Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/1f68a8-49dd-412b-bba9-0bf539b3b714/1/4IEr3duyOb5jncddzS4pbE_PSpc.mft
File: 4IEr3duyOb5jncddzS4pbE_PSpc.mft (raw, json)
Hash identifier: VebV1/QWZPYB0c/i5/D6SbcewUR5bKmMXDixMJ2aQwM=
Subject key identifier: D3:25:0C:AB:2F:C2:BB:37:20:B0:4E:FD:D9:5D:92:EB:B4:BA:B4:74
Authority key identifier: E0:81:2B:DD:DB:B2:39:BE:63:9D:C7:5D:CD:2E:29:6C:4F:CF:4A:97
Certificate issuer: /CN=e0812bdddbb239be639dc75dcd2e296c4fcf4a97
Certificate serial: 0198D5160C601F850DAC1100E1E9F50E1BFD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4IEr3duyOb5jncddzS4pbE_PSpc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/1f68a8-49dd-412b-bba9-0bf539b3b714/1/4IEr3duyOb5jncddzS4pbE_PSpc.mft
Manifest number: 12CF
Signing time: Sat 23 Aug 2025 04:00:48 +0000
Manifest this update: Sat 23 Aug 2025 04:00:48 +0000
Manifest next update: Sun 24 Aug 2025 04:00:48 +0000
Files and hashes: 1: 4IEr3duyOb5jncddzS4pbE_PSpc.crl (hash: Fsj7CF+w3VbupeFqm7YfLbBDmha3JM4vQu9txN7HdOM=)
2: el5qFDMV5hMW1NAGRbmjGI68Zeg.roa (hash: u+tO/pc49AyT7XnqsS0vc/mFjJM4zzaHLzr71ZyNaRI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/1f68a8-49dd-412b-bba9-0bf539b3b714/1/4IEr3duyOb5jncddzS4pbE_PSpc.crl
rsync://rpki.ripe.net/repository/DEFAULT/70/1f68a8-49dd-412b-bba9-0bf539b3b714/1/4IEr3duyOb5jncddzS4pbE_PSpc.mft
rsync://rpki.ripe.net/repository/DEFAULT/4IEr3duyOb5jncddzS4pbE_PSpc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 04:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:16:0c:60:1f:85:0d:ac:11:00:e1:e9:f5:0e:1b:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e0812bdddbb239be639dc75dcd2e296c4fcf4a97
Validity
Not Before: Aug 23 04:00:48 2025 GMT
Not After : Aug 24 04:00:48 2025 GMT
Subject: CN=d3250cab2fc2bb3720b04efdd95d92ebb4bab474
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:61:d5:64:0f:3d:ce:c4:59:42:f2:20:91:ca:
f2:88:a7:3e:74:0e:32:44:ab:3b:4d:82:69:78:93:
90:39:db:a1:f9:83:7d:82:2e:88:6c:bb:b8:8e:65:
80:31:de:02:f1:46:3e:cc:dd:5f:35:f2:32:4e:df:
57:6d:06:7c:fa:14:78:6a:ac:d7:cd:c3:39:3d:a5:
4a:ac:23:e5:af:21:f2:38:a2:0f:c6:1a:f8:6c:c6:
b2:ca:28:b9:d0:5f:9b:52:0e:15:1f:50:63:0a:5b:
2a:9b:b4:18:f6:ae:33:2b:99:cf:d0:81:0f:db:e6:
bc:68:47:e7:15:d0:ac:e4:e3:24:11:48:f1:63:a5:
5b:40:f0:2c:23:68:7b:d4:75:6e:81:a9:4b:2a:42:
e1:c4:8f:60:99:d1:79:d0:df:d0:b0:ab:81:3c:33:
5f:f3:b5:12:35:bd:34:60:b0:ba:c7:ac:a7:3d:4a:
f9:5f:a3:fa:e4:41:11:67:5b:b2:4f:e6:98:9c:90:
7a:65:46:09:b6:09:ec:ca:04:26:78:26:22:27:67:
e7:19:c3:4e:a4:a4:a1:76:4b:20:3b:a1:f7:6e:21:
1a:19:a3:29:44:12:91:48:ae:ab:77:18:a6:fd:0b:
84:88:ce:84:4c:f9:ea:25:f1:08:c1:9c:d0:6d:b4:
05:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:25:0C:AB:2F:C2:BB:37:20:B0:4E:FD:D9:5D:92:EB:B4:BA:B4:74
X509v3 Authority Key Identifier:
keyid:E0:81:2B:DD:DB:B2:39:BE:63:9D:C7:5D:CD:2E:29:6C:4F:CF:4A:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4IEr3duyOb5jncddzS4pbE_PSpc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/1f68a8-49dd-412b-bba9-0bf539b3b714/1/4IEr3duyOb5jncddzS4pbE_PSpc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/1f68a8-49dd-412b-bba9-0bf539b3b714/1/4IEr3duyOb5jncddzS4pbE_PSpc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
95:3e:ff:45:3e:31:5f:27:40:b3:5b:79:22:52:23:53:b6:c2:
d3:03:7d:ae:2b:ac:51:93:1a:29:d3:6b:c0:45:e6:30:5f:56:
98:37:1a:a3:a5:00:ed:ba:60:5a:b6:95:78:e0:bf:2b:05:44:
da:47:8e:ce:fc:a2:40:d8:39:55:a7:8e:83:cc:64:33:06:06:
bb:f7:7f:a6:c2:90:47:28:6b:7a:f6:ce:21:c1:97:57:c9:14:
31:13:5e:ca:8c:98:5d:2c:f9:07:09:bb:ef:21:cd:4e:ca:7f:
e9:a9:81:3a:78:a9:72:8a:c7:5d:e5:5c:c9:0f:d4:85:39:67:
e7:53:fe:15:95:2c:82:39:2b:57:e7:fb:06:24:1c:6f:64:57:
4f:cd:8c:4d:d1:ba:3d:4f:5f:87:01:29:db:ac:81:3c:33:a9:
6e:b1:71:f3:47:43:a2:2c:66:c0:94:c5:fd:cc:78:1f:a8:5a:
58:fd:75:f0:65:2e:27:ac:16:9b:80:d1:d9:d3:91:b1:2f:50:
de:90:ce:f1:71:70:6c:22:4f:0a:a3:f3:93:a3:44:b9:07:a0:
3f:dc:4b:a5:3f:93:e8:d2:6b:36:9e:e5:0b:82:bd:b2:69:5d:
50:be:25:ac:52:ca:be:d6:48:9e:40:b0:0b:2a:7e:88:ba:49:
fa:6d:49:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 14:07:24 2025 by rpki-client