Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/05ab60-dea6-43a3-87ef-7bfaeb195445/1/4GiTQCg3lEieQayGqvpEFPik1r4.mft
File: 4GiTQCg3lEieQayGqvpEFPik1r4.mft (raw, json)
Hash identifier: gdNwqs8Y2Dwspka3CD369CI92Ceo5dh/5B8Mnh2XBmQ=
Subject key identifier: 03:1A:C3:70:F6:4A:52:7B:77:81:7B:9F:4C:12:FD:3D:0B:13:D0:F5
Authority key identifier: E0:68:93:40:28:37:94:48:9E:41:AC:86:AA:FA:44:14:F8:A4:D6:BE
Certificate issuer: /CN=e0689340283794489e41ac86aafa4414f8a4d6be
Certificate serial: 0198D92B095414AE11559D32E3F4D3019A9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4GiTQCg3lEieQayGqvpEFPik1r4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9a/05ab60-dea6-43a3-87ef-7bfaeb195445/1/4GiTQCg3lEieQayGqvpEFPik1r4.mft
Manifest number: 164F
Signing time: Sat 23 Aug 2025 23:02:12 +0000
Manifest this update: Sat 23 Aug 2025 23:02:12 +0000
Manifest next update: Sun 24 Aug 2025 23:02:12 +0000
Files and hashes: 1: 4GiTQCg3lEieQayGqvpEFPik1r4.crl (hash: kZypqx2G0bqWGBoQEjEc+DDKNeWTGhJZJBsgzGniu94=)
2: URa5fH07dVIqF3IJwFtjDdus5xo.roa (hash: bQ7L6PdzuMotAJCcbvlg+nm2FLpujqZUwsr24eILLiQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9a/05ab60-dea6-43a3-87ef-7bfaeb195445/1/4GiTQCg3lEieQayGqvpEFPik1r4.crl
rsync://rpki.ripe.net/repository/DEFAULT/9a/05ab60-dea6-43a3-87ef-7bfaeb195445/1/4GiTQCg3lEieQayGqvpEFPik1r4.mft
rsync://rpki.ripe.net/repository/DEFAULT/4GiTQCg3lEieQayGqvpEFPik1r4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 17:19:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d9:2b:09:54:14:ae:11:55:9d:32:e3:f4:d3:01:9a:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e0689340283794489e41ac86aafa4414f8a4d6be
Validity
Not Before: Aug 23 23:02:12 2025 GMT
Not After : Aug 24 23:02:12 2025 GMT
Subject: CN=031ac370f64a527b77817b9f4c12fd3d0b13d0f5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:f8:94:8a:16:ac:b1:0c:00:f8:55:42:ae:a4:
00:57:77:f8:61:49:ee:73:fa:43:8f:7c:59:a0:bc:
87:1d:e5:c9:c3:51:ad:69:97:2c:f0:f3:96:63:d4:
83:ac:ac:70:76:89:73:97:a8:f3:31:ab:2a:75:4b:
13:45:41:be:35:a8:06:e0:e6:11:75:8b:1d:15:bf:
10:29:39:a4:df:42:91:52:72:fb:dd:c1:41:95:4b:
ae:cd:5c:c1:93:66:43:51:e5:e5:51:c8:f3:17:4c:
0b:4a:0d:f9:56:e0:2f:07:7c:a3:f1:d5:84:8c:a0:
28:19:db:b3:62:08:cb:9e:67:73:3b:f1:8f:9a:6c:
a1:00:f8:3d:ec:86:8d:61:3a:33:56:aa:49:b9:98:
9d:31:4f:bf:06:5e:88:81:f5:be:6f:4d:e4:4d:70:
76:53:6e:1f:d9:80:95:a5:a4:60:9f:58:38:ac:e8:
9e:c2:03:f2:29:d6:19:0e:79:07:a1:c6:8c:32:df:
36:fe:a2:89:7d:c1:e4:32:a9:21:91:5f:a2:8a:2d:
30:07:8f:7a:2d:e4:9d:c7:df:62:ac:c0:b4:b9:22:
c6:a4:5a:fa:d2:85:8e:5e:b3:c6:6e:b4:24:74:85:
98:80:76:de:b7:cc:77:20:9e:81:96:2a:72:12:25:
e1:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:1A:C3:70:F6:4A:52:7B:77:81:7B:9F:4C:12:FD:3D:0B:13:D0:F5
X509v3 Authority Key Identifier:
keyid:E0:68:93:40:28:37:94:48:9E:41:AC:86:AA:FA:44:14:F8:A4:D6:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4GiTQCg3lEieQayGqvpEFPik1r4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/05ab60-dea6-43a3-87ef-7bfaeb195445/1/4GiTQCg3lEieQayGqvpEFPik1r4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/05ab60-dea6-43a3-87ef-7bfaeb195445/1/4GiTQCg3lEieQayGqvpEFPik1r4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:57:a2:3a:df:97:1c:af:12:91:eb:8e:e9:f4:2e:32:a7:65:
c6:60:21:97:46:99:63:e9:3a:4e:22:4a:0a:1b:b0:b9:09:2d:
8a:34:fb:2f:42:8d:ec:12:18:91:ae:b6:11:e8:e3:28:aa:80:
be:88:be:19:4e:7e:35:a4:9d:e3:3d:64:58:a8:86:3a:f3:29:
b8:1d:b2:b6:e7:ea:4e:2a:4b:7a:78:f3:0d:c8:39:7f:73:10:
44:b8:8f:20:3e:dc:ef:cf:f0:3d:66:20:97:97:2c:e6:60:3d:
6e:30:ba:b8:a7:bb:d3:cb:6f:b3:88:94:0c:62:5b:aa:b3:a0:
b0:00:01:61:50:66:6c:f4:55:94:87:d5:20:34:a2:83:5e:ef:
f7:dd:fa:d0:84:37:2c:e6:95:77:c8:6e:06:85:d8:db:4c:09:
5e:c7:27:a7:0b:bb:a3:59:1f:b8:73:50:a3:4b:10:cc:43:a9:
db:f7:1c:ad:ac:d5:bf:e4:bb:5e:b6:13:10:3d:7e:2c:07:92:
df:0f:45:5a:cc:a5:86:51:1a:2d:ec:aa:8b:a4:62:53:b6:29:
0d:9d:25:df:62:a2:95:aa:c9:6c:bc:f9:e3:b0:da:11:29:a6:
bd:13:62:3b:47:ea:36:74:d4:da:97:02:de:ec:fe:d7:7c:04:
b1:34:b1:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 02:32:43 2025 by rpki-client