Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/9d960f-a59a-435c-ae92-1ca739bb00cc/1/4gjsufNMH7w_NYlxCrPjSfxilcw.mft
File: 4gjsufNMH7w_NYlxCrPjSfxilcw.mft (raw, json)
Hash identifier: xcF6WtNUf2cvO8wCZCxkI+cXMTRTrXMm92SXzjjh7dU=
Subject key identifier: 1C:23:17:55:1C:3A:CA:62:AF:AF:A5:74:12:18:27:B9:CC:67:49:04
Authority key identifier: E2:08:EC:B9:F3:4C:1F:BC:3F:35:89:71:0A:B3:E3:49:FC:62:95:CC
Certificate issuer: /CN=e208ecb9f34c1fbc3f3589710ab3e349fc6295cc
Certificate serial: 019931FF1D443D500AD2DB0C877155731CEC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4gjsufNMH7w_NYlxCrPjSfxilcw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/9d960f-a59a-435c-ae92-1ca739bb00cc/1/4gjsufNMH7w_NYlxCrPjSfxilcw.mft
Manifest number: 120D
Signing time: Wed 10 Sep 2025 05:00:26 +0000
Manifest this update: Wed 10 Sep 2025 05:00:26 +0000
Manifest next update: Thu 11 Sep 2025 05:00:26 +0000
Files and hashes: 1: 39GioKK3WEGVHUJnnBWLgIR7aNY.roa (hash: 3gqoQOG5P9GOvXCGTNdrghx/0+bSTD9OjFYFlfXtSYU=)
2: 4gjsufNMH7w_NYlxCrPjSfxilcw.crl (hash: RUVo1utH21Ty51faaOjJ4ZvlCEmVQiq255mrg18Wwps=)
3: TAZ0gc-5c5t3h8t0iwa-eHM3o3c.roa (hash: Xr3qy5kR4VkDonVYgHy7lT3Fh2h3GWbp6XrLzLyjUKY=)
4: kPsQz3rZGj0NaY5zaOwAOAGfhzw.roa (hash: t4mIO0DzkdS2UrnCzo5GKYBcHXxNS07JIm04JWEYKII=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/9d960f-a59a-435c-ae92-1ca739bb00cc/1/4gjsufNMH7w_NYlxCrPjSfxilcw.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/9d960f-a59a-435c-ae92-1ca739bb00cc/1/4gjsufNMH7w_NYlxCrPjSfxilcw.mft
rsync://rpki.ripe.net/repository/DEFAULT/4gjsufNMH7w_NYlxCrPjSfxilcw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 11 Sep 2025 05:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:31:ff:1d:44:3d:50:0a:d2:db:0c:87:71:55:73:1c:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e208ecb9f34c1fbc3f3589710ab3e349fc6295cc
Validity
Not Before: Sep 10 05:00:26 2025 GMT
Not After : Sep 11 05:00:26 2025 GMT
Subject: CN=1c2317551c3aca62afafa574121827b9cc674904
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:ca:2f:13:26:dc:56:cc:ea:94:06:c7:1d:02:
6a:7f:9f:4e:b7:2c:fa:1c:36:92:96:b8:2d:c5:91:
5d:e6:14:5c:79:e1:66:a7:61:1f:71:c6:81:8a:c7:
2e:50:fe:eb:f4:95:bf:97:91:2e:12:a7:a2:3f:78:
0b:b4:83:4d:f2:4e:dc:94:f2:33:81:ab:f0:30:3a:
4e:59:4c:29:26:fe:78:cc:d2:32:8b:1a:31:b2:1e:
7f:84:83:84:19:11:96:e1:56:4d:9a:ae:94:c7:6d:
cd:49:fb:9e:e5:83:c9:83:6c:26:ff:71:15:c0:ee:
95:06:0a:1f:73:22:7f:98:b1:c7:76:82:f5:ce:db:
68:3b:e4:7a:21:60:1a:e8:c3:82:5e:a0:72:07:4e:
0d:e5:22:c2:7b:88:78:16:8d:80:5e:b8:5c:76:ee:
7b:da:37:4b:cc:fe:87:75:26:84:5d:5f:71:94:f3:
b2:bc:49:2b:a5:23:87:29:fb:17:44:1c:09:fb:e9:
69:6b:a7:4c:9b:cc:08:5a:6a:ca:df:df:91:28:f3:
a5:e3:df:ec:9f:e9:ab:22:bc:03:aa:a6:7a:80:74:
02:c9:86:90:11:39:ae:39:a9:1b:c2:8b:a0:93:a4:
dc:b0:ca:ed:84:b9:b6:85:29:28:1a:c7:f9:d1:e1:
90:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:23:17:55:1C:3A:CA:62:AF:AF:A5:74:12:18:27:B9:CC:67:49:04
X509v3 Authority Key Identifier:
keyid:E2:08:EC:B9:F3:4C:1F:BC:3F:35:89:71:0A:B3:E3:49:FC:62:95:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4gjsufNMH7w_NYlxCrPjSfxilcw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/9d960f-a59a-435c-ae92-1ca739bb00cc/1/4gjsufNMH7w_NYlxCrPjSfxilcw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/9d960f-a59a-435c-ae92-1ca739bb00cc/1/4gjsufNMH7w_NYlxCrPjSfxilcw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:30:18:dc:8f:6d:86:b2:2c:d2:80:0b:df:66:dc:ca:fc:5c:
97:6a:13:a4:a8:7f:ae:07:7b:30:82:a3:2d:95:ab:55:14:4b:
16:d3:8f:02:fd:5a:d7:fb:ae:c2:c0:e9:24:16:df:de:f0:d5:
56:34:b7:ab:42:a3:fa:44:82:8c:30:99:d9:1a:49:a5:8b:74:
15:42:b1:b5:61:35:2d:4c:95:65:73:d2:07:15:18:9f:f0:e9:
86:49:d6:67:2f:02:d6:ac:aa:00:b4:59:be:d9:ac:cb:8a:b2:
ff:9e:a0:bb:5b:f4:ee:21:e3:3e:f6:72:6b:25:ca:29:73:28:
28:43:2a:44:49:69:c9:7c:c4:54:47:e4:80:bd:da:0a:fd:aa:
68:60:42:1d:52:ed:b5:77:07:2f:73:34:03:ce:5e:55:37:92:
9d:06:14:7f:69:88:b8:98:3b:7e:2e:e6:91:4d:47:37:ac:55:
f9:17:a4:6a:d6:12:99:14:a6:08:03:1f:c3:66:b5:47:01:81:
e2:a5:77:ce:8a:26:fe:74:31:15:8f:16:ab:25:fb:ce:5c:28:
3b:82:7a:28:fa:0f:e4:67:c8:56:fd:3c:2e:69:a0:9a:33:b8:
6f:7a:73:dd:f3:38:71:d9:d2:9d:5a:d4:4c:03:35:9d:36:a0:
1b:a2:ed:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 10 14:35:04 2025 by rpki-client