Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/a05eba-9d85-489b-aec7-ed42d3a625a4/1/4NQ1eE2owhjg_xB83P4kykVpyUk.mft
File: 4NQ1eE2owhjg_xB83P4kykVpyUk.mft (raw, json)
Hash identifier: mTfSQyIHzhKIfJlTSJNpGIBtrf3npK/AfZXi2qA2/dY=
Subject key identifier: F7:D3:20:DD:9A:58:25:86:D8:2B:D9:DD:DB:D1:D8:33:B6:C9:0C:64
Authority key identifier: E0:D4:35:78:4D:A8:C2:18:E0:FF:10:7C:DC:FE:24:CA:45:69:C9:49
Certificate issuer: /CN=e0d435784da8c218e0ff107cdcfe24ca4569c949
Certificate serial: 0199225518DBE9BB746DB45E2E73CE68C928
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4NQ1eE2owhjg_xB83P4kykVpyUk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/a05eba-9d85-489b-aec7-ed42d3a625a4/1/4NQ1eE2owhjg_xB83P4kykVpyUk.mft
Manifest number: 1672
Signing time: Sun 07 Sep 2025 04:00:26 +0000
Manifest this update: Sun 07 Sep 2025 04:00:26 +0000
Manifest next update: Mon 08 Sep 2025 04:00:26 +0000
Files and hashes: 1: 4NQ1eE2owhjg_xB83P4kykVpyUk.crl (hash: eZRzCVoXlBo39RZ4vcmD6tCWE4JqzErDGclCM3V6qR0=)
2: PCU_z8etHMahQn2RAV03QXEYQNY.roa (hash: u3wh2VwTq9MZxicFM5jtw2aPgJCWNRgfQ4wq8HW2GwA=)
3: dzbMTYGCieBVBPgENTHt9L5KJ8M.roa (hash: ujry7yejU+h1f7YJVtPloSSU466DjjsHF906b9LbjBg=)
4: iFRT7pIErYyjSrvBoxfFD5pxtGQ.roa (hash: 5ByeZ/21OPrr4ys4yOkH+9BugOf167l7MKLoGEfw+nA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/a05eba-9d85-489b-aec7-ed42d3a625a4/1/4NQ1eE2owhjg_xB83P4kykVpyUk.crl
rsync://rpki.ripe.net/repository/DEFAULT/5d/a05eba-9d85-489b-aec7-ed42d3a625a4/1/4NQ1eE2owhjg_xB83P4kykVpyUk.mft
rsync://rpki.ripe.net/repository/DEFAULT/4NQ1eE2owhjg_xB83P4kykVpyUk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 04:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:55:18:db:e9:bb:74:6d:b4:5e:2e:73:ce:68:c9:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e0d435784da8c218e0ff107cdcfe24ca4569c949
Validity
Not Before: Sep 7 04:00:26 2025 GMT
Not After : Sep 8 04:00:26 2025 GMT
Subject: CN=f7d320dd9a582586d82bd9dddbd1d833b6c90c64
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:cb:e0:b1:c3:80:06:e0:4b:ed:3e:db:57:4b:
dd:0b:35:a2:b4:d2:26:9f:f1:25:c8:e9:b6:4b:2d:
f6:d6:5a:02:b3:d4:54:8c:0c:ce:61:66:e3:06:10:
7b:e6:ad:08:2a:d2:36:4e:30:9c:89:06:44:55:f8:
5b:d3:68:b3:2d:2a:0e:14:14:3a:eb:8b:08:d1:93:
44:d6:3e:81:62:aa:15:f3:f6:de:fa:ae:6f:a9:05:
97:c2:c7:ad:51:96:1f:2a:a4:66:a4:07:29:f0:8c:
41:bf:9d:fd:1f:0a:69:08:30:28:f0:0d:ff:22:23:
a4:68:73:ea:8a:c7:0e:3d:82:0f:03:99:3d:e1:f7:
4b:63:d0:3f:b9:94:20:01:20:17:bf:09:90:fa:97:
7e:7e:1f:1c:7b:68:3f:98:f8:f3:00:d4:53:41:66:
66:c8:d7:74:0e:e1:f7:09:83:83:76:7c:e9:e9:ba:
ba:ac:c5:a6:21:40:82:26:c7:19:43:ad:4b:33:24:
e7:2c:ee:ea:d8:f4:2d:59:34:07:2a:03:66:45:5b:
45:03:61:44:c2:cc:57:2d:68:04:eb:42:53:29:77:
25:2a:86:b6:98:2b:ff:13:b0:1c:d7:e2:ce:53:9d:
66:2d:11:10:4a:d1:9d:cd:32:f0:e1:3a:5a:3d:ca:
be:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:D3:20:DD:9A:58:25:86:D8:2B:D9:DD:DB:D1:D8:33:B6:C9:0C:64
X509v3 Authority Key Identifier:
keyid:E0:D4:35:78:4D:A8:C2:18:E0:FF:10:7C:DC:FE:24:CA:45:69:C9:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4NQ1eE2owhjg_xB83P4kykVpyUk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/a05eba-9d85-489b-aec7-ed42d3a625a4/1/4NQ1eE2owhjg_xB83P4kykVpyUk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/a05eba-9d85-489b-aec7-ed42d3a625a4/1/4NQ1eE2owhjg_xB83P4kykVpyUk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:37:11:87:e8:c6:d3:bf:30:5e:8d:af:02:a4:83:4a:97:98:
49:1e:12:9e:a4:c9:a1:05:7c:0a:79:4c:c8:68:52:82:45:40:
85:18:da:df:72:cd:c4:31:03:77:3a:c6:1f:cf:2e:e2:f5:37:
e0:a9:dd:da:f2:30:34:8c:08:9f:88:45:39:2d:f8:38:2f:9e:
ba:db:12:7e:86:ab:1f:ad:f3:8c:b7:c9:38:7d:ea:ad:ca:20:
0a:15:0c:c7:e5:27:49:0b:38:1c:0b:47:b6:cf:7b:2e:d5:76:
85:10:28:f1:85:cb:a1:d5:9c:51:27:f7:03:39:a2:dc:60:4e:
63:8f:af:1d:06:0e:30:9a:dc:1e:ac:1b:b8:f0:b0:c3:80:7d:
1a:20:8e:a7:0f:16:78:30:6e:fe:cd:15:e5:2c:94:46:9e:ea:
47:7d:01:f4:f8:c0:97:30:5d:b6:dd:ee:2d:49:7f:28:62:6c:
98:6c:f4:54:93:47:38:03:df:08:57:75:51:f5:d9:18:1c:eb:
a0:c0:5c:d1:ce:0d:9b:dd:40:3d:39:d3:31:f8:b9:36:c0:84:
f8:02:7b:19:8a:79:b3:a9:86:4d:20:6c:06:11:af:71:08:84:
d1:7a:83:1c:b6:cf:e3:e1:e8:16:82:9a:61:1c:72:10:ef:d4:
f6:9e:be:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 09:59:59 2025 by rpki-client