Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/05ab60-dea6-43a3-87ef-7bfaeb195445/1/4GiTQCg3lEieQayGqvpEFPik1r4.mft
File: 4GiTQCg3lEieQayGqvpEFPik1r4.mft (raw, json)
Hash identifier: FJPdnQNAqD3xZ6L/xUw6yi6f+1Y6j6MgNFdA5jtG8EY=
Subject key identifier: C7:06:8C:E9:9E:1E:EC:20:AE:41:A1:FE:03:F7:41:A8:36:25:B5:B2
Authority key identifier: E0:68:93:40:28:37:94:48:9E:41:AC:86:AA:FA:44:14:F8:A4:D6:BE
Certificate issuer: /CN=e0689340283794489e41ac86aafa4414f8a4d6be
Certificate serial: 019931FF9A06873749D53633B636976C0EE5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4GiTQCg3lEieQayGqvpEFPik1r4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9a/05ab60-dea6-43a3-87ef-7bfaeb195445/1/4GiTQCg3lEieQayGqvpEFPik1r4.mft
Manifest number: 167D
Signing time: Wed 10 Sep 2025 05:00:58 +0000
Manifest this update: Wed 10 Sep 2025 05:00:58 +0000
Manifest next update: Thu 11 Sep 2025 05:00:58 +0000
Files and hashes: 1: 4GiTQCg3lEieQayGqvpEFPik1r4.crl (hash: yuFHlibeksJxdnPJFLIpEpwzgFto7yTaupgiypW3+Iw=)
2: URa5fH07dVIqF3IJwFtjDdus5xo.roa (hash: bQ7L6PdzuMotAJCcbvlg+nm2FLpujqZUwsr24eILLiQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9a/05ab60-dea6-43a3-87ef-7bfaeb195445/1/4GiTQCg3lEieQayGqvpEFPik1r4.crl
rsync://rpki.ripe.net/repository/DEFAULT/9a/05ab60-dea6-43a3-87ef-7bfaeb195445/1/4GiTQCg3lEieQayGqvpEFPik1r4.mft
rsync://rpki.ripe.net/repository/DEFAULT/4GiTQCg3lEieQayGqvpEFPik1r4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 11 Sep 2025 02:00:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:31:ff:9a:06:87:37:49:d5:36:33:b6:36:97:6c:0e:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e0689340283794489e41ac86aafa4414f8a4d6be
Validity
Not Before: Sep 10 05:00:58 2025 GMT
Not After : Sep 11 05:00:58 2025 GMT
Subject: CN=c7068ce99e1eec20ae41a1fe03f741a83625b5b2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:c2:e6:9f:e4:c4:36:d5:bf:03:d7:f8:45:07:
5a:be:9c:2d:7f:bd:ca:73:6b:05:1f:5c:0e:0c:0e:
f5:ed:7f:da:2b:cb:1b:e5:fc:b5:ab:79:8e:42:ec:
14:77:3b:77:cf:e4:89:c6:f4:22:02:dd:dc:50:c2:
98:7c:d4:b3:3c:22:62:65:42:61:e2:3a:33:53:09:
00:bf:51:0b:45:89:6b:65:61:95:38:58:96:59:52:
c1:5e:65:78:44:f9:c2:f1:65:3a:fe:e0:be:1b:0e:
7b:89:85:61:c9:a8:04:27:42:db:40:df:42:23:e7:
9b:1d:e9:bb:84:1b:bb:3e:ff:80:8b:bb:8c:77:df:
80:4e:97:15:33:fd:11:90:5f:97:f7:60:c3:7c:ab:
b1:34:a4:cd:2e:c4:26:fd:94:1b:fa:a2:06:88:69:
98:32:dd:58:a1:58:23:13:dd:58:b7:eb:56:cc:ad:
f7:41:85:8b:c3:60:82:5a:40:48:a0:bb:2b:9b:2d:
d2:01:43:c5:39:3b:2c:71:f8:7d:fa:33:5f:8f:c5:
de:d7:58:51:9c:fd:6a:3d:15:53:b2:dc:da:14:74:
07:b6:01:1d:fa:09:c1:5c:46:88:2b:4b:cd:5e:19:
e2:c4:f0:63:33:14:ed:d3:de:6d:e9:8a:78:48:17:
a6:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:06:8C:E9:9E:1E:EC:20:AE:41:A1:FE:03:F7:41:A8:36:25:B5:B2
X509v3 Authority Key Identifier:
keyid:E0:68:93:40:28:37:94:48:9E:41:AC:86:AA:FA:44:14:F8:A4:D6:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4GiTQCg3lEieQayGqvpEFPik1r4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/05ab60-dea6-43a3-87ef-7bfaeb195445/1/4GiTQCg3lEieQayGqvpEFPik1r4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/05ab60-dea6-43a3-87ef-7bfaeb195445/1/4GiTQCg3lEieQayGqvpEFPik1r4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:4d:65:ab:8f:b4:d4:b2:a0:66:08:5b:ae:2c:49:11:35:d1:
64:d9:77:14:3c:8a:f5:39:e2:ab:39:48:9f:1b:18:5d:0d:c8:
67:98:d5:0c:3b:ca:67:5c:4a:15:eb:22:68:33:01:12:78:5b:
0b:ba:34:a8:78:5f:1b:00:d2:59:b6:b4:8b:94:f4:af:3a:cb:
e8:8a:e1:d0:36:7e:8a:f9:b9:65:1c:8b:7d:96:17:09:b4:a4:
52:a7:5b:f9:13:2f:fc:ed:05:9c:82:3c:b0:67:e1:06:0b:54:
0b:0c:1d:ef:db:75:99:4d:a1:6a:92:a2:6d:d1:59:0c:fd:33:
5d:86:f9:65:18:fb:a4:ab:81:dc:5d:08:be:13:df:ba:c4:01:
81:80:54:f7:8a:de:ad:ab:c3:d0:c3:82:a3:93:d9:46:08:8d:
7c:f8:0b:55:c2:f8:e3:73:56:a3:1e:59:ea:de:1b:a5:b1:fb:
e7:bb:04:77:df:e8:25:ff:01:79:01:00:21:dc:de:80:bd:e2:
b6:20:4f:91:e4:62:7b:96:c4:6b:40:75:f5:c0:ba:3c:fb:c3:
32:94:2c:6d:8e:13:a6:24:e0:91:cc:ac:49:18:5a:e7:10:78:
23:94:c1:ea:35:d4:64:42:ca:de:a8:6b:27:98:72:d7:21:b3:
a3:d8:ab:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 10 10:39:26 2025 by rpki-client