Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/ad1216-b71d-4557-a086-efea63d06f80/1/4Zy7iNKxqJZlhQZ3hmLnXHMqZ-c.mft
File: 4Zy7iNKxqJZlhQZ3hmLnXHMqZ-c.mft (raw, json)
Hash identifier: ERjd+L7WwNMUwAvrqaJtdMtw5MzGAju3zLW6ePNgsKQ=
Subject key identifier: F6:DE:31:E4:66:91:CF:9A:67:12:7D:B9:DB:1D:09:C3:D9:C8:7B:2F
Authority key identifier: E1:9C:BB:88:D2:B1:A8:96:65:85:06:77:86:62:E7:5C:73:2A:67:E7
Certificate issuer: /CN=e19cbb88d2b1a896658506778662e75c732a67e7
Certificate serial: 019922FADCB29C8F3A7C37265CF046196C57
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4Zy7iNKxqJZlhQZ3hmLnXHMqZ-c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/ad1216-b71d-4557-a086-efea63d06f80/1/4Zy7iNKxqJZlhQZ3hmLnXHMqZ-c.mft
Manifest number: 1672
Signing time: Sun 07 Sep 2025 07:01:29 +0000
Manifest this update: Sun 07 Sep 2025 07:01:29 +0000
Manifest next update: Mon 08 Sep 2025 07:01:29 +0000
Files and hashes: 1: 4Zy7iNKxqJZlhQZ3hmLnXHMqZ-c.crl (hash: vVYQXgCwSXqRx4kqMlxKBo/lw33XkCcHEK4B+pP7fXE=)
2: E3bOWVadiTMoov1haUFyRTwduJA.roa (hash: sxYsSioAFV3M4+urFT6FLkeq4ts+IfaNfTA80Mu3sng=)
3: Z9n5DV0w7GnExRRm5adMC5c1O74.roa (hash: 61N91t8/tHrGPHbqd/Q8TWwC/7eUsMLcp5Fv9vIC6tI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/ad1216-b71d-4557-a086-efea63d06f80/1/4Zy7iNKxqJZlhQZ3hmLnXHMqZ-c.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/ad1216-b71d-4557-a086-efea63d06f80/1/4Zy7iNKxqJZlhQZ3hmLnXHMqZ-c.mft
rsync://rpki.ripe.net/repository/DEFAULT/4Zy7iNKxqJZlhQZ3hmLnXHMqZ-c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 07:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:fa:dc:b2:9c:8f:3a:7c:37:26:5c:f0:46:19:6c:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e19cbb88d2b1a896658506778662e75c732a67e7
Validity
Not Before: Sep 7 07:01:29 2025 GMT
Not After : Sep 8 07:01:29 2025 GMT
Subject: CN=f6de31e46691cf9a67127db9db1d09c3d9c87b2f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:b9:9d:79:34:7f:f0:ce:b8:4a:d8:cf:1a:d2:
f8:7a:9d:f2:66:0f:e7:ae:be:e8:e2:21:47:1a:f6:
0d:8f:67:69:a1:a3:91:06:d4:d7:29:3f:7b:b5:e8:
bf:e4:48:05:83:2e:17:ae:3d:d3:32:1c:49:af:2e:
4b:47:40:e3:0f:9a:1f:19:47:ca:f0:ed:6a:c9:c6:
26:15:07:61:24:14:fa:1b:20:f4:71:c2:09:5d:92:
07:71:87:c0:5a:0d:00:30:da:e8:32:15:05:de:50:
ea:47:f7:17:a9:19:5b:df:3e:1d:be:29:ac:38:9e:
88:86:ef:b8:87:74:8b:7a:63:b6:27:46:43:49:9d:
93:29:6a:87:e0:f1:f1:d0:4b:b8:c1:1d:13:f4:2d:
74:04:8e:64:93:07:0d:69:3e:47:0a:93:b4:24:d9:
89:63:77:3f:6a:8c:2c:4c:26:e1:6b:0e:44:9f:b8:
e0:df:81:3d:29:6c:ee:2d:63:2c:70:d7:eb:f6:a9:
05:c8:94:9f:fc:76:16:b3:1b:b9:38:de:d4:35:2d:
f7:8c:90:7b:29:6d:93:60:c6:f9:25:c4:d6:1b:63:
59:3f:67:65:04:4f:c0:5b:8e:d9:e0:35:da:ff:f2:
ed:74:c7:7b:b9:45:96:db:1d:04:aa:ba:52:d0:f3:
8f:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:DE:31:E4:66:91:CF:9A:67:12:7D:B9:DB:1D:09:C3:D9:C8:7B:2F
X509v3 Authority Key Identifier:
keyid:E1:9C:BB:88:D2:B1:A8:96:65:85:06:77:86:62:E7:5C:73:2A:67:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4Zy7iNKxqJZlhQZ3hmLnXHMqZ-c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/ad1216-b71d-4557-a086-efea63d06f80/1/4Zy7iNKxqJZlhQZ3hmLnXHMqZ-c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/ad1216-b71d-4557-a086-efea63d06f80/1/4Zy7iNKxqJZlhQZ3hmLnXHMqZ-c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:99:37:41:0b:8c:ee:8d:d5:ab:c3:de:78:95:79:52:85:f4:
d4:c6:c3:d6:ce:c5:7a:44:15:91:9d:22:01:5a:f7:f2:fb:97:
fd:ff:25:65:06:f7:ba:df:4d:1a:c4:34:1c:97:6a:45:a0:88:
5a:71:48:62:b8:0c:7c:55:81:77:80:ab:0d:2d:e0:0e:e4:73:
b9:16:f2:f5:fb:a9:ba:cb:78:e1:d5:a9:d2:42:85:84:2b:37:
55:a2:b9:26:3c:cf:37:2d:f1:dd:a3:75:81:00:f7:d5:5f:41:
a3:78:88:6f:4b:f8:a4:f0:e2:37:00:e1:b1:2e:2d:7e:b6:ad:
b2:aa:49:b5:2d:dc:98:17:ec:fe:dc:8e:a1:8a:6d:17:b3:d6:
05:43:44:8c:0c:f3:ef:4f:cc:5a:ac:92:16:dc:32:3a:79:ac:
76:bc:34:85:ff:e9:04:f4:fe:59:53:52:6c:31:85:25:ab:47:
e4:63:ee:65:4c:cf:f2:94:3b:62:a4:6f:3d:a1:74:d9:d5:0f:
6a:d6:b2:da:74:18:a2:34:5a:e1:2e:ab:31:99:e8:6c:ff:40:
8a:4a:6a:5d:8d:d3:09:aa:d8:6f:75:a3:0d:7c:45:a2:87:4a:
34:95:35:7d:87:6f:d3:1f:75:29:b4:76:67:66:c3:ba:b3:7c:
74:c0:2e:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 13:52:35 2025 by rpki-client