Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/830b5c-b6c8-4979-a53e-494e26491796/1/4QBqBtxJCZf_j8OkLs84m-090Xg.mft
File: 4QBqBtxJCZf_j8OkLs84m-090Xg.mft (raw, json)
Hash identifier: l45JdqGGn+4rrNqEVbedUGUJsPh0xV4ada6X1yvsKVg=
Subject key identifier: 66:98:B9:00:DD:3E:93:FC:BF:82:7F:9D:69:79:40:60:4C:89:4C:D1
Authority key identifier: E1:00:6A:06:DC:49:09:97:FF:8F:C3:A4:2E:CF:38:9B:ED:3D:D1:78
Certificate issuer: /CN=e1006a06dc490997ff8fc3a42ecf389bed3dd178
Certificate serial: 0197B70F2F409B9C2FA0685F1373E41747FB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4QBqBtxJCZf_j8OkLs84m-090Xg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/830b5c-b6c8-4979-a53e-494e26491796/1/4QBqBtxJCZf_j8OkLs84m-090Xg.mft
Manifest number: 15B5
Signing time: Sat 28 Jun 2025 15:01:55 +0000
Manifest this update: Sat 28 Jun 2025 15:01:55 +0000
Manifest next update: Sun 29 Jun 2025 15:01:55 +0000
Files and hashes: 1: 4QBqBtxJCZf_j8OkLs84m-090Xg.crl (hash: o0UBwFPSOr9rlkblJpYoZcpK8X/JWznm/QwpCSSJhSI=)
2: LnqHoulK3VATGmKEAn72iWxo7SM.roa (hash: yf2dP1AEzVPcio054NYKJ4SAhZkRjptLQTGykKC3qEs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/830b5c-b6c8-4979-a53e-494e26491796/1/4QBqBtxJCZf_j8OkLs84m-090Xg.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/830b5c-b6c8-4979-a53e-494e26491796/1/4QBqBtxJCZf_j8OkLs84m-090Xg.mft
rsync://rpki.ripe.net/repository/DEFAULT/4QBqBtxJCZf_j8OkLs84m-090Xg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:0f:2f:40:9b:9c:2f:a0:68:5f:13:73:e4:17:47:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e1006a06dc490997ff8fc3a42ecf389bed3dd178
Validity
Not Before: Jun 28 15:01:55 2025 GMT
Not After : Jun 29 15:01:55 2025 GMT
Subject: CN=6698b900dd3e93fcbf827f9d697940604c894cd1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:7e:f9:71:06:34:e6:33:a4:0d:9e:04:32:07:
7a:0f:df:b9:c6:26:01:48:6e:3e:c6:6d:b1:9f:bb:
bb:67:23:19:14:4f:db:f6:2a:87:0a:76:ed:2d:68:
9c:9e:ff:d9:85:61:a6:7a:7c:ba:e4:19:2a:bc:10:
66:55:27:e9:46:fd:1a:9d:66:3f:eb:c9:97:91:96:
e3:9f:5e:84:c1:b6:d4:13:f8:e7:e6:1c:31:22:19:
ac:f6:d9:19:9e:eb:e4:c2:94:2d:c1:f0:80:97:9b:
4d:e8:98:10:83:3f:d1:3b:ae:2c:82:25:53:90:58:
d7:35:31:0a:78:f9:3e:39:6a:35:9a:d0:a4:9a:03:
10:85:92:0a:5c:4a:d9:9b:9c:4c:b1:d9:08:dc:0e:
48:0b:0d:e3:e3:d6:f1:10:c3:ce:a4:b7:e8:f2:6d:
63:11:a6:f3:95:0b:f7:a4:28:75:f4:e4:48:cc:0b:
bf:4b:de:b7:58:28:ec:d6:da:63:43:73:95:b5:d7:
5e:2c:8b:ac:af:71:f0:e6:80:5e:97:46:d4:ca:93:
d4:6a:97:f6:1a:46:e3:39:5e:83:91:a5:89:17:34:
fe:e5:38:a3:83:78:e9:4f:ea:ea:bd:c8:02:fe:8b:
7b:1f:af:79:14:d0:a7:06:d9:7c:45:3d:61:32:17:
7f:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:98:B9:00:DD:3E:93:FC:BF:82:7F:9D:69:79:40:60:4C:89:4C:D1
X509v3 Authority Key Identifier:
keyid:E1:00:6A:06:DC:49:09:97:FF:8F:C3:A4:2E:CF:38:9B:ED:3D:D1:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4QBqBtxJCZf_j8OkLs84m-090Xg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/830b5c-b6c8-4979-a53e-494e26491796/1/4QBqBtxJCZf_j8OkLs84m-090Xg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/830b5c-b6c8-4979-a53e-494e26491796/1/4QBqBtxJCZf_j8OkLs84m-090Xg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:16:f5:0c:b5:68:10:ec:da:40:a3:b6:eb:91:4e:1c:f6:99:
ad:20:8e:4a:2e:d8:3c:90:fb:70:29:b4:74:f4:96:23:79:6c:
d1:c6:1d:92:31:20:87:ca:87:59:5a:a4:e7:10:9c:55:15:15:
f9:36:f0:0d:ef:c6:ca:8a:90:94:ae:3a:82:6a:3b:77:c0:6f:
e8:7c:a8:2a:51:e3:59:cd:35:33:4f:fa:12:d0:a5:5b:aa:98:
d9:62:ad:a1:fd:16:57:77:2d:32:27:3c:03:5b:79:3b:a2:e8:
63:2b:32:d9:b7:6b:4e:d0:e2:ce:74:29:38:a2:bd:e1:26:46:
3a:8a:24:ba:7b:2d:8e:f8:4d:b5:6e:04:6a:83:71:14:39:f5:
e7:89:37:ba:96:af:0a:3b:c1:b4:9c:09:9e:1e:cc:c5:e2:e5:
42:c9:51:ea:43:d5:c4:0b:ed:3b:b4:c8:51:7e:72:f7:73:e3:
45:db:6d:bc:e3:80:63:fa:ff:72:9f:f9:97:37:ac:65:79:8e:
3f:e9:76:15:58:36:d0:86:3e:71:a1:50:ea:7d:32:4d:02:c8:
53:9f:71:03:e2:34:21:cc:d6:9d:8c:46:93:62:29:e8:bb:fe:
4b:b7:d4:a1:70:44:bb:aa:5b:94:2d:f1:f5:4e:73:44:51:7c:
11:1b:8f:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 19:16:08 2025 by rpki-client