Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/466119-873f-4cfd-91a6-b1e313d79893/1/4K-xYKlzOKshEUhArdxhgKW6QrE.mft
File: 4K-xYKlzOKshEUhArdxhgKW6QrE.mft (raw, json)
Hash identifier: gsKlXdCW7aMn4KXz6qfufyYu2VvcccQYMkLO50teZd4=
Subject key identifier: 1F:A6:B8:45:46:8D:DF:68:8A:83:56:99:DE:6C:22:F2:05:AD:D4:45
Authority key identifier: E0:AF:B1:60:A9:73:38:AB:21:11:48:40:AD:DC:61:80:A5:BA:42:B1
Certificate issuer: /CN=e0afb160a97338ab21114840addc6180a5ba42b1
Certificate serial: 0197B7B300DCE046AD872E7C466BA320F300
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4K-xYKlzOKshEUhArdxhgKW6QrE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6b/466119-873f-4cfd-91a6-b1e313d79893/1/4K-xYKlzOKshEUhArdxhgKW6QrE.mft
Manifest number: 128A
Signing time: Sat 28 Jun 2025 18:00:50 +0000
Manifest this update: Sat 28 Jun 2025 18:00:50 +0000
Manifest next update: Sun 29 Jun 2025 18:00:50 +0000
Files and hashes: 1: 4K-xYKlzOKshEUhArdxhgKW6QrE.crl (hash: 2VMYhaE4h9uL0G1sEIoOUBHfzdNEt67P16oltpACkaE=)
2: Gwy6_uUvgZKl_FsgbK0SBR2765s.roa (hash: e+42Dv5ZMct1RmCP3DiJKtyiBUgVYfDjN9qagjZj7ck=)
3: RoGLSCET83zk1v-3GNDAGUmNCf4.roa (hash: TK8/4ls6e1537IxcrmPC8DEH8k32Or5yu+pxFNpz4Eo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6b/466119-873f-4cfd-91a6-b1e313d79893/1/4K-xYKlzOKshEUhArdxhgKW6QrE.crl
rsync://rpki.ripe.net/repository/DEFAULT/6b/466119-873f-4cfd-91a6-b1e313d79893/1/4K-xYKlzOKshEUhArdxhgKW6QrE.mft
rsync://rpki.ripe.net/repository/DEFAULT/4K-xYKlzOKshEUhArdxhgKW6QrE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:b3:00:dc:e0:46:ad:87:2e:7c:46:6b:a3:20:f3:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e0afb160a97338ab21114840addc6180a5ba42b1
Validity
Not Before: Jun 28 18:00:50 2025 GMT
Not After : Jun 29 18:00:50 2025 GMT
Subject: CN=1fa6b845468ddf688a835699de6c22f205add445
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:01:ae:d0:33:96:33:d0:06:e8:27:2a:cd:7a:
fc:c5:c7:bf:74:03:38:1e:5e:ac:2c:77:16:04:1b:
04:de:40:d4:61:13:22:a5:df:50:4b:ec:9c:e7:51:
aa:8e:aa:c4:1d:ca:43:42:92:24:9a:53:6d:f3:01:
f4:ed:8c:11:ca:21:44:da:92:30:3c:54:4c:bf:58:
04:e3:f2:6a:17:31:ce:87:bb:d9:58:12:e2:b7:73:
89:88:d6:e1:67:b4:85:f6:f3:2e:24:df:e6:fc:7b:
61:fb:f5:6c:c0:b7:73:9e:47:1b:52:55:4a:c7:ca:
0a:bf:08:22:c3:67:47:ce:37:1c:e7:0f:ac:52:12:
85:57:d7:45:c9:58:bf:ff:ae:b6:ed:cd:65:f6:72:
86:99:46:ab:23:3b:fe:15:78:59:10:28:24:d4:ea:
d3:f2:43:94:ef:12:e0:0b:3f:e1:24:0e:95:1c:b4:
75:dd:37:3f:76:de:a7:44:27:ee:8f:d4:c7:63:95:
b2:cb:5e:c8:97:b2:64:79:bc:3e:be:fe:4a:01:2f:
27:18:c2:df:2c:c0:eb:bf:96:21:ba:d8:32:d3:dc:
94:e2:96:62:4d:3b:4d:59:f2:40:9e:8b:8c:62:65:
43:fc:96:5d:c7:95:69:7e:90:a1:2d:9d:ce:68:b0:
7a:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:A6:B8:45:46:8D:DF:68:8A:83:56:99:DE:6C:22:F2:05:AD:D4:45
X509v3 Authority Key Identifier:
