Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/0fc7e5-b1f6-474e-99a7-eda23f2f17e9/1/4YdKiHqiiNq3LGWOk2lO1dr9ICY.mft
File: 4YdKiHqiiNq3LGWOk2lO1dr9ICY.mft (raw, json)
Hash identifier: 9gjgN3IBzINC/v8pIzFO3CcuITUx8bHfD4GdfBkHSPc=
Subject key identifier: D5:43:36:3B:03:BA:04:70:FE:C5:33:17:91:C3:7E:6B:35:5B:0C:E7
Authority key identifier: E1:87:4A:88:7A:A2:88:DA:B7:2C:65:8E:93:69:4E:D5:DA:FD:20:26
Certificate issuer: /CN=e1874a887aa288dab72c658e93694ed5dafd2026
Certificate serial: 019921B0B67F6F3E133A797FA79A8E41E03C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4YdKiHqiiNq3LGWOk2lO1dr9ICY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/0fc7e5-b1f6-474e-99a7-eda23f2f17e9/1/4YdKiHqiiNq3LGWOk2lO1dr9ICY.mft
Manifest number: 11CC
Signing time: Sun 07 Sep 2025 01:00:53 +0000
Manifest this update: Sun 07 Sep 2025 01:00:53 +0000
Manifest next update: Mon 08 Sep 2025 01:00:53 +0000
Files and hashes: 1: 4YdKiHqiiNq3LGWOk2lO1dr9ICY.crl (hash: I0m2ewJQt1pSlQdLJtf5RwbZ94p6yPix4DgjXVgxb98=)
2: jnxiRSp6LL1UuZSH55PRoBU9Uug.roa (hash: EzydjgFzmvXFQDadZtYOhUDG1+kFGRWU2sNIMDhFrQ0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/0fc7e5-b1f6-474e-99a7-eda23f2f17e9/1/4YdKiHqiiNq3LGWOk2lO1dr9ICY.crl
rsync://rpki.ripe.net/repository/DEFAULT/24/0fc7e5-b1f6-474e-99a7-eda23f2f17e9/1/4YdKiHqiiNq3LGWOk2lO1dr9ICY.mft
rsync://rpki.ripe.net/repository/DEFAULT/4YdKiHqiiNq3LGWOk2lO1dr9ICY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 01:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:21:b0:b6:7f:6f:3e:13:3a:79:7f:a7:9a:8e:41:e0:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e1874a887aa288dab72c658e93694ed5dafd2026
Validity
Not Before: Sep 7 01:00:53 2025 GMT
Not After : Sep 8 01:00:53 2025 GMT
Subject: CN=d543363b03ba0470fec5331791c37e6b355b0ce7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:ee:85:00:a3:ea:4e:fe:16:0b:b3:84:35:f1:
f1:84:58:41:06:42:e4:c7:58:57:16:b3:ba:f7:a9:
a8:eb:37:ac:b4:d5:8b:89:f0:30:6b:4a:68:76:6c:
71:5b:6b:b9:7f:52:6c:ab:45:7d:5f:96:93:a6:83:
02:88:46:26:12:7d:26:9c:c5:68:6e:3e:2f:92:b5:
fd:04:b0:80:7f:eb:d0:f2:e6:eb:d0:e8:37:24:43:
f4:2f:d8:f4:f1:70:af:40:8e:5f:9d:5b:7b:82:87:
14:3e:e5:15:dd:94:ac:57:b8:ca:4c:6c:d4:2f:cb:
c0:c5:cc:60:39:f5:22:09:4d:15:ae:08:86:cf:32:
cc:e7:5e:04:a4:4c:ab:c5:1e:e8:ea:c2:03:75:45:
16:5e:3e:94:ba:65:0f:b8:f0:ca:d5:90:c5:81:30:
a6:3c:e2:67:a7:2d:73:5b:a1:89:2a:59:35:69:ee:
8a:26:a7:6b:7e:8c:6b:b9:ff:fa:78:d1:e1:a2:42:
b8:4d:a6:df:e5:d8:3b:cf:99:ca:c2:39:3e:dc:ce:
bc:26:20:6b:c2:36:71:13:9f:68:74:a5:ac:45:fa:
95:bf:7e:e9:db:40:36:de:21:bf:a8:46:b5:ce:2f:
6b:f2:e5:47:e1:53:f1:08:63:52:3a:bb:be:09:69:
2d:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:43:36:3B:03:BA:04:70:FE:C5:33:17:91:C3:7E:6B:35:5B:0C:E7
X509v3 Authority Key Identifier:
keyid:E1:87:4A:88:7A:A2:88:DA:B7:2C:65:8E:93:69:4E:D5:DA:FD:20:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4YdKiHqiiNq3LGWOk2lO1dr9ICY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/0fc7e5-b1f6-474e-99a7-eda23f2f17e9/1/4YdKiHqiiNq3LGWOk2lO1dr9ICY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/0fc7e5-b1f6-474e-99a7-eda23f2f17e9/1/4YdKiHqiiNq3LGWOk2lO1dr9ICY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c3:46:44:94:ed:0d:0b:a1:e6:4e:43:50:fd:dd:af:be:3a:54:
bf:11:b2:bb:43:44:99:c1:f6:0b:f7:54:a4:12:22:0d:41:db:
45:27:86:92:0a:e8:a9:1d:0f:95:61:d2:79:02:44:70:33:f2:
8e:91:74:ee:0b:21:4b:23:56:ae:ed:67:5a:7e:23:a1:31:7d:
ed:f7:15:4c:0a:26:85:9d:e6:04:d9:13:43:c6:f6:09:f1:c8:
11:6e:ae:c3:6e:f9:3a:79:6a:f3:75:1d:45:81:0c:d7:d4:5e:
80:65:ea:b5:61:05:6b:16:2c:73:1d:ba:1e:49:bf:fa:9c:d2:
77:31:e1:31:31:f6:5c:e0:84:70:52:c6:fc:de:13:c2:b2:ad:
2a:92:91:cc:38:0d:cf:a9:01:66:d0:28:ca:76:cf:fd:a8:bc:
9b:ad:5c:61:40:a6:c5:2d:cc:66:cd:cf:32:55:e4:07:42:d9:
51:98:23:13:c3:3f:66:c6:3c:6c:c7:6d:ef:1e:f9:6d:b8:ad:
5f:1f:82:7d:c7:c0:24:d6:35:1e:90:e1:d2:d0:31:50:3a:67:
f0:ed:1b:68:06:c2:5f:b0:2a:8a:ad:ec:bf:0e:43:70:ed:0b:
42:02:4b:d0:18:e5:15:c1:b5:92:26:76:46:6b:1f:9b:1a:43:
d2:d3:54:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 10:05:54 2025 by rpki-client