Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/12e905-7854-473c-950b-cf4bd4f3f29d/1/4gShwspKTbAzN142DeMjeQumpbk.mft
File: 4gShwspKTbAzN142DeMjeQumpbk.mft (raw, json)
Hash identifier: kieA6GhAJq5+93lDvUph8FL7/FvsaedNbg3poq/LY60=
Subject key identifier: 47:55:FC:5E:E7:D7:1A:10:CA:B4:54:04:3A:88:E7:E7:89:E4:A4:03
Authority key identifier: E2:04:A1:C2:CA:4A:4D:B0:33:37:5E:36:0D:E3:23:79:0B:A6:A5:B9
Certificate issuer: /CN=e204a1c2ca4a4db033375e360de323790ba6a5b9
Certificate serial: 0198D5F19E6CED23889232F816043A8F0B0D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4gShwspKTbAzN142DeMjeQumpbk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/85/12e905-7854-473c-950b-cf4bd4f3f29d/1/4gShwspKTbAzN142DeMjeQumpbk.mft
Manifest number: 0EDE
Signing time: Sat 23 Aug 2025 08:00:38 +0000
Manifest this update: Sat 23 Aug 2025 08:00:38 +0000
Manifest next update: Sun 24 Aug 2025 08:00:38 +0000
Files and hashes: 1: 4gShwspKTbAzN142DeMjeQumpbk.crl (hash: oeBUylCrZk8oG92M9/K58WtZsQNgNB/3fhLzC8Anf3k=)
2: gA2VeOc__NflxeLdsWWIIUZ9Deg.roa (hash: ipk5YS27VQlaPqS1epEEueLOZHeXvism8b/2q3vbuaY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/85/12e905-7854-473c-950b-cf4bd4f3f29d/1/4gShwspKTbAzN142DeMjeQumpbk.crl
rsync://rpki.ripe.net/repository/DEFAULT/85/12e905-7854-473c-950b-cf4bd4f3f29d/1/4gShwspKTbAzN142DeMjeQumpbk.mft
rsync://rpki.ripe.net/repository/DEFAULT/4gShwspKTbAzN142DeMjeQumpbk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:f1:9e:6c:ed:23:88:92:32:f8:16:04:3a:8f:0b:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e204a1c2ca4a4db033375e360de323790ba6a5b9
Validity
Not Before: Aug 23 08:00:38 2025 GMT
Not After : Aug 24 08:00:38 2025 GMT
Subject: CN=4755fc5ee7d71a10cab454043a88e7e789e4a403
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:a5:9f:86:30:1b:58:15:a0:f6:d7:49:ec:1b:
8d:01:56:85:1b:47:34:50:e8:76:7e:c9:6e:ed:f2:
a2:d4:db:d9:58:68:be:79:ca:20:ca:e0:0a:43:75:
c3:50:14:e9:63:98:91:3e:73:3f:5b:a1:53:4e:c5:
52:80:3a:f4:f7:70:38:3b:94:55:cf:35:19:bc:a1:
eb:79:d2:ed:10:2c:88:20:24:d6:53:1e:40:98:af:
70:de:d6:40:67:0a:9b:bf:e9:80:3c:75:5b:f3:08:
6e:b7:5d:42:6f:3d:06:3d:1c:11:29:03:43:0b:bf:
0b:cd:a1:23:17:a7:b4:bc:80:26:c3:9e:96:45:82:
62:db:f9:84:80:38:29:c8:d1:dd:23:f5:dd:1e:ed:
85:1d:b1:e4:a1:58:18:82:37:c4:59:80:2b:ea:bf:
c6:2f:44:e1:b4:08:c0:d0:a2:fa:ba:b5:84:6a:21:
97:88:5f:bc:77:06:ca:1a:07:68:ae:31:c7:25:f1:
9d:02:d7:04:18:12:ce:6c:d0:15:b0:07:61:1e:eb:
61:5a:3f:1a:86:14:70:0a:49:9b:01:80:c7:b2:38:
02:d1:78:32:f8:68:ee:1f:3f:80:28:af:e9:f5:20:
cc:2c:bd:e7:63:30:57:86:19:c9:3b:fa:c3:9f:eb:
ff:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:55:FC:5E:E7:D7:1A:10:CA:B4:54:04:3A:88:E7:E7:89:E4:A4:03
X509v3 Authority Key Identifier:
keyid:E2:04:A1:C2:CA:4A:4D:B0:33:37:5E:36:0D:E3:23:79:0B:A6:A5:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4gShwspKTbAzN142DeMjeQumpbk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/12e905-7854-473c-950b-cf4bd4f3f29d/1/4gShwspKTbAzN142DeMjeQumpbk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/85/12e905-7854-473c-950b-cf4bd4f3f29d/1/4gShwspKTbAzN142DeMjeQumpbk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:54:6e:b2:b9:49:12:79:76:94:a4:48:d3:1d:58:1f:72:22:
36:15:3c:45:13:22:e7:e0:d6:a8:03:ec:d0:e2:e8:2a:94:44:
2e:2d:5e:c0:53:c6:18:cd:5e:a0:35:47:ad:be:4e:45:de:65:
20:a4:c5:1c:bc:71:92:e4:af:ea:8b:78:9e:09:77:7f:b2:fb:
0d:b5:d8:9c:3a:60:f5:0b:ee:97:31:cc:c5:6e:18:07:de:7c:
01:74:60:eb:a1:73:c4:e1:c2:ff:88:72:e6:50:03:84:dc:77:
27:47:6f:88:13:f3:51:4e:1b:69:3d:6b:33:ec:9d:5b:4f:8e:
54:8c:db:91:5f:50:9b:b0:d7:6b:05:b1:56:48:52:a6:37:a6:
d6:f0:cd:6b:af:ff:06:0f:76:16:24:3f:7c:3a:96:6d:d9:96:
23:30:b6:a8:c4:11:83:cf:06:59:f2:c6:c8:6c:10:20:13:8b:
c8:ba:4f:9e:c7:bd:d4:0f:37:c8:a7:21:a9:56:bb:97:99:79:
8d:f7:38:89:0b:56:0a:95:8d:85:e6:5a:88:3c:3f:5b:54:8f:
9a:2c:2e:b0:85:4f:ba:f9:8c:12:a8:6b:16:9d:fb:2d:88:dc:
81:29:a6:ec:ae:4e:45:14:06:03:82:cd:db:7b:58:30:9e:0d:
ad:61:84:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:27:08 2025 by rpki-client