Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/1f3117-f2a1-4322-b63d-f7edb2688652/1/t4CzueCWIhYp_kfhAqxSLaA5ecQ.mft
File: t4CzueCWIhYp_kfhAqxSLaA5ecQ.mft (raw, json)
Hash identifier: ggUGWfbuzQc4/v8lW3W3WrX/sHIiOXyi2+702sG0RMo=
Subject key identifier: E5:0B:FB:52:C1:1E:EF:06:74:C9:86:EB:42:8B:29:95:D8:CA:FB:D4
Authority key identifier: B7:80:B3:B9:E0:96:22:16:29:FE:47:E1:02:AC:52:2D:A0:39:79:C4
Certificate issuer: /CN=b780b3b9e096221629fe47e102ac522da03979c4
Certificate serial: 019921B0BE71CF86F4E97A9633749CC7750F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/t4CzueCWIhYp_kfhAqxSLaA5ecQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/1f3117-f2a1-4322-b63d-f7edb2688652/1/t4CzueCWIhYp_kfhAqxSLaA5ecQ.mft
Manifest number: 166F
Signing time: Sun 07 Sep 2025 01:00:54 +0000
Manifest this update: Sun 07 Sep 2025 01:00:54 +0000
Manifest next update: Mon 08 Sep 2025 01:00:54 +0000
Files and hashes: 1: BHkKvb2qZLeD_4QIPrmVYJe4E6w.roa (hash: 4HUs5FjtfJoQCq5RfZkLp2netiRG+jQlol4wXGJfij4=)
2: t4CzueCWIhYp_kfhAqxSLaA5ecQ.crl (hash: XklLmHfYcsCsnBxMvATtPblhAGZ+oh0njEY8cclObXU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/1f3117-f2a1-4322-b63d-f7edb2688652/1/t4CzueCWIhYp_kfhAqxSLaA5ecQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/1f3117-f2a1-4322-b63d-f7edb2688652/1/t4CzueCWIhYp_kfhAqxSLaA5ecQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/t4CzueCWIhYp_kfhAqxSLaA5ecQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 01:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:21:b0:be:71:cf:86:f4:e9:7a:96:33:74:9c:c7:75:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b780b3b9e096221629fe47e102ac522da03979c4
Validity
Not Before: Sep 7 01:00:54 2025 GMT
Not After : Sep 8 01:00:54 2025 GMT
Subject: CN=e50bfb52c11eef0674c986eb428b2995d8cafbd4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:dc:bd:39:1f:4b:3a:96:6f:97:49:94:a0:00:
19:66:da:86:64:ad:fe:af:73:79:2f:66:c1:95:ea:
93:a0:ee:3a:fb:1c:67:65:d6:76:9a:e3:9d:3e:9e:
67:a8:6f:11:b5:1f:9d:03:50:f9:3d:ac:77:85:d6:
11:23:5e:7f:be:4e:95:a6:ea:20:c0:74:36:1e:76:
f0:65:db:21:9a:4b:5d:f7:07:43:4d:83:a9:dd:58:
14:c1:74:29:37:fc:ed:f0:a0:b1:8b:47:3b:49:22:
fc:1d:a8:5a:34:ce:ac:a5:2e:06:d5:f1:29:2f:9b:
35:d2:1c:35:1c:51:e2:c9:17:d1:da:72:25:8f:cb:
5f:50:f3:af:ff:e6:99:d9:0e:fa:b4:da:ae:57:8d:
2b:52:48:26:f8:a7:02:23:a9:30:7c:f5:be:ed:c6:
bf:e2:cf:3d:aa:45:69:33:11:38:79:04:5f:09:66:
7e:9b:be:ab:5c:58:b5:91:91:2d:1a:a1:da:87:ab:
4d:18:c0:60:5b:1d:1f:e0:e6:64:e9:a2:b4:fd:58:
bc:f1:a4:e1:3f:67:97:44:9d:4a:6b:6e:7c:dd:96:
fe:11:86:10:89:09:44:ed:e7:0e:ec:f3:ef:18:2d:
27:b8:b2:04:c8:80:da:a6:49:72:7b:28:ed:a1:8e:
bc:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:0B:FB:52:C1:1E:EF:06:74:C9:86:EB:42:8B:29:95:D8:CA:FB:D4
X509v3 Authority Key Identifier:
keyid:B7:80:B3:B9:E0:96:22:16:29:FE:47:E1:02:AC:52:2D:A0:39:79:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t4CzueCWIhYp_kfhAqxSLaA5ecQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/1f3117-f2a1-4322-b63d-f7edb2688652/1/t4CzueCWIhYp_kfhAqxSLaA5ecQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/1f3117-f2a1-4322-b63d-f7edb2688652/1/t4CzueCWIhYp_kfhAqxSLaA5ecQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:9c:6e:e7:0b:01:43:b8:de:fd:86:ff:48:87:25:31:6f:50:
31:86:d1:94:2a:6c:7d:f1:3c:9e:08:dd:94:7b:42:b1:77:43:
21:6f:d0:90:5a:9b:11:6b:94:dc:eb:4b:e3:31:3a:38:b5:68:
17:36:1b:5a:cf:a8:82:60:7a:5c:7a:55:a1:0f:74:6e:26:00:
82:5b:ba:b4:1c:08:16:70:e5:66:8e:ee:00:72:93:b0:0b:3f:
f4:60:9f:99:7d:b6:bf:7c:f6:e9:0f:7c:b9:79:b9:1e:63:38:
2d:6c:32:d3:ab:0f:dd:0e:21:a2:43:6f:07:ee:77:7e:fb:da:
be:10:a7:a0:aa:e2:78:1e:cd:2e:a2:36:da:d1:b3:50:0b:05:
a5:64:fa:c5:4a:15:f5:b8:fa:fd:a7:ab:61:13:84:c6:61:50:
8c:d6:21:3e:4e:b4:7a:0a:42:9e:4e:10:29:b1:9b:28:c7:38:
90:35:44:43:9d:87:b5:05:04:af:d4:67:30:0d:16:d7:c2:b3:
83:78:10:b8:0e:b5:da:40:68:da:5e:40:a6:57:a2:ca:cc:64:
38:d2:c3:08:fb:c9:e3:44:ff:9c:01:04:71:e3:10:10:80:77:
a9:1f:19:60:35:fa:93:be:9f:49:33:55:d0:66:97:ed:95:87:
78:89:38:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 10:00:40 2025 by rpki-client