Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/fac7ed-9018-45db-8947-fb5c582e4097/1/4jDeX9PCRVFzumlqmUQdliDYHTg.mft
File: 4jDeX9PCRVFzumlqmUQdliDYHTg.mft (raw, json)
Hash identifier: BbQY1TFLiZdjWDHkzFVc80JeXYWXE158x/5jbKB+GIg=
Subject key identifier: 14:E7:06:6D:DE:62:DC:AC:A1:6E:F6:E4:7A:93:83:51:D5:D2:09:5A
Authority key identifier: E2:30:DE:5F:D3:C2:45:51:73:BA:69:6A:99:44:1D:96:20:D8:1D:38
Certificate issuer: /CN=e230de5fd3c2455173ba696a99441d9620d81d38
Certificate serial: 0198D5155EAFB5F7835D07888AD6417A0D89
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4jDeX9PCRVFzumlqmUQdliDYHTg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/fac7ed-9018-45db-8947-fb5c582e4097/1/4jDeX9PCRVFzumlqmUQdliDYHTg.mft
Manifest number: 0C61
Signing time: Sat 23 Aug 2025 04:00:04 +0000
Manifest this update: Sat 23 Aug 2025 04:00:04 +0000
Manifest next update: Sun 24 Aug 2025 04:00:04 +0000
Files and hashes: 1: 4jDeX9PCRVFzumlqmUQdliDYHTg.crl (hash: /ksQj2nMRmJ9GyfyeVzdwDmrL8vvMaFbT58iCZSKtSo=)
2: qADZbjUspL_WRqhq7wvNpX-fT-E.roa (hash: 8V+RbGGUYULjGMvZVkBND643qQkjbKJgabtjnmu0hrU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/fac7ed-9018-45db-8947-fb5c582e4097/1/4jDeX9PCRVFzumlqmUQdliDYHTg.crl
rsync://rpki.ripe.net/repository/DEFAULT/11/fac7ed-9018-45db-8947-fb5c582e4097/1/4jDeX9PCRVFzumlqmUQdliDYHTg.mft
rsync://rpki.ripe.net/repository/DEFAULT/4jDeX9PCRVFzumlqmUQdliDYHTg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 04:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:15:5e:af:b5:f7:83:5d:07:88:8a:d6:41:7a:0d:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e230de5fd3c2455173ba696a99441d9620d81d38
Validity
Not Before: Aug 23 04:00:04 2025 GMT
Not After : Aug 24 04:00:04 2025 GMT
Subject: CN=14e7066dde62dcaca16ef6e47a938351d5d2095a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:72:bd:f0:b4:a5:f1:27:b5:76:fa:16:14:ed:
8c:06:43:11:00:76:c0:91:a1:86:00:95:12:ce:39:
f4:96:25:60:ee:25:c3:96:e7:81:01:f6:e8:d4:c3:
3c:5b:6e:d9:03:cd:66:68:0d:15:6a:af:e7:7b:e3:
d5:1f:7e:90:82:fb:c8:6c:42:de:73:4a:69:48:4f:
40:9c:23:68:1b:96:8b:0c:6e:47:f0:19:69:cd:f8:
c0:dc:35:91:4b:1f:ab:09:9c:9b:3b:dc:70:46:19:
52:c7:cf:9e:c6:78:da:21:cc:28:e3:0c:ec:3b:ba:
c6:3e:8e:27:6c:1e:c9:fc:d4:9e:d7:9d:15:61:70:
36:c3:cb:c0:b0:fa:7b:ea:3c:f4:a4:df:8b:c9:4c:
e3:12:15:e3:b0:a1:1c:7e:5a:19:d1:73:77:79:09:
7e:fe:af:3e:f0:51:e0:c6:a2:2a:8e:51:78:7d:91:
79:95:0c:7e:17:0d:f1:3a:4c:60:ae:5e:c2:0f:18:
e7:08:0c:d4:2b:cf:99:8e:6e:7d:c3:75:e0:d5:44:
71:38:7c:a9:1d:24:fc:88:65:c1:07:e5:f5:61:1e:
fb:09:f2:40:08:3d:6a:6b:fd:16:a7:75:15:ca:a9:
8d:e4:5b:b6:45:02:1d:a4:48:ed:b9:0b:ba:d8:f7:
6a:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:E7:06:6D:DE:62:DC:AC:A1:6E:F6:E4:7A:93:83:51:D5:D2:09:5A
X509v3 Authority Key Identifier:
keyid:E2:30:DE:5F:D3:C2:45:51:73:BA:69:6A:99:44:1D:96:20:D8:1D:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4jDeX9PCRVFzumlqmUQdliDYHTg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/fac7ed-9018-45db-8947-fb5c582e4097/1/4jDeX9PCRVFzumlqmUQdliDYHTg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/fac7ed-9018-45db-8947-fb5c582e4097/1/4jDeX9PCRVFzumlqmUQdliDYHTg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a2:0d:58:48:07:07:19:b2:20:df:4c:3c:ff:4b:9e:cd:6b:87:
cc:95:0f:c6:d0:ca:76:57:54:11:0d:ab:bf:10:8f:7f:0d:43:
a6:92:c3:3a:dd:04:a6:63:6d:78:b5:48:42:15:f3:d1:8e:ff:
4d:67:26:ec:d3:6a:45:9f:bc:af:17:7d:17:f4:69:e4:05:87:
92:06:6e:52:0e:69:27:7f:0e:0d:4c:f9:cd:f9:43:44:4f:f0:
30:57:35:fd:9a:91:ff:22:52:8e:f3:71:f9:5b:1e:34:a0:01:
60:d2:65:74:a8:d5:8e:e9:ac:32:05:48:2d:bb:8f:05:1f:ed:
d7:37:05:18:74:07:52:33:a6:ac:03:c8:38:52:1e:47:6b:ab:
ca:0d:8b:fd:82:4b:d1:2e:92:e5:5a:73:27:e7:55:29:2c:63:
01:2b:e2:08:6b:3a:bd:ad:2e:f5:88:48:5f:81:b9:c3:bf:50:
82:80:03:3e:c4:71:bb:2b:10:ae:9b:92:1a:44:e3:a3:4e:19:
df:f4:53:88:08:41:2a:b9:78:1a:ec:40:d4:6b:c0:70:00:e7:
1d:01:4e:31:e3:9c:f8:b1:94:46:9a:19:03:3b:df:db:27:a0:
27:38:8a:c9:52:82:d0:b5:34:2a:f8:21:2d:d4:6f:8d:87:c6:
55:1c:58:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:50:06 2025 by rpki-client