Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/30b8e9-e7d4-40cc-ad5f-3c741220ea00/1/t4zdv8dr2iagKeqAyJh3mHRfHwI.mft
File: t4zdv8dr2iagKeqAyJh3mHRfHwI.mft (raw, json)
Hash identifier: pKoNox1Mm184jQ9fBRV7NaoC6Yx2U3CoY+QTTivF5IY=
Subject key identifier: 71:5E:F9:76:10:34:78:6C:D8:49:C8:E6:FF:1D:F8:3B:58:A7:44:99
Authority key identifier: B7:8C:DD:BF:C7:6B:DA:26:A0:29:EA:80:C8:98:77:98:74:5F:1F:02
Certificate issuer: /CN=b78cddbfc76bda26a029ea80c8987798745f1f02
Certificate serial: 0197B6A22408D059659E152C8C977434BDD3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/t4zdv8dr2iagKeqAyJh3mHRfHwI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/30b8e9-e7d4-40cc-ad5f-3c741220ea00/1/t4zdv8dr2iagKeqAyJh3mHRfHwI.mft
Manifest number: 1269
Signing time: Sat 28 Jun 2025 13:02:48 +0000
Manifest this update: Sat 28 Jun 2025 13:02:48 +0000
Manifest next update: Sun 29 Jun 2025 13:02:48 +0000
Files and hashes: 1: 4ZMkun0YVKsQhMtugX5PoEy0_rI.roa (hash: fKBmMFAsGdJAHOCtTHbLGukOIg/BNTMMvT6hLSCBWOk=)
2: 9SX4KosI9EGxvqBg-r1JnjKT0ZM.roa (hash: WqcTzSMCYbly9wYW2w55k/ugMgucEMXzGeFeea+G7IU=)
3: t4zdv8dr2iagKeqAyJh3mHRfHwI.crl (hash: KgTmcTpDHe8cfJfP7jUJtu42+jtewSgP7ObXAlKDGNo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/30b8e9-e7d4-40cc-ad5f-3c741220ea00/1/t4zdv8dr2iagKeqAyJh3mHRfHwI.crl
rsync://rpki.ripe.net/repository/DEFAULT/4a/30b8e9-e7d4-40cc-ad5f-3c741220ea00/1/t4zdv8dr2iagKeqAyJh3mHRfHwI.mft
rsync://rpki.ripe.net/repository/DEFAULT/t4zdv8dr2iagKeqAyJh3mHRfHwI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 13:02:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a2:24:08:d0:59:65:9e:15:2c:8c:97:74:34:bd:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b78cddbfc76bda26a029ea80c8987798745f1f02
Validity
Not Before: Jun 28 13:02:48 2025 GMT
Not After : Jun 29 13:02:48 2025 GMT
Subject: CN=715ef9761034786cd849c8e6ff1df83b58a74499
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:de:7e:80:2e:e8:96:1c:34:a4:de:64:a3:00:
0d:3e:ec:fd:56:a3:45:d7:34:35:30:62:23:37:9f:
68:34:ff:25:39:cf:b7:16:bf:f8:72:a9:fc:af:a7:
7d:68:e8:65:db:24:30:b4:ba:a1:fc:c5:e9:ff:8c:
b6:24:4e:1a:5f:98:2d:ff:88:23:c0:ee:ed:d3:99:
49:33:74:87:df:a6:80:0a:da:3e:75:06:2e:f5:cb:
3c:40:b9:50:25:27:62:5a:40:5e:29:96:6a:ac:9a:
81:8d:e2:0b:67:78:bb:37:c3:b0:35:4b:83:70:db:
70:cb:ae:4a:31:5f:85:6e:82:b9:e2:91:18:25:3b:
fc:4b:2f:e1:f4:2c:08:05:a4:6e:84:66:12:c8:d6:
11:27:8c:7b:af:b9:34:7e:4a:17:cb:ea:23:e7:e4:
98:45:f9:7d:80:44:29:c4:ef:53:3d:09:e7:10:76:
fe:d7:a8:2a:50:d9:ec:dc:9a:d7:dd:cd:13:d8:ad:
b9:96:c1:85:3c:19:d0:87:68:8f:65:8d:79:95:0f:
c6:37:05:27:45:af:d7:7e:bd:9f:b4:14:8b:b3:3e:
d1:9e:cf:7a:ee:89:c0:b5:1a:af:49:f5:58:32:7f:
ad:4e:e2:ce:88:bd:24:2a:71:ab:61:04:9c:b5:1e:
7a:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:5E:F9:76:10:34:78:6C:D8:49:C8:E6:FF:1D:F8:3B:58:A7:44:99
X509v3 Authority Key Identifier:
keyid:B7:8C:DD:BF:C7:6B:DA:26:A0:29:EA:80:C8:98:77:98:74:5F:1F:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t4zdv8dr2iagKeqAyJh3mHRfHwI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/30b8e9-e7d4-40cc-ad5f-3c741220ea00/1/t4zdv8dr2iagKeqAyJh3mHRfHwI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/30b8e9-e7d4-40cc-ad5f-3c741220ea00/1/t4zdv8dr2iagKeqAyJh3mHRfHwI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:ce:a7:2d:3b:d9:9f:d4:7c:ca:46:e5:a9:a4:94:3a:ec:67:
35:40:ce:d6:ae:6e:fe:bb:d4:80:e2:d8:90:ac:05:b0:5d:fe:
79:87:73:bd:4e:51:1d:74:02:39:75:e4:f9:c6:bc:eb:a3:7a:
5a:b6:88:3c:51:69:e6:14:86:1b:bb:c9:df:2f:91:f3:0d:f6:
79:d7:34:49:ac:1f:88:ca:57:a7:2e:ac:c5:a8:f4:03:cd:8c:
56:5d:66:63:7f:f4:0e:4f:b2:54:bb:16:22:c5:39:8e:35:0d:
20:bc:85:c0:1f:93:fc:57:e1:ca:f2:ca:c9:19:60:38:e1:ac:
4e:4f:f8:f5:48:f6:44:e4:60:8d:fe:fe:bb:e5:73:cb:64:47:
55:48:80:a3:0e:c4:95:aa:22:cc:fd:db:12:cf:0d:01:80:0f:
a6:ec:ef:07:5c:dc:0d:61:59:6e:2a:a8:12:b2:4d:d0:7c:e3:
bd:cd:7c:18:c9:da:a0:c2:73:40:64:1b:e3:d3:d4:83:29:9a:
cc:63:76:05:5c:80:52:7f:6e:85:38:da:03:14:0f:89:bb:0e:
6d:38:21:4a:f7:a4:4e:2e:e8:9e:de:bc:21:7f:25:3e:51:4e:
76:a6:a7:c1:94:b2:67:de:1c:22:8d:7c:62:6b:ae:cb:68:03:
80:0f:89:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 22:01:53 2025 by rpki-client