Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/379816-d6b4-42b5-95ad-fe27921e1542/1/e4k4XAACMwsJZWeyFRTY4bwJaJ8.mft
File: e4k4XAACMwsJZWeyFRTY4bwJaJ8.mft (raw, json)
Hash identifier: /O5gJ91sl3pwXTDwzphRwAuJw5ZWvJlmCUzj7Oirvi4=
Subject key identifier: 22:72:E3:D7:10:45:7E:75:AF:54:C5:34:BF:7E:65:76:F6:43:12:D1
Authority key identifier: 7B:89:38:5C:00:02:33:0B:09:65:67:B2:15:14:D8:E1:BC:09:68:9F
Certificate issuer: /CN=7b89385c0002330b096567b21514d8e1bc09689f
Certificate serial: 0197B70E7D71020FB5E58508C48227A3530A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/e4k4XAACMwsJZWeyFRTY4bwJaJ8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/379816-d6b4-42b5-95ad-fe27921e1542/1/e4k4XAACMwsJZWeyFRTY4bwJaJ8.mft
Manifest number: 15B8
Signing time: Sat 28 Jun 2025 15:01:09 +0000
Manifest this update: Sat 28 Jun 2025 15:01:09 +0000
Manifest next update: Sun 29 Jun 2025 15:01:09 +0000
Files and hashes: 1: cLYB6l9FZL9zQXyfpqoagDuHdic.roa (hash: bfsqI0s1izdNOdCWZ5Wt/vOuavl9t3l+ssIuSAYSQTY=)
2: e4k4XAACMwsJZWeyFRTY4bwJaJ8.crl (hash: Dgpugq5P9tLjB8SO770hsuTEJWZiQChtJneWG2nh4C0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/379816-d6b4-42b5-95ad-fe27921e1542/1/e4k4XAACMwsJZWeyFRTY4bwJaJ8.crl
rsync://rpki.ripe.net/repository/DEFAULT/28/379816-d6b4-42b5-95ad-fe27921e1542/1/e4k4XAACMwsJZWeyFRTY4bwJaJ8.mft
rsync://rpki.ripe.net/repository/DEFAULT/e4k4XAACMwsJZWeyFRTY4bwJaJ8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:0e:7d:71:02:0f:b5:e5:85:08:c4:82:27:a3:53:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7b89385c0002330b096567b21514d8e1bc09689f
Validity
Not Before: Jun 28 15:01:09 2025 GMT
Not After : Jun 29 15:01:09 2025 GMT
Subject: CN=2272e3d710457e75af54c534bf7e6576f64312d1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:02:e1:93:e3:99:76:a9:d9:37:6a:e9:c5:37:
f5:ab:dd:4c:39:14:9b:54:a3:f3:9f:1f:95:8c:43:
70:a6:b8:3d:c3:45:ef:05:10:c0:f3:0a:b1:44:ea:
f5:59:a7:16:8d:a0:e0:51:18:69:38:c7:be:28:72:
0b:13:23:6a:f3:88:45:ad:5e:34:b8:0c:c5:3a:18:
6d:a3:dc:a4:b2:a4:49:f4:f2:2d:25:29:91:77:11:
b3:78:41:f5:db:87:94:e1:90:0d:93:77:e9:66:98:
a1:de:e4:8b:1e:15:96:2b:52:c7:c1:dd:b4:84:3e:
8e:d8:c3:57:91:96:55:43:2a:6f:1d:b2:ff:25:81:
ad:0f:eb:2c:23:2e:d4:4b:2d:22:02:b9:3c:a5:64:
aa:09:9b:59:2c:2d:7f:80:9f:f5:76:19:0b:e9:45:
f0:8d:06:bd:c4:3e:14:d4:5c:fe:e6:b9:b6:81:d6:
62:52:02:46:35:29:d1:ff:2e:6b:12:f3:ab:f8:2d:
a0:fc:3a:87:95:aa:82:96:a0:74:3d:ca:08:9b:0b:
3b:5b:4d:4e:f6:ef:13:96:ec:43:c4:39:d7:33:90:
5e:ef:c9:7e:cc:fd:88:6f:f8:03:90:df:0e:43:71:
2a:5c:61:ce:f3:98:e6:9b:97:ca:53:1e:0a:8b:ed:
74:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:72:E3:D7:10:45:7E:75:AF:54:C5:34:BF:7E:65:76:F6:43:12:D1
X509v3 Authority Key Identifier:
keyid:7B:89:38:5C:00:02:33:0B:09:65:67:B2:15:14:D8:E1:BC:09:68:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4k4XAACMwsJZWeyFRTY4bwJaJ8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/379816-d6b4-42b5-95ad-fe27921e1542/1/e4k4XAACMwsJZWeyFRTY4bwJaJ8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/379816-d6b4-42b5-95ad-fe27921e1542/1/e4k4XAACMwsJZWeyFRTY4bwJaJ8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:f2:df:f1:79:de:cd:25:d3:a9:81:5b:f1:cc:f6:c3:fc:4a:
b2:c8:4d:25:5f:ef:4d:36:60:2a:3a:a6:cb:b1:03:46:93:d3:
6d:ca:1b:38:33:1b:ec:23:c1:83:d5:ac:c8:b3:da:01:4f:e8:
23:71:0b:84:ab:dd:34:af:9b:07:b7:80:61:69:13:e1:f2:79:
c4:9e:2d:62:da:24:4e:09:ac:51:5e:00:ba:fa:b5:9f:2d:7f:
e3:be:d4:34:2c:65:aa:e6:2f:c3:14:01:d3:37:d9:7a:bd:00:
70:3a:09:62:ab:80:f9:d8:e8:d8:47:f0:fc:bd:9c:88:04:28:
6d:6b:74:d1:36:cc:4a:dd:7b:05:ba:8c:b4:70:95:dc:3a:29:
bf:cc:de:97:5f:5c:26:4f:04:96:50:e0:83:bb:d5:5a:82:8f:
6f:db:d5:b2:b0:34:e0:3e:fc:21:25:e7:d0:d5:0b:b6:f1:c4:
80:94:3f:64:c1:af:d4:80:80:ce:91:6c:7f:9a:cb:70:d9:88:
88:2d:39:84:08:04:cb:18:79:19:15:4d:02:71:d9:2d:9d:e1:
60:73:86:1f:e5:de:d2:9d:d5:ea:3b:19:89:95:d9:a9:81:21:
94:cd:3b:0c:73:d0:25:38:9a:21:ea:1a:28:bf:64:2f:e7:16:
04:a6:78:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:22:36 2025 by rpki-client