Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/205c19-b73a-48fe-a086-356c09380887/1/n4535zgxPmVwaE3RUsLihDMrLFs.mft
File: n4535zgxPmVwaE3RUsLihDMrLFs.mft (raw, json)
Hash identifier: v8EOi3U8pzM1HION0EfOqR2t7azbPCNauAobwp3FpeM=
Subject key identifier: 64:DA:00:97:17:8A:BC:9F:4F:B5:AF:85:D2:71:46:9F:1A:A2:3B:FD
Authority key identifier: 9F:8E:77:E7:38:31:3E:65:70:68:4D:D1:52:C2:E2:84:33:2B:2C:5B
Certificate issuer: /CN=9f8e77e738313e6570684dd152c2e284332b2c5b
Certificate serial: 01984852EFF0B5C97905A0718C3555727CBA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/n4535zgxPmVwaE3RUsLihDMrLFs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/205c19-b73a-48fe-a086-356c09380887/1/n4535zgxPmVwaE3RUsLihDMrLFs.mft
Manifest number: 0EAD
Signing time: Sat 26 Jul 2025 20:00:51 +0000
Manifest this update: Sat 26 Jul 2025 20:00:51 +0000
Manifest next update: Sun 27 Jul 2025 20:00:51 +0000
Files and hashes: 1: C5MhC96HxaJKMKNS_jY_WLtyOQI.roa (hash: ESPNEcm8ABrBz0nfnXDJUwVTxpctLOm0CbjyoAr2waU=)
2: n4535zgxPmVwaE3RUsLihDMrLFs.crl (hash: msPRCTY1WHmAJzJ98MWEo1X9jZUWxaXtpRGNEcnk7TQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/205c19-b73a-48fe-a086-356c09380887/1/n4535zgxPmVwaE3RUsLihDMrLFs.crl
rsync://rpki.ripe.net/repository/DEFAULT/3f/205c19-b73a-48fe-a086-356c09380887/1/n4535zgxPmVwaE3RUsLihDMrLFs.mft
rsync://rpki.ripe.net/repository/DEFAULT/n4535zgxPmVwaE3RUsLihDMrLFs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 20:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:48:52:ef:f0:b5:c9:79:05:a0:71:8c:35:55:72:7c:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9f8e77e738313e6570684dd152c2e284332b2c5b
Validity
Not Before: Jul 26 20:00:51 2025 GMT
Not After : Jul 27 20:00:51 2025 GMT
Subject: CN=64da0097178abc9f4fb5af85d271469f1aa23bfd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f8:3a:1b:3e:6f:b3:4f:d4:d6:45:10:f7:fc:34:
aa:27:29:b7:e9:d5:0e:dd:06:5c:2d:db:72:a3:aa:
6f:64:6b:0c:e0:f0:a1:e5:d7:95:1d:8d:00:be:79:
91:46:7a:24:81:62:7a:75:64:46:d0:31:50:4b:de:
c2:52:35:4a:89:76:c7:54:b0:0b:0e:5e:fb:1d:1f:
c8:35:8e:3b:e6:f5:a3:bc:74:4b:af:3d:ba:04:d3:
e8:18:aa:c4:67:e1:69:a5:47:3a:c5:bf:5c:82:bb:
6b:0b:50:2d:f3:4e:de:2c:e1:c2:bc:3c:9b:53:29:
8c:17:c4:3f:38:40:a7:a8:bd:80:ff:07:c3:99:78:
af:5b:34:5c:68:cd:2f:78:dc:c6:f4:a1:df:8c:94:
0d:89:1e:bd:31:9d:a5:53:c8:e7:da:22:d4:a2:6b:
a8:31:10:06:b3:33:f9:25:21:5c:43:61:4c:36:98:
69:2c:6a:44:26:71:f7:f3:f8:da:aa:06:92:38:d7:
43:7b:9e:c8:60:33:24:08:6e:36:29:eb:8f:5e:c5:
c6:f1:31:db:3f:e0:43:17:3e:65:06:ac:c8:95:ad:
c1:c5:a8:b0:ca:58:be:af:01:c7:ab:41:9d:a5:14:
a9:2f:20:86:df:ca:36:d9:02:71:a8:12:0a:cf:bb:
0b:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:DA:00:97:17:8A:BC:9F:4F:B5:AF:85:D2:71:46:9F:1A:A2:3B:FD
X509v3 Authority Key Identifier:
keyid:9F:8E:77:E7:38:31:3E:65:70:68:4D:D1:52:C2:E2:84:33:2B:2C:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/n4535zgxPmVwaE3RUsLihDMrLFs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/205c19-b73a-48fe-a086-356c09380887/1/n4535zgxPmVwaE3RUsLihDMrLFs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/205c19-b73a-48fe-a086-356c09380887/1/n4535zgxPmVwaE3RUsLihDMrLFs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9e:8c:a8:cc:7a:aa:15:49:c0:94:ef:fc:57:e3:56:e9:da:95:
57:a9:50:c4:54:4d:8c:18:12:ab:19:7e:a6:d8:38:ed:5e:3c:
43:e6:a6:ab:a3:53:56:27:d6:30:eb:dd:3c:6f:1b:b7:60:6e:
9f:61:e4:f3:88:a1:23:44:2b:53:45:30:c2:a9:a5:6f:f8:8b:
50:99:f3:24:64:09:cf:59:09:13:24:c5:4f:df:00:82:95:7b:
f6:cb:98:de:c0:2e:2d:af:ee:67:7f:bd:bc:c8:67:ab:1c:66:
84:b9:0b:67:47:87:0c:c7:7c:54:da:2c:be:d5:c4:40:70:46:
c5:b2:7d:2a:a8:c2:d9:39:df:f9:dd:cc:15:ac:01:e6:f4:16:
a0:13:7e:44:c2:86:d3:2f:4a:31:6c:7b:9b:68:b3:47:09:54:
52:d7:6c:25:37:01:af:a0:fb:85:6f:31:ea:28:88:54:50:94:
e5:24:17:55:4c:28:51:f6:a1:81:23:b7:36:81:f7:17:44:d3:
b5:56:22:02:07:7f:89:8a:2f:6e:07:a9:19:1e:48:f8:54:d9:
eb:ce:ac:e2:5a:62:b0:63:0b:cb:f1:48:2c:6b:c2:12:25:38:
e1:41:23:46:f4:bc:16:35:ba:30:50:66:92:30:49:18:0c:e3:
45:64:ad:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 02:07:30 2025 by rpki-client