
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/a8bb57-c181-4695-9be7-57554058620b/1/4qEN5v-uWQQnJEoDND22asVkJ1o.mft
File: 4qEN5v-uWQQnJEoDND22asVkJ1o.mft (raw, json)
Hash identifier: D7fAmE4ppwwpvTcXlqHBsTthFePJp374COSlxzQfce4=
Subject key identifier: 82:DB:25:22:2D:B6:CA:A7:60:C6:89:CC:10:AB:B9:A4:EE:9B:D4:0D
Authority key identifier: E2:A1:0D:E6:FF:AE:59:04:27:24:4A:03:34:3D:B6:6A:C5:64:27:5A
Certificate issuer: /CN=e2a10de6ffae590427244a03343db66ac564275a
Certificate serial: 0197B88F807F9D46864F104B5FD27CAF8521
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4qEN5v-uWQQnJEoDND22asVkJ1o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/a8bb57-c181-4695-9be7-57554058620b/1/4qEN5v-uWQQnJEoDND22asVkJ1o.mft
Manifest number: 12FE
Signing time: Sat 28 Jun 2025 22:01:41 +0000
Manifest this update: Sat 28 Jun 2025 22:01:41 +0000
Manifest next update: Sun 29 Jun 2025 22:01:41 +0000
Files and hashes: 1: 4qEN5v-uWQQnJEoDND22asVkJ1o.crl (hash: v80BLOO2gcA/p7H4laDW2h6OBjQiKwGxSuqhd0zljAg=)
2: EMEQainrdjhvrSxfRt2EdTwfFho.roa (hash: MgfrBxxTqDVEh7a/Ypney2yykLPSmFU/4+sRkVkl74s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/a8bb57-c181-4695-9be7-57554058620b/1/4qEN5v-uWQQnJEoDND22asVkJ1o.crl
rsync://rpki.ripe.net/repository/DEFAULT/07/a8bb57-c181-4695-9be7-57554058620b/1/4qEN5v-uWQQnJEoDND22asVkJ1o.mft
rsync://rpki.ripe.net/repository/DEFAULT/4qEN5v-uWQQnJEoDND22asVkJ1o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b8:8f:80:7f:9d:46:86:4f:10:4b:5f:d2:7c:af:85:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e2a10de6ffae590427244a03343db66ac564275a
Validity
Not Before: Jun 28 22:01:41 2025 GMT
Not After : Jun 29 22:01:41 2025 GMT
Subject: CN=82db25222db6caa760c689cc10abb9a4ee9bd40d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:ca:37:37:19:68:39:fb:38:8e:1e:37:4b:4d:
aa:a3:20:41:b4:c5:c3:b8:95:1d:34:8e:0c:ae:8c:
ff:9e:99:4d:60:c8:66:0e:4a:dc:2b:b1:81:2b:2f:
cc:ca:6f:f0:8c:63:17:ac:f4:72:e0:01:e4:21:03:
ca:2a:1c:73:22:13:49:3a:b4:2e:ab:22:08:2e:7e:
3b:72:ff:60:89:83:19:7d:ac:78:a1:61:eb:01:e9:
98:0b:67:57:53:5a:04:d4:0e:af:7a:ae:4c:c6:b5:
8a:40:2f:a0:41:ae:ee:87:33:75:69:7f:d5:43:92:
4b:19:95:23:27:09:c5:ea:da:4b:02:e9:d4:fc:f9:
8c:73:f8:7e:d5:04:b9:3a:c2:92:f2:06:05:7f:c0:
db:3d:4d:2d:a2:69:12:ca:bc:fc:54:a1:a1:b5:9a:
d8:bd:b9:38:93:21:0f:65:ee:32:63:95:1b:62:6c:
01:e0:b6:59:79:07:44:e0:27:ec:ad:03:6d:05:23:
c0:45:5a:b0:2f:fd:3f:22:48:95:0f:26:fe:c6:53:
55:cf:f3:4a:04:a8:27:db:7b:bd:86:05:9e:fb:f2:
b9:e3:7c:fa:0a:46:4c:a3:77:0a:4c:8d:c0:1f:52:
e9:92:8d:b0:10:d7:33:5e:f6:27:88:a0:2a:1c:05:
a1:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:DB:25:22:2D:B6:CA:A7:60:C6:89:CC:10:AB:B9:A4:EE:9B:D4:0D
X509v3 Authority Key Identifier:
keyid:E2:A1:0D:E6:FF:AE:59:04:27:24:4A:03:34:3D:B6:6A:C5:64:27:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4qEN5v-uWQQnJEoDND22asVkJ1o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/a8bb57-c181-4695-9be7-57554058620b/1/4qEN5v-uWQQnJEoDND22asVkJ1o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/a8bb57-c181-4695-9be7-57554058620b/1/4qEN5v-uWQQnJEoDND22asVkJ1o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:68:e0:73:d8:95:fb:22:24:54:81:d6:09:06:7d:35:18:3b:
ed:90:cb:53:a4:ab:3f:a7:95:46:1b:e8:f5:b5:76:0c:22:bb:
b8:73:9b:09:2b:b6:3c:16:21:5b:0b:6d:3e:6e:02:9b:a2:99:
7d:68:73:5d:c6:84:36:a8:e3:22:46:10:69:02:69:2a:5c:c1:
c0:07:bf:1c:f4:8b:be:09:7b:8b:7a:aa:f7:db:9d:33:67:6c:
2a:28:2a:7b:5f:fe:28:c8:97:b0:91:86:a4:b4:de:af:be:df:
16:71:fc:4b:58:22:4c:7d:8e:99:46:40:f4:6b:15:74:ff:c6:
dc:a9:b2:44:16:11:65:2c:78:54:de:b1:67:32:6e:85:6e:16:
e8:6c:46:c3:f3:44:1d:6f:03:fb:fc:0f:74:76:72:1b:f8:25:
52:fc:20:b0:ec:1c:be:d1:4f:08:36:ab:26:b7:1f:e4:03:72:
0d:f9:34:cf:c2:00:8a:8f:57:fb:9f:69:11:a5:2e:9d:d2:25:
21:13:28:77:05:b2:54:36:35:10:b8:0c:7f:bd:70:fa:93:72:
5d:92:ed:0d:cb:75:af:aa:e0:6e:0b:6c:94:e4:16:59:b3:28:
1d:a4:b7:b4:4f:41:ab:fb:24:7d:98:9a:d4:fc:59:12:34:08:
7e:68:9c:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:33:58 2025 by rpki-client