Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/30b8e9-e7d4-40cc-ad5f-3c741220ea00/1/t4zdv8dr2iagKeqAyJh3mHRfHwI.mft
File: t4zdv8dr2iagKeqAyJh3mHRfHwI.mft (raw, json)
Hash identifier: fp65+5jlYR2Iea/+b6ZZFf6HIJepo8ZAz6CXnJYGGWk=
Subject key identifier: DD:FA:CE:9D:74:2A:7D:D0:F9:0E:F4:2A:AD:68:85:FB:83:00:24:78
Authority key identifier: B7:8C:DD:BF:C7:6B:DA:26:A0:29:EA:80:C8:98:77:98:74:5F:1F:02
Certificate issuer: /CN=b78cddbfc76bda26a029ea80c8987798745f1f02
Certificate serial: 0199C3E9F2FCC845002424184F77C2F0959E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/t4zdv8dr2iagKeqAyJh3mHRfHwI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/30b8e9-e7d4-40cc-ad5f-3c741220ea00/1/t4zdv8dr2iagKeqAyJh3mHRfHwI.mft
Manifest number: 1379
Signing time: Wed 08 Oct 2025 13:01:53 +0000
Manifest this update: Wed 08 Oct 2025 13:01:53 +0000
Manifest next update: Thu 09 Oct 2025 13:01:53 +0000
Files and hashes: 1: 4ZMkun0YVKsQhMtugX5PoEy0_rI.roa (hash: fKBmMFAsGdJAHOCtTHbLGukOIg/BNTMMvT6hLSCBWOk=)
2: 9SX4KosI9EGxvqBg-r1JnjKT0ZM.roa (hash: WqcTzSMCYbly9wYW2w55k/ugMgucEMXzGeFeea+G7IU=)
3: t4zdv8dr2iagKeqAyJh3mHRfHwI.crl (hash: IMcvpLAqUxHqTS6PlKawED0n9Uqizme5Ni3IfGU1PVo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/30b8e9-e7d4-40cc-ad5f-3c741220ea00/1/t4zdv8dr2iagKeqAyJh3mHRfHwI.crl
rsync://rpki.ripe.net/repository/DEFAULT/4a/30b8e9-e7d4-40cc-ad5f-3c741220ea00/1/t4zdv8dr2iagKeqAyJh3mHRfHwI.mft
rsync://rpki.ripe.net/repository/DEFAULT/t4zdv8dr2iagKeqAyJh3mHRfHwI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 09 Oct 2025 13:01:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:c3:e9:f2:fc:c8:45:00:24:24:18:4f:77:c2:f0:95:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b78cddbfc76bda26a029ea80c8987798745f1f02
Validity
Not Before: Oct 8 13:01:53 2025 GMT
Not After : Oct 9 13:01:53 2025 GMT
Subject: CN=ddface9d742a7dd0f90ef42aad6885fb83002478
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:87:80:e3:bc:86:78:c1:d4:db:88:ca:e2:63:
1a:25:8b:5b:46:0b:09:cc:10:e2:e2:42:96:a4:93:
15:4b:83:e9:b1:8a:b8:aa:08:12:05:1a:08:c8:89:
de:81:36:0e:d8:3a:35:e2:c1:d6:e4:0e:b9:66:de:
84:08:71:d0:86:10:82:6e:54:4f:17:e0:23:33:30:
5f:2d:c0:6d:2f:a7:1b:79:f9:6b:6e:d4:bc:39:01:
59:ec:27:4b:15:c2:bf:4d:a1:92:82:27:54:19:2e:
c4:93:ec:a5:63:18:cd:81:c0:b9:1e:4a:7a:be:52:
9c:1a:8d:44:cd:8c:6f:3d:d2:6b:4d:86:64:e5:30:
d3:69:4e:d1:9e:18:a5:77:da:02:f8:a0:1c:cb:c4:
7c:b9:3f:ae:16:a5:68:a4:4f:61:ca:d8:df:88:07:
0b:3e:c7:f2:bb:5c:42:e4:1a:c7:b3:3a:1e:dd:b7:
1b:a3:89:1e:2d:2f:4e:73:d7:ad:51:32:49:75:78:
b2:a6:f1:97:cf:28:65:b1:6e:36:2d:40:cb:6a:02:
43:09:39:ee:86:4f:89:33:0c:12:b5:bb:04:55:a4:
0c:5d:98:d5:dc:94:31:5a:4b:68:c8:fc:77:68:66:
fa:d3:dd:1c:50:1e:19:15:e0:d4:2a:58:df:1f:e3:
77:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:FA:CE:9D:74:2A:7D:D0:F9:0E:F4:2A:AD:68:85:FB:83:00:24:78
X509v3 Authority Key Identifier:
keyid:B7:8C:DD:BF:C7:6B:DA:26:A0:29:EA:80:C8:98:77:98:74:5F:1F:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t4zdv8dr2iagKeqAyJh3mHRfHwI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/30b8e9-e7d4-40cc-ad5f-3c741220ea00/1/t4zdv8dr2iagKeqAyJh3mHRfHwI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/30b8e9-e7d4-40cc-ad5f-3c741220ea00/1/t4zdv8dr2iagKeqAyJh3mHRfHwI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:af:03:c5:ae:50:b9:e2:fc:ce:da:8f:4d:07:95:92:f9:11:
6a:8e:ee:a8:c7:ff:8b:78:60:6a:fd:49:d5:62:e1:b0:6d:17:
c4:02:68:7e:d1:ef:fe:08:6c:0e:6d:a2:00:80:04:55:34:dd:
8a:b8:4d:28:2f:69:b6:a5:6c:fd:be:50:04:55:35:4a:f3:b2:
da:5f:e9:ba:73:91:11:24:44:0f:e4:4b:02:a0:d4:5a:a0:bb:
e1:a7:98:50:9e:e8:c7:a5:ba:26:be:15:58:1f:e1:1f:41:c7:
21:6e:0c:85:bb:91:ea:0f:9c:5d:71:d9:09:b5:28:62:fd:81:
56:c9:fc:4f:e9:1f:45:80:69:f9:17:fa:84:04:9a:44:67:ba:
cd:7e:ca:4f:86:95:68:bd:a2:7a:a7:c5:5c:56:71:12:3d:58:
78:27:b9:35:37:68:13:61:1d:b6:1d:77:b6:2b:78:43:8b:27:
5b:a0:8a:8d:73:19:dc:ca:1b:d0:4b:11:f5:64:0d:a6:ce:29:
f8:17:21:2d:38:09:bb:cd:4b:e5:5d:67:00:e9:fd:99:4b:5c:
97:46:9a:41:c8:12:f9:8b:2e:b6:d8:06:d6:b5:98:53:9f:31:
6f:d4:02:4c:f8:85:18:f4:89:69:b2:a9:ea:f8:fe:5d:7d:1e:
1d:0f:f0:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 8 21:15:13 2025 by rpki-client