Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/d899cc-5357-471a-bc1c-077bc8ba1e5d/1/K04tNMzuRXa1znYFoITmwIUiwig.mft
File: K04tNMzuRXa1znYFoITmwIUiwig.mft (raw, json)
Hash identifier: 8LvjOr2Xp9mZ+9E3pjTEBr4dY66vc2TjLi8MwQ3Ide0=
Subject key identifier: E4:9A:FA:86:A9:A8:AC:A6:E7:71:B3:94:10:EE:FD:F4:AC:D5:1C:D8
Authority key identifier: 2B:4E:2D:34:CC:EE:45:76:B5:CE:76:05:A0:84:E6:C0:85:22:C2:28
Certificate issuer: /CN=2b4e2d34ccee4576b5ce7605a084e6c08522c228
Certificate serial: 0197B70E5E8B796F99AF4AFCA327A77D1C94
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/K04tNMzuRXa1znYFoITmwIUiwig.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/d899cc-5357-471a-bc1c-077bc8ba1e5d/1/K04tNMzuRXa1znYFoITmwIUiwig.mft
Manifest number: 15B9
Signing time: Sat 28 Jun 2025 15:01:01 +0000
Manifest this update: Sat 28 Jun 2025 15:01:01 +0000
Manifest next update: Sun 29 Jun 2025 15:01:01 +0000
Files and hashes: 1: GSpTlfTO5KcQK2jI527EKT02SMc.roa (hash: TpoUJbGzlzV0iUGibBYOB2or2f2ZUtWBHSlc5utMfHk=)
2: K04tNMzuRXa1znYFoITmwIUiwig.crl (hash: ne02TVIAutIzT5RcPiFQmEtcGIa4lKOHkosnaz83Jxg=)
3: inTF6SWHroBiGHmy-0U30O5ydnA.roa (hash: evzJBNLsSCaxTpI1F1FxS8W2lXJa9MwPxDq+MYhTrqw=)
4: qgbAAtOcnU1uj0vsxF1XX4uS6aw.roa (hash: sqwZAEeBQvSXLjPqcFlAmMMOVHBKwCNCWM9uKLuZCYE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/d899cc-5357-471a-bc1c-077bc8ba1e5d/1/K04tNMzuRXa1znYFoITmwIUiwig.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/d899cc-5357-471a-bc1c-077bc8ba1e5d/1/K04tNMzuRXa1znYFoITmwIUiwig.mft
rsync://rpki.ripe.net/repository/DEFAULT/K04tNMzuRXa1znYFoITmwIUiwig.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:0e:5e:8b:79:6f:99:af:4a:fc:a3:27:a7:7d:1c:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2b4e2d34ccee4576b5ce7605a084e6c08522c228
Validity
Not Before: Jun 28 15:01:01 2025 GMT
Not After : Jun 29 15:01:01 2025 GMT
Subject: CN=e49afa86a9a8aca6e771b39410eefdf4acd51cd8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:4e:fa:a7:bd:eb:f8:87:4b:3e:c0:18:4a:b9:
93:16:71:b7:b9:ed:09:11:08:c7:ff:82:40:d8:5e:
ff:f6:d4:f3:32:fd:d0:b8:03:4b:47:89:bc:12:94:
0a:2c:13:ae:cb:dd:5e:ce:45:1b:76:26:94:28:c3:
fa:ee:eb:49:bb:c7:c7:c9:11:82:69:d9:06:4e:a8:
dd:1c:18:dd:37:d3:cc:4b:aa:9d:f8:a1:f9:65:e8:
24:e1:2b:c3:fb:71:fe:54:93:6c:72:c7:a6:ad:e1:
41:7e:bc:86:db:0b:eb:48:c4:97:1f:d4:9b:c2:34:
00:c0:6d:77:b6:c8:ec:55:91:16:91:fd:f5:2e:24:
56:ed:fe:7d:5e:aa:50:07:bb:52:ed:c6:d2:94:db:
c0:e0:c2:60:9f:cc:4f:f9:9a:e0:ea:97:5a:d3:16:
92:2e:b8:8b:6f:b3:6e:9d:2c:95:fc:c5:cb:22:ca:
1a:7c:ef:04:c5:a5:64:83:cd:3f:6a:57:29:c7:64:
f9:5d:27:27:e1:60:52:0f:00:8f:d0:f8:ed:5f:3f:
56:86:d6:91:1b:74:c9:f0:f2:31:fb:aa:54:0b:0b:
a0:8a:e7:9e:32:6f:d1:ec:c1:c3:b5:d8:4b:a3:d4:
ec:38:f0:9f:bb:66:22:6c:5e:23:d4:57:84:4e:f6:
71:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:9A:FA:86:A9:A8:AC:A6:E7:71:B3:94:10:EE:FD:F4:AC:D5:1C:D8
X509v3 Authority Key Identifier:
keyid:2B:4E:2D:34:CC:EE:45:76:B5:CE:76:05:A0:84:E6:C0:85:22:C2:28
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K04tNMzuRXa1znYFoITmwIUiwig.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/d899cc-5357-471a-bc1c-077bc8ba1e5d/1/K04tNMzuRXa1znYFoITmwIUiwig.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/d899cc-5357-471a-bc1c-077bc8ba1e5d/1/K04tNMzuRXa1znYFoITmwIUiwig.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
95:23:59:85:a4:41:97:75:3e:0d:04:24:09:cc:51:ce:f8:50:
ec:cb:a5:8c:07:cb:02:62:9f:d4:ad:e5:d6:2d:73:b0:83:69:
05:e2:55:b2:2f:ee:bd:8e:1c:62:93:0f:f5:da:ed:5b:bc:42:
a0:ac:cd:b8:bd:64:11:4e:6c:63:25:c8:c4:0e:80:20:7d:61:
e7:7b:2c:5c:47:c0:b5:c9:3b:04:f3:e2:7e:71:8a:ae:ca:4b:
53:75:b3:b8:36:9d:33:3c:5f:59:57:2f:9a:d8:08:9b:9a:df:
f1:72:7c:eb:f2:07:c4:e3:d3:d0:49:04:2b:35:d5:1d:5e:ae:
f1:b0:68:fd:2c:7d:b6:9d:54:c1:56:7b:3d:5f:ce:0f:12:67:
0e:7a:e7:48:ab:88:89:a8:df:d9:22:81:d4:cf:cc:b7:1b:24:
4d:1e:14:08:28:63:2c:0a:9d:fd:c5:68:31:7b:31:1f:4d:06:
9e:f3:25:06:3d:fb:b0:59:0b:15:8a:9a:9d:49:71:8f:62:c4:
08:46:9f:27:63:28:e7:42:d8:36:77:f9:f1:94:50:63:a5:41:
32:93:77:45:c5:4d:6b:3b:c8:dc:78:2a:41:a6:2c:c0:78:30:
3b:f7:8f:1b:33:50:57:9d:bf:6e:a0:f5:aa:ea:55:4c:5f:cc:
67:9f:29:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:02:56 2025 by rpki-client