Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/ba2391-05a1-4bcb-a61d-e5d8e3750009/1/r4Tj0j_2C4KeFG69q0oK5h3g9Ps.mft
File: r4Tj0j_2C4KeFG69q0oK5h3g9Ps.mft (raw, json)
Hash identifier: +ASMD0IHGggZGalOBuXOhTdY/Mqe/Yu4L7cWEo655vU=
Subject key identifier: 04:60:1E:8B:D6:2A:CE:EC:7B:0E:10:77:83:CC:81:C7:EF:23:88:B8
Authority key identifier: AF:84:E3:D2:3F:F6:0B:82:9E:14:6E:BD:AB:4A:0A:E6:1D:E0:F4:FB
Certificate issuer: /CN=af84e3d23ff60b829e146ebdab4a0ae61de0f4fb
Certificate serial: 0197CBDEA364D3F6B106897EADDC0812C949
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r4Tj0j_2C4KeFG69q0oK5h3g9Ps.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/ba2391-05a1-4bcb-a61d-e5d8e3750009/1/r4Tj0j_2C4KeFG69q0oK5h3g9Ps.mft
Manifest number: 60
Signing time: Wed 02 Jul 2025 16:00:54 +0000
Manifest this update: Wed 02 Jul 2025 16:00:54 +0000
Manifest next update: Thu 03 Jul 2025 16:00:54 +0000
Files and hashes: 1: Sj_-Ptmp5l-zNzTgHXDKWr6DNsQ.roa (hash: S/l02EQhWoa3TBsVB+OnLc92uLdAeVgn7Z4178pnmT4=)
2: r4Tj0j_2C4KeFG69q0oK5h3g9Ps.crl (hash: 1ohWrerDMMtAmX+NfkpNyMoAmU7p16RgRj9FgtbzCrk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/ba2391-05a1-4bcb-a61d-e5d8e3750009/1/r4Tj0j_2C4KeFG69q0oK5h3g9Ps.crl
rsync://rpki.ripe.net/repository/DEFAULT/15/ba2391-05a1-4bcb-a61d-e5d8e3750009/1/r4Tj0j_2C4KeFG69q0oK5h3g9Ps.mft
rsync://rpki.ripe.net/repository/DEFAULT/r4Tj0j_2C4KeFG69q0oK5h3g9Ps.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 03 Jul 2025 16:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:cb:de:a3:64:d3:f6:b1:06:89:7e:ad:dc:08:12:c9:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=af84e3d23ff60b829e146ebdab4a0ae61de0f4fb
Validity
Not Before: Jul 2 16:00:54 2025 GMT
Not After : Jul 3 16:00:54 2025 GMT
Subject: CN=04601e8bd62aceec7b0e107783cc81c7ef2388b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:02:ed:ba:34:3b:15:62:38:08:c0:ca:50:fc:
df:02:22:51:95:77:d5:99:f0:79:85:9c:79:c5:ca:
3c:da:93:58:2e:c5:0c:3b:33:e9:ca:61:52:6b:ab:
cd:3c:10:77:1f:78:dd:bc:ba:36:03:49:86:c1:a3:
f4:79:85:5d:82:73:85:19:f1:dd:61:a3:4e:b5:5c:
03:ba:bf:a9:6c:2f:f8:be:d4:01:1f:0c:7d:eb:83:
50:8f:e9:14:de:09:9e:5c:dd:e7:9a:56:0d:e9:70:
eb:69:9b:ce:15:98:d7:af:10:2c:d7:ac:92:85:09:
ec:33:d3:c4:56:07:2d:c7:d1:92:1c:5f:cf:11:9e:
f5:61:48:c6:85:37:92:64:6c:00:52:60:86:92:a8:
61:c9:21:ec:34:23:a6:40:6c:84:9a:f2:4b:a9:b8:
f7:1e:d0:c6:17:49:89:a0:0c:02:03:93:f0:eb:4f:
11:f4:6e:68:96:68:47:a6:05:3d:b9:51:07:0a:90:
8d:75:04:f6:64:c5:50:f7:22:81:aa:84:2f:6a:df:
21:0c:70:81:f8:bc:3e:e4:25:5a:df:5f:b2:55:52:
dd:f2:0c:f3:11:51:7f:f3:13:9f:c8:38:ba:c7:73:
98:76:04:56:44:e7:28:5d:64:1c:97:90:09:ef:33:
37:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:60:1E:8B:D6:2A:CE:EC:7B:0E:10:77:83:CC:81:C7:EF:23:88:B8
X509v3 Authority Key Identifier:
keyid:AF:84:E3:D2:3F:F6:0B:82:9E:14:6E:BD:AB:4A:0A:E6:1D:E0:F4:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r4Tj0j_2C4KeFG69q0oK5h3g9Ps.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/ba2391-05a1-4bcb-a61d-e5d8e3750009/1/r4Tj0j_2C4KeFG69q0oK5h3g9Ps.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/ba2391-05a1-4bcb-a61d-e5d8e3750009/1/r4Tj0j_2C4KeFG69q0oK5h3g9Ps.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
08:9f:9b:33:a4:01:da:4e:39:a6:c6:5e:82:7b:d8:97:5a:22:
a9:da:f2:86:16:19:10:aa:38:f7:87:36:e1:fe:47:36:c9:cd:
07:8e:34:5e:98:a1:47:a1:f3:a4:61:24:9a:3e:9c:b3:2f:fd:
11:0a:fb:cb:ae:d5:b8:4f:c8:ad:9a:93:12:a4:f7:00:95:c6:
98:d2:75:18:b2:b1:ec:3a:72:2f:78:cb:81:5f:23:2d:db:ca:
63:af:6d:7b:a7:8e:b1:76:c8:ae:9c:77:34:49:a5:a4:56:93:
0f:ea:f1:80:75:67:2a:d9:4f:76:d5:dd:11:de:4a:3f:6f:b6:
4e:ba:af:ca:e3:66:17:8b:18:66:42:90:4e:dd:e5:df:f7:7f:
d9:c2:cb:0b:fd:aa:98:13:c9:87:7d:f3:32:56:f2:d1:84:8d:
e7:c5:21:9c:52:b2:29:40:da:0a:ae:d5:29:62:2b:30:22:f1:
f2:37:df:d9:de:18:0e:c4:4a:bc:5f:3f:6e:57:0a:3b:b9:3e:
51:2d:18:bf:b8:34:75:ed:be:50:d8:a1:d0:f7:fa:91:f8:53:
17:20:5d:97:24:e5:d4:35:ed:49:08:d7:9c:9b:7c:dc:7b:b1:
d5:47:3e:0a:0d:37:f3:df:1e:2f:d3:6f:10:86:96:30:ba:90:
95:b3:10:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 2 23:16:10 2025 by rpki-client