Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/6dfbcf-313b-47b9-bf8e-a778a0c14859/1/S4cDP8aofTuNDLPOGrK6u-UroxE.mft
File: S4cDP8aofTuNDLPOGrK6u-UroxE.mft (raw, json)
Hash identifier: rzxyKzaPBdZ4KCZBe7OjlxKw+rX1j9E1lmMWYeLlKDM=
Subject key identifier: D9:05:1D:78:B9:B5:EA:D7:54:1A:35:F1:A2:10:26:39:4F:B5:21:C6
Authority key identifier: 4B:87:03:3F:C6:A8:7D:3B:8D:0C:B3:CE:1A:B2:BA:BB:E5:2B:A3:11
Certificate issuer: /CN=4b87033fc6a87d3b8d0cb3ce1ab2babbe52ba311
Certificate serial: 01995F0F29AF6C2CBFB430B221F2146335D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S4cDP8aofTuNDLPOGrK6u-UroxE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/6dfbcf-313b-47b9-bf8e-a778a0c14859/1/S4cDP8aofTuNDLPOGrK6u-UroxE.mft
Manifest number: 1570
Signing time: Thu 18 Sep 2025 23:00:53 +0000
Manifest this update: Thu 18 Sep 2025 23:00:53 +0000
Manifest next update: Fri 19 Sep 2025 23:00:53 +0000
Files and hashes: 1: 8OZ4Eudn-Zmm9BJklLqYUOhBro8.roa (hash: nQrHTPYYHsaKcsU7K7NBUNZKUwu8kquBvMwb0t9InZk=)
2: S4cDP8aofTuNDLPOGrK6u-UroxE.crl (hash: GxCr9s4i1OYRdcHnBlNjGDg29GWMed/NdXzOLHTZgf4=)
3: rP00SjYOc7kI37LHeR0akx0WLbw.roa (hash: HwxnGSpBCBewjdHMOMeKuWHUwmAgwVnpqM4EW67Q304=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7c/6dfbcf-313b-47b9-bf8e-a778a0c14859/1/S4cDP8aofTuNDLPOGrK6u-UroxE.crl
rsync://rpki.ripe.net/repository/DEFAULT/7c/6dfbcf-313b-47b9-bf8e-a778a0c14859/1/S4cDP8aofTuNDLPOGrK6u-UroxE.mft
rsync://rpki.ripe.net/repository/DEFAULT/S4cDP8aofTuNDLPOGrK6u-UroxE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 19 Sep 2025 22:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:5f:0f:29:af:6c:2c:bf:b4:30:b2:21:f2:14:63:35:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b87033fc6a87d3b8d0cb3ce1ab2babbe52ba311
Validity
Not Before: Sep 18 23:00:53 2025 GMT
Not After : Sep 19 23:00:53 2025 GMT
Subject: CN=d9051d78b9b5ead7541a35f1a21026394fb521c6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:df:8b:f5:b8:d5:e0:02:b8:f5:5c:08:bb:ac:
e0:c9:a7:22:91:0f:bb:23:0d:56:1e:d3:7f:1f:06:
3b:07:c4:a1:1e:61:99:50:ca:08:57:b0:a1:00:57:
13:31:eb:9f:dc:0c:c3:9d:18:93:9b:09:c7:02:62:
42:47:a5:d9:0a:2b:bd:81:6d:3d:88:d7:4c:31:f3:
4e:ed:59:c2:72:3b:13:f7:9f:8c:7a:ce:ab:45:09:
71:67:5e:ff:8a:bd:f6:65:00:5b:08:fc:90:03:09:
b0:2f:e1:b3:61:fc:0f:f3:b5:f4:fa:c7:39:ed:c4:
4d:7a:af:3f:f1:50:4e:70:7f:cd:44:82:20:c9:f0:
6c:a3:dd:27:b7:c3:ad:6a:1e:14:5e:35:c5:6d:ca:
99:df:16:f0:77:31:ff:d4:bb:f5:34:1f:3a:3c:84:
74:c6:ce:79:82:f4:83:f8:d6:20:12:2b:e7:84:3c:
c5:fd:8d:59:a8:ed:ff:86:2f:25:14:25:5b:9f:e0:
56:1f:eb:ad:d9:14:a9:d2:07:40:bb:dc:46:5d:de:
34:3a:88:e7:48:b3:0e:7a:43:03:23:ac:f7:26:af:
69:f8:67:e2:5c:31:9a:09:51:99:8e:96:ed:1d:76:
15:b3:ce:f5:b1:15:d0:18:44:81:d2:23:b2:57:f2:
48:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:05:1D:78:B9:B5:EA:D7:54:1A:35:F1:A2:10:26:39:4F:B5:21:C6
X509v3 Authority Key Identifier:
keyid:4B:87:03:3F:C6:A8:7D:3B:8D:0C:B3:CE:1A:B2:BA:BB:E5:2B:A3:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S4cDP8aofTuNDLPOGrK6u-UroxE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/6dfbcf-313b-47b9-bf8e-a778a0c14859/1/S4cDP8aofTuNDLPOGrK6u-UroxE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/6dfbcf-313b-47b9-bf8e-a778a0c14859/1/S4cDP8aofTuNDLPOGrK6u-UroxE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a8:3a:25:3a:3f:0e:78:e4:39:ec:19:bc:8e:22:22:47:30:b7:
7d:f5:a5:73:83:06:b3:75:f1:8a:9a:c2:35:79:ac:4a:23:5c:
c3:ca:84:4b:ba:b9:32:b0:3f:13:d6:46:83:80:b8:17:80:a1:
6e:73:88:81:10:dc:72:bd:1b:e9:1b:27:eb:86:15:e9:e5:6d:
c7:23:45:4c:e4:c3:bc:87:f6:19:c5:cc:5e:fd:9a:0a:30:c3:
d5:e6:96:d9:ac:d4:c4:13:00:4f:3c:62:07:a8:84:87:20:e9:
44:ea:4f:c3:24:ab:5c:38:6f:67:7e:71:6e:cf:18:08:b7:36:
61:af:c1:fb:cc:7d:77:a0:54:29:ff:a4:09:8c:2c:7f:e1:a1:
bb:e7:ed:fa:7b:c3:c5:29:29:92:65:50:a3:29:9d:38:ec:cb:
d5:3b:d6:e8:03:33:10:0c:7e:16:57:af:db:e3:33:c3:fa:b9:
59:66:09:f4:8a:d8:16:5f:02:df:61:af:6c:ca:b0:1b:c7:1c:
5e:f6:0a:e0:b7:32:31:5a:23:15:09:07:57:3d:45:12:73:aa:
19:88:e1:41:08:7e:b0:95:19:3a:ad:16:22:f4:96:99:71:48:
c2:c6:ac:ca:4e:7c:4e:7c:0d:ea:9e:fd:bb:2f:99:09:16:d8:
0d:8f:c7:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 19 08:54:15 2025 by rpki-client