Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/29a52e-58a0-4238-aeb1-8b7a4abf1ca2/1/7a4BhsaCMBS8LELQTqZQv1zLmXY.mft
File: 7a4BhsaCMBS8LELQTqZQv1zLmXY.mft (raw, json)
Hash identifier: 43qDea2+Atpnoo5wj174lskNtVHc6G34IlSN4iZF6Fw=
Subject key identifier: F4:52:5A:62:BA:96:C5:FE:09:A3:AB:D8:92:36:FD:88:AC:1B:B9:44
Authority key identifier: ED:AE:01:86:C6:82:30:14:BC:2C:42:D0:4E:A6:50:BF:5C:CB:99:76
Certificate issuer: /CN=edae0186c6823014bc2c42d04ea650bf5ccb9976
Certificate serial: 0197B745AA12D34A27A68AE8FE7272757B9F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7a4BhsaCMBS8LELQTqZQv1zLmXY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/29a52e-58a0-4238-aeb1-8b7a4abf1ca2/1/7a4BhsaCMBS8LELQTqZQv1zLmXY.mft
Manifest number: 14E5
Signing time: Sat 28 Jun 2025 16:01:25 +0000
Manifest this update: Sat 28 Jun 2025 16:01:25 +0000
Manifest next update: Sun 29 Jun 2025 16:01:25 +0000
Files and hashes: 1: 79CA17Xn5GUSh_OtX3g6kBkGEK0.roa (hash: E0hRb7MlGtqWbRGEjrJTx2utqhVHTzEFD8Hy89KBmzw=)
2: 7a4BhsaCMBS8LELQTqZQv1zLmXY.crl (hash: /+KMB7RK95SOuhB91l8AQ1iak7kalYd/0ykrO3e0U7E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/29a52e-58a0-4238-aeb1-8b7a4abf1ca2/1/7a4BhsaCMBS8LELQTqZQv1zLmXY.crl
rsync://rpki.ripe.net/repository/DEFAULT/5f/29a52e-58a0-4238-aeb1-8b7a4abf1ca2/1/7a4BhsaCMBS8LELQTqZQv1zLmXY.mft
rsync://rpki.ripe.net/repository/DEFAULT/7a4BhsaCMBS8LELQTqZQv1zLmXY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:45:aa:12:d3:4a:27:a6:8a:e8:fe:72:72:75:7b:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=edae0186c6823014bc2c42d04ea650bf5ccb9976
Validity
Not Before: Jun 28 16:01:25 2025 GMT
Not After : Jun 29 16:01:25 2025 GMT
Subject: CN=f4525a62ba96c5fe09a3abd89236fd88ac1bb944
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:58:38:62:55:56:8f:e8:2a:70:2d:31:9b:db:
e9:bd:25:70:fb:c0:82:73:11:96:ee:14:cb:5b:75:
8a:a5:58:f5:94:a0:c3:21:38:34:37:54:43:f6:8d:
17:0e:e5:9c:4d:8e:d4:a0:e8:1a:ac:39:82:ed:a2:
1b:61:b3:14:a2:4c:01:60:21:9b:f4:1a:45:86:39:
b6:3e:ba:47:94:b2:2b:14:64:67:85:e3:f3:55:48:
cc:92:3a:5e:ed:39:44:4f:06:bf:98:c1:18:00:5e:
52:4a:f0:c2:91:d3:8b:fc:8a:a9:a7:53:ba:f8:ad:
b0:7f:2d:c4:8c:3d:52:57:5b:39:c9:75:8f:ca:4b:
bc:b5:b7:3d:ec:d6:b5:54:4f:03:56:d6:a1:e0:5a:
1a:80:79:22:98:06:af:96:99:5f:7b:48:ba:1f:c0:
4b:3e:c9:fb:1b:85:46:dc:2c:89:6c:98:48:88:39:
e7:ee:7c:c3:04:e1:9e:35:e6:1c:12:59:b8:ac:3c:
bc:19:8a:03:72:c9:8e:9d:4a:77:d5:96:46:13:77:
86:03:eb:de:8b:a0:d0:b5:c2:c8:80:67:89:87:d3:
62:f2:ee:54:da:81:27:f8:8e:14:ca:fc:99:e9:ca:
0e:2b:40:b9:8f:0f:b7:a1:1d:2d:56:f8:69:a5:1b:
0d:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:52:5A:62:BA:96:C5:FE:09:A3:AB:D8:92:36:FD:88:AC:1B:B9:44
X509v3 Authority Key Identifier:
keyid:ED:AE:01:86:C6:82:30:14:BC:2C:42:D0:4E:A6:50:BF:5C:CB:99:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a4BhsaCMBS8LELQTqZQv1zLmXY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/29a52e-58a0-4238-aeb1-8b7a4abf1ca2/1/7a4BhsaCMBS8LELQTqZQv1zLmXY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/29a52e-58a0-4238-aeb1-8b7a4abf1ca2/1/7a4BhsaCMBS8LELQTqZQv1zLmXY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:6b:e5:57:8e:c2:7d:cf:58:5b:27:ec:14:de:44:50:1b:47:
b2:6c:70:92:b0:33:bc:5e:a6:92:6f:fb:94:7d:c5:7c:b1:a8:
9d:81:a5:b7:63:38:9a:0b:9e:ff:50:7b:30:ef:e1:6b:e1:68:
d8:2b:fd:1b:55:7b:f0:19:db:8b:3e:59:60:d6:25:37:ce:23:
9b:b9:b0:5e:d4:02:4d:f6:1f:a1:8d:b7:3c:fa:1c:0b:f2:98:
60:4a:83:7f:77:fd:69:ef:e1:30:58:f0:38:d6:0d:03:d3:ad:
90:8f:09:cb:78:9f:21:36:57:bd:65:fe:fa:e4:97:73:8e:37:
8d:6f:03:d7:1c:32:62:8d:25:54:92:47:fa:7d:94:10:fd:d3:
e3:54:a3:e7:d6:f8:2c:57:2e:6e:35:be:3f:67:2b:00:03:75:
4d:a0:9d:f6:14:29:3e:b5:c5:1d:72:cf:42:1b:76:b5:7f:ee:
ad:e4:1d:37:97:bb:94:d2:13:e7:85:b0:c4:cf:7c:94:c4:a2:
4b:0a:e7:ac:b1:a7:b6:88:d8:28:4b:eb:d5:b1:66:c5:80:07:
1b:ca:8a:83:37:d1:b3:c1:22:a4:af:a3:d4:0c:14:02:b1:5f:
47:fe:54:d3:f1:81:c3:0e:ed:72:f1:e0:4f:05:7b:0e:d8:d9:
c6:aa:03:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 19:19:27 2025 by rpki-client