Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/ffe7d5-d91d-48ae-8ee5-ce94e38e82d6/1/ToWU69x9fPfaLgA8hNhqfBr4cbw.mft
File: ToWU69x9fPfaLgA8hNhqfBr4cbw.mft (raw, json)
Hash identifier: 8VvU/LPUIW47edrcdQgnstciisRK8oi9sjXjfDZx7zk=
Subject key identifier: 8E:7F:C4:CE:B3:DD:E6:67:8C:43:2B:5A:92:D9:1A:EB:BD:D7:90:06
Authority key identifier: 4E:85:94:EB:DC:7D:7C:F7:DA:2E:00:3C:84:D8:6A:7C:1A:F8:71:BC
Certificate issuer: /CN=4e8594ebdc7d7cf7da2e003c84d86a7c1af871bc
Certificate serial: 01987306F13087C7BFF3E2460ADD186246CD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ToWU69x9fPfaLgA8hNhqfBr4cbw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/ffe7d5-d91d-48ae-8ee5-ce94e38e82d6/1/ToWU69x9fPfaLgA8hNhqfBr4cbw.mft
Manifest number: 04B9
Signing time: Mon 04 Aug 2025 03:01:31 +0000
Manifest this update: Mon 04 Aug 2025 03:01:31 +0000
Manifest next update: Tue 05 Aug 2025 03:01:31 +0000
Files and hashes: 1: GanlBJdb2pr7VV04ogaTHUPUlUg.roa (hash: Vbl6ZyOGtSJws1SpPK0y8iRHBk5yj2N+r0ihm4gCy0w=)
2: ToWU69x9fPfaLgA8hNhqfBr4cbw.crl (hash: c5anoPp15PbCQx7LiRS1u4p/YE3x57RROaCNtuJzn28=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/ffe7d5-d91d-48ae-8ee5-ce94e38e82d6/1/ToWU69x9fPfaLgA8hNhqfBr4cbw.crl
rsync://rpki.ripe.net/repository/DEFAULT/f4/ffe7d5-d91d-48ae-8ee5-ce94e38e82d6/1/ToWU69x9fPfaLgA8hNhqfBr4cbw.mft
rsync://rpki.ripe.net/repository/DEFAULT/ToWU69x9fPfaLgA8hNhqfBr4cbw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:73:06:f1:30:87:c7:bf:f3:e2:46:0a:dd:18:62:46:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e8594ebdc7d7cf7da2e003c84d86a7c1af871bc
Validity
Not Before: Aug 4 03:01:31 2025 GMT
Not After : Aug 5 03:01:31 2025 GMT
Subject: CN=8e7fc4ceb3dde6678c432b5a92d91aebbdd79006
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:a5:8c:2d:83:a5:4d:88:a5:f4:a3:d5:44:ab:
10:3e:e5:6c:bd:8c:d3:1a:f6:85:9c:fc:0c:df:e0:
2f:f2:2c:65:dc:19:d8:98:57:b9:f2:a3:a6:e8:10:
c5:bd:c0:d3:05:f3:c8:40:6c:c1:3c:72:c9:da:6b:
f9:17:a4:dc:0a:78:be:c1:b6:4c:b1:cd:dd:fd:28:
e0:65:50:18:ca:55:d6:ed:18:e8:0e:b6:de:23:ed:
35:03:08:7b:94:43:9a:14:f7:5a:d7:cc:0c:24:d8:
95:d2:7f:37:c5:87:3a:ef:bb:68:de:79:b0:8e:cb:
69:63:af:27:00:84:5e:34:6b:d4:c1:b8:2a:ad:66:
c4:86:c0:d3:ea:ce:35:91:2a:6a:44:8c:06:cd:ff:
f3:c9:73:f0:d6:d5:d2:93:31:9e:c0:ff:d4:c5:26:
e4:af:32:84:8e:c3:b0:0c:fa:8e:9c:b2:86:ff:9c:
ae:7b:e9:ab:0d:7a:e9:72:58:f4:94:5e:52:06:8a:
5e:69:7a:0e:b3:5a:a5:b9:21:11:e5:cc:ba:9f:ea:
68:38:80:b2:a6:2b:99:c1:a4:e5:de:1d:02:78:a6:
5e:59:e9:83:c1:c5:3a:9f:08:b7:ca:f1:fd:56:73:
dd:b2:3f:fe:08:e9:ae:3e:31:bc:a9:79:a7:9a:67:
c4:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:7F:C4:CE:B3:DD:E6:67:8C:43:2B:5A:92:D9:1A:EB:BD:D7:90:06
X509v3 Authority Key Identifier:
keyid:4E:85:94:EB:DC:7D:7C:F7:DA:2E:00:3C:84:D8:6A:7C:1A:F8:71:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ToWU69x9fPfaLgA8hNhqfBr4cbw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/ffe7d5-d91d-48ae-8ee5-ce94e38e82d6/1/ToWU69x9fPfaLgA8hNhqfBr4cbw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/ffe7d5-d91d-48ae-8ee5-ce94e38e82d6/1/ToWU69x9fPfaLgA8hNhqfBr4cbw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:93:b5:49:1d:5c:d5:c4:70:0e:81:12:a5:3a:03:c6:91:59:
4a:91:d3:58:70:a8:58:13:f5:86:c7:d2:aa:1c:a2:ae:87:96:
79:a4:06:82:fc:60:05:ec:25:07:76:85:9d:cf:fa:e5:92:57:
11:c1:3f:c9:7b:1f:09:75:a5:8a:57:a4:a1:d3:39:a5:7b:03:
ed:4c:f7:eb:d1:91:f1:3f:06:cd:a3:fd:19:49:61:3d:ab:c9:
17:f0:c2:87:fb:3b:ab:e3:67:f4:d3:8c:07:a3:77:57:b6:e1:
55:7c:15:a9:75:9f:d6:f8:3b:d8:02:ec:84:74:b7:00:74:a2:
59:c1:46:63:3f:c7:35:90:0a:c9:0e:3d:33:33:83:14:c7:cd:
98:ac:1e:61:2b:d9:04:6c:58:73:3d:a6:61:27:bf:be:88:88:
4a:a5:72:e1:cc:1f:a6:b1:54:4d:a9:95:02:76:44:59:bd:f6:
90:cf:ad:ed:47:c4:7a:ae:16:85:e8:04:e3:8f:2e:be:e5:b4:
7f:bb:8c:1f:f5:7e:e0:13:c4:6a:9b:eb:27:dc:ae:0f:40:cc:
18:3e:cf:13:78:6f:2d:bb:9a:e4:69:74:4a:e1:51:dd:d5:93:
9b:13:41:29:ed:42:10:22:b8:dc:e0:1f:aa:44:be:c7:52:a1:
73:59:fd:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 10:59:19 2025 by rpki-client