Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/be9dab-5f27-43ce-ab22-739a91c620ac/1/4HdrCDj6Dh2hvk7cz4kkvUE7Hbc.mft
File: 4HdrCDj6Dh2hvk7cz4kkvUE7Hbc.mft (raw, json)
Hash identifier: ZuzrT++ChoiBzTha1FG00FbHD9aEevLp3+mg4QnpoCA=
Subject key identifier: 2B:4B:E8:2B:BB:A0:24:35:51:A1:BA:F4:7F:6E:4D:F0:4D:5D:A6:95
Authority key identifier: E0:77:6B:08:38:FA:0E:1D:A1:BE:4E:DC:CF:89:24:BD:41:3B:1D:B7
Certificate issuer: /CN=e0776b0838fa0e1da1be4edccf8924bd413b1db7
Certificate serial: 0197BA0F6EE477227CC226831B9B45884F30
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4HdrCDj6Dh2hvk7cz4kkvUE7Hbc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/be9dab-5f27-43ce-ab22-739a91c620ac/1/4HdrCDj6Dh2hvk7cz4kkvUE7Hbc.mft
Manifest number: 014C
Signing time: Sun 29 Jun 2025 05:01:02 +0000
Manifest this update: Sun 29 Jun 2025 05:01:02 +0000
Manifest next update: Mon 30 Jun 2025 05:01:02 +0000
Files and hashes: 1: 4HdrCDj6Dh2hvk7cz4kkvUE7Hbc.crl (hash: gGAXy0aVsz0QKb+sqvbVDlN/yvJNsk/r8zvE78qIbSc=)
2: U8sue3gZLueOLUNHI3zh7NTbaBA.roa (hash: aGzdRWMTM0/YLdPvutTc1s3WsmhuwZtks1XpZ/1ew6k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/be9dab-5f27-43ce-ab22-739a91c620ac/1/4HdrCDj6Dh2hvk7cz4kkvUE7Hbc.crl
rsync://rpki.ripe.net/repository/DEFAULT/2d/be9dab-5f27-43ce-ab22-739a91c620ac/1/4HdrCDj6Dh2hvk7cz4kkvUE7Hbc.mft
rsync://rpki.ripe.net/repository/DEFAULT/4HdrCDj6Dh2hvk7cz4kkvUE7Hbc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Jun 2025 04:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:ba:0f:6e:e4:77:22:7c:c2:26:83:1b:9b:45:88:4f:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e0776b0838fa0e1da1be4edccf8924bd413b1db7
Validity
Not Before: Jun 29 05:01:02 2025 GMT
Not After : Jun 30 05:01:02 2025 GMT
Subject: CN=2b4be82bbba0243551a1baf47f6e4df04d5da695
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:0a:b3:2c:0d:a5:8e:d9:16:8d:95:c0:a2:97:
13:5a:c3:d2:67:42:16:06:58:e8:1b:73:9e:77:f7:
5a:c6:f6:20:79:7f:1e:f2:99:be:46:34:46:0f:b1:
15:4b:f4:95:f5:f4:47:1c:58:04:b9:2c:11:ca:62:
2f:d2:bf:5e:12:04:9e:6a:bd:5d:cf:f9:60:50:96:
18:7a:fb:b2:a3:4f:27:ed:a3:8e:87:8c:22:e6:7e:
51:c9:c9:7d:7a:de:a9:2c:00:18:7d:26:2c:5f:3d:
78:98:b1:a6:d1:27:40:10:b0:49:ec:fa:8e:85:79:
64:90:4f:e8:87:09:5e:19:3d:55:a3:6c:a7:d6:e8:
cf:42:af:15:ac:2d:36:ce:26:6f:0c:b1:18:e3:04:
42:a6:ab:52:a1:a8:d4:40:97:05:3b:64:fe:63:84:
ff:1b:eb:aa:c3:e4:7a:e8:b4:e2:35:17:98:20:55:
ba:61:28:a5:58:7c:ba:1d:20:4b:35:5b:3d:aa:91:
a1:92:07:50:4e:f6:91:f1:a3:30:58:2b:d8:3f:84:
a6:cc:56:a6:fa:99:55:36:04:5e:c3:0f:b1:7e:af:
88:54:b8:1f:e4:86:ff:d4:23:d5:b7:57:89:bf:85:
52:b6:ec:5e:31:a5:74:1f:9d:f6:d3:b3:61:ef:79:
f6:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:4B:E8:2B:BB:A0:24:35:51:A1:BA:F4:7F:6E:4D:F0:4D:5D:A6:95
X509v3 Authority Key Identifier:
keyid:E0:77:6B:08:38:FA:0E:1D:A1:BE:4E:DC:CF:89:24:BD:41:3B:1D:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4HdrCDj6Dh2hvk7cz4kkvUE7Hbc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/be9dab-5f27-43ce-ab22-739a91c620ac/1/4HdrCDj6Dh2hvk7cz4kkvUE7Hbc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/be9dab-5f27-43ce-ab22-739a91c620ac/1/4HdrCDj6Dh2hvk7cz4kkvUE7Hbc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:cb:ad:06:56:be:65:f3:89:49:b0:15:47:8d:de:a9:5e:87:
04:ae:f2:ce:e0:fd:c4:2c:77:de:24:7e:38:65:bc:ca:19:76:
86:51:97:2a:d5:89:d0:cb:a3:84:ef:c1:61:29:20:5b:2d:73:
42:b1:5a:36:13:4a:f0:c7:ea:55:d0:a8:80:26:59:d2:10:bb:
92:d1:af:27:5d:af:3c:e7:d8:79:e3:fa:94:c6:e4:80:32:7f:
99:5c:3c:68:5c:3e:10:d6:15:62:7a:b2:eb:d7:a8:9c:ee:79:
14:df:ec:11:50:1d:c2:88:5f:e5:3f:52:5f:3b:21:b0:25:4a:
e5:ab:82:cf:8e:ad:4e:62:83:7b:37:13:9b:33:db:96:a2:88:
56:9c:49:dd:07:3f:2a:2c:71:fc:55:7b:0a:46:9f:58:4a:fe:
94:d9:6b:5e:51:d3:b4:a5:84:cd:5b:d9:24:bf:ca:ac:3c:bd:
a1:91:db:40:f6:cb:1a:43:25:cf:f9:15:ed:1a:82:0c:41:ac:
d3:b8:82:de:a2:8d:2f:74:d1:97:0c:d2:5b:77:3f:bb:b7:0a:
d2:ef:21:50:e9:00:40:ec:20:ce:9f:27:e0:cf:64:64:de:be:
14:b2:23:c5:91:6e:f3:7a:de:41:33:a8:20:c8:46:01:f1:1c:
5c:a9:c1:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 14:25:22 2025 by rpki-client