Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/8d2d0a-2f70-4859-bb44-5b5078625dea/1/T43nLlAGr221URXhtwkyAjzuy6Q.mft
File: T43nLlAGr221URXhtwkyAjzuy6Q.mft (raw, json)
Hash identifier: HL6jBqma+433N0ZOB0b/c5sQdZxWe7ltdcq9pxCa3Ek=
Subject key identifier: 04:BD:78:94:66:A6:AD:90:7E:47:8C:60:98:1F:2A:C3:3B:95:EB:BB
Authority key identifier: 4F:8D:E7:2E:50:06:AF:6D:B5:51:15:E1:B7:09:32:02:3C:EE:CB:A4
Certificate issuer: /CN=4f8de72e5006af6db55115e1b70932023ceecba4
Certificate serial: 0198D473887A7013FCEA336EC8CF51D8001A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T43nLlAGr221URXhtwkyAjzuy6Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/8d2d0a-2f70-4859-bb44-5b5078625dea/1/T43nLlAGr221URXhtwkyAjzuy6Q.mft
Manifest number: 040A
Signing time: Sat 23 Aug 2025 01:03:17 +0000
Manifest this update: Sat 23 Aug 2025 01:03:17 +0000
Manifest next update: Sun 24 Aug 2025 01:03:17 +0000
Files and hashes: 1: 703xyqVyusyMnwZMJe3nVMGXbZM.roa (hash: g0R5Z6NA0XZMjcQp8vVCKtZsmnZp9WjEptEiQEcWRL8=)
2: T43nLlAGr221URXhtwkyAjzuy6Q.crl (hash: 0aV4+ZoQub60u6yhgiSbQcB0Qj54g2CCi0WmDLPzTJA=)
3: xHkLuYRtCrVGpuLnGhaks3lRnwA.roa (hash: oO+aRb9k9iEUfToXswGXJDHCnfvH4Pcnu65Wu7dUdc8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9c/8d2d0a-2f70-4859-bb44-5b5078625dea/1/T43nLlAGr221URXhtwkyAjzuy6Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/9c/8d2d0a-2f70-4859-bb44-5b5078625dea/1/T43nLlAGr221URXhtwkyAjzuy6Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/T43nLlAGr221URXhtwkyAjzuy6Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 01:03:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:73:88:7a:70:13:fc:ea:33:6e:c8:cf:51:d8:00:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f8de72e5006af6db55115e1b70932023ceecba4
Validity
Not Before: Aug 23 01:03:17 2025 GMT
Not After : Aug 24 01:03:17 2025 GMT
Subject: CN=04bd789466a6ad907e478c60981f2ac33b95ebbb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:ab:09:56:90:ac:e6:fe:77:ff:0f:a9:68:32:
2d:cc:94:c1:f4:52:db:38:19:69:06:bf:ea:7e:6e:
08:32:4e:51:2d:46:fe:d9:c1:23:77:df:99:2f:cc:
e6:09:42:03:1b:78:19:16:41:1f:1b:19:71:c1:1a:
93:37:be:0d:ba:1b:b2:cd:98:68:6e:7f:1c:87:86:
8e:8a:15:84:6f:75:82:2b:15:7b:9e:b2:c4:b2:57:
e9:97:f0:13:77:3c:f4:c4:26:d4:6b:0b:2a:26:fa:
3a:31:d5:d2:a8:a9:80:51:57:1b:28:c0:9a:87:bd:
89:ea:a1:ae:07:fe:3b:be:92:cb:74:79:82:58:00:
fe:c5:39:49:c9:0c:d4:c7:16:ec:00:b5:5d:e4:ff:
60:23:c7:a4:34:12:a8:1a:59:9f:06:c7:aa:e9:e7:
9c:8c:3b:a8:62:e3:fc:86:27:3e:7e:40:fb:63:80:
a2:77:6a:d9:bc:df:e2:73:99:73:d2:1b:0a:a4:f3:
b1:a6:a0:f6:63:85:30:b0:a4:ab:12:37:71:2d:56:
36:29:9f:3e:81:c5:3a:94:47:00:09:3b:0e:1c:fc:
fa:bd:b2:0d:36:3e:a2:28:22:a6:0f:ab:e8:87:26:
f3:01:54:a3:4e:5e:29:04:93:88:d4:4b:9a:c5:ff:
41:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:BD:78:94:66:A6:AD:90:7E:47:8C:60:98:1F:2A:C3:3B:95:EB:BB
X509v3 Authority Key Identifier:
keyid:4F:8D:E7:2E:50:06:AF:6D:B5:51:15:E1:B7:09:32:02:3C:EE:CB:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T43nLlAGr221URXhtwkyAjzuy6Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/8d2d0a-2f70-4859-bb44-5b5078625dea/1/T43nLlAGr221URXhtwkyAjzuy6Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/8d2d0a-2f70-4859-bb44-5b5078625dea/1/T43nLlAGr221URXhtwkyAjzuy6Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
08:26:17:bf:22:27:8f:d0:eb:36:d7:63:96:74:ac:92:0e:43:
a2:fe:b8:dd:d1:e7:05:c1:81:fb:d7:fe:84:22:e4:df:62:b8:
ab:a1:38:89:1d:5e:cd:be:8b:a2:6f:38:37:32:3a:35:85:ee:
97:61:e0:fe:5d:a3:1a:11:79:96:6a:a2:d3:d9:e9:90:b9:18:
e3:87:f1:5e:8e:ea:16:07:75:4e:dd:0b:72:dd:aa:21:16:4e:
d2:e8:30:b2:3d:0c:48:22:47:25:0a:9b:07:97:77:ac:41:78:
4e:83:fe:5e:77:49:db:a3:f4:ea:b4:98:73:44:e6:42:72:6b:
bb:23:26:41:60:ce:54:09:a1:81:b0:24:0a:da:b1:a5:5b:38:
c3:f8:2f:2d:d5:bf:63:5f:ef:4a:94:d7:98:d4:01:2c:63:e4:
37:0f:f7:fa:b9:ff:96:d1:d3:45:7f:3a:b2:bd:f7:1c:7a:2b:
b4:ed:bd:45:c6:d3:b5:af:aa:fb:dc:fd:70:6e:30:9c:d5:a7:
ef:11:a4:e8:6b:4b:f2:0a:8c:92:9d:93:e4:4c:81:58:56:90:
4b:18:17:4b:77:38:c5:02:4d:25:2a:2f:2e:0b:83:90:67:1f:
8d:70:9d:a0:91:8d:4e:3c:f8:12:17:77:58:04:0d:ca:99:df:
63:86:0f:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 11:33:23 2025 by rpki-client