Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/aa5cc0-bb56-4b47-b7c1-44f41d9e1277/1/4GmrbwlXKvtG6fjpoGOdgguWlCI.mft
File: 4GmrbwlXKvtG6fjpoGOdgguWlCI.mft (raw, json)
Hash identifier: lZD841QGPmbLEsu91qC0iI2t2tKuvTxdPtDIuoLE2Ns=
Subject key identifier: DA:F7:7B:29:AD:02:EE:39:B4:56:34:8E:4B:E6:57:68:6E:3C:2E:BA
Authority key identifier: E0:69:AB:6F:09:57:2A:FB:46:E9:F8:E9:A0:63:9D:82:0B:96:94:22
Certificate issuer: /CN=e069ab6f09572afb46e9f8e9a0639d820b969422
Certificate serial: 01992820B7B5D9C47756E86CA8F2AC61F011
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4GmrbwlXKvtG6fjpoGOdgguWlCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/aa5cc0-bb56-4b47-b7c1-44f41d9e1277/1/4GmrbwlXKvtG6fjpoGOdgguWlCI.mft
Manifest number: 160A
Signing time: Mon 08 Sep 2025 07:00:56 +0000
Manifest this update: Mon 08 Sep 2025 07:00:56 +0000
Manifest next update: Tue 09 Sep 2025 07:00:56 +0000
Files and hashes: 1: 3JZ_5w4aMWvRVbzCod8mUk7eyJM.roa (hash: vnbCaew1m+lh3Dj5sXD9W+bmDkZl62H3PlaW/PwhcMY=)
2: 4GmrbwlXKvtG6fjpoGOdgguWlCI.crl (hash: jMaybVGiL3lHngMBwz9Ps8OOUx7NIp3vfQ6P7VlWHjw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9b/aa5cc0-bb56-4b47-b7c1-44f41d9e1277/1/4GmrbwlXKvtG6fjpoGOdgguWlCI.crl
rsync://rpki.ripe.net/repository/DEFAULT/9b/aa5cc0-bb56-4b47-b7c1-44f41d9e1277/1/4GmrbwlXKvtG6fjpoGOdgguWlCI.mft
rsync://rpki.ripe.net/repository/DEFAULT/4GmrbwlXKvtG6fjpoGOdgguWlCI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 09 Sep 2025 07:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:28:20:b7:b5:d9:c4:77:56:e8:6c:a8:f2:ac:61:f0:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e069ab6f09572afb46e9f8e9a0639d820b969422
Validity
Not Before: Sep 8 07:00:56 2025 GMT
Not After : Sep 9 07:00:56 2025 GMT
Subject: CN=daf77b29ad02ee39b456348e4be657686e3c2eba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:e2:79:43:ed:42:91:44:ba:0c:9e:f1:f1:37:
8f:82:46:fa:5c:8d:9e:94:f1:4c:4b:1f:01:93:ed:
f2:97:5c:63:9e:b9:87:bd:6c:b1:83:6f:f7:52:34:
c1:36:7d:59:c7:0f:36:36:82:49:c3:b8:35:03:f4:
0f:cf:58:2b:9f:a9:07:1b:78:7a:73:54:15:59:0e:
82:53:07:2e:a3:55:cf:8c:e7:59:28:af:b5:d7:6e:
19:52:a1:a8:b1:58:07:12:ec:93:a9:04:27:da:62:
13:0e:00:6d:70:86:eb:16:5c:83:eb:24:13:c1:3e:
7e:cc:bd:53:2b:96:62:67:3a:12:18:45:50:f1:03:
e3:db:b0:25:8a:46:4f:cf:9d:a1:9f:56:6c:74:0d:
f5:bd:66:e7:34:08:9a:bb:42:7f:b8:aa:94:ae:92:
cf:29:6c:30:e4:47:d3:e8:98:37:34:fb:9c:cc:46:
45:c2:27:1a:e1:51:c8:5d:f8:06:c6:8b:ab:b7:e8:
31:26:7e:5e:d4:92:49:bc:df:3e:16:35:92:a1:d8:
81:d1:71:51:96:d5:28:a0:d3:13:12:c7:6a:1f:b3:
4e:09:46:6b:fd:31:37:d8:e3:88:68:9e:80:8e:75:
41:99:4a:f1:cd:5b:93:13:c6:d0:7b:15:06:fa:53:
05:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:F7:7B:29:AD:02:EE:39:B4:56:34:8E:4B:E6:57:68:6E:3C:2E:BA
X509v3 Authority Key Identifier:
keyid:E0:69:AB:6F:09:57:2A:FB:46:E9:F8:E9:A0:63:9D:82:0B:96:94:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4GmrbwlXKvtG6fjpoGOdgguWlCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/aa5cc0-bb56-4b47-b7c1-44f41d9e1277/1/4GmrbwlXKvtG6fjpoGOdgguWlCI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/aa5cc0-bb56-4b47-b7c1-44f41d9e1277/1/4GmrbwlXKvtG6fjpoGOdgguWlCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:11:5d:21:65:89:2c:f4:58:89:2b:a5:7a:d8:8b:b4:4a:f2:
dc:42:d5:9b:02:6e:59:59:4b:bd:b1:e2:7c:0f:e9:f5:87:3b:
5f:c8:0d:10:bf:f8:75:67:32:d0:f3:a7:99:41:52:97:da:53:
0f:a3:5c:99:06:bb:20:d7:23:d0:8b:9b:50:f6:44:02:5c:82:
28:e8:41:27:12:f3:f5:7c:42:eb:3a:52:f4:cc:49:f8:36:78:
6c:c6:a6:07:65:e5:9e:d6:e3:f6:8d:18:c9:70:55:35:80:1b:
30:1e:01:09:0e:cb:ff:95:d4:ba:6d:c8:ba:94:86:5c:48:23:
2b:d8:4a:86:b0:97:72:77:76:a9:36:49:d7:59:d6:ee:02:2b:
72:ff:ab:41:e1:ed:c7:ac:2c:bb:cb:c8:2f:45:ba:e7:ad:e4:
7a:2f:6e:2d:a4:8c:48:27:a8:bf:f5:8b:22:41:71:ba:31:a1:
18:ee:e6:c7:39:e9:6b:4c:9a:f8:eb:42:3d:d9:b9:40:ad:18:
a7:9a:d7:2e:ef:49:4f:90:e8:bb:5b:46:0b:e3:4d:98:49:62:
7f:bb:4a:40:a7:0b:0a:f0:62:d5:2d:19:25:fe:1e:35:57:0e:
6c:f6:46:b4:8d:6b:6f:27:32:90:13:3d:6f:b5:55:10:ac:86:
4e:12:a0:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 8 15:45:33 2025 by rpki-client