Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/a91afe-9651-4de3-ad88-d8393e185732/1/4rRFsAqGALgzTB06rfHvcZFOaMk.mft
File: 4rRFsAqGALgzTB06rfHvcZFOaMk.mft (raw, json)
Hash identifier: 1tjWqnXm/7UfGVpL9tJnc9+J+V7qb95y/5cT8NXz+6o=
Subject key identifier: DA:4A:17:D5:72:F7:D4:F0:80:28:DE:FB:BB:42:07:CE:08:E5:C5:63
Authority key identifier: E2:B4:45:B0:0A:86:00:B8:33:4C:1D:3A:AD:F1:EF:71:91:4E:68:C9
Certificate issuer: /CN=e2b445b00a8600b8334c1d3aadf1ef71914e68c9
Certificate serial: 019916510B9AAA731AC21F4CDAE97EA3E900
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4rRFsAqGALgzTB06rfHvcZFOaMk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/a91afe-9651-4de3-ad88-d8393e185732/1/4rRFsAqGALgzTB06rfHvcZFOaMk.mft
Manifest number: 166A
Signing time: Thu 04 Sep 2025 20:00:34 +0000
Manifest this update: Thu 04 Sep 2025 20:00:34 +0000
Manifest next update: Fri 05 Sep 2025 20:00:34 +0000
Files and hashes: 1: 4rRFsAqGALgzTB06rfHvcZFOaMk.crl (hash: xSMv7pZ+DcI873Uw9Rw3kZJ5HXRWnytBQ+BTelSnMgw=)
2: 8LUgcOoiwyxAy7v4r-Iu6BnRjQM.roa (hash: bhDJBeMXd7WyfIdgyXkUTipM9MJXycedE6ysXMdh0sE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/79/a91afe-9651-4de3-ad88-d8393e185732/1/4rRFsAqGALgzTB06rfHvcZFOaMk.crl
rsync://rpki.ripe.net/repository/DEFAULT/79/a91afe-9651-4de3-ad88-d8393e185732/1/4rRFsAqGALgzTB06rfHvcZFOaMk.mft
rsync://rpki.ripe.net/repository/DEFAULT/4rRFsAqGALgzTB06rfHvcZFOaMk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 05 Sep 2025 19:46:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:16:51:0b:9a:aa:73:1a:c2:1f:4c:da:e9:7e:a3:e9:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e2b445b00a8600b8334c1d3aadf1ef71914e68c9
Validity
Not Before: Sep 4 20:00:34 2025 GMT
Not After : Sep 5 20:00:34 2025 GMT
Subject: CN=da4a17d572f7d4f08028defbbb4207ce08e5c563
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:ae:62:e6:f6:30:36:15:bd:61:25:69:70:b3:
aa:08:7e:ff:10:a4:1a:88:26:a2:f5:3a:e6:c1:44:
45:c2:d3:c9:ac:0a:d9:ff:7b:91:23:2f:a6:10:98:
ee:e6:7b:a3:94:0c:71:08:8a:5a:37:ba:b9:f7:88:
40:d6:ba:4b:0b:a4:8b:44:51:42:b4:3b:3a:fb:1a:
d6:eb:ff:81:e2:b8:bc:95:fe:15:b1:49:a5:b8:1e:
94:31:5a:cf:14:d1:ea:11:ef:24:65:41:18:98:a0:
8c:f0:3d:3c:fb:2f:e5:a7:12:af:8c:36:da:bf:86:
aa:27:2c:b0:22:30:3c:9c:6a:28:44:da:96:33:c3:
5f:68:8b:92:c3:55:71:a8:1f:32:66:98:b2:eb:13:
aa:d2:0d:2c:20:84:7b:05:80:52:ab:4f:9b:f0:ba:
7b:bd:ac:0b:2e:7b:bd:58:55:ba:ed:c3:a6:86:35:
60:b3:12:8b:fa:e9:6f:90:20:0f:0d:46:41:df:83:
84:8c:f0:7f:55:e1:c6:dc:10:ec:4d:4d:34:49:c6:
7a:72:0b:aa:a7:f6:f2:57:f2:45:4c:01:9d:04:ca:
93:1c:e4:b7:04:f5:50:7b:f3:e8:53:3c:7f:12:ba:
d5:26:3d:27:61:27:5c:94:d2:ff:0f:7e:18:18:f7:
b9:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:4A:17:D5:72:F7:D4:F0:80:28:DE:FB:BB:42:07:CE:08:E5:C5:63
X509v3 Authority Key Identifier:
keyid:E2:B4:45:B0:0A:86:00:B8:33:4C:1D:3A:AD:F1:EF:71:91:4E:68:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4rRFsAqGALgzTB06rfHvcZFOaMk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/a91afe-9651-4de3-ad88-d8393e185732/1/4rRFsAqGALgzTB06rfHvcZFOaMk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/79/a91afe-9651-4de3-ad88-d8393e185732/1/4rRFsAqGALgzTB06rfHvcZFOaMk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:53:64:73:c6:7b:8c:81:41:ed:70:84:2d:d0:fd:a1:cb:c0:
84:ec:45:d4:2e:69:12:ce:af:96:ef:30:d9:ff:fb:de:ec:c9:
9a:5c:ec:95:af:26:a6:46:e4:8d:67:e2:dc:78:57:49:0c:5b:
17:40:7c:a6:09:0c:e2:23:2e:bc:e2:f5:a9:94:be:f5:33:e9:
da:d9:e4:ec:22:bc:44:1f:6f:04:7f:c1:4d:1a:b0:c3:9c:74:
49:ef:44:b0:fd:65:1f:50:60:9d:bc:cd:83:35:d0:5e:0d:b4:
a1:e1:69:4f:9b:39:d0:93:0b:14:29:3f:ef:b5:e6:3a:4b:69:
a4:94:a3:bc:79:db:1d:6a:31:fa:9d:ff:44:79:66:78:a9:02:
e3:37:44:ac:46:75:45:2a:8d:cd:d3:d8:fb:9e:f1:16:44:ad:
b9:5f:39:25:12:f6:80:ec:14:81:5c:61:50:78:c1:88:1d:63:
d9:08:a5:f1:a6:54:86:09:a7:08:19:45:30:de:c3:a1:81:84:
22:93:a9:9a:d0:da:3b:60:09:8e:35:00:5d:a5:b0:ae:be:8f:
6c:0a:32:18:7a:0b:ab:8f:ca:51:94:31:f9:35:da:4f:fb:a0:
44:4c:b5:26:d1:a7:b1:14:fd:df:d3:41:76:3a:96:70:d4:66:
35:19:59:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 5 04:30:10 2025 by rpki-client