Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/96/eee6f4-548e-4cef-8fa4-93b020fe8ff1/1/4u1kMJX_plfeBc7spdILJlwbf1I.mft
File: 4u1kMJX_plfeBc7spdILJlwbf1I.mft (raw, json)
Hash identifier: d2a64/7BBsGgzCsSUbue92fXIr5ue9KrEWukusO6uJw=
Subject key identifier: EB:88:A4:F0:63:F1:C4:18:14:F7:B1:4B:12:12:BB:6B:A7:57:C8:7D
Authority key identifier: E2:ED:64:30:95:FF:A6:57:DE:05:CE:EC:A5:D2:0B:26:5C:1B:7F:52
Certificate issuer: /CN=e2ed643095ffa657de05ceeca5d20b265c1b7f52
Certificate serial: 0197B6D72B34587E383097D6B0F5B1496223
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4u1kMJX_plfeBc7spdILJlwbf1I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/96/eee6f4-548e-4cef-8fa4-93b020fe8ff1/1/4u1kMJX_plfeBc7spdILJlwbf1I.mft
Manifest number: 0E33
Signing time: Sat 28 Jun 2025 14:00:43 +0000
Manifest this update: Sat 28 Jun 2025 14:00:43 +0000
Manifest next update: Sun 29 Jun 2025 14:00:43 +0000
Files and hashes: 1: 4u1kMJX_plfeBc7spdILJlwbf1I.crl (hash: ceyB/1G0GokX/CYSDfMJV9V+fvYSuGKyJ3iWWAyWBE4=)
2: m1S7Ig8EoJ-at70vZRF2UbuJi5Q.roa (hash: AiilIUPxxw08sr3kqUjUq/R6OJzvAGqmXWhwnhpEZ7A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/96/eee6f4-548e-4cef-8fa4-93b020fe8ff1/1/4u1kMJX_plfeBc7spdILJlwbf1I.crl
rsync://rpki.ripe.net/repository/DEFAULT/96/eee6f4-548e-4cef-8fa4-93b020fe8ff1/1/4u1kMJX_plfeBc7spdILJlwbf1I.mft
rsync://rpki.ripe.net/repository/DEFAULT/4u1kMJX_plfeBc7spdILJlwbf1I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:d7:2b:34:58:7e:38:30:97:d6:b0:f5:b1:49:62:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e2ed643095ffa657de05ceeca5d20b265c1b7f52
Validity
Not Before: Jun 28 14:00:43 2025 GMT
Not After : Jun 29 14:00:43 2025 GMT
Subject: CN=eb88a4f063f1c41814f7b14b1212bb6ba757c87d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:b9:7e:92:ce:14:aa:f0:4b:8d:ea:a0:e1:ac:
90:81:84:a7:2d:bf:3a:69:b5:8f:4b:e2:1c:71:ef:
94:9b:c0:8b:80:7a:f3:57:8a:ae:ae:32:e9:52:1a:
bc:27:f4:ff:5e:ae:91:c7:42:cf:ad:12:35:b3:96:
c0:91:2a:0f:69:37:8c:a7:c4:7b:d9:3b:18:a3:97:
67:c1:d2:74:84:5a:10:a8:2a:f5:5d:bf:d8:c7:96:
89:d7:03:8a:c6:2f:f8:29:71:8d:00:18:fb:59:1d:
b4:b2:db:c6:5a:86:d2:fd:af:4d:bb:40:4a:ee:c3:
ac:3a:34:96:e0:64:41:54:9d:56:42:6c:8d:bb:b3:
17:9b:04:c8:3f:c3:ca:8f:38:81:fb:c5:a4:16:e2:
d4:1e:f0:77:da:5a:f1:ad:15:65:03:db:a3:78:87:
71:72:8e:2c:8d:49:c4:a4:9b:82:4d:65:92:c7:f3:
53:ba:b3:28:f2:be:8c:13:24:31:7c:ff:a7:59:6b:
97:08:3e:c0:1c:e2:25:8b:45:20:29:51:0a:b7:56:
29:3c:43:ff:d1:fc:20:c1:3b:b9:bf:54:3c:45:70:
9c:2f:63:94:94:03:be:67:6f:2f:f9:9b:66:c3:4d:
33:56:4c:a6:3d:3c:00:f8:87:12:00:d3:b4:ae:c3:
05:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:88:A4:F0:63:F1:C4:18:14:F7:B1:4B:12:12:BB:6B:A7:57:C8:7D
X509v3 Authority Key Identifier:
keyid:E2:ED:64:30:95:FF:A6:57:DE:05:CE:EC:A5:D2:0B:26:5C:1B:7F:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4u1kMJX_plfeBc7spdILJlwbf1I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/eee6f4-548e-4cef-8fa4-93b020fe8ff1/1/4u1kMJX_plfeBc7spdILJlwbf1I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/96/eee6f4-548e-4cef-8fa4-93b020fe8ff1/1/4u1kMJX_plfeBc7spdILJlwbf1I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:a5:79:f6:0e:58:9d:3a:ae:5e:fd:af:63:33:31:90:b0:62:
b0:71:0e:01:5b:95:10:87:0e:09:3d:2f:d3:c0:3c:03:7c:04:
a8:9e:62:8a:a5:00:3b:54:3b:fc:e7:dd:14:b6:e4:44:2c:b2:
cf:0f:fc:d8:e2:79:8f:b3:69:6c:1e:3a:d1:83:f3:2c:fd:02:
3e:59:f7:84:8e:7b:d0:7a:a0:2f:95:22:17:4a:11:ca:89:72:
3e:d1:b1:98:cf:52:2a:36:1e:d3:8c:20:49:f4:bd:9c:8b:ec:
a1:a2:f7:03:bc:4b:de:f1:d4:2e:6f:4d:2a:7d:a9:ed:e2:8e:
46:ea:41:43:f4:41:56:1c:b4:f6:ed:6e:8b:c7:23:9e:a2:b9:
b8:2a:67:15:18:f5:06:4f:41:b6:7b:0a:62:9f:ca:c9:05:9a:
d7:e1:53:de:44:1c:05:e3:68:86:90:1e:f6:9d:19:ab:93:c9:
07:1c:ac:22:4c:03:02:ed:60:78:4f:dc:e0:01:20:3c:a5:21:
4f:91:83:fc:a7:0c:89:85:1e:4b:e7:4c:71:24:2e:80:4b:7d:
99:26:6d:06:2c:43:42:24:df:23:f0:ef:2f:64:63:ef:6a:02:
5f:e1:d4:c1:9f:a8:2f:43:21:d1:35:c6:56:0c:0b:a2:da:95:
a7:c4:d1:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 18:55:46 2025 by rpki-client