Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/2435cc-5533-4f70-bb82-9caf25a499d7/1/4sE3EGwaRq6gfCSxFyn9fSFqJPU.mft
File: 4sE3EGwaRq6gfCSxFyn9fSFqJPU.mft (raw, json)
Hash identifier: 1yYuywZFYuKRPrAQLA1QEmJDHkzCfgTboGqrVjNdLa0=
Subject key identifier: B4:CA:78:A3:3A:AA:C0:92:04:C6:74:17:CE:22:3B:30:B3:D6:84:37
Authority key identifier: E2:C1:37:10:6C:1A:46:AE:A0:7C:24:B1:17:29:FD:7D:21:6A:24:F5
Certificate issuer: /CN=e2c137106c1a46aea07c24b11729fd7d216a24f5
Certificate serial: 0197B6A1FA4F94AA00763E42C7F5D3B81CAE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4sE3EGwaRq6gfCSxFyn9fSFqJPU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/2435cc-5533-4f70-bb82-9caf25a499d7/1/4sE3EGwaRq6gfCSxFyn9fSFqJPU.mft
Manifest number: 0BFD
Signing time: Sat 28 Jun 2025 13:02:38 +0000
Manifest this update: Sat 28 Jun 2025 13:02:38 +0000
Manifest next update: Sun 29 Jun 2025 13:02:38 +0000
Files and hashes: 1: 4sE3EGwaRq6gfCSxFyn9fSFqJPU.crl (hash: du6xytplpHBcQ4FOSaKStjbUTpAXvh70X/2ch/pJKP8=)
2: f9bSypnQ1K1dn8AOmITCAE2WfeM.roa (hash: laJDW9FEQ26/eBw7OzSphhRdw2m3zDOPQril8cOuxC0=)
3: qF1Sjwc0E4igMvbiTG0GFEV_V8w.roa (hash: C2rdzoCh63UKjy4imOMfxu3Z/XTp23zoXQCrUfaLgrk=)
4: wr0uj1SbyF4a3afbyHifWHkLV18.roa (hash: whbGKVVedV+YGL/Rez8V9NgGyEYM+j686HKrZpVv8SA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1d/2435cc-5533-4f70-bb82-9caf25a499d7/1/4sE3EGwaRq6gfCSxFyn9fSFqJPU.crl
rsync://rpki.ripe.net/repository/DEFAULT/1d/2435cc-5533-4f70-bb82-9caf25a499d7/1/4sE3EGwaRq6gfCSxFyn9fSFqJPU.mft
rsync://rpki.ripe.net/repository/DEFAULT/4sE3EGwaRq6gfCSxFyn9fSFqJPU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 13:02:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a1:fa:4f:94:aa:00:76:3e:42:c7:f5:d3:b8:1c:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e2c137106c1a46aea07c24b11729fd7d216a24f5
Validity
Not Before: Jun 28 13:02:38 2025 GMT
Not After : Jun 29 13:02:38 2025 GMT
Subject: CN=b4ca78a33aaac09204c67417ce223b30b3d68437
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:cb:1d:7e:86:7b:b2:a9:b2:78:ab:0a:20:75:
09:22:07:d6:d5:e0:b6:37:01:ea:df:47:2b:f9:c0:
ee:37:70:ac:e6:d8:e3:f9:e5:f4:66:76:70:67:ea:
68:f5:2b:af:10:b2:47:40:91:d9:fa:c3:04:e8:b7:
79:01:43:20:fe:39:00:23:3d:97:d8:8d:ec:2b:00:
b4:88:e4:10:7c:22:52:5f:d3:01:5d:23:6f:e4:2f:
e8:2e:2b:50:d1:91:32:30:4c:74:20:c9:04:01:3a:
46:7e:d8:84:36:d2:51:bc:32:8f:de:f1:b6:51:f4:
18:97:f3:85:40:41:29:d3:bc:2a:41:c0:6e:6e:9e:
d3:70:af:23:34:fe:f9:a0:33:0c:34:90:f0:b9:81:
6d:27:df:fc:14:cf:e1:40:9b:9f:fe:b2:46:50:20:
63:3d:96:8a:b4:d0:22:97:c8:46:2d:25:a4:85:33:
fe:7d:e0:69:fb:11:93:af:7b:8e:95:89:ac:44:c1:
55:e9:99:99:77:16:79:cb:38:b5:eb:08:73:f5:db:
e3:b0:28:e0:38:d2:f7:cd:52:02:28:98:12:e8:d3:
b3:4d:e5:8e:9f:7b:43:ea:8a:6b:88:ac:4c:c6:0f:
99:da:31:05:d0:12:42:d4:2f:c0:6c:57:c2:52:42:
a6:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:CA:78:A3:3A:AA:C0:92:04:C6:74:17:CE:22:3B:30:B3:D6:84:37
X509v3 Authority Key Identifier:
keyid:E2:C1:37:10:6C:1A:46:AE:A0:7C:24:B1:17:29:FD:7D:21:6A:24:F5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4sE3EGwaRq6gfCSxFyn9fSFqJPU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/2435cc-5533-4f70-bb82-9caf25a499d7/1/4sE3EGwaRq6gfCSxFyn9fSFqJPU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/2435cc-5533-4f70-bb82-9caf25a499d7/1/4sE3EGwaRq6gfCSxFyn9fSFqJPU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
cb:29:f0:06:62:fc:df:94:cf:e3:00:0f:90:03:d0:7f:cd:94:
5e:91:13:13:53:77:56:a2:48:6b:8f:bd:29:4c:0c:a2:a4:a4:
bb:ce:cd:a7:6c:53:c9:24:e2:2b:79:86:99:d3:62:5a:e0:34:
9e:1b:68:d9:eb:d5:9d:ac:09:d9:25:c4:f9:7f:06:4d:13:10:
c7:40:15:fa:ea:2f:3e:f0:57:a7:e9:21:ef:02:4e:15:b3:65:
fc:b2:15:fd:61:5b:5a:0e:41:19:b0:28:13:11:41:32:96:32:
40:2d:a0:9f:29:c4:be:67:b7:ac:6b:97:4b:a0:9e:97:51:38:
86:6e:f1:81:c2:b8:c9:53:ef:75:2e:2c:ce:68:c1:95:5a:3c:
b9:97:ca:f7:b7:b0:cb:d8:9f:c2:d6:45:36:df:13:97:97:6e:
df:67:6e:d0:1c:a0:eb:61:89:7f:8a:c2:e6:fa:c2:9d:f5:28:
17:1a:ab:26:72:9e:b1:08:fd:55:4c:32:6d:12:d3:01:42:a0:
92:39:e0:22:ca:87:6b:be:f9:74:9a:c1:47:aa:d8:04:64:b4:
3e:ff:0d:4f:45:a6:1b:43:cb:d8:2b:d2:c2:79:75:ec:5f:34:
17:dd:4f:7d:d4:4e:2e:96:5a:7d:df:e9:4a:b3:ef:9b:1f:bd:
72:e1:0b:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 22:42:23 2025 by rpki-client