3b:a6:a0:df:55:11:d8:86:f5:d5:4b:
46:28:b3:80:d2:8c:25:17:72:e9:71:8b:fa:78:0a:e5:ce:22:
8e:b1:b7:93:04:94:a6:d3:3f:03:ba:61:1b:14:51:8a:1c:67:
1a:3f:9d:af:db:b6:02:b0:f3:c3:5a:0f:07:67:64:aa:97:0b:
03:26:d0:98:d4:3c:57:b7:56:46:ee:1c:ba:37:07:30:d3:a0:
75:3e:2a:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 18:35:46 2025 by rpki-client