Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/4159c3-814d-4001-8527-139043749c48/1/4U8mT6SkyQ3LSpnMzsUMVQj0RJg.mft
File: 4U8mT6SkyQ3LSpnMzsUMVQj0RJg.mft (raw, json)
Hash identifier: KY0lETuKCMSiWhuIdiIwHsZcN8DMhLYVScyeZOcVBec=
Subject key identifier: 0B:A0:44:42:73:A1:EB:BE:39:AC:BE:2A:FC:30:5B:AC:AD:18:23:F4
Authority key identifier: E1:4F:26:4F:A4:A4:C9:0D:CB:4A:99:CC:CE:C5:0C:55:08:F4:44:98
Certificate issuer: /CN=e14f264fa4a4c90dcb4a99cccec50c5508f44498
Certificate serial: 0197B77C2B1D5E1D4CD5BBE2FF5E801C929D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4U8mT6SkyQ3LSpnMzsUMVQj0RJg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/4159c3-814d-4001-8527-139043749c48/1/4U8mT6SkyQ3LSpnMzsUMVQj0RJg.mft
Manifest number: 15B7
Signing time: Sat 28 Jun 2025 17:00:57 +0000
Manifest this update: Sat 28 Jun 2025 17:00:57 +0000
Manifest next update: Sun 29 Jun 2025 17:00:57 +0000
Files and hashes: 1: 4U8mT6SkyQ3LSpnMzsUMVQj0RJg.crl (hash: CXpWLLYMSsBxmAyvkl7UfA8SV5M5AuHo+5f3KSffCR4=)
2: Bc91mt-aFwpn9DwtZ394zqgnwAk.roa (hash: 4bDq/638WIm11nNJQQb6YF/e7JLWlty4w4akKWg+wAI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6c/4159c3-814d-4001-8527-139043749c48/1/4U8mT6SkyQ3LSpnMzsUMVQj0RJg.crl
rsync://rpki.ripe.net/repository/DEFAULT/6c/4159c3-814d-4001-8527-139043749c48/1/4U8mT6SkyQ3LSpnMzsUMVQj0RJg.mft
rsync://rpki.ripe.net/repository/DEFAULT/4U8mT6SkyQ3LSpnMzsUMVQj0RJg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:7c:2b:1d:5e:1d:4c:d5:bb:e2:ff:5e:80:1c:92:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e14f264fa4a4c90dcb4a99cccec50c5508f44498
Validity
Not Before: Jun 28 17:00:57 2025 GMT
Not After : Jun 29 17:00:57 2025 GMT
Subject: CN=0ba0444273a1ebbe39acbe2afc305bacad1823f4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:df:f6:60:3b:60:9f:10:ca:11:d4:c2:75:05:
95:87:fa:46:89:8b:e3:5a:85:61:3c:6d:f9:8f:b9:
9b:99:ee:0a:e0:a8:11:74:4f:36:8c:d9:fa:36:f6:
b6:34:40:3b:c7:44:9f:f2:da:d3:17:82:eb:4d:d7:
0e:34:9c:63:f5:f2:6e:f7:02:61:2a:b0:90:55:a4:
d1:1c:b8:0f:cb:5d:60:45:31:c6:49:aa:60:f7:f1:
1b:1b:a6:4d:d6:99:c6:a9:5c:60:16:31:2d:16:36:
ff:6b:fb:e2:d8:ca:f4:fe:6b:5c:19:d7:47:02:a2:
e4:24:1e:38:fc:90:0d:30:6e:7a:a6:38:ac:6d:e7:
bf:d9:24:a2:a7:12:3d:53:8c:96:0d:81:51:85:06:
a4:17:6c:49:0b:bb:78:7a:77:2a:79:50:e9:7a:53:
2c:d7:03:c3:3c:ac:64:d7:1e:0b:4f:40:7e:4b:30:
22:b2:0b:b3:04:21:7f:4b:00:d0:01:f8:3a:c7:dd:
1f:6b:a0:92:5c:64:5f:33:0e:41:7d:96:34:f6:26:
2d:c2:ca:ae:cc:c8:ba:11:fb:bd:00:3e:8e:2b:43:
6b:db:f1:a3:17:c1:01:7f:52:5c:2f:35:c6:fe:f4:
e4:60:ea:02:fd:bc:09:09:10:af:19:54:ea:e0:1c:
3e:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:A0:44:42:73:A1:EB:BE:39:AC:BE:2A:FC:30:5B:AC:AD:18:23:F4
X509v3 Authority Key Identifier:
keyid:E1:4F:26:4F:A4:A4:C9:0D:CB:4A:99:CC:CE:C5:0C:55:08:F4:44:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4U8mT6SkyQ3LSpnMzsUMVQj0RJg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/4159c3-814d-4001-8527-139043749c48/1/4U8mT6SkyQ3LSpnMzsUMVQj0RJg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/4159c3-814d-4001-8527-139043749c48/1/4U8mT6SkyQ3LSpnMzsUMVQj0RJg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:3b:4f:10:c7:d0:79:ad:f5:25:2e:fb:1b:23:fa:dc:e3:91:
42:78:76:a2:80:20:78:af:7d:a7:39:e0:70:24:e5:db:3a:6e:
75:6a:54:33:64:5f:21:23:c8:02:ba:5c:98:62:47:d8:d2:8e:
91:f6:f7:a1:a5:f9:31:10:4a:79:b2:fd:82:87:56:9d:90:47:
54:d5:55:91:3f:8a:41:16:c4:58:50:36:a2:3f:aa:6d:28:cf:
ee:50:47:c5:6d:3e:23:5a:6a:9f:80:25:09:2f:30:76:5e:c7:
74:16:5b:41:f5:b6:41:96:41:10:25:22:65:9b:08:f4:0c:db:
32:08:50:9e:b1:ca:af:73:2a:a3:e9:39:31:83:90:12:8c:b3:
81:02:e2:fe:f5:10:27:83:a3:69:8a:e5:2b:1e:45:f7:53:25:
af:d7:5c:c2:7a:a6:84:38:b2:db:3d:22:45:9b:d6:1e:de:52:
dc:27:0c:e7:75:98:7d:d6:3e:9e:41:d6:f1:ac:4a:27:18:9a:
21:45:4f:9e:67:fa:1f:32:1c:49:67:70:66:e7:c2:78:14:e4:
0c:07:cf:bf:48:aa:86:76:e7:51:82:de:2a:c6:d6:09:6c:fa:
cf:92:37:ed:11:aa:c3:f1:e9:a7:cd:cf:60:9e:44:c0:5c:d9:
f0:f5:45:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:31:05 2025 by rpki-client