Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/3a382a-3dda-4796-b320-3fdfb4140f24/1/v4CafmyhTQoal2Zz4DGeNOlW7T0.mft
File: v4CafmyhTQoal2Zz4DGeNOlW7T0.mft (raw, json)
Hash identifier: wDJDlnlHdTW4+LgJpCLah61U81X/e8bUmeIcjnPj2gs=
Subject key identifier: 08:F3:12:2C:31:FA:1B:40:E1:C1:54:B6:20:91:C3:71:05:1F:77:34
Authority key identifier: BF:80:9A:7E:6C:A1:4D:0A:1A:97:66:73:E0:31:9E:34:E9:56:ED:3D
Certificate issuer: /CN=bf809a7e6ca14d0a1a976673e0319e34e956ed3d
Certificate serial: 0197B6A194C246D97097A460BB26D7FD6DA1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v4CafmyhTQoal2Zz4DGeNOlW7T0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/89/3a382a-3dda-4796-b320-3fdfb4140f24/1/v4CafmyhTQoal2Zz4DGeNOlW7T0.mft
Manifest number: 15BC
Signing time: Sat 28 Jun 2025 13:02:11 +0000
Manifest this update: Sat 28 Jun 2025 13:02:11 +0000
Manifest next update: Sun 29 Jun 2025 13:02:11 +0000
Files and hashes: 1: R42xE2mJMD9gnW-S_3g2XV8r74E.roa (hash: EXpcy7RAsA9U8XogEzCQScUz5RV6/SXT/hCfZDn3n2Q=)
2: v4CafmyhTQoal2Zz4DGeNOlW7T0.crl (hash: 4lM/O6BvROk/twYWkcrlOk8c7sQerkUyUusSJSJxEaU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/89/3a382a-3dda-4796-b320-3fdfb4140f24/1/v4CafmyhTQoal2Zz4DGeNOlW7T0.crl
rsync://rpki.ripe.net/repository/DEFAULT/89/3a382a-3dda-4796-b320-3fdfb4140f24/1/v4CafmyhTQoal2Zz4DGeNOlW7T0.mft
rsync://rpki.ripe.net/repository/DEFAULT/v4CafmyhTQoal2Zz4DGeNOlW7T0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 13:02:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a1:94:c2:46:d9:70:97:a4:60:bb:26:d7:fd:6d:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bf809a7e6ca14d0a1a976673e0319e34e956ed3d
Validity
Not Before: Jun 28 13:02:11 2025 GMT
Not After : Jun 29 13:02:11 2025 GMT
Subject: CN=08f3122c31fa1b40e1c154b62091c371051f7734
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:c5:38:a7:41:54:c4:fb:73:02:ea:16:5f:54:
99:22:42:4c:f7:78:ca:6c:09:c9:a7:db:11:67:9f:
7d:ae:76:f8:2e:51:d0:bc:57:06:94:ac:c2:cd:70:
3e:9a:cb:00:ab:05:6d:e6:5b:a6:8d:b5:3c:81:23:
a8:04:aa:81:3d:08:ef:c2:c4:5d:e6:67:34:4a:a2:
81:63:b6:80:f4:da:d0:08:14:39:10:f9:8d:84:52:
42:9c:16:2b:4c:8f:f7:80:82:b0:46:ea:33:ce:be:
ed:35:ca:68:96:84:49:35:8f:36:76:19:bb:3a:b9:
bd:50:22:d6:4c:36:88:80:1a:e9:bc:40:fa:ed:d2:
97:5b:72:6d:8b:46:19:9f:66:81:ff:bc:a6:71:c4:
9f:10:37:b1:81:da:34:31:14:99:1d:bf:92:63:8c:
e6:d8:2d:35:fc:25:7e:5b:87:59:b3:85:58:8b:19:
08:bf:6d:3c:d1:36:2d:a9:d4:d3:de:04:03:9d:c2:
18:55:69:8f:6d:99:76:af:cf:14:23:45:ec:18:16:
97:29:f9:4e:b7:0a:86:36:53:99:c8:1b:bc:0f:ab:
44:f6:ea:1d:56:b4:a4:0b:a5:61:73:5e:b7:48:6d:
4f:55:f8:66:a2:18:a0:62:a1:00:87:b3:ed:7e:09:
7b:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:F3:12:2C:31:FA:1B:40:E1:C1:54:B6:20:91:C3:71:05:1F:77:34
X509v3 Authority Key Identifier:
keyid:BF:80:9A:7E:6C:A1:4D:0A:1A:97:66:73:E0:31:9E:34:E9:56:ED:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v4CafmyhTQoal2Zz4DGeNOlW7T0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/3a382a-3dda-4796-b320-3fdfb4140f24/1/v4CafmyhTQoal2Zz4DGeNOlW7T0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/89/3a382a-3dda-4796-b320-3fdfb4140f24/1/v4CafmyhTQoal2Zz4DGeNOlW7T0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:1b:bc:33:b3:f5:9e:c5:15:5e:1d:e5:18:22:fb:ed:7d:9f:
7e:ac:a4:83:d3:28:e9:99:14:b2:65:cf:c7:99:ea:a4:36:f7:
a1:49:af:f6:65:ec:f0:85:b9:9c:a3:76:91:e5:43:9b:88:29:
ea:32:47:3d:d7:0b:21:a7:2e:e1:38:9f:c7:65:40:06:25:eb:
c7:07:d7:8f:c2:29:00:ba:96:78:b2:bc:a6:7e:f3:38:46:bb:
97:8c:38:c1:20:2b:e6:c3:bc:7d:e9:e4:eb:f9:fc:66:cc:91:
02:64:93:40:8b:d9:48:1f:74:c1:b6:bf:ff:49:b9:a1:59:3e:
ac:ed:32:d7:21:38:84:16:0e:a0:c1:c7:e5:74:7d:07:32:ec:
71:be:da:4c:0d:bd:ed:76:72:39:18:3b:6f:a5:b3:7c:7e:c8:
f8:ac:fb:b4:51:90:66:d3:82:b7:0d:d7:cd:ef:5e:49:85:e1:
86:f1:c4:85:6c:a1:02:fc:69:2c:67:00:c7:2f:f2:a5:a8:1b:
53:6e:07:2b:50:8d:7c:12:31:d4:ba:c1:25:f9:f4:97:e9:da:
5f:79:a2:e8:1d:3e:06:68:85:40:26:ee:82:f5:29:82:75:5f:
19:bd:d4:25:7b:15:a8:67:4a:b4:44:7a:ef:3b:90:8f:8c:7c:
e9:f5:91:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 22:46:42 2025 by rpki-client