Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/481786-77fd-4316-96ce-822b842c3c0e/1/4iJ3_fZYKO9AtYzhAZRllVB_EzA.mft
File: 4iJ3_fZYKO9AtYzhAZRllVB_EzA.mft (raw, json)
Hash identifier: LVYcGuAvnpUywr/AW4Euz1FPQnpYuRIn+OA3UPkl4nM=
Subject key identifier: 59:2C:E5:57:BB:E3:39:3F:2C:A1:6B:4D:14:C5:FD:9E:8D:41:93:51
Authority key identifier: E2:22:77:FD:F6:58:28:EF:40:B5:8C:E1:01:94:65:95:50:7F:13:30
Certificate issuer: /CN=e22277fdf65828ef40b58ce101946595507f1330
Certificate serial: 0197B6A10A20C6CC0845E1A913813FC56B58
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4iJ3_fZYKO9AtYzhAZRllVB_EzA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/481786-77fd-4316-96ce-822b842c3c0e/1/4iJ3_fZYKO9AtYzhAZRllVB_EzA.mft
Manifest number: 15B5
Signing time: Sat 28 Jun 2025 13:01:36 +0000
Manifest this update: Sat 28 Jun 2025 13:01:36 +0000
Manifest next update: Sun 29 Jun 2025 13:01:36 +0000
Files and hashes: 1: 4iJ3_fZYKO9AtYzhAZRllVB_EzA.crl (hash: +bQMkKgK5dM1oicg0r9FVfxu6zrze/MR1J0Atlf9OFQ=)
2: aWUQzBuRutK2_qLKMIBREYhWNS0.roa (hash: EEbZn4pmevKGtGGTKH3kqnYuG7haulAx42CNa2YJjd0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/481786-77fd-4316-96ce-822b842c3c0e/1/4iJ3_fZYKO9AtYzhAZRllVB_EzA.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/481786-77fd-4316-96ce-822b842c3c0e/1/4iJ3_fZYKO9AtYzhAZRllVB_EzA.mft
rsync://rpki.ripe.net/repository/DEFAULT/4iJ3_fZYKO9AtYzhAZRllVB_EzA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 13:01:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a1:0a:20:c6:cc:08:45:e1:a9:13:81:3f:c5:6b:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e22277fdf65828ef40b58ce101946595507f1330
Validity
Not Before: Jun 28 13:01:36 2025 GMT
Not After : Jun 29 13:01:36 2025 GMT
Subject: CN=592ce557bbe3393f2ca16b4d14c5fd9e8d419351
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:bc:03:18:17:5e:c5:fd:14:15:c5:ac:12:d9:
a3:ec:38:55:c4:8b:f7:ec:4e:d9:5e:99:e3:17:c0:
9e:c0:41:a3:ce:3a:c0:89:1a:aa:8a:cb:1b:1e:3f:
82:1d:bd:54:74:64:88:c2:52:a6:1f:04:38:dd:38:
f8:ed:9e:d7:2a:61:8c:8b:67:db:4b:ab:c1:d6:29:
8e:44:59:0c:80:b3:46:db:ce:32:e4:55:b6:fe:29:
98:f5:44:5e:c5:35:e3:87:6f:4d:d4:ed:b1:c0:5a:
39:6a:71:98:62:38:45:99:c6:95:79:e4:33:5c:8f:
2c:32:5d:8e:ba:ff:60:e3:30:c7:c1:c5:61:18:6d:
3f:87:df:d1:a3:50:d6:51:e0:67:59:58:6a:3e:4b:
49:f7:b2:a8:4f:5f:0b:60:10:b9:c1:76:5c:d5:48:
f4:a9:2c:1b:2c:f5:38:61:f6:c4:68:79:28:b5:51:
f8:b7:2c:e3:99:e5:14:74:8b:cb:af:d0:ec:c7:64:
8d:ab:73:f9:ed:75:08:f1:94:c4:91:43:56:c6:9a:
04:ac:48:51:4c:0f:da:f0:dd:b8:d6:df:4b:e2:6c:
f5:56:7c:cc:6d:0a:18:3f:1b:37:ae:e5:93:47:45:
e1:9f:d0:2b:43:56:30:97:99:cd:9d:5b:94:db:8f:
28:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:2C:E5:57:BB:E3:39:3F:2C:A1:6B:4D:14:C5:FD:9E:8D:41:93:51
X509v3 Authority Key Identifier:
keyid:E2:22:77:FD:F6:58:28:EF:40:B5:8C:E1:01:94:65:95:50:7F:13:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4iJ3_fZYKO9AtYzhAZRllVB_EzA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/481786-77fd-4316-96ce-822b842c3c0e/1/4iJ3_fZYKO9AtYzhAZRllVB_EzA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/481786-77fd-4316-96ce-822b842c3c0e/1/4iJ3_fZYKO9AtYzhAZRllVB_EzA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:af:fc:e7:3e:cb:e6:2f:22:33:c8:d1:95:a5:4a:4c:ea:f1:
12:6b:7c:f8:9b:2c:d0:1e:d9:b2:d1:1d:44:14:1b:37:d5:d5:
52:90:65:de:9c:18:5f:92:2f:73:20:67:4e:0f:92:8a:50:06:
b3:18:62:58:6e:89:ad:29:5f:cb:ba:60:3e:23:b5:00:f7:43:
4d:ab:52:55:90:68:21:79:64:a8:2a:a2:16:2d:04:06:c3:93:
cc:c1:23:72:4c:b4:aa:bb:e1:b4:87:16:84:e3:4a:d7:38:83:
ce:60:db:5d:8f:d4:a0:24:fe:a7:d0:7b:3c:50:50:4d:b4:79:
2c:fe:28:e0:3a:0d:80:52:fd:18:4d:be:ca:a3:a4:91:ca:94:
ab:b7:3e:c8:14:6f:c4:e3:5a:02:25:82:4c:4c:e2:af:9f:44:
68:72:d5:86:74:93:47:e7:81:7d:c6:ed:62:5c:03:30:f0:12:
a3:f9:5f:03:f6:7b:b8:60:36:66:bf:f9:d2:23:fb:3c:9e:80:
73:2c:b7:b8:dc:40:1b:eb:47:1d:8f:aa:50:52:b9:b2:71:2c:
7c:31:8c:48:f4:81:e9:26:95:0d:9f:b9:60:14:00:2c:5f:9a:
ed:54:92:76:e1:81:c9:39:57:66:39:37:39:07:c3:47:ec:dc:
f6:45:3e:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 20:49:17 2025 by rpki-client