Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/1fa4a1-9a1c-47de-aca6-9449957fd5a5/1/4FWc6ImuQkESH-ChZT5LlV8-30s.mft
File: 4FWc6ImuQkESH-ChZT5LlV8-30s.mft (raw, json)
Hash identifier: ZycGBHDD3VhrdvKkcjOYjldWmSJLLDMPgTmoQt1yai8=
Subject key identifier: EF:DF:03:37:8D:F1:90:ED:BD:35:B6:05:89:17:0B:42:0D:D3:94:F3
Authority key identifier: E0:55:9C:E8:89:AE:42:41:12:1F:E0:A1:65:3E:4B:95:5F:3E:DF:4B
Certificate issuer: /CN=e0559ce889ae4241121fe0a1653e4b955f3edf4b
Certificate serial: 0197B7EA3E58D1834AB0F30667D2E0FA4EC8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4FWc6ImuQkESH-ChZT5LlV8-30s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/1fa4a1-9a1c-47de-aca6-9449957fd5a5/1/4FWc6ImuQkESH-ChZT5LlV8-30s.mft
Manifest number: 15F1
Signing time: Sat 28 Jun 2025 19:01:11 +0000
Manifest this update: Sat 28 Jun 2025 19:01:11 +0000
Manifest next update: Sun 29 Jun 2025 19:01:11 +0000
Files and hashes: 1: 00VNIWPkHk-eYeOCQl7mONDXy6M.roa (hash: pDq1pZp3C4Sqn1X3rX/G/la9ae1lH4HMURDoELo17/o=)
2: 1BHVcdS3kmkGH_bI9qfHON5UHfk.roa (hash: AuazvzToypQPnv8ss86Zt+CVshNBwKgwrntRNHToSZU=)
3: 4FWc6ImuQkESH-ChZT5LlV8-30s.crl (hash: cjxH0J9g2nDNCxcXU4LCTFJjM/n8Y/oWUm/eD6nvjs0=)
4: 8BE87qjZ_YzeOfLNdwdedbKrhNM.roa (hash: y4H1lZp3OfxaXMKEpq+PSjjHa3Z9ishqljKxtowY4Rw=)
5: Gq5LjD46Wfjhio7d9iqIJDoHctI.roa (hash: hNIDxt9EAkLYgEqpa1TAGbSGsQ4erxVNMwWk5NfcogI=)
6: KjKCe6ofT1MaWcqvEHzd3y83DsE.roa (hash: fYONeSb8sEFnngSaKpwSRO2ffbgtr5Gv/r9LK52dcNs=)
7: VEIOP5CvViNk7vFxFnYuZv7tB1E.roa (hash: VpQJLJpNz6bqxTmb3xeuudtD/HduXOUl+jk53g4K7m8=)
8: rmZqjN8Le7Lhxr8nmiAOtv3GMP8.roa (hash: fLQapcdkz83ll1G3Z6c9GnseLufz0CzHLdVlExrzp/Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/1fa4a1-9a1c-47de-aca6-9449957fd5a5/1/4FWc6ImuQkESH-ChZT5LlV8-30s.crl
rsync://rpki.ripe.net/repository/DEFAULT/62/1fa4a1-9a1c-47de-aca6-9449957fd5a5/1/4FWc6ImuQkESH-ChZT5LlV8-30s.mft
rsync://rpki.ripe.net/repository/DEFAULT/4FWc6ImuQkESH-ChZT5LlV8-30s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:ea:3e:58:d1:83:4a:b0:f3:06:67:d2:e0:fa:4e:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e0559ce889ae4241121fe0a1653e4b955f3edf4b
Validity
Not Before: Jun 28 19:01:11 2025 GMT
Not After : Jun 29 19:01:11 2025 GMT
