Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/06db38-9886-4d70-8904-27cab0a60264/1/4ZAOVZbAg3SX8RiUELHtIqzbfhM.mft
File: 4ZAOVZbAg3SX8RiUELHtIqzbfhM.mft (raw, json)
Hash identifier: AA9f/1PFgoOXm6QUcssVwXy9R5weWDeWMd9IFPZqXbc=
Subject key identifier: E0:DB:8D:A2:5B:A3:5E:75:98:D7:91:21:6D:D6:E1:E5:8D:3C:F6:16
Authority key identifier: E1:90:0E:55:96:C0:83:74:97:F1:18:94:10:B1:ED:22:AC:DB:7E:13
Certificate issuer: /CN=e1900e5596c0837497f1189410b1ed22acdb7e13
Certificate serial: 0197B70E6B0F05D09053CF4EB03F3F9F2E8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4ZAOVZbAg3SX8RiUELHtIqzbfhM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/06db38-9886-4d70-8904-27cab0a60264/1/4ZAOVZbAg3SX8RiUELHtIqzbfhM.mft
Manifest number: 0ACF
Signing time: Sat 28 Jun 2025 15:01:04 +0000
Manifest this update: Sat 28 Jun 2025 15:01:04 +0000
Manifest next update: Sun 29 Jun 2025 15:01:04 +0000
Files and hashes: 1: 4ZAOVZbAg3SX8RiUELHtIqzbfhM.crl (hash: 4Lh1RqOlwsv9HsHeWjwHYa9jJ6Qsi9EGtXjwD3iHFJo=)
2: 8jfWRZ1NLj1bjkrxzRMG9yYupLo.roa (hash: 89HNIKxmIWfFBZvw0N2AfHWlUXDjHZG4VVH2GueEE+4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/82/06db38-9886-4d70-8904-27cab0a60264/1/4ZAOVZbAg3SX8RiUELHtIqzbfhM.crl
rsync://rpki.ripe.net/repository/DEFAULT/82/06db38-9886-4d70-8904-27cab0a60264/1/4ZAOVZbAg3SX8RiUELHtIqzbfhM.mft
rsync://rpki.ripe.net/repository/DEFAULT/4ZAOVZbAg3SX8RiUELHtIqzbfhM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:0e:6b:0f:05:d0:90:53:cf:4e:b0:3f:3f:9f:2e:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e1900e5596c0837497f1189410b1ed22acdb7e13
Validity
Not Before: Jun 28 15:01:04 2025 GMT
Not After : Jun 29 15:01:04 2025 GMT
Subject: CN=e0db8da25ba35e7598d791216dd6e1e58d3cf616
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:60:6e:23:77:78:89:77:26:e6:d2:aa:d9:36:
76:f9:e8:d4:18:55:98:2a:98:8a:96:e9:36:6b:c4:
71:c8:99:59:d0:37:23:4b:20:d9:58:6f:30:b0:e8:
e2:4b:54:50:9f:f6:30:e4:7e:5c:ab:a6:1a:47:95:
75:a9:90:5a:5b:79:86:a9:76:5f:18:18:fd:b4:b7:
0a:bb:e4:91:b9:17:34:65:8f:df:32:0a:fc:aa:1d:
5d:62:24:e2:e8:b1:18:d5:01:8d:6f:a4:bf:ae:bb:
be:83:7f:91:3d:44:fc:07:54:c1:4c:45:56:a0:45:
4d:8c:b7:c6:59:ee:1e:a9:96:81:4a:45:a4:20:e3:
3c:48:38:89:9a:a0:c0:84:4a:cb:3c:54:7a:7d:a5:
95:33:3b:9c:80:42:c1:96:22:d3:2d:94:8f:d1:32:
97:89:db:c1:c0:da:0a:06:e0:ce:35:a2:8b:0f:68:
f9:a6:b1:dc:2a:90:c6:f0:d1:c8:b7:ab:a9:21:a0:
81:6d:56:a3:02:c5:de:31:1b:c8:e1:d6:ec:6f:d9:
68:dd:82:ae:22:ab:f9:1a:7d:33:09:f5:9c:c7:b9:
60:3f:cf:77:02:dc:24:e9:91:87:76:39:17:33:a5:
a2:8e:6c:82:15:ff:b4:83:f2:fa:e6:26:9f:81:2c:
91:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:DB:8D:A2:5B:A3:5E:75:98:D7:91:21:6D:D6:E1:E5:8D:3C:F6:16
X509v3 Authority Key Identifier:
keyid:E1:90:0E:55:96:C0:83:74:97:F1:18:94:10:B1:ED:22:AC:DB:7E:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4ZAOVZbAg3SX8RiUELHtIqzbfhM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/06db38-9886-4d70-8904-27cab0a60264/1/4ZAOVZbAg3SX8RiUELHtIqzbfhM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/82/06db38-9886-4d70-8904-27cab0a60264/1/4ZAOVZbAg3SX8RiUELHtIqzbfhM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:bb:b9:00:55:c1:73:9a:bd:b2:d5:62:ae:60:a0:c3:e0:73:
8a:d4:8a:f3:ea:f3:48:f7:15:f2:32:97:ef:aa:30:58:bb:63:
0a:3a:b0:65:5f:f4:72:f1:fd:ba:d9:97:ec:2f:c2:03:30:8a:
dd:3e:b6:c5:68:bd:08:d8:ca:74:fc:fa:c4:a6:3b:e7:57:b9:
c2:35:1d:99:88:fd:94:6f:45:1b:36:31:3a:71:ee:bf:8b:c5:
fb:00:d3:6b:7d:31:bf:ea:e2:50:27:5c:c8:68:bd:16:03:68:
b6:64:ca:3b:72:11:3a:39:f8:59:0b:6b:0c:d9:de:1a:db:9c:
1a:84:ab:a6:db:db:1e:af:b9:35:5b:fb:86:bd:d2:2b:48:39:
62:d0:00:25:31:b6:7b:77:70:7e:b0:6b:ba:a4:a8:11:f7:cb:
fa:f7:6c:96:d8:a1:09:e1:31:a3:00:c2:2a:2c:e1:67:bf:b8:
c4:0d:c7:d3:d8:d6:04:30:7a:7c:ff:55:c3:14:9e:10:1f:11:
19:81:08:6c:32:1f:50:50:84:9b:52:96:1c:0b:0f:5f:ce:a6:
f8:92:7f:c3:b2:b8:62:b0:bc:b9:11:92:36:1e:c1:94:29:6d:
51:56:2f:14:72:8d:93:10:a7:24:b7:6a:ec:2d:9d:a6:7e:fb:
d6:69:a2:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:32:47 2025 by rpki-client