Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/ae869c-812c-4cd6-baf9-217cf93845bc/1/4xnQzWVZPZaejUU4KhlKqnPA_4w.mft
File: 4xnQzWVZPZaejUU4KhlKqnPA_4w.mft (raw, json)
Hash identifier: gzVhtk4nMoxAVe9pKZyMCMzGdyOu4+rwrZXfJSvX7tA=
Subject key identifier: DB:1E:9B:31:B6:41:EE:03:9D:CE:2C:CE:24:EF:01:2D:25:85:1C:4E
Authority key identifier: E3:19:D0:CD:65:59:3D:96:9E:8D:45:38:2A:19:4A:AA:73:C0:FF:8C
Certificate issuer: /CN=e319d0cd65593d969e8d45382a194aaa73c0ff8c
Certificate serial: 01987562B21EAA48A48B6694CDCFFAAAFBDC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4xnQzWVZPZaejUU4KhlKqnPA_4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/ae869c-812c-4cd6-baf9-217cf93845bc/1/4xnQzWVZPZaejUU4KhlKqnPA_4w.mft
Manifest number: 10BB
Signing time: Mon 04 Aug 2025 14:00:59 +0000
Manifest this update: Mon 04 Aug 2025 14:00:59 +0000
Manifest next update: Tue 05 Aug 2025 14:00:59 +0000
Files and hashes: 1: 4xnQzWVZPZaejUU4KhlKqnPA_4w.crl (hash: KtnKW6Bj72WIkG9b5wrSDFydHOGMW8enAJcvZH+AfYs=)
2: 8VHFK74OMKQnD381WiG3ZZR7ozs.roa (hash: B7p/Hrvwz47SgwLmobk1ZKXWoI4oqfm1r3I4SkLnjp4=)
3: FzW7JoU60fLZt2V4T6FBU_g7_7M.roa (hash: qY7+Qky1B0UxdHy7k1LwwjYXXxPZ34Le32XJ4CBXqQk=)
4: UEAGL23cUguO7LaV9ntB8GG3vLI.roa (hash: HW/Eripbr/hRHy1giNb2s3DucUSazcSMRbltO/ThVTM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/ae869c-812c-4cd6-baf9-217cf93845bc/1/4xnQzWVZPZaejUU4KhlKqnPA_4w.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/ae869c-812c-4cd6-baf9-217cf93845bc/1/4xnQzWVZPZaejUU4KhlKqnPA_4w.mft
rsync://rpki.ripe.net/repository/DEFAULT/4xnQzWVZPZaejUU4KhlKqnPA_4w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 12:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:75:62:b2:1e:aa:48:a4:8b:66:94:cd:cf:fa:aa:fb:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e319d0cd65593d969e8d45382a194aaa73c0ff8c
Validity
Not Before: Aug 4 14:00:59 2025 GMT
Not After : Aug 5 14:00:59 2025 GMT
Subject: CN=db1e9b31b641ee039dce2cce24ef012d25851c4e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:85:fa:9f:5a:80:83:89:fb:9d:d6:40:bd:78:
03:5c:8f:95:92:85:54:12:9d:06:fc:50:6c:af:f5:
90:df:35:af:5d:b1:9b:3f:9e:cf:1f:b6:78:bd:64:
99:53:bb:7d:0e:a9:44:71:40:8c:7b:b6:1e:60:d7:
01:84:da:b8:78:74:ca:9a:2d:f8:c0:06:7b:86:b6:
e7:1b:d2:2a:20:d9:87:8f:5e:04:b1:d9:ca:cb:66:
e9:e4:7d:74:9b:d9:de:f3:85:d4:1b:97:d6:b7:9d:
74:8b:bc:56:e0:25:52:2e:11:48:f3:a0:fc:5d:2d:
03:d9:6a:24:cc:2f:6d:91:53:3e:e7:81:22:51:9e:
f5:77:0d:d0:48:5c:99:d3:ad:4d:91:ce:6a:4d:03:
db:c4:36:df:10:44:49:3d:9d:33:5a:46:8d:51:62:
dc:9e:5e:42:5c:e7:f0:51:b2:ae:c0:38:fc:d7:ad:
a7:e1:da:82:bb:70:a6:5d:6f:e7:8d:ba:33:64:d1:
c7:34:44:f4:c7:2a:b1:48:d6:84:4a:c1:bc:84:42:
73:99:fc:09:45:d6:27:ce:37:5c:ea:8e:e6:b2:ab:
4d:a9:a6:6b:de:9d:b5:b1:bf:4b:a3:46:64:c7:28:
2a:ed:f5:a7:29:8f:dd:ce:5a:72:4f:2a:9d:4d:5b:
1d:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:1E:9B:31:B6:41:EE:03:9D:CE:2C:CE:24:EF:01:2D:25:85:1C:4E
X509v3 Authority Key Identifier:
keyid:E3:19:D0:CD:65:59:3D:96:9E:8D:45:38:2A:19:4A:AA:73:C0:FF:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4xnQzWVZPZaejUU4KhlKqnPA_4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/ae869c-812c-4cd6-baf9-217cf93845bc/1/4xnQzWVZPZaejUU4KhlKqnPA_4w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/ae869c-812c-4cd6-baf9-217cf93845bc/1/4xnQzWVZPZaejUU4KhlKqnPA_4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:8e:f8:0d:c4:f1:13:17:fc:ad:07:d0:f5:c1:b2:59:eb:b6:
7a:35:39:ac:d2:36:05:50:49:3c:61:3a:86:cf:2c:fa:a3:25:
8a:95:fb:1f:d3:a0:a8:bb:0d:97:ad:0f:de:f5:39:f2:32:da:
ee:97:cf:11:f7:64:98:9e:2d:9d:16:da:4e:ac:36:8d:f1:fb:
86:e7:01:f5:de:cd:32:0c:68:92:45:77:a6:1a:68:73:0b:f8:
33:63:aa:56:00:79:45:ae:63:9d:65:ef:23:d3:7f:da:0a:5e:
77:5b:1c:36:5a:a9:c8:47:95:7a:a4:ce:ee:4d:cf:8c:01:6b:
34:60:a1:70:4d:32:0e:d9:0a:6c:06:e6:11:71:47:86:e5:75:
37:5f:03:e4:ca:4f:83:2d:6e:f9:fd:0a:5b:69:e2:8d:e6:67:
91:b4:e7:44:01:d0:03:40:31:db:19:ca:49:e7:9b:8a:f8:7e:
40:e3:1d:6d:c0:e3:a3:56:74:d8:45:09:4f:c6:37:52:0a:62:
98:c4:73:d3:77:f1:11:0f:72:53:d2:32:51:6f:cf:98:fe:a3:
d8:fa:bb:98:13:96:d7:ed:9b:ac:78:76:46:97:01:6b:01:e3:
29:71:aa:28:24:32:ef:62:a8:34:fa:d4:16:a0:43:0a:ce:24:
c6:82:ab:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 21:35:28 2025 by rpki-client