Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/ceb4cb-2ea7-42d0-bb2a-5dac63784058/1/4tGVYU7uSi27UfWyHmnRbE4UQa8.mft
File: 4tGVYU7uSi27UfWyHmnRbE4UQa8.mft (raw, json)
Hash identifier: tLPYwCiuL4ch6clI2SACiijGnyHiXdjleGb3yh6xRno=
Subject key identifier: 29:AB:AB:4C:05:CC:86:6F:CC:BE:A4:1E:F3:37:38:52:E6:64:86:E2
Authority key identifier: E2:D1:95:61:4E:EE:4A:2D:BB:51:F5:B2:1E:69:D1:6C:4E:14:41:AF
Certificate issuer: /CN=e2d195614eee4a2dbb51f5b21e69d16c4e1441af
Certificate serial: 0199FBEB56B3997530CD6DFE76D6FD7748C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4tGVYU7uSi27UfWyHmnRbE4UQa8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/ceb4cb-2ea7-42d0-bb2a-5dac63784058/1/4tGVYU7uSi27UfWyHmnRbE4UQa8.mft
Manifest number: 01C7
Signing time: Sun 19 Oct 2025 10:02:08 +0000
Manifest this update: Sun 19 Oct 2025 10:02:08 +0000
Manifest next update: Mon 20 Oct 2025 10:02:08 +0000
Files and hashes: 1: 4tGVYU7uSi27UfWyHmnRbE4UQa8.crl (hash: g2/7z91iEM72TFD9x8p2nVITJSp8klTPbEzbxC48KWg=)
2: I6b16o_Ase2s-4OxbTzP2XU7AO8.roa (hash: 6HiWXRxkCGNhrpcrbbFpGCz17IhI/bbEhWJf+70NeCQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/ceb4cb-2ea7-42d0-bb2a-5dac63784058/1/4tGVYU7uSi27UfWyHmnRbE4UQa8.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/ceb4cb-2ea7-42d0-bb2a-5dac63784058/1/4tGVYU7uSi27UfWyHmnRbE4UQa8.mft
rsync://rpki.ripe.net/repository/DEFAULT/4tGVYU7uSi27UfWyHmnRbE4UQa8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 10:02:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:eb:56:b3:99:75:30:cd:6d:fe:76:d6:fd:77:48:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e2d195614eee4a2dbb51f5b21e69d16c4e1441af
Validity
Not Before: Oct 19 10:02:08 2025 GMT
Not After : Oct 20 10:02:08 2025 GMT
Subject: CN=29abab4c05cc866fccbea41ef3373852e66486e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:00:c7:b4:81:51:ab:d3:01:d8:d7:01:87:2b:
36:e1:03:30:9a:09:32:d4:98:59:25:1a:7b:bc:18:
2a:24:39:24:60:f0:0b:e4:e3:c3:df:8c:b4:74:5f:
c7:6e:a6:dc:f0:fb:18:da:bd:cb:31:36:88:41:45:
10:dd:bc:ef:88:fd:ba:d8:88:88:dc:2e:8f:32:ad:
90:03:26:9a:d5:16:94:fe:93:e7:2b:75:7e:ac:5c:
ba:fe:82:79:e5:1d:4c:04:3a:5c:d0:df:11:a2:2c:
c7:9b:a7:88:54:65:07:ef:54:77:1b:52:e2:44:fd:
8e:5f:0a:fc:61:a2:61:3b:8f:16:e3:97:56:19:48:
f8:47:4d:45:26:f9:4a:89:83:db:89:ae:3f:db:d1:
6d:e1:d6:32:b2:ff:a7:d7:83:68:c3:e8:2b:b5:ab:
76:03:f8:dc:bc:f4:29:4b:4d:94:2a:fd:43:de:a0:
03:45:57:de:a7:46:71:26:b3:66:97:60:77:d4:ac:
96:bd:d1:92:5d:70:8b:a1:69:b4:3f:2e:ad:79:29:
28:62:7a:fc:30:43:a2:59:b2:29:72:60:db:d1:05:
ea:34:3a:5c:c2:e8:14:0a:46:30:54:8d:31:57:27:
e3:bb:20:25:9f:59:e0:95:8d:5d:13:3e:27:4b:56:
98:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:AB:AB:4C:05:CC:86:6F:CC:BE:A4:1E:F3:37:38:52:E6:64:86:E2
X509v3 Authority Key Identifier:
keyid:E2:D1:95:61:4E:EE:4A:2D:BB:51:F5:B2:1E:69:D1:6C:4E:14:41:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4tGVYU7uSi27UfWyHmnRbE4UQa8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/ceb4cb-2ea7-42d0-bb2a-5dac63784058/1/4tGVYU7uSi27UfWyHmnRbE4UQa8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/ceb4cb-2ea7-42d0-bb2a-5dac63784058/1/4tGVYU7uSi27UfWyHmnRbE4UQa8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:d3:41:41:c0:9b:06:cd:c2:ec:97:e6:68:4d:13:f5:4c:28:
79:7e:e8:a8:8e:44:e9:32:06:3d:dd:c6:72:94:9d:9f:4a:2b:
e5:fd:a2:34:a1:71:70:75:65:88:ed:8b:74:20:bb:c5:19:df:
75:49:fd:b6:90:c6:da:61:33:64:d4:b8:ad:16:45:2f:c3:19:
2b:24:48:64:ea:c1:49:b5:ef:66:59:1b:c6:db:29:6b:12:e1:
a4:73:9a:f0:17:31:eb:8e:53:a9:14:05:f7:78:78:7c:a9:34:
79:6b:48:ee:78:01:be:12:28:01:28:26:25:cf:f7:bd:96:8f:
e9:f2:5a:a2:85:79:8e:ec:0b:5a:15:14:55:e7:28:33:71:4c:
28:06:85:2e:94:75:04:a4:ce:f8:3d:1c:7f:31:dc:94:23:6b:
f8:3b:ab:83:72:b4:e6:40:b1:67:28:98:96:f7:d9:d6:7a:5d:
26:8c:17:8f:67:25:5c:36:25:36:9a:de:6f:db:e9:a4:d0:4b:
ae:fc:cd:95:42:ec:ad:99:25:0d:b0:ee:54:85:b9:b8:e1:c9:
2b:9c:1e:69:35:fb:88:2f:09:ae:a6:8a:3b:03:fe:b3:c2:3b:
de:6f:5d:9d:70:24:dd:91:72:b1:96:d0:f8:b6:d3:86:96:3f:
99:48:f8:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:29:49 2025 by rpki-client