Subject: CN=efdf03378df190edbd35b60589170b420dd394f3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:0e:00:db:ed:c2:7a:62:e4:d5:e2:da:1b:3c:
bd:53:47:51:f0:7d:71:92:6d:e7:8d:96:3d:d4:69:
16:09:f3:ce:ff:45:7a:5e:3f:20:dd:68:dc:86:5f:
d7:cd:76:4f:38:f2:fa:53:d3:a8:ad:9c:8f:92:e2:
cd:16:f1:93:62:ff:19:ac:fa:35:db:55:ea:94:73:
24:05:44:f7:02:48:89:c5:37:93:2a:44:2f:10:2d:
a3:24:53:26:2e:ad:b5:73:61:7e:1a:64:64:d9:d6:
b3:1e:21:e3:17:21:d0:6d:69:66:e8:55:57:3e:a9:
89:5b:b0:bd:05:80:79:2f:68:2e:4b:84:ed:84:52:
05:ce:0e:ab:4a:4f:00:e2:b0:6a:fd:0f:14:1c:80:
37:e4:80:ed:d1:77:b8:ca:89:1b:c6:68:99:15:6f:
fb:2e:bd:6b:f1:ff:4f:0a:22:0b:f2:e7:80:3f:b4:
fa:29:a9:4f:5c:1f:85:e3:77:c5:e3:21:f9:5b:89:
0a:69:e4:83:10:1e:b4:07:2a:92:ca:43:74:51:90:
1e:c7:34:6f:1c:e6:ab:16:5d:7c:6f:e4:82:b9:9f:
3e:dd:aa:ff:a9:7c:fe:f6:00:ed:b3:e1:b6:1d:7c:
65:e4:b6:8f:ce:db:18:be:73:e6:f6:ee:42:2a:e5:
4d:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:DF:03:37:8D:F1:90:ED:BD:35:B6:05:89:17:0B:42:0D:D3:94:F3
X509v3 Authority Key Identifier:
keyid:E0:55:9C:E8:89:AE:42:41:12:1F:E0:A1:65:3E:4B:95:5F:3E:DF:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4FWc6ImuQkESH-ChZT5LlV8-30s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/1fa4a1-9a1c-47de-aca6-9449957fd5a5/1/4FWc6ImuQkESH-ChZT5LlV8-30s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/1fa4a1-9a1c-47de-aca6-9449957fd5a5/1/4FWc6ImuQkESH-ChZT5LlV8-30s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:4f:ac:92:f2:a3:78:f1:e8:92:db:3c:35:6b:05:06:db:cb:
5f:47:98:5c:31:06:31:e6:19:b8:f1:9b:4e:26:07:88:b7:f0:
f0:01:12:25:6b:c0:7b:9e:9f:ce:74:66:77:af:cd:b4:17:7c:
85:16:49:26:36:1c:da:58:32:a0:ce:f3:3b:fb:50:06:d3:e4:
f0:74:b5:85:b3:f0:19:79:34:10:f3:f2:ff:3e:1d:31:9b:60:
cb:6c:63:47:50:fb:73:f9:88:67:22:e3:01:f1:d0:6b:2c:4a:
8c:4a:96:b3:5e:1f:fd:fd:24:03:25:f9:9e:3a:c5:b1:b9:09:
d9:9f:cb:f4:07:b5:be:25:4a:8d:eb:df:14:50:45:05:47:75:
d6:bf:6a:1a:fc:33:d2:df:23:89:ae:b1:a0:ce:3d:5b:f2:4c:
bb:f9:71:68:d8:09:3c:8f:6d:8d:b9:cf:22:a4:cd:a1:ec:eb:
eb:6f:c7:5f:9a:62:0c:a9:4d:b9:ba:e3:1c:f6:76:bd:8e:97:
6c:47:13:45:d7:1c:a9:63:7c:30:dc:48:23:11:c9:d9:46:b1:
dc:e0:7f:2e:c6:d8:51:7c:f0:7f:ac:37:5b:6b:f1:11:50:9e:
a1:87:97:19:73:13:e6:bd:32:a9:c4:95:6a:42:76:61:19:4a:
96:20:32:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 20:14:39 2025 by rpki-client