Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/317cc1-64c2-472e-914b-0bfb86884404/1/4kycUM9OLawF4fBDKCJOIKRgXXc.mft
File: 4kycUM9OLawF4fBDKCJOIKRgXXc.mft (raw, json)
Hash identifier: 4hP9sO7k6jkBJSSvL+jnCAs5+zfbSO74HQ41mlxDrkw=
Subject key identifier: 27:7E:80:9E:CE:C8:BA:A1:50:46:3E:47:8C:DE:08:9F:9C:EE:8A:7A
Authority key identifier: E2:4C:9C:50:CF:4E:2D:AC:05:E1:F0:43:28:22:4E:20:A4:60:5D:77
Certificate issuer: /CN=e24c9c50cf4e2dac05e1f04328224e20a4605d77
Certificate serial: 0199228C40D6632B136EB8BD70A3ECBA59AD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4kycUM9OLawF4fBDKCJOIKRgXXc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/317cc1-64c2-472e-914b-0bfb86884404/1/4kycUM9OLawF4fBDKCJOIKRgXXc.mft
Manifest number: 0D59
Signing time: Sun 07 Sep 2025 05:00:40 +0000
Manifest this update: Sun 07 Sep 2025 05:00:40 +0000
Manifest next update: Mon 08 Sep 2025 05:00:40 +0000
Files and hashes: 1: 4kycUM9OLawF4fBDKCJOIKRgXXc.crl (hash: H0GIY4/aPEEbI6hVlFIKXsgJj74xDU/6+v4F6F3O5+4=)
2: Q3-HdEPCyjZHl-Sg4_PuJRYIuT8.roa (hash: XEPQxkckVuIQ5rwgxJmegps237sKjQ4AEXFUBlmNa1Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/317cc1-64c2-472e-914b-0bfb86884404/1/4kycUM9OLawF4fBDKCJOIKRgXXc.crl
rsync://rpki.ripe.net/repository/DEFAULT/f4/317cc1-64c2-472e-914b-0bfb86884404/1/4kycUM9OLawF4fBDKCJOIKRgXXc.mft
rsync://rpki.ripe.net/repository/DEFAULT/4kycUM9OLawF4fBDKCJOIKRgXXc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:8c:40:d6:63:2b:13:6e:b8:bd:70:a3:ec:ba:59:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e24c9c50cf4e2dac05e1f04328224e20a4605d77
Validity
Not Before: Sep 7 05:00:40 2025 GMT
Not After : Sep 8 05:00:40 2025 GMT
Subject: CN=277e809ecec8baa150463e478cde089f9cee8a7a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:50:b5:37:b1:3b:20:9a:bc:61:aa:d4:70:79:
4d:52:8e:18:2c:48:b3:f0:ce:e1:93:7e:da:dc:28:
1c:16:ec:52:cb:c2:2a:d2:4a:47:60:04:f7:62:85:
12:26:3d:c0:64:3f:c5:78:51:a4:b8:c2:4c:56:e3:
3d:59:ab:00:9b:ad:49:04:1b:4d:ff:e7:ed:30:62:
77:8b:d0:f0:5b:39:cf:d9:8c:fd:4b:bd:c6:2c:9c:
fc:e0:f8:9f:57:22:db:8a:db:ef:03:06:e7:74:a6:
27:97:28:92:11:54:1f:5b:33:61:cc:9e:20:4a:3e:
2c:c1:76:fe:88:ff:81:0a:26:55:5c:43:84:1c:1c:
b9:ac:67:eb:41:0b:94:18:68:f0:52:57:bf:01:56:
7d:6a:21:05:71:97:7b:80:15:a4:e6:1a:cc:58:3f:
20:48:ea:d1:b0:17:ef:cf:f8:4c:8e:35:a3:3f:1b:
38:6c:ac:1e:e5:5d:2f:57:4f:70:d2:50:8f:80:18:
bd:fb:c1:ac:35:f4:ef:ab:51:34:70:a5:56:47:24:
cd:3c:6f:97:53:58:82:ac:0d:3f:22:c5:66:d4:84:
9d:14:dc:b7:c9:b5:98:1f:b4:83:10:7e:b1:cc:37:
9d:9b:d8:89:85:97:7f:33:e3:26:3a:f1:95:a7:8f:
11:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:7E:80:9E:CE:C8:BA:A1:50:46:3E:47:8C:DE:08:9F:9C:EE:8A:7A
X509v3 Authority Key Identifier:
keyid:E2:4C:9C:50:CF:4E:2D:AC:05:E1:F0:43:28:22:4E:20:A4:60:5D:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4kycUM9OLawF4fBDKCJOIKRgXXc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/317cc1-64c2-472e-914b-0bfb86884404/1/4kycUM9OLawF4fBDKCJOIKRgXXc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/317cc1-64c2-472e-914b-0bfb86884404/1/4kycUM9OLawF4fBDKCJOIKRgXXc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:06:d4:67:da:8d:34:61:09:9e:14:5d:26:64:18:ac:97:37:
06:64:68:d3:45:9e:34:a6:6f:ca:7b:cb:e4:60:57:d0:c5:66:
e5:54:03:7f:01:c5:9a:cb:f4:b1:90:f3:07:2e:b0:8f:b1:90:
5a:29:5c:92:88:ed:7c:3a:59:01:3b:09:05:9b:61:65:7e:fd:
95:a1:77:fe:6a:68:8b:12:f0:cc:75:bc:a4:2f:bc:71:e2:4f:
ac:48:04:97:86:77:30:ed:44:7a:7b:11:ae:cb:f4:de:3c:20:
1e:c4:98:08:18:20:e5:50:c1:f6:f3:4a:de:d0:e6:61:64:cb:
39:49:96:e9:26:e0:33:1f:f7:39:26:c6:30:e0:ab:a0:b7:3c:
c2:dd:a8:f0:96:d8:f2:37:b5:13:89:63:2c:35:23:d4:bd:b4:
93:b1:b5:71:ae:a6:3b:33:a7:2d:9c:ba:b4:e2:09:a6:dd:ff:
b4:67:9a:49:ef:64:65:75:b5:12:ad:ba:ba:f0:9c:25:79:7b:
10:2d:82:f4:02:4f:ee:1a:17:54:80:49:3c:62:ed:a6:5c:b3:
63:29:45:24:e9:52:91:ef:5b:84:b5:0c:0a:a0:b3:41:49:19:
73:50:22:98:a9:b2:52:9e:f2:e3:b8:a7:b0:13:b0:a3:d9:9f:
69:8a:b3:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 10:13:46 2025 by rpki-client