Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/286d47-6434-41bd-9aa2-09ff79308bbe/1/4_cHBvbAz72cc6fz2DAjJApC9Q0.mft
File: 4_cHBvbAz72cc6fz2DAjJApC9Q0.mft (raw, json)
Hash identifier: p0ZeKG6bnS+SgeKS9jepzGbGpmaiD/wL/uR/FhF4p58=
Subject key identifier: 4C:53:14:63:85:7D:56:C4:5E:96:32:CB:50:4A:FF:DF:80:8E:F3:C8
Authority key identifier: E3:F7:07:06:F6:C0:CF:BD:9C:73:A7:F3:D8:30:23:24:0A:42:F5:0D
Certificate issuer: /CN=e3f70706f6c0cfbd9c73a7f3d83023240a42f50d
Certificate serial: 0198D8BD695B56DE433698D75AF73FA3C581
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4_cHBvbAz72cc6fz2DAjJApC9Q0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/286d47-6434-41bd-9aa2-09ff79308bbe/1/4_cHBvbAz72cc6fz2DAjJApC9Q0.mft
Manifest number: 0D59
Signing time: Sat 23 Aug 2025 21:02:28 +0000
Manifest this update: Sat 23 Aug 2025 21:02:28 +0000
Manifest next update: Sun 24 Aug 2025 21:02:28 +0000
Files and hashes: 1: 4_cHBvbAz72cc6fz2DAjJApC9Q0.crl (hash: XNu56MosKMFaFCMIg83EVWMcFmyxl64CZDHxipy9pkk=)
2: JZBToS-O_vrT2aeKBSNggNB5se0.roa (hash: D8kzrex63NBxCoEgyWN4HyqVj2eRzOdT3Da1FU0u+nI=)
3: cKLdHjbMHa9DWXygLYK3fJRjYqw.roa (hash: aXunewdhx0tio/kXThZoUaubUGfQctWD4RTkIiazOVE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a8/286d47-6434-41bd-9aa2-09ff79308bbe/1/4_cHBvbAz72cc6fz2DAjJApC9Q0.crl
rsync://rpki.ripe.net/repository/DEFAULT/a8/286d47-6434-41bd-9aa2-09ff79308bbe/1/4_cHBvbAz72cc6fz2DAjJApC9Q0.mft
rsync://rpki.ripe.net/repository/DEFAULT/4_cHBvbAz72cc6fz2DAjJApC9Q0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 14:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d8:bd:69:5b:56:de:43:36:98:d7:5a:f7:3f:a3:c5:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e3f70706f6c0cfbd9c73a7f3d83023240a42f50d
Validity
Not Before: Aug 23 21:02:28 2025 GMT
Not After : Aug 24 21:02:28 2025 GMT
Subject: CN=4c531463857d56c45e9632cb504affdf808ef3c8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:1e:83:a3:ae:a6:3d:61:f3:7c:f6:6c:61:55:
76:c8:22:3d:73:9e:29:3f:ce:67:39:89:56:95:03:
4f:b4:8a:27:c3:7c:c5:cd:e8:4e:f2:70:d7:d7:97:
27:0d:cf:f1:c6:c6:19:30:a2:98:2d:f2:86:96:7c:
b5:bc:6d:ea:af:e3:f8:1f:0e:7d:9b:aa:a9:a9:a7:
94:2a:bf:04:31:b5:b6:06:ea:5c:38:af:4f:bb:d9:
c1:79:e5:83:0f:89:4e:22:1f:aa:8c:38:92:d4:60:
89:72:1a:b9:8f:c0:3e:52:c2:73:1b:4d:6e:80:9d:
1b:c9:1f:b3:cb:a0:6e:d4:d3:9f:04:09:03:5f:59:
4d:b2:52:f4:0a:34:d8:23:f4:19:a5:f3:23:58:16:
75:50:0d:85:22:6d:45:1f:4a:ef:bb:27:7e:fb:42:
6c:7d:72:ec:39:ee:ec:37:36:88:d6:30:a2:7a:71:
7f:07:1e:44:97:e7:c8:d6:aa:88:ed:c5:23:08:56:
03:f1:89:50:6e:97:04:da:62:b5:a9:8e:30:5a:df:
83:7c:27:13:56:47:cf:bf:ed:9a:5e:b7:54:fc:1e:
64:9b:5a:5e:e3:c0:8d:1f:6d:75:0b:51:03:fc:81:
f9:a1:2e:d7:16:c6:bd:1b:23:c9:7d:3b:a1:7b:cc:
35:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:53:14:63:85:7D:56:C4:5E:96:32:CB:50:4A:FF:DF:80:8E:F3:C8
X509v3 Authority Key Identifier:
keyid:E3:F7:07:06:F6:C0:CF:BD:9C:73:A7:F3:D8:30:23:24:0A:42:F5:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4_cHBvbAz72cc6fz2DAjJApC9Q0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/286d47-6434-41bd-9aa2-09ff79308bbe/1/4_cHBvbAz72cc6fz2DAjJApC9Q0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/286d47-6434-41bd-9aa2-09ff79308bbe/1/4_cHBvbAz72cc6fz2DAjJApC9Q0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:5a:87:20:cf:44:87:f8:90:09:af:0b:dc:dc:d3:67:7f:d4:
d4:a1:e1:62:40:b2:64:86:09:47:74:3f:5c:02:65:4d:b5:5f:
21:96:3f:5c:15:d5:eb:56:53:2c:7c:14:d0:04:68:87:82:f5:
f5:7f:ed:7e:b2:9c:27:20:9b:a3:1a:e4:c4:3c:a3:df:8f:d8:
ee:25:30:34:35:31:84:d3:20:a7:98:7c:7f:01:1a:18:bf:62:
56:3a:2e:e1:3d:9c:e3:b1:0d:b0:e1:ea:c8:cd:2a:19:1e:0c:
e4:8e:3f:b8:7c:66:f0:bc:00:51:91:0d:ba:1a:4c:f6:f9:04:
70:64:fc:8b:c5:6c:0a:fe:84:82:75:bc:02:f0:e3:b3:d3:57:
90:2b:fc:de:df:f9:fd:59:98:0e:e7:f0:7a:2c:1d:97:2f:0b:
f7:2e:2b:92:16:49:39:39:d4:09:ad:44:37:f9:49:63:bf:29:
aa:9a:e5:bb:60:77:69:37:28:ad:d2:c4:53:cd:e4:db:bc:41:
49:c1:33:ec:9f:0f:26:d8:ff:13:89:71:10:9b:d0:77:10:d9:
cf:db:cd:d6:b4:c5:4f:c3:8d:72:b7:b1:90:16:c3:86:b9:ef:
cf:85:58:ec:a1:57:d2:fc:77:07:82:9c:d2:d6:db:56:93:bc:
93:a0:15:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 00:27:33 2025 by rpki-client