Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/0841b5-1955-4f00-8bf1-289f95893e84/1/D-Gntqa4WzwyZ8gDmW7YGKSmZHk.mft
File: D-Gntqa4WzwyZ8gDmW7YGKSmZHk.mft (raw, json)
Hash identifier: 4aUxyxASQ2XbOWgIC7SBQIWchvWq+K2gomQu14K/bcs=
Subject key identifier: 42:55:B7:7C:B2:89:0D:5E:14:C4:68:A7:32:7C:1E:87:FC:62:2C:BB
Authority key identifier: 0F:E1:A7:B6:A6:B8:5B:3C:32:67:C8:03:99:6E:D8:18:A4:A6:64:79
Certificate issuer: /CN=0fe1a7b6a6b85b3c3267c803996ed818a4a66479
Certificate serial: 0199221E98BAF53195DD618428E0DC0B7D88
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D-Gntqa4WzwyZ8gDmW7YGKSmZHk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/0841b5-1955-4f00-8bf1-289f95893e84/1/D-Gntqa4WzwyZ8gDmW7YGKSmZHk.mft
Manifest number: 0199
Signing time: Sun 07 Sep 2025 03:00:54 +0000
Manifest this update: Sun 07 Sep 2025 03:00:54 +0000
Manifest next update: Mon 08 Sep 2025 03:00:54 +0000
Files and hashes: 1: D-Gntqa4WzwyZ8gDmW7YGKSmZHk.crl (hash: W5Bsg0PBH5sG1agqHsIgAhif9c+Q8PnEvz/hF4VLmgQ=)
2: jcTO1fBkVXsp4y6wlcBbebFM8iw.roa (hash: NkT9ooqiKYOuDT79Rkr1WXdOvqeB/1D8TcQH5fNDnzE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/0841b5-1955-4f00-8bf1-289f95893e84/1/D-Gntqa4WzwyZ8gDmW7YGKSmZHk.crl
rsync://rpki.ripe.net/repository/DEFAULT/4e/0841b5-1955-4f00-8bf1-289f95893e84/1/D-Gntqa4WzwyZ8gDmW7YGKSmZHk.mft
rsync://rpki.ripe.net/repository/DEFAULT/D-Gntqa4WzwyZ8gDmW7YGKSmZHk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 03:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:1e:98:ba:f5:31:95:dd:61:84:28:e0:dc:0b:7d:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0fe1a7b6a6b85b3c3267c803996ed818a4a66479
Validity
Not Before: Sep 7 03:00:54 2025 GMT
Not After : Sep 8 03:00:54 2025 GMT
Subject: CN=4255b77cb2890d5e14c468a7327c1e87fc622cbb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:6d:3c:c0:8e:0b:de:02:f1:b4:cf:65:53:bf:
ca:b1:2c:8c:02:5f:a2:b2:4b:bd:10:33:7b:ca:7d:
8c:4f:13:d5:1d:e2:07:7d:d8:dc:e5:da:7e:0c:57:
eb:12:9f:66:b6:ee:a5:b3:03:6a:45:c4:f0:0a:96:
ba:23:95:1d:45:3a:58:8c:55:7b:b1:70:66:01:65:
6f:f3:f4:b2:26:f5:ef:e9:17:a6:c5:1b:54:02:ba:
3d:85:09:7c:2a:e5:67:fa:db:99:52:52:c4:1c:5d:
fa:e4:19:d6:e9:62:9e:0c:21:f7:6c:aa:4a:ca:b8:
94:38:73:72:33:92:d5:c1:98:93:49:df:31:21:3d:
b5:d3:86:93:c2:47:59:e5:13:0b:f7:3a:54:bf:6d:
23:c2:57:9f:75:06:2e:87:82:2c:ec:27:64:b8:b0:
7d:14:e0:46:e5:c6:da:92:27:e5:9b:f7:35:f2:75:
e3:50:6a:cd:35:70:9c:c0:7e:83:2b:89:02:32:56:
d7:84:42:3d:2c:da:00:eb:66:8c:b7:0e:0c:2a:80:
94:27:0e:bc:7b:0b:5d:5e:c6:2e:2b:bf:ef:64:29:
0d:b0:cb:3b:29:6a:f3:9d:47:50:44:f4:0d:2e:38:
b4:27:55:36:ab:1c:04:c6:2a:2e:23:77:e8:6b:3d:
c1:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:55:B7:7C:B2:89:0D:5E:14:C4:68:A7:32:7C:1E:87:FC:62:2C:BB
X509v3 Authority Key Identifier:
keyid:0F:E1:A7:B6:A6:B8:5B:3C:32:67:C8:03:99:6E:D8:18:A4:A6:64:79
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D-Gntqa4WzwyZ8gDmW7YGKSmZHk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/0841b5-1955-4f00-8bf1-289f95893e84/1/D-Gntqa4WzwyZ8gDmW7YGKSmZHk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/0841b5-1955-4f00-8bf1-289f95893e84/1/D-Gntqa4WzwyZ8gDmW7YGKSmZHk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:3b:bb:0c:1b:08:0d:8b:4f:95:a2:1c:dd:4b:e3:c3:95:2b:
cf:32:f2:73:7b:b4:3e:02:f5:01:15:38:d6:9c:7b:4f:e5:53:
d8:16:3a:2c:b3:98:b4:4b:05:81:04:c8:d4:bb:07:e5:60:78:
72:fd:10:55:23:2f:95:02:0c:da:17:39:2e:15:45:8b:5e:a5:
11:c2:93:69:1a:e3:23:c6:ea:75:d1:46:68:c1:63:48:5c:e7:
98:73:cd:7e:f3:66:ae:86:0e:83:65:c5:67:86:c3:69:c4:c9:
5b:f3:ad:d5:24:0c:0c:1c:c6:f1:25:ea:54:3d:87:e0:86:13:
6c:c2:bf:6b:50:aa:2d:16:1f:42:9a:90:8b:7c:7d:21:21:bc:
cd:8a:76:60:43:03:66:59:b1:24:4e:d0:e0:f2:11:48:5a:5b:
83:12:c0:fe:c1:da:00:06:bb:e4:9b:e3:fd:37:f3:26:5e:41:
9d:81:d6:9a:da:9e:3d:db:ad:66:9f:a7:7b:fd:95:e8:70:30:
63:91:d7:8c:1f:15:ef:64:81:04:58:27:6f:78:08:e8:01:53:
c7:0a:fd:d0:40:e9:a6:1b:bd:ac:4e:7a:f0:4b:a3:ef:54:1a:
cf:f9:2f:3e:a7:2c:a4:17:45:17:7c:1b:8e:bc:a8:e9:1a:8f:
a5:7b:09:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 12:31:24 2025 by rpki-client