Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/689109-1723-4bf1-b63a-dc64ae72578e/1/4bpLKGfa04tzpGkYJB78cqISYvc.mft
File: 4bpLKGfa04tzpGkYJB78cqISYvc.mft (raw, json)
Hash identifier: /r9VPRrp1iOcx9ngyc670nKrZRRkN3E6yg06aAARfGc=
Subject key identifier: 60:A8:67:29:8C:FE:69:03:D0:07:2B:33:D2:A6:4C:4F:EA:73:90:FE
Authority key identifier: E1:BA:4B:28:67:DA:D3:8B:73:A4:69:18:24:1E:FC:72:A2:12:62:F7
Certificate issuer: /CN=e1ba4b2867dad38b73a46918241efc72a21262f7
Certificate serial: 01991809CA163808FAB61AB391F4B70A2062
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4bpLKGfa04tzpGkYJB78cqISYvc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/689109-1723-4bf1-b63a-dc64ae72578e/1/4bpLKGfa04tzpGkYJB78cqISYvc.mft
Manifest number: 166C
Signing time: Fri 05 Sep 2025 04:01:58 +0000
Manifest this update: Fri 05 Sep 2025 04:01:58 +0000
Manifest next update: Sat 06 Sep 2025 04:01:58 +0000
Files and hashes: 1: 4bpLKGfa04tzpGkYJB78cqISYvc.crl (hash: bdNO7mFUkHNp4M+zbWOAuAz0TXB28UkZRr1yYbDlFcY=)
2: MccPojCQ_5aiRX4Myokyw6v--7c.roa (hash: 6zT3oaRUJKtce125U7+EL/be9RKqr09GLQyUToqdrbc=)
3: UJACc2s1J5BaMpYznoUagPO6cuI.roa (hash: 5ImyJpj69YHNVaFZ4EKvt0GWM6aecM/AkpksMF5YZpU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ad/689109-1723-4bf1-b63a-dc64ae72578e/1/4bpLKGfa04tzpGkYJB78cqISYvc.crl
rsync://rpki.ripe.net/repository/DEFAULT/ad/689109-1723-4bf1-b63a-dc64ae72578e/1/4bpLKGfa04tzpGkYJB78cqISYvc.mft
rsync://rpki.ripe.net/repository/DEFAULT/4bpLKGfa04tzpGkYJB78cqISYvc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 06 Sep 2025 01:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:18:09:ca:16:38:08:fa:b6:1a:b3:91:f4:b7:0a:20:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e1ba4b2867dad38b73a46918241efc72a21262f7
Validity
Not Before: Sep 5 04:01:58 2025 GMT
Not After : Sep 6 04:01:58 2025 GMT
Subject: CN=60a867298cfe6903d0072b33d2a64c4fea7390fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:26:98:43:d2:58:bb:81:31:63:5c:18:00:83:
fd:f7:b0:c4:ed:80:03:03:88:e7:ae:ba:b2:f4:95:
4e:6e:4d:96:43:bf:f4:8b:0f:c4:9a:b4:84:fa:16:
68:73:ae:9c:8b:2e:cc:ec:94:a7:a8:85:26:c8:68:
e5:2d:5a:10:10:7b:4b:00:ae:16:5a:2c:14:9b:9c:
f5:1a:4e:07:db:1b:1b:1b:c5:ce:c5:d4:36:3b:15:
4b:b9:2d:19:d6:45:91:ac:4e:8d:28:e7:b6:c5:91:
ee:3a:46:2e:59:f4:ec:b2:f5:33:04:a4:c8:5c:c5:
70:36:b9:55:42:ab:6b:0e:89:0d:4d:13:01:16:05:
5c:3f:74:4d:5a:ae:e5:43:ab:98:28:97:db:6d:09:
ad:e1:7c:a1:92:39:81:31:cf:2c:50:4c:42:8c:0f:
5c:65:36:8b:61:44:73:46:71:9b:7c:67:87:4e:7a:
77:68:fd:4a:fa:24:f2:90:c4:23:9b:4f:63:90:67:
34:8b:fe:08:f0:d1:0a:de:0a:07:74:b7:03:c1:3c:
7b:09:4e:6b:82:43:7b:a1:17:39:0e:74:04:18:e3:
a3:d4:96:f0:67:50:49:9b:d8:95:e2:96:b8:1d:cb:
bd:bf:6c:15:0c:dc:82:cc:b6:ae:73:3d:a6:ce:93:
47:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:A8:67:29:8C:FE:69:03:D0:07:2B:33:D2:A6:4C:4F:EA:73:90:FE
X509v3 Authority Key Identifier:
keyid:E1:BA:4B:28:67:DA:D3:8B:73:A4:69:18:24:1E:FC:72:A2:12:62:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4bpLKGfa04tzpGkYJB78cqISYvc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/689109-1723-4bf1-b63a-dc64ae72578e/1/4bpLKGfa04tzpGkYJB78cqISYvc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/689109-1723-4bf1-b63a-dc64ae72578e/1/4bpLKGfa04tzpGkYJB78cqISYvc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:14:36:a3:5f:34:fd:b8:ab:be:04:0a:ac:57:c0:b5:66:16:
cd:e8:34:fc:e9:c8:8d:42:b0:ee:23:0a:a0:ea:29:f0:60:cc:
8f:f1:77:4b:25:ba:41:de:2f:33:12:24:35:ba:41:cd:80:f8:
e5:b1:b2:e0:46:28:7e:2b:de:a9:bc:0b:10:e4:62:ab:23:19:
48:ef:7e:33:f1:75:d5:d4:03:99:66:23:ac:53:d8:cc:e9:45:
6c:1c:a0:44:eb:77:f0:93:74:8c:fb:c8:22:08:f4:8f:1a:29:
80:be:95:4a:06:20:7c:a1:66:ac:d6:35:f0:49:b2:61:a7:3d:
a3:c6:67:fe:83:f7:b3:97:55:f9:41:58:39:41:3c:8f:9b:f9:
08:41:74:d4:5c:dc:9a:3b:f8:64:53:54:25:57:37:c0:a2:8c:
42:de:7f:e8:54:07:a2:e8:2e:0e:95:b7:1e:60:9c:79:f7:16:
6a:41:c5:42:e4:da:d2:eb:fb:64:df:e5:10:8b:57:78:38:a3:
b5:0f:9f:8e:89:f6:ce:7c:13:a6:75:7c:48:bc:6a:ef:38:c4:
7e:68:9d:96:17:a8:02:f8:fe:49:47:85:53:7d:a2:f6:f6:78:
53:63:9b:07:d1:30:31:d3:df:1f:fc:41:55:f5:94:e9:05:6b:
a8:ae:03:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 5 07:35:48 2025 by rpki-client