Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/ad1216-b71d-4557-a086-efea63d06f80/1/4Zy7iNKxqJZlhQZ3hmLnXHMqZ-c.mft
File: 4Zy7iNKxqJZlhQZ3hmLnXHMqZ-c.mft (raw, json)
Hash identifier: iWLxqaXmk3TxU0zvol/i6cLQeLHqCKCh9APXYX6k+cs=
Subject key identifier: 2E:E4:67:79:BA:F5:FF:EF:9D:DF:79:85:52:7B:15:58:66:1B:2E:8F
Authority key identifier: E1:9C:BB:88:D2:B1:A8:96:65:85:06:77:86:62:E7:5C:73:2A:67:E7
Certificate issuer: /CN=e19cbb88d2b1a896658506778662e75c732a67e7
Certificate serial: 0197B6D738850A8DCFA6DF53EBB35AC5FE0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4Zy7iNKxqJZlhQZ3hmLnXHMqZ-c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/ad1216-b71d-4557-a086-efea63d06f80/1/4Zy7iNKxqJZlhQZ3hmLnXHMqZ-c.mft
Manifest number: 15B5
Signing time: Sat 28 Jun 2025 14:00:47 +0000
Manifest this update: Sat 28 Jun 2025 14:00:47 +0000
Manifest next update: Sun 29 Jun 2025 14:00:47 +0000
Files and hashes: 1: 4Zy7iNKxqJZlhQZ3hmLnXHMqZ-c.crl (hash: 6tCt1rwVAVrdlA04KJINB6Qe9cVKbeLmUj5TXM8LHsU=)
2: E3bOWVadiTMoov1haUFyRTwduJA.roa (hash: sxYsSioAFV3M4+urFT6FLkeq4ts+IfaNfTA80Mu3sng=)
3: qBf7Ld8e0ZEc7SC83qsc-EpQ6wo.roa (hash: 1F0G1lB8+dsYp3xA4GqGoykNUR9+r6OUzve6mTfWaFI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/ad1216-b71d-4557-a086-efea63d06f80/1/4Zy7iNKxqJZlhQZ3hmLnXHMqZ-c.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/ad1216-b71d-4557-a086-efea63d06f80/1/4Zy7iNKxqJZlhQZ3hmLnXHMqZ-c.mft
rsync://rpki.ripe.net/repository/DEFAULT/4Zy7iNKxqJZlhQZ3hmLnXHMqZ-c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 14:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:d7:38:85:0a:8d:cf:a6:df:53:eb:b3:5a:c5:fe:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e19cbb88d2b1a896658506778662e75c732a67e7
Validity
Not Before: Jun 28 14:00:47 2025 GMT
Not After : Jun 29 14:00:47 2025 GMT
Subject: CN=2ee46779baf5ffef9ddf7985527b1558661b2e8f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:81:4f:bb:0d:e6:5e:1c:4b:3d:c8:a8:7a:76:
e9:2a:92:8f:48:51:13:a4:5f:2c:ed:ad:cc:a8:8c:
89:c2:a9:c8:66:8d:fc:64:4e:59:25:d0:16:7d:0a:
cc:2f:3c:f2:94:d5:14:b4:74:fa:81:1d:9e:6a:57:
58:1b:22:00:02:0f:04:48:1e:ed:94:63:de:c0:34:
ff:be:3a:9d:45:20:f3:98:61:30:3d:2a:9f:27:b4:
e2:e3:3a:90:a8:16:d1:b6:fe:9f:5e:25:95:ab:83:
65:e9:f0:1f:33:7e:a3:28:48:99:c3:37:11:1a:d5:
df:f0:a4:7a:50:70:d1:18:de:cf:4c:e5:1a:bb:3d:
2a:72:ad:2d:c6:e9:58:04:84:2f:71:9e:11:9e:8e:
55:70:15:85:6c:b1:f3:47:66:ee:f5:3b:22:52:c4:
84:2a:78:79:ae:5c:37:1f:01:90:ea:b5:09:4f:a5:
e2:7f:0d:67:19:ee:02:14:aa:5c:6c:f1:b3:85:dc:
d3:00:73:a5:c5:47:b4:8d:a6:a1:34:6c:ea:37:d5:
a6:8d:d2:3a:87:4b:57:5c:f3:9d:4c:7d:8b:ba:36:
c6:e2:c1:ea:1f:7c:a5:b7:62:f2:b1:d5:b0:13:e3:
3c:49:64:d7:5f:2d:f5:00:90:f4:ad:21:11:8a:27:
03:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:E4:67:79:BA:F5:FF:EF:9D:DF:79:85:52:7B:15:58:66:1B:2E:8F
X509v3 Authority Key Identifier:
keyid:E1:9C:BB:88:D2:B1:A8:96:65:85:06:77:86:62:E7:5C:73:2A:67:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4Zy7iNKxqJZlhQZ3hmLnXHMqZ-c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/ad1216-b71d-4557-a086-efea63d06f80/1/4Zy7iNKxqJZlhQZ3hmLnXHMqZ-c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/ad1216-b71d-4557-a086-efea63d06f80/1/4Zy7iNKxqJZlhQZ3hmLnXHMqZ-c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
97:c4:de:1d:13:22:c4:6e:4a:96:24:4b:fe:7b:fa:da:b7:f9:
b7:fd:24:58:a3:43:21:1f:6c:64:01:f1:e2:db:6f:b2:87:56:
ca:8d:1e:d5:60:11:42:89:d6:c0:12:88:db:ef:d6:ff:8e:42:
3a:04:18:28:e7:fb:3d:37:a5:00:85:ef:01:62:b6:80:d2:34:
c9:10:f3:41:9e:ae:fb:be:a6:e5:8c:e5:70:59:fd:66:0d:f9:
c2:66:bc:9e:1f:a8:e5:15:30:f8:9c:23:77:5a:88:5d:96:69:
ab:34:37:68:3a:98:62:91:5c:5b:47:0e:cf:f1:a8:d2:ea:bf:
44:4d:69:70:a0:11:d2:e8:6a:cf:dd:9f:f3:18:76:78:92:8a:
00:76:5c:08:f1:01:3a:96:72:36:3c:58:40:0e:e9:87:2a:d1:
71:d3:4d:39:5c:73:a0:45:ed:d3:4c:21:6f:42:5c:f5:a7:11:
4c:dd:e4:3b:f2:e9:e7:0f:9a:74:51:fb:6d:25:75:c7:45:4d:
be:bc:61:b7:16:bc:01:cb:47:6c:e8:a1:00:9b:8a:17:8c:53:
6d:6a:24:73:d9:54:b4:54:d4:00:c3:0c:63:28:dc:c6:ac:79:
ad:33:6f