Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/39a47f-1bfd-440e-b4ef-b0701b8b40c7/1/4z5VR668F6SCuM0e6BfdjO_2o68.mft
File: 4z5VR668F6SCuM0e6BfdjO_2o68.mft (raw, json)
Hash identifier: jqnmAgIlDDMdH7PzPlz24lyFJgzfXvVfXTjc0XrpMwY=
Subject key identifier: 05:17:4C:E7:C0:F7:ED:76:1F:77:FC:BA:1A:98:67:83:8F:1C:BF:39
Authority key identifier: E3:3E:55:47:AE:BC:17:A4:82:B8:CD:1E:E8:17:DD:8C:EF:F6:A3:AF
Certificate issuer: /CN=e33e5547aebc17a482b8cd1ee817dd8ceff6a3af
Certificate serial: 0197B70EEDF8C41E3250F72DE3C0FDF3D8F3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4z5VR668F6SCuM0e6BfdjO_2o68.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/95/39a47f-1bfd-440e-b4ef-b0701b8b40c7/1/4z5VR668F6SCuM0e6BfdjO_2o68.mft
Manifest number: 0D96
Signing time: Sat 28 Jun 2025 15:01:38 +0000
Manifest this update: Sat 28 Jun 2025 15:01:38 +0000
Manifest next update: Sun 29 Jun 2025 15:01:38 +0000
Files and hashes: 1: 4z5VR668F6SCuM0e6BfdjO_2o68.crl (hash: o4fbk9zqZg+zlWcckaZH4B8xsDHU7iDSfchX7W8cDrQ=)
2: nlxhNU09PYV8ICYRds67uFQ8SD4.roa (hash: 5Mkpw05F7xKd7rn+KAmOk8IiGnvRNLjGed3AF2L+Quk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/95/39a47f-1bfd-440e-b4ef-b0701b8b40c7/1/4z5VR668F6SCuM0e6BfdjO_2o68.crl
rsync://rpki.ripe.net/repository/DEFAULT/95/39a47f-1bfd-440e-b4ef-b0701b8b40c7/1/4z5VR668F6SCuM0e6BfdjO_2o68.mft
rsync://rpki.ripe.net/repository/DEFAULT/4z5VR668F6SCuM0e6BfdjO_2o68.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:0e:ed:f8:c4:1e:32:50:f7:2d:e3:c0:fd:f3:d8:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e33e5547aebc17a482b8cd1ee817dd8ceff6a3af
Validity
Not Before: Jun 28 15:01:38 2025 GMT
Not After : Jun 29 15:01:38 2025 GMT
Subject: CN=05174ce7c0f7ed761f77fcba1a9867838f1cbf39
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:e3:f5:c1:4b:bf:9c:ce:86:7a:7a:08:13:15:
82:e6:ad:5b:55:ab:71:d9:d0:51:68:8b:32:95:fc:
3a:fa:42:ad:62:a8:be:3a:76:1a:36:d8:b9:41:2c:
af:93:7b:c1:49:70:c3:ad:29:15:48:d3:ee:e8:52:
16:03:1c:01:30:d1:b5:5e:17:e4:05:5d:a8:81:f8:
c8:d2:15:4e:dc:21:ca:83:ae:c8:21:f5:1e:00:63:
79:63:61:e9:fa:fe:de:70:ce:64:0a:4d:06:6e:7f:
1e:84:fd:65:87:59:2e:a5:48:c4:5e:51:3a:6c:54:
e7:00:fd:9d:20:2a:7c:4e:c9:75:57:f2:08:bc:9f:
45:8b:61:5e:9a:58:16:07:9d:6a:3d:95:15:13:9a:
ea:66:cb:cb:31:b9:cb:8f:d0:6b:fb:04:be:00:60:
f6:d0:be:70:3c:ff:a2:1e:5d:23:36:13:16:af:29:
c2:7e:2b:1c:4e:dd:51:48:57:18:6c:92:0a:5d:de:
5c:aa:42:8d:47:11:50:5c:31:2f:4f:f5:a2:00:75:
2c:ec:c6:c2:03:f2:a4:db:e1:be:ba:fe:c2:e2:ac:
50:76:21:2e:c0:bb:6a:a2:c6:41:1b:41:a4:5b:1c:
de:13:c7:e9:d4:7e:4c:11:da:bd:38:3b:a5:89:ac:
d7:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:17:4C:E7:C0:F7:ED:76:1F:77:FC:BA:1A:98:67:83:8F:1C:BF:39
X509v3 Authority Key Identifier:
keyid:E3:3E:55:47:AE:BC:17:A4:82:B8:CD:1E:E8:17:DD:8C:EF:F6:A3:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4z5VR668F6SCuM0e6BfdjO_2o68.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/39a47f-1bfd-440e-b4ef-b0701b8b40c7/1/4z5VR668F6SCuM0e6BfdjO_2o68.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/95/39a47f-1bfd-440e-b4ef-b0701b8b40c7/1/4z5VR668F6SCuM0e6BfdjO_2o68.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bd:a9:50:43:e4:47:be:30:33:73:45:e0:ef:80:b7:94:61:b8:
39:7c:64:25:d8:9c:75:91:69:ff:c9:a2:76:99:93:49:cc:93:
79:c9:ee:ae:24:63:c4:10:74:a8:48:b7:a5:5c:76:8c:0a:c2:
40:e0:11:34:ca:a5:31:03:98:b5:f1:93:8f:5a:41:05:76:0c:
31:ea:4f:f1:53:69:07:06:e0:84:04:17:ef:08:1e:7b:20:bd:
03:c5:74:14:cd:0d:78:2d:42:5a:f0:2f:72:c8:04:68:86:96:
52:23:a9:2e:66:0c:c6:1c:d7:00:60:bd:a0:0e:0c:2c:15:f6:
1e:51:c3:6a:18:92:9e:7b:3f:8a:2e:fe:d7:a3:a5:3b:84:68:
36:49:4d:e0:43:c1:e6:05:ce:63:13:73:6e:e6:c3:ea:92:b8:
a2:0d:a4:2b:a3:ab:49:fe:12:31:82:37:25:be:0f:cd:7f:db:
1a:ad:96:b0:dc:87:66:13:28:96:f8:0a:0b:f3:77:ff:37:62:
3b:21:83:39:77:1d:24:4b:79:6b:32:b2:a6:85:22:33:29:c8:
f1:64:df:2a:33:c7:67:55:8f:07:a6:5b:f2:7f:6a:3b:85:35:
b0:9c:87:6b:65:12:c5:8b:7a:2b:e1:e3:8b:e2:4c:61:84:46:
07:ba:d0:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 19:26:15 2025 by rpki-client