Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/3f2355-66ff-40b7-98d6-d95a38f0c06e/1/4zQsWGNx1GW881954WYOEeCAUVU.mft
File: 4zQsWGNx1GW881954WYOEeCAUVU.mft (raw, json)
Hash identifier: 4vWgNAD2lwk9r7xmB+5EemuR8gbWZaYmopqF3uAsuhc=
Subject key identifier: 0D:1F:B9:3D:CE:5F:EB:2B:64:5C:68:70:AC:37:59:86:4C:89:45:EB
Authority key identifier: E3:34:2C:58:63:71:D4:65:BC:F3:5F:79:E1:66:0E:11:E0:80:51:55
Certificate issuer: /CN=e3342c586371d465bcf35f79e1660e11e0805155
Certificate serial: 019922FA47A040D11A6CBCDD6B04000973C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4zQsWGNx1GW881954WYOEeCAUVU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/3f2355-66ff-40b7-98d6-d95a38f0c06e/1/4zQsWGNx1GW881954WYOEeCAUVU.mft
Manifest number: DE
Signing time: Sun 07 Sep 2025 07:00:51 +0000
Manifest this update: Sun 07 Sep 2025 07:00:51 +0000
Manifest next update: Mon 08 Sep 2025 07:00:51 +0000
Files and hashes: 1: 4zQsWGNx1GW881954WYOEeCAUVU.crl (hash: W2yIAYUK03cZs8h3OrBrtwCZYplJs73v9o69OS2Gf1Q=)
2: Eba-gFj6_KEbGtGz74WD9Qe5r-8.roa (hash: IQzF41AYmHmWyxwMWh8AK7MBgafq4BN6uK+awf+6jdE=)
3: TjLS0-sv5HlbfwuedxiTX3hfr70.roa (hash: Xw4v/XHqrjPEUz2/nVAIr6aO/uYB4Ak47yBZaE0uW0Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6f/3f2355-66ff-40b7-98d6-d95a38f0c06e/1/4zQsWGNx1GW881954WYOEeCAUVU.crl
rsync://rpki.ripe.net/repository/DEFAULT/6f/3f2355-66ff-40b7-98d6-d95a38f0c06e/1/4zQsWGNx1GW881954WYOEeCAUVU.mft
rsync://rpki.ripe.net/repository/DEFAULT/4zQsWGNx1GW881954WYOEeCAUVU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:fa:47:a0:40:d1:1a:6c:bc:dd:6b:04:00:09:73:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e3342c586371d465bcf35f79e1660e11e0805155
Validity
Not Before: Sep 7 07:00:51 2025 GMT
Not After : Sep 8 07:00:51 2025 GMT
Subject: CN=0d1fb93dce5feb2b645c6870ac3759864c8945eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:53:39:a1:2a:93:09:f8:07:0f:db:16:d1:6a:
6a:fb:f4:69:61:3b:d8:c8:51:28:8e:33:7e:20:9a:
bb:5b:c3:e4:80:c0:5e:0d:2c:f3:51:86:f0:0d:eb:
9a:ab:74:bd:7c:a3:00:01:db:c4:7c:2e:a6:99:60:
f4:79:a7:c7:cb:1c:51:76:77:5d:ff:e9:6e:7c:0b:
c5:16:89:10:46:ad:e5:9e:e9:0c:72:5d:97:04:b0:
ba:c6:3f:31:1e:3a:74:9e:5f:70:f4:87:6e:73:46:
32:08:d2:fa:e0:1e:54:9b:a4:e7:3b:43:99:de:3e:
da:3b:98:8a:8f:bd:18:0e:3f:0c:5f:e8:2a:8a:51:
71:70:a0:06:c2:ba:a1:ae:7e:3d:28:18:76:3a:ad:
05:f6:b0:c9:98:6b:20:39:b2:64:69:45:05:46:bf:
a1:b2:a9:b7:bb:f8:7b:fb:d6:51:e3:52:87:96:19:
f1:13:e2:6b:4a:85:0f:a3:59:3d:51:52:26:2e:7a:
9c:30:77:b8:a6:8c:3b:a9:21:d0:2c:43:63:c0:89:
76:bb:a3:56:6d:43:45:09:0a:60:a0:31:88:9b:be:
50:9d:65:31:5e:a5:39:c9:a0:be:ab:c3:ae:68:d7:
7a:6f:72:5e:09:f8:86:35:08:0b:8a:ca:1d:6c:b3:
a3:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:1F:B9:3D:CE:5F:EB:2B:64:5C:68:70:AC:37:59:86:4C:89:45:EB
X509v3 Authority Key Identifier:
keyid:E3:34:2C:58:63:71:D4:65:BC:F3:5F:79:E1:66:0E:11:E0:80:51:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4zQsWGNx1GW881954WYOEeCAUVU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/3f2355-66ff-40b7-98d6-d95a38f0c06e/1/4zQsWGNx1GW881954WYOEeCAUVU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/3f2355-66ff-40b7-98d6-d95a38f0c06e/1/4zQsWGNx1GW881954WYOEeCAUVU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:7f:ab:6d:60:43:a0:49:e6:0a:db:ff:fe:0c:ca:c5:a2:c9:
2f:55:50:fb:94:2f:58:36:ee:7d:11:a6:31:21:e5:29:3e:a7:
67:cb:40:3e:d6:9b:8f:2a:1b:34:7a:29:74:f8:84:6a:f9:8e:
15:a9:ce:88:df:37:1f:2a:0a:79:85:7a:f0:3d:25:52:d7:09:
62:6a:48:c7:74:0c:bf:f1:b9:c5:03:3f:73:4c:d9:59:92:c6:
07:25:7f:00:27:57:53:5a:22:92:f5:a7:7b:63:4e:ac:98:91:
94:6e:61:68:74:d9:ae:0d:56:4f:05:2e:f2:dd:99:c6:ae:e6:
f6:06:89:52:1e:15:66:2c:97:c6:a3:c5:fe:df:1e:b9:b0:c9:
c4:b9:95:60:29:5c:17:78:de:ae:19:c4:54:71:a8:38:4c:e7:
46:78:6e:93:1f:1c:d2:64:2e:9d:c5:4c:05:46:15:21:89:c9:
57:c2:e0:02:1b:ad:51:ef:5f:42:1d:d4:4c:9a:00:25:1e:d2:
4f:b6:7d:3f:70:61:d5:3f:98:73:f7:4e:94:9a:e2:1b:a9:a1:
86:7c:74:de:3e:38:15:72:83:ed:99:c2:d3:94:46:a3:68:ac:
10:ae:ae:70:96:2d:e7:88:6a:9f:7a:0e:66:8d:74:eb:dc:82:
32:60:ee:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 11:39:29 2025 by rpki-client