Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/39604e-9748-4c7d-ad5d-563d47a7ab61/1/4-dxd2XkvMcZGyXRpOZtOIycU9k.mft
File: 4-dxd2XkvMcZGyXRpOZtOIycU9k.mft (raw, json)
Hash identifier: z60GcAAq74uXrBBccJpzid5PZl3IMFYz5OOvY3pn6i0=
Subject key identifier: 0C:AB:66:84:25:92:4C:91:28:A7:62:0D:C9:86:20:D6:DF:3B:41:F6
Authority key identifier: E3:E7:71:77:65:E4:BC:C7:19:1B:25:D1:A4:E6:6D:38:8C:9C:53:D9
Certificate issuer: /CN=e3e7717765e4bcc7191b25d1a4e66d388c9c53d9
Certificate serial: 019916882BE5DEF7359B9D6FBDF279D7BBC0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4-dxd2XkvMcZGyXRpOZtOIycU9k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/39604e-9748-4c7d-ad5d-563d47a7ab61/1/4-dxd2XkvMcZGyXRpOZtOIycU9k.mft
Manifest number: 07F0
Signing time: Thu 04 Sep 2025 21:00:46 +0000
Manifest this update: Thu 04 Sep 2025 21:00:46 +0000
Manifest next update: Fri 05 Sep 2025 21:00:46 +0000
Files and hashes: 1: 4-dxd2XkvMcZGyXRpOZtOIycU9k.crl (hash: nLPWuJ0Z8zSmzomPfF3FTMT0XKBBSEe+QRsdJjMqY1k=)
2: NNXpk59D8TzuvrFY-C-H2t3-Azg.roa (hash: blHgWyvU6BLEqGgFxNZ3azxZxMbkiPWVvdBh5N+A+CQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/39604e-9748-4c7d-ad5d-563d47a7ab61/1/4-dxd2XkvMcZGyXRpOZtOIycU9k.crl
rsync://rpki.ripe.net/repository/DEFAULT/30/39604e-9748-4c7d-ad5d-563d47a7ab61/1/4-dxd2XkvMcZGyXRpOZtOIycU9k.mft
rsync://rpki.ripe.net/repository/DEFAULT/4-dxd2XkvMcZGyXRpOZtOIycU9k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 05 Sep 2025 19:46:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:16:88:2b:e5:de:f7:35:9b:9d:6f:bd:f2:79:d7:bb:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e3e7717765e4bcc7191b25d1a4e66d388c9c53d9
Validity
Not Before: Sep 4 21:00:46 2025 GMT
Not After : Sep 5 21:00:46 2025 GMT
Subject: CN=0cab668425924c9128a7620dc98620d6df3b41f6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:15:e4:a8:57:69:24:52:b0:f4:08:8a:36:39:
8c:98:18:87:62:17:31:69:58:ef:ba:40:1c:c4:ea:
c2:b6:d5:3f:00:ac:62:35:88:50:ac:97:c8:c0:9d:
b8:de:a5:a2:d9:e7:a5:13:1f:bd:19:7e:7e:2f:29:
d4:d4:9d:c3:01:11:f4:55:20:34:5f:75:78:90:6a:
84:8e:df:54:48:be:57:18:90:eb:d7:4b:f0:ff:fe:
31:40:11:11:3d:43:02:82:48:92:21:97:66:a5:6a:
63:de:ae:b9:90:1e:4d:54:85:5b:23:bd:bd:95:30:
35:3e:0e:5d:0b:3d:bd:b9:28:59:4c:e8:1f:10:b9:
63:d5:da:8b:9a:de:4c:32:ef:3f:14:de:92:82:e0:
60:50:73:19:26:a0:5a:d6:be:44:ea:4d:e8:ad:da:
cc:88:28:a4:82:13:e6:ce:42:57:9d:8d:07:57:b6:
90:73:d4:3b:ac:c9:3f:d3:f1:e7:73:fe:85:38:cc:
e8:ca:a8:c1:5a:68:15:19:78:93:e5:1e:e2:ed:f7:
2e:67:78:27:92:10:f7:d1:bc:c6:4a:52:58:6f:be:
0a:3a:87:2b:43:6b:1a:03:42:2e:2b:df:2e:df:e2:
c2:49:54:52:91:66:46:18:dc:6b:a1:17:1c:22:c0:
41:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:AB:66:84:25:92:4C:91:28:A7:62:0D:C9:86:20:D6:DF:3B:41:F6
X509v3 Authority Key Identifier:
keyid:E3:E7:71:77:65:E4:BC:C7:19:1B:25:D1:A4:E6:6D:38:8C:9C:53:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4-dxd2XkvMcZGyXRpOZtOIycU9k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/39604e-9748-4c7d-ad5d-563d47a7ab61/1/4-dxd2XkvMcZGyXRpOZtOIycU9k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/39604e-9748-4c7d-ad5d-563d47a7ab61/1/4-dxd2XkvMcZGyXRpOZtOIycU9k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:7f:d7:fb:88:bf:67:eb:88:bf:ed:06:69:33:c3:34:a2:7a:
96:65:8d:c4:4e:9d:7b:ee:72:97:63:d8:6c:68:b4:53:12:cf:
54:4c:8b:9d:81:25:35:17:60:03:67:8a:d2:63:f3:63:de:7e:
a4:3f:3c:14:dd:29:af:2d:ce:4e:b6:30:ba:f4:78:e2:7a:39:
4d:fb:93:28:7b:2b:21:59:ff:4e:e9:5a:19:1c:57:c9:a2:de:
2b:a3:79:3b:3d:d3:72:c0:0d:c1:f6:db:d4:1c:7a:9b:a5:b6:
0a:4d:4c:b6:f8:78:b7:87:51:24:5f:7e:90:14:59:1b:86:d3:
68:e4:fb:85:e3:fc:12:75:7a:4e:42:77:8d:cd:9f:8c:de:a4:
96:20:b7:91:50:d2:a2:56:bc:04:5d:6f:8c:c3:81:8f:46:de:
26:0f:07:13:01:64:4b:2a:d1:d2:d0:66:51:f2:ff:90:0a:2d:
83:d2:77:13:a4:6b:f5:f6:89:d7:29:63:b5:c4:91:82:f8:64:
6e:8e:ce:95:37:58:0a:a4:7c:63:38:13:f0:28:65:2c:13:f2:
90:5e:5c:bd:fc:de:9c:1e:ae:47:74:c7:22:d3:ee:d4:d5:a5:
1f:f3:1a:f3:c1:46:19:b2:2f:14:df:54:51:5b:0a:c6:48:99:
a6:c3:5f:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 5 04:27:16 2025 by rpki-client