Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/942e61-7ee6-41d4-b691-019a05ce5e7a/1/S4xZ6sloSDTLl8wq2FjVx03PbO0.mft
File: S4xZ6sloSDTLl8wq2FjVx03PbO0.mft (raw, json)
Hash identifier: ihR35rnj8SZcuqOboSpsaO8EqMC1CEz9zpVzuHqELYs=
Subject key identifier: 0D:A6:9F:7B:20:63:88:AE:90:21:97:DF:1F:D5:4D:84:61:5B:D2:69
Authority key identifier: 4B:8C:59:EA:C9:68:48:34:CB:97:CC:2A:D8:58:D5:C7:4D:CF:6C:ED
Certificate issuer: /CN=4b8c59eac9684834cb97cc2ad858d5c74dcf6ced
Certificate serial: 0197B7EAB5E8EB70D0278E63671B12BC026F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S4xZ6sloSDTLl8wq2FjVx03PbO0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/942e61-7ee6-41d4-b691-019a05ce5e7a/1/S4xZ6sloSDTLl8wq2FjVx03PbO0.mft
Manifest number: 041C
Signing time: Sat 28 Jun 2025 19:01:41 +0000
Manifest this update: Sat 28 Jun 2025 19:01:41 +0000
Manifest next update: Sun 29 Jun 2025 19:01:41 +0000
Files and hashes: 1: RX0vF7s1v3ZmCOZA2PNfN34Nc0Q.roa (hash: DL5GkVVXEPj8zi75flOVBOwBTEyMxXVt8DN9ATKiCDI=)
2: S4xZ6sloSDTLl8wq2FjVx03PbO0.crl (hash: 3BJGCkTxxivQ8WVqF6tzQxjpwn/aC6hf5msaMVGf3fk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/942e61-7ee6-41d4-b691-019a05ce5e7a/1/S4xZ6sloSDTLl8wq2FjVx03PbO0.crl
rsync://rpki.ripe.net/repository/DEFAULT/12/942e61-7ee6-41d4-b691-019a05ce5e7a/1/S4xZ6sloSDTLl8wq2FjVx03PbO0.mft
rsync://rpki.ripe.net/repository/DEFAULT/S4xZ6sloSDTLl8wq2FjVx03PbO0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:ea:b5:e8:eb:70:d0:27:8e:63:67:1b:12:bc:02:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b8c59eac9684834cb97cc2ad858d5c74dcf6ced
Validity
Not Before: Jun 28 19:01:41 2025 GMT
Not After : Jun 29 19:01:41 2025 GMT
Subject: CN=0da69f7b206388ae902197df1fd54d84615bd269
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:7c:ca:72:34:82:34:9b:aa:89:59:08:2b:2a:
8f:8e:43:7e:0b:a8:7c:09:a6:ff:f8:48:15:f0:17:
a8:50:d6:a2:9f:ea:cf:27:e6:b4:ef:6e:65:fc:73:
ee:12:a3:92:1a:ec:5b:0a:44:99:55:5e:2c:c6:1e:
4b:7c:64:3f:f8:2e:d1:41:4c:aa:43:6c:75:e3:b0:
ce:1f:8a:9c:1c:b8:c8:0a:07:3f:65:ae:06:bd:b5:
74:03:90:08:0b:f3:60:ec:c0:de:a6:ec:fb:91:a7:
74:c2:35:cc:65:04:69:46:15:78:80:a8:52:43:db:
27:cc:da:8e:c6:fa:bc:2c:09:14:b1:2f:c8:21:91:
6b:99:e1:ba:26:ed:47:d5:8d:0c:dd:18:57:ad:fb:
81:09:02:df:ac:db:04:af:0b:bd:5b:25:e5:ad:72:
0f:45:23:a7:f1:36:1c:31:97:8d:d2:33:a8:1f:ec:
aa:ba:34:1b:5d:29:14:dd:46:d2:b3:62:81:25:03:
1e:a2:bf:03:78:50:fa:89:2f:b9:bf:e1:88:99:4b:
28:4a:a6:06:3d:f6:42:fd:5c:ff:99:f1:33:90:3e:
13:e2:79:27:56:6d:84:79:b6:47:57:13:47:b0:3c:
48:92:41:db:1f:ec:58:71:b3:d1:2f:18:62:e6:48:
8b:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:A6:9F:7B:20:63:88:AE:90:21:97:DF:1F:D5:4D:84:61:5B:D2:69
X509v3 Authority Key Identifier:
keyid:4B:8C:59:EA:C9:68:48:34:CB:97:CC:2A:D8:58:D5:C7:4D:CF:6C:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S4xZ6sloSDTLl8wq2FjVx03PbO0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/942e61-7ee6-41d4-b691-019a05ce5e7a/1/S4xZ6sloSDTLl8wq2FjVx03PbO0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/942e61-7ee6-41d4-b691-019a05ce5e7a/1/S4xZ6sloSDTLl8wq2FjVx03PbO0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:35:c5:8c:da:10:50:12:19:c8:6d:8c:b4:4b:4b:d4:f7:7b:
f0:ce:dd:d0:a1:16:18:5d:eb:ca:d6:f9:4c:8c:69:c8:06:d4:
8c:a1:c8:a2:df:06:2f:f3:18:68:ee:54:85:1e:1d:ff:6c:55:
19:2c:35:6f:8d:06:d0:38:16:e2:49:0a:5e:99:bf:de:d5:d1:
c1:f9:e6:7e:df:0d:21:e6:36:ab:9e:5e:e7:5a:60:50:7d:89:
2b:3d:ff:33:d3:ef:f9:ba:68:be:aa:4b:49:e2:b5:23:ae:5e:
60:cc:de:9d:f9:65:25:a1:7b:c9:c8:f5:eb:e9:b0:45:3b:ae:
6a:fe:b4:a7:da:f4:6a:3d:97:2e:78:6e:df:f2:4d:9f:53:6f:
0a:8c:b1:a3:0c:35:13:2c:06:f2:75:89:19:96:d6:c0:b7:a2:
19:67:1b:f7:22:79:f8:88:c2:d3:60:9b:d1:9f:76:d7:ed:94:
26:80:73:a8:1d:3d:c6:86:f2:ad:ba:ad:0c:a5:fd:8e:dc:c4:
aa:40:8e:c8:e2:32:52:ff:7a:59:60:fe:9c:9f:18:b4:e1:fd:
37:ad:aa:ba:17:0f:12:a5:e3:db:f6:f2:88:af:71:c6:f2:76:
96:b8:9b:71:38:c3:5b:5d:64:fa:12:82:6d:2d:56:8f:d3:bd:
3a:47:c3:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:07:18 2025 by rpki-client