Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/4ba973-0e9f-4352-9838-642dc9127680/1/S4nYf45BtQgtOJFgFeBZ5W3QEU4.mft
File: S4nYf45BtQgtOJFgFeBZ5W3QEU4.mft (raw, json)
Hash identifier: gfyryLc+rGdN9tOaBB4mZLV78xPc9bRHuuUr0lvKjQo=
Subject key identifier: 35:EF:CC:5B:92:5E:F5:63:89:9D:D7:2A:28:72:A0:23:AA:5E:DC:17
Authority key identifier: 4B:89:D8:7F:8E:41:B5:08:2D:38:91:60:15:E0:59:E5:6D:D0:11:4E
Certificate issuer: /CN=4b89d87f8e41b5082d38916015e059e56dd0114e
Certificate serial: 0197B8902FEF2D7BD89478BD5A9A410A6182
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S4nYf45BtQgtOJFgFeBZ5W3QEU4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/4ba973-0e9f-4352-9838-642dc9127680/1/S4nYf45BtQgtOJFgFeBZ5W3QEU4.mft
Manifest number: 0E26
Signing time: Sat 28 Jun 2025 22:02:26 +0000
Manifest this update: Sat 28 Jun 2025 22:02:26 +0000
Manifest next update: Sun 29 Jun 2025 22:02:26 +0000
Files and hashes: 1: S4nYf45BtQgtOJFgFeBZ5W3QEU4.crl (hash: NGPqAUbtMMHNfwOM+MHJpEXFH2pbZt0y8OcgdszXfDY=)
2: crOsrOXIXenqmjjK7E42FO9nzAY.roa (hash: FavBc7FYhPnbTZq/1FuhdovJ2d7YJv+63Ene4V7HX3s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/4ba973-0e9f-4352-9838-642dc9127680/1/S4nYf45BtQgtOJFgFeBZ5W3QEU4.crl
rsync://rpki.ripe.net/repository/DEFAULT/0b/4ba973-0e9f-4352-9838-642dc9127680/1/S4nYf45BtQgtOJFgFeBZ5W3QEU4.mft
rsync://rpki.ripe.net/repository/DEFAULT/S4nYf45BtQgtOJFgFeBZ5W3QEU4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b8:90:2f:ef:2d:7b:d8:94:78:bd:5a:9a:41:0a:61:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b89d87f8e41b5082d38916015e059e56dd0114e
Validity
Not Before: Jun 28 22:02:26 2025 GMT
Not After : Jun 29 22:02:26 2025 GMT
Subject: CN=35efcc5b925ef563899dd72a2872a023aa5edc17
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:da:5f:ab:05:41:da:69:14:ef:bd:09:50:0e:
e5:a1:7d:9e:a3:8f:bf:13:bf:e6:70:ce:5c:5c:30:
bf:ce:ef:54:1f:ed:0c:9b:be:42:bf:7b:1d:14:18:
c1:e5:87:c1:19:63:21:ef:98:76:4b:2b:71:8b:3c:
99:ab:5b:04:e6:a1:b3:fe:33:b5:21:27:82:92:c4:
c7:d4:9d:89:d3:27:8a:3c:da:f2:dc:76:1f:f3:a5:
eb:a6:37:f7:c0:b2:98:5c:9c:5b:bd:27:82:68:af:
be:9b:a3:f4:23:9d:70:70:07:97:73:4d:4d:01:d9:
7e:0a:a9:d4:83:74:3d:c8:38:d5:5d:dc:5e:db:21:
2e:ce:2f:75:ee:32:f8:5e:54:d7:e2:09:fe:ba:69:
bc:2a:f3:92:87:ef:89:3f:06:c5:22:c8:97:03:0f:
12:70:37:f0:f6:74:59:41:0e:e5:46:2a:a9:b4:d2:
0f:d8:59:c3:7a:67:7d:24:04:9b:7e:70:2c:2a:9e:
33:09:b4:68:3c:db:eb:d2:a2:44:b5:55:dc:b9:be:
84:a9:55:30:f6:c5:73:7f:7c:34:f1:0d:9e:64:47:
80:e7:77:9c:30:de:1b:1c:7b:d8:7e:16:35:9b:31:
fc:93:7d:0b:74:f4:68:b4:38:d5:7d:b0:c1:5e:8e:
34:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:EF:CC:5B:92:5E:F5:63:89:9D:D7:2A:28:72:A0:23:AA:5E:DC:17
X509v3 Authority Key Identifier:
keyid:4B:89:D8:7F:8E:41:B5:08:2D:38:91:60:15:E0:59:E5:6D:D0:11:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S4nYf45BtQgtOJFgFeBZ5W3QEU4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/4ba973-0e9f-4352-9838-642dc9127680/1/S4nYf45BtQgtOJFgFeBZ5W3QEU4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/4ba973-0e9f-4352-9838-642dc9127680/1/S4nYf45BtQgtOJFgFeBZ5W3QEU4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:72:06:a1:f8:7c:d3:7c:27:65:8c:1d:83:36:70:64:8c:4f:
3f:0b:79:a0:83:f2:d7:f8:a1:73:f7:41:b2:ae:0d:0b:65:e0:
14:1a:e7:34:18:6d:91:9e:6d:c2:2f:53:e1:f2:0f:b6:0e:dc:
1e:33:91:34:f4:b7:df:18:a3:b2:6b:8a:6d:70:41:d3:b9:e3:
69:fa:27:79:a6:8c:dc:d8:63:90:a5:8a:c1:1a:f6:89:6e:58:
b6:6b:33:1b:53:81:6d:a0:e3:ee:c2:ac:06:99:da:7a:d3:e5:
7e:7b:91:0d:e6:c0:21:90:b4:70:ae:eb:72:c9:b5:1d:c4:50:
5c:96:96:22:4d:15:0f:b7:ef:0c:dd:12:6e:70:3d:d5:e8:15:
d2:ff:fd:b5:4b:c4:4b:ef:2c:6a:ab:df:79:81:97:6a:89:8b:
84:43:00:83:95:f9:8e:0f:68:13:e5:8c:9a:e0:69:26:6f:4c:
30:51:c6:ac:d1:d3:6b:c2:40:d6:33:7c:4f:29:ee:73:39:2d:
ff:5f:b5:67:1c:b3:3c:98:e8:23:f9:07:8d:f1:51:44:e5:3b:
e1:46:7d:11:0e:bf:1f:f1:49:28:14:c9:37:52:64:e2:19:d6:
5c:08:71:d0:bc:00:8d:c2:20:cf:fa:e9:ae:eb:7a:20:6f:1b:
8f:87:7e:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:21:03 2025 by rpki-client