Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/ba19e4-71cc-470e-bda5-9da4cc620533/1/4q7DyKsR_AWMmo70AO8cPRRKe6g.mft
File: 4q7DyKsR_AWMmo70AO8cPRRKe6g.mft (raw, json)
Hash identifier: Tz7xyojKtD8B7Y6vcoiZ1ZV6w1m4ZZM+pqP7yIaZD70=
Subject key identifier: D5:EE:7F:56:86:B3:1D:C8:41:5A:66:03:23:D0:BE:2D:C3:28:E6:A9
Authority key identifier: E2:AE:C3:C8:AB:11:FC:05:8C:9A:8E:F4:00:EF:1C:3D:14:4A:7B:A8
Certificate issuer: /CN=e2aec3c8ab11fc058c9a8ef400ef1c3d144a7ba8
Certificate serial: 019922C332E87D87CE8DA8D8C467D9FA3163
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4q7DyKsR_AWMmo70AO8cPRRKe6g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/ba19e4-71cc-470e-bda5-9da4cc620533/1/4q7DyKsR_AWMmo70AO8cPRRKe6g.mft
Manifest number: 08F7
Signing time: Sun 07 Sep 2025 06:00:41 +0000
Manifest this update: Sun 07 Sep 2025 06:00:41 +0000
Manifest next update: Mon 08 Sep 2025 06:00:41 +0000
Files and hashes: 1: 1qu70rxHLlsLAV5g5Efa66s6iag.roa (hash: YmJJTTwGISEG6l96iV4cbfKm+Xa4J2z07ynSRxjgi3U=)
2: 4q7DyKsR_AWMmo70AO8cPRRKe6g.crl (hash: KmkF+KYyR9EPvN2MY2wlTgpQ/qaoJsTnd9zU8mRhG5o=)
3: q1pnCW-BLUiZBZvb23K3UxB_wVE.roa (hash: pCVPRKxVl5EU92p/4v7xk8uVkYaxmpQbOuLsACDt2jk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/ba19e4-71cc-470e-bda5-9da4cc620533/1/4q7DyKsR_AWMmo70AO8cPRRKe6g.crl
rsync://rpki.ripe.net/repository/DEFAULT/c1/ba19e4-71cc-470e-bda5-9da4cc620533/1/4q7DyKsR_AWMmo70AO8cPRRKe6g.mft
rsync://rpki.ripe.net/repository/DEFAULT/4q7DyKsR_AWMmo70AO8cPRRKe6g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 06:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:c3:32:e8:7d:87:ce:8d:a8:d8:c4:67:d9:fa:31:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e2aec3c8ab11fc058c9a8ef400ef1c3d144a7ba8
Validity
Not Before: Sep 7 06:00:41 2025 GMT
Not After : Sep 8 06:00:41 2025 GMT
Subject: CN=d5ee7f5686b31dc8415a660323d0be2dc328e6a9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:6e:78:4e:4f:15:4c:01:d1:2e:9d:d9:be:2e:
00:51:05:fc:51:13:be:83:97:01:b5:74:89:3f:76:
80:c8:dc:b9:3f:3b:64:53:82:e2:53:d1:73:c1:e2:
94:fb:67:7b:9e:31:a1:17:20:ed:3f:c6:5d:68:9b:
be:63:71:26:9c:03:53:da:b7:c1:8e:9a:17:59:9c:
1a:64:aa:a2:fd:4e:93:36:8a:f1:a6:0b:a1:8c:38:
7b:ab:26:d9:1b:ba:d5:99:90:3e:7f:6e:a9:48:c5:
64:3b:eb:b1:59:e2:e5:41:4a:e5:4b:91:53:78:3c:
9d:19:fc:09:e2:d5:77:6a:c1:ce:80:e1:18:f2:4d:
fd:cc:16:a9:fb:b9:0b:07:a2:a0:18:95:e3:61:ea:
be:41:42:87:3f:d5:93:36:e9:04:da:38:22:63:bd:
f2:17:ce:bc:e0:4d:58:b0:08:29:db:1b:7e:5c:be:
7d:20:e5:df:bd:c9:c4:83:36:33:05:64:e3:70:6f:
81:73:fd:8f:88:4d:43:4f:09:be:b4:74:5c:6b:b8:
09:2d:7c:d4:64:8a:ac:14:0a:56:12:08:72:a4:0b:
c3:21:75:dc:4d:9c:04:53:6d:85:f0:44:aa:1d:d0:
56:da:d6:79:88:09:f4:d5:69:35:04:91:f1:c8:3c:
8c:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:EE:7F:56:86:B3:1D:C8:41:5A:66:03:23:D0:BE:2D:C3:28:E6:A9
X509v3 Authority Key Identifier:
keyid:E2:AE:C3:C8:AB:11:FC:05:8C:9A:8E:F4:00:EF:1C:3D:14:4A:7B:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4q7DyKsR_AWMmo70AO8cPRRKe6g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/ba19e4-71cc-470e-bda5-9da4cc620533/1/4q7DyKsR_AWMmo70AO8cPRRKe6g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/ba19e4-71cc-470e-bda5-9da4cc620533/1/4q7DyKsR_AWMmo70AO8cPRRKe6g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:e5:e5:ee:fd:af:53:68:25:90:ff:52:be:09:71:2c:9e:0a:
85:bd:f4:08:7d:5e:68:e1:d4:71:c0:aa:d4:fe:aa:d6:bb:f9:
65:df:dd:79:cf:a0:aa:bf:4e:53:99:66:9f:37:67:25:7f:54:
4e:43:ad:9a:81:55:7e:96:26:e8:97:f5:7f:57:3a:3a:a2:be:
21:eb:ed:20:df:6b:35:e5:32:c7:42:66:52:20:cd:b5:f0:6b:
82:23:6d:9d:47:f9:8a:15:63:7a:be:b2:57:55:8d:b5:55:eb:
1a:e6:07:cf:c5:81:7a:19:e2:c4:eb:d5:69:b7:58:36:76:97:
c8:fe:16:b5:b2:5e:97:70:56:52:2c:37:ff:f3:59:58:fd:48:
da:b2:3a:1d:d5:3e:31:33:3f:07:33:50:d7:ad:86:54:04:b0:
04:38:34:49:fa:08:35:78:a2:91:cd:1d:34:24:64:55:85:2c:
fc:b2:46:bb:1d:8c:32:0a:e8:60:72:0b:1e:48:0c:71:47:f8:
1c:93:9c:7f:a3:f1:e7:7c:80:f8:db:0a:92:56:0d:15:5e:64:
c1:4c:b8:f3:07:af:50:cc:51:2a:06:05:36:66:17:dc:9e:2a:
79:cd:bf:20:1b:c7:f0:95:ef:11:4a:e2:f7:1b:30:39:cd:b1:
36:b8:55:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 14:35:39 2025 by rpki-client