Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/f77c5b-19b2-4bc1-8faa-10b0211d96fc/1/4KE7ki7n67muzeGacNDiW3d1DQI.mft
File: 4KE7ki7n67muzeGacNDiW3d1DQI.mft (raw, json)
Hash identifier: U+b/G8J9QaFThQlS90hT6KJC0yd1MWeAeLPWxwI46P0=
Subject key identifier: 3B:99:D1:63:93:3B:7A:65:29:6F:ED:14:CE:79:40:E5:AC:9F:68:45
Authority key identifier: E0:A1:3B:92:2E:E7:EB:B9:AE:CD:E1:9A:70:D0:E2:5B:77:75:0D:02
Certificate issuer: /CN=e0a13b922ee7ebb9aecde19a70d0e25b77750d02
Certificate serial: 0197B632BB3CDD9680C14987C140B9D52605
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4KE7ki7n67muzeGacNDiW3d1DQI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/f77c5b-19b2-4bc1-8faa-10b0211d96fc/1/4KE7ki7n67muzeGacNDiW3d1DQI.mft
Manifest number: 0BA8
Signing time: Sat 28 Jun 2025 11:01:07 +0000
Manifest this update: Sat 28 Jun 2025 11:01:07 +0000
Manifest next update: Sun 29 Jun 2025 11:01:07 +0000
Files and hashes: 1: 4KE7ki7n67muzeGacNDiW3d1DQI.crl (hash: jef0LLkuQPS05WHOTyzWKqr2xWmlL/MeNC0D8emrThY=)
2: Y8AXUYDP-qGUFi9hzn6P0gBawaM.roa (hash: PbgeAgI/Sj2ZS05Cb4sm9ySYZjOm8LnX+ij5E01wZBw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/f77c5b-19b2-4bc1-8faa-10b0211d96fc/1/4KE7ki7n67muzeGacNDiW3d1DQI.crl
rsync://rpki.ripe.net/repository/DEFAULT/31/f77c5b-19b2-4bc1-8faa-10b0211d96fc/1/4KE7ki7n67muzeGacNDiW3d1DQI.mft
rsync://rpki.ripe.net/repository/DEFAULT/4KE7ki7n67muzeGacNDiW3d1DQI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:32:bb:3c:dd:96:80:c1:49:87:c1:40:b9:d5:26:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e0a13b922ee7ebb9aecde19a70d0e25b77750d02
Validity
Not Before: Jun 28 11:01:07 2025 GMT
Not After : Jun 29 11:01:07 2025 GMT
Subject: CN=3b99d163933b7a65296fed14ce7940e5ac9f6845
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:fc:9b:d8:30:92:6e:2e:ff:b1:ee:a6:0b:62:
14:80:a0:de:62:e1:69:5a:a7:c5:e4:77:4e:e1:fc:
f3:7a:50:14:68:6d:28:97:2e:66:cb:33:07:3c:89:
50:e0:fc:c8:d0:c1:36:a1:50:8c:e8:6b:54:fd:4a:
30:76:ee:3a:3b:a3:f8:d4:a0:40:ed:c4:ad:cd:e9:
44:33:c9:f3:f1:bd:47:df:1d:9a:5f:4e:79:ae:d6:
77:5c:4b:d6:67:18:f0:f8:54:1a:2c:d9:3e:27:f4:
a7:71:ee:71:57:b1:19:71:e5:ab:1a:44:40:ed:bf:
1a:c4:ca:b5:97:94:f6:72:78:b5:69:64:34:cf:18:
5b:81:21:5a:d8:13:25:c8:fb:a0:7a:c3:08:9d:78:
12:b5:3e:86:39:3f:fe:de:5b:3e:f3:fc:3f:f2:03:
9a:9f:1a:1e:6c:f6:df:d9:53:2a:f7:15:b1:8c:62:
b7:94:43:cb:52:36:44:f7:a3:27:c7:94:78:da:f0:
8a:45:10:51:eb:95:04:15:02:0a:9a:3e:43:45:31:
1f:31:bc:9f:fe:08:ba:a9:28:fa:67:33:1e:09:5f:
d6:fd:da:57:53:d5:43:1f:c5:dc:28:57:ce:10:69:
87:12:9b:be:93:35:fe:bf:f1:d2:eb:21:84:a0:0e:
68:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:99:D1:63:93:3B:7A:65:29:6F:ED:14:CE:79:40:E5:AC:9F:68:45
X509v3 Authority Key Identifier:
keyid:E0:A1:3B:92:2E:E7:EB:B9:AE:CD:E1:9A:70:D0:E2:5B:77:75:0D:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4KE7ki7n67muzeGacNDiW3d1DQI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/f77c5b-19b2-4bc1-8faa-10b0211d96fc/1/4KE7ki7n67muzeGacNDiW3d1DQI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/f77c5b-19b2-4bc1-8faa-10b0211d96fc/1/4KE7ki7n67muzeGacNDiW3d1DQI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:56:e5:a4:f6:21:e7:51:d5:c5:34:03:42:4d:c0:79:c3:b6:
e9:98:b2:ac:8c:ce:96:1f:37:b2:dc:60:a9:80:9b:e4:93:e4:
b1:7b:f3:e3:3c:54:3d:17:ea:5f:56:76:8b:05:0a:ff:a5:95:
94:06:a3:59:7f:92:54:84:b3:5c:a8:01:45:51:4e:ce:12:d8:
b6:66:c0:21:0d:67:91:be:a0:bc:89:9a:3b:75:35:44:49:3a:
02:d3:a3:df:2a:d3:9c:5c:b1:1f:0a:9b:e8:4e:9b:cc:8f:0c:
9d:b3:69:35:01:47:14:3c:23:fe:9c:f1:5c:b2:8f:c2:a0:bd:
1a:b6:b9:65:9d:0e:a2:b1:33:6c:d2:a6:0b:85:db:e6:fc:cd:
02:de:1f:b5:22:6e:bd:d9:eb:e1:10:b8:d7:f9:ce:60:0f:14:
4b:2b:3a:28:0c:f5:d6:88:99:52:bd:0e:cd:8c:88:d8:9d:3a:
de:94:ca:d4:eb:7c:09:ea:46:05:72:87:a1:c7:e7:9a:80:34:
28:9d:89:7e:71:02:96:f4:fb:6b:bc:00:84:9b:c9:8d:c6:ae:
91:15:d1:cb:97:3b:3a:75:67:97:61:66:3b:a8:b7:09:26:96:
9d:a0:33:40:79:ea:90:9a:44:ff:35:9a:11:ce:e9:a7:78:51:
7e:91:9c:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 20:04:08 2025 by rpki-client