Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/ebe8e1-539b-4004-8d4c-a00b5713c6aa/1/4kjVvwGw4pW9CIX8XE34J1Q4Iu0.mft
File: 4kjVvwGw4pW9CIX8XE34J1Q4Iu0.mft (raw, json)
Hash identifier: 8LmtrEg7aPQauedf4P0PfR9256LsUeupKW4ic9xS2a4=
Subject key identifier: A6:C8:D0:FD:E7:7E:92:B3:B2:F5:CA:86:69:CE:B6:13:5F:7B:C1:F9
Authority key identifier: E2:48:D5:BF:01:B0:E2:95:BD:08:85:FC:5C:4D:F8:27:54:38:22:ED
Certificate issuer: /CN=e248d5bf01b0e295bd0885fc5c4df827543822ed
Certificate serial: 0197B8213CDCA5E807D2D596396C9FB82620
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4kjVvwGw4pW9CIX8XE34J1Q4Iu0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/ebe8e1-539b-4004-8d4c-a00b5713c6aa/1/4kjVvwGw4pW9CIX8XE34J1Q4Iu0.mft
Manifest number: 15B7
Signing time: Sat 28 Jun 2025 20:01:15 +0000
Manifest this update: Sat 28 Jun 2025 20:01:15 +0000
Manifest next update: Sun 29 Jun 2025 20:01:15 +0000
Files and hashes: 1: 4kjVvwGw4pW9CIX8XE34J1Q4Iu0.crl (hash: 5KCPABJYw/ABfdnXb7RGIRvBalzgT81Mp+1xPuMLwsE=)
2: dcj_O6LOhrZyjlYfbFWKtd8afLs.roa (hash: 6QlVZfYgCQ+Co7hd7hXUtwQRQFR7TWRFQKMzrXC6rV4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/97/ebe8e1-539b-4004-8d4c-a00b5713c6aa/1/4kjVvwGw4pW9CIX8XE34J1Q4Iu0.crl
rsync://rpki.ripe.net/repository/DEFAULT/97/ebe8e1-539b-4004-8d4c-a00b5713c6aa/1/4kjVvwGw4pW9CIX8XE34J1Q4Iu0.mft
rsync://rpki.ripe.net/repository/DEFAULT/4kjVvwGw4pW9CIX8XE34J1Q4Iu0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b8:21:3c:dc:a5:e8:07:d2:d5:96:39:6c:9f:b8:26:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e248d5bf01b0e295bd0885fc5c4df827543822ed
Validity
Not Before: Jun 28 20:01:15 2025 GMT
Not After : Jun 29 20:01:15 2025 GMT
Subject: CN=a6c8d0fde77e92b3b2f5ca8669ceb6135f7bc1f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:dd:f7:0e:8f:f4:1d:c9:be:db:e2:2d:9d:13:
9f:59:a5:ec:1d:1a:a6:c2:7e:48:0d:d8:fa:76:61:
fc:a4:92:9d:85:0a:27:02:b6:4a:a9:3b:a8:30:51:
ca:a8:5f:e5:87:46:81:39:08:43:fe:36:1e:7f:05:
36:f1:7f:79:17:28:51:7a:a2:c9:a7:67:9a:a2:c8:
a1:83:6c:d4:fe:9b:36:05:76:a8:dc:85:51:9d:aa:
69:ed:b5:03:a9:ff:0a:e5:45:b7:e3:53:b2:5e:b9:
11:59:bf:7b:c5:90:1c:a2:05:dc:e4:ec:7d:8f:d2:
6d:94:99:7d:a3:f0:b4:77:ea:bc:6d:40:11:e3:06:
c9:6c:d0:78:0c:fe:b4:5a:a7:f8:b0:aa:eb:c7:4d:
f6:8f:10:b2:5b:04:b0:07:8b:f8:2a:4f:0c:56:5d:
56:af:f6:67:52:06:0b:9e:d5:92:78:24:05:94:99:
d3:c7:97:83:f9:3b:95:19:01:a4:a0:22:40:f6:dc:
3a:9d:ec:c8:8e:0e:04:c6:e5:ca:70:ea:65:1f:74:
67:fb:bc:ad:07:a1:05:fd:19:ae:9e:28:bf:bb:39:
38:c5:48:13:ce:2d:52:9d:c5:98:c9:ca:c1:ff:e2:
78:75:0c:ec:3d:83:4b:a4:b5:70:19:de:b5:6a:53:
c8:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:C8:D0:FD:E7:7E:92:B3:B2:F5:CA:86:69:CE:B6:13:5F:7B:C1:F9
X509v3 Authority Key Identifier:
keyid:E2:48:D5:BF:01:B0:E2:95:BD:08:85:FC:5C:4D:F8:27:54:38:22:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4kjVvwGw4pW9CIX8XE34J1Q4Iu0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/ebe8e1-539b-4004-8d4c-a00b5713c6aa/1/4kjVvwGw4pW9CIX8XE34J1Q4Iu0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/97/ebe8e1-539b-4004-8d4c-a00b5713c6aa/1/4kjVvwGw4pW9CIX8XE34J1Q4Iu0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:41:7d:88:58:d3:97:55:ba:b0:37:26:40:6e:59:04:1c:e7:
20:39:de:ae:d8:3a:10:ee:99:80:55:34:c3:9a:7b:c0:43:4d:
10:41:22:fc:3f:25:da:80:94:49:cd:37:c3:bb:16:4a:92:b5:
dd:b9:ff:d5:ea:b8:2a:5e:a5:fc:f2:01:c7:07:00:69:db:82:
2d:bf:56:9e:63:25:95:a0:bc:61:a8:67:d7:0e:c7:65:f4:3b:
38:ed:4f:3a:29:e1:cb:e1:32:80:11:b8:44:6e:7d:73:14:d1:
5b:f3:87:41:0e:9e:d7:0a:46:75:93:3f:e2:b0:b9:44:81:5f:
84:a3:73:67:e2:67:1d:b0:2e:00:e7:0b:17:48:e8:f1:9e:ee:
7d:fe:07:0c:84:3a:d0:bd:bb:be:af:1f:f7:9c:93:6d:58:ec:
cf:a5:ef:b7:0f:95:e0:10:72:59:f6:d5:5f:76:68:70:74:1b:
31:6d:31:76:6f:22:2e:37:10:bf:41:db:96:62:be:76:01:07:
d5:6f:6f:a4:ec:37:94:44:72:18:37:55:d6:2e:5b:9e:ba:ac:
d8:22:9c:80:d8:73:8d:1e:d8:31:5c:7b:ac:4e:d9:c3:da:9c:
9f:19:4f:fb:40:51:a0:d2:3c:55:32:a5:f5:43:10:11:79:a7:
69:1b:42:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 22:17:42 2025 by rpki-client