keyid:E0:AF:B1:60:A9:73:38:AB:21:11:48:40:AD:DC:61:80:A5:BA:42:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4K-xYKlzOKshEUhArdxhgKW6QrE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/466119-873f-4cfd-91a6-b1e313d79893/1/4K-xYKlzOKshEUhArdxhgKW6QrE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/466119-873f-4cfd-91a6-b1e313d79893/1/4K-xYKlzOKshEUhArdxhgKW6QrE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:b4:fe:67:b1:53:7b:aa:d9:5e:ce:56:66:e3:f8:f4:92:02:
83:f9:49:35:fc:56:40:c7:de:a9:d3:ef:73:29:ac:da:f7:df:
03:8d:0c:cc:09:fe:9d:69:c2:f2:9c:07:ed:31:5a:b5:c8:80:
db:0f:46:0a:b5:ef:fc:9f:0a:a7:f6:47:de:93:35:ce:4e:e5:
1b:31:2f:ba:2f:95:ee:33:78:0e:f7:bb:12:da:21:b4:a2:0f:
96:3b:e1:a1:dd:51:90:d4:0c:41:a0:02:3e:4e:4e:dd:65:24:
55:73:24:77:de:80:90:dc:94:38:bb:86:3d:33:ab:68:54:58:
3b:9b:a6:91:35:34:94:29:53:41:04:de:12:5a:ad:70:ff:5f:
05:31:b5:f4:a4:36:24:1e:ba:9a:d5:95:be:04:6e:f6:55:37:
c4:16:9d:48:cb:e8:07:69:1b:c8:1b:0c:6e:44:b5:b3:f2:3a:
07:c3:8f:fe:40:f6:ab:d3:8f:a3:53:da:1e:73:77:57:e1:9e:
3e:01:ca:10:2b:e3:48:b5:eb:1f:14:44:3b:8b:4e:c1:c2:2e:
21:f0:77:e7:0a:67:51:47:26:ee:5f:54:8e:c4:d3:f2:ac:d4:
3b:ae:2e:b8:e1:fe:f4:e7:18:98:e2:1f:a5:cb:1f:f1:59:16:
78:67:2d:53
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe3swDc4Eathy58RmujIPMAMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUwYWZiMTYwYTk3MzM4YWIyMTExNDg0MGFkZGM2MTgwYTVi
YTQyYjEwHhcNMjUwNjI4MTgwMDUwWhcNMjUwNjI5MTgwMDUwWjAzMTEwLwYDVQQD
EygxZmE2Yjg0NTQ2OGRkZjY4OGE4MzU2OTlkZTZjMjJmMjA1YWRkNDQ1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlQGu0DOWM9AG6CcqzXr8xce/dAM4
Hl6sLHcWBBsE3kDUYRMipd9QS+yc51GqjqrEHcpDQpIkmlNt8wH07YwRyiFE2pIw
PFRMv1gE4/JqFzHOh7vZWBLit3OJiNbhZ7SF9vMuJN/m/Hth+/VswLdznkcbUlVK
x8oKvwgiw2dHzjcc5w+sUhKFV9dFyVi//6627c1l9nKGmUarIzv+FXhZECgk1OrT
8kOU7xLgCz/hJA6VHLR13Tc/dt6nRCfuj9THY5Wyy17Il7Jkebw+vv5KAS8nGMLf
LMDrv5Yhutgy09yU4pZiTTtNWfJAnouMYmVD/JZdx5VpfpChLZ3OaLB6VQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFB+muEVGjd9oioNWmd5sIvIFrdRFMB8GA1UdIwQY
MBaAFOCvsWCpczirIRFIQK3cYYClukKxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNEsteFlLbHpPS3NoRVVoQXJkeGhnS1c2UXJFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Yi80NjYxMTktODczZi00Y2ZkLTkxYTYt
YjFlMzEzZDc5ODkzLzEvNEsteFlLbHpPS3NoRVVoQXJkeGhnS1c2UXJFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Yi80NjYxMTktODczZi00Y2ZkLTkxYTYtYjFlMzEzZDc5ODkz
LzEvNEsteFlLbHpPS3NoRVVoQXJkeGhnS1c2UXJFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALbT+Z7FT
e6rZXs5WZuP49JICg/lJNfxWQMfeqdPvcyms2vffA40MzAn+nWnC8pwH7TFatciA
2w9GCrXv/J8Kp/ZH3pM1zk7lGzEvui+V7jN4Dve7EtohtKIPljvhod1RkNQMQaAC
Pk5O3WUkVXMkd96AkNyUOLuGPTOraFRYO5umkTU0lClTQQTeElqtcP9fBTG19KQ2
JB66mtWVvgRu9lU3xBadSMvoB2kbyBsMbkS1s/I6B8OP/kD2q9OPo1PaHnN3V+Ge
PgHKECvjSLXrHxREO4tOwcIuIfB35wpnUUcm7l9UjsTT8qzUO64uuOH+9OcYmOIf
pcsf8VkWeGctUw==
-----END CERTIFICATE-----
Generated at Sat Jun 28 23:20:10 2025 by rpki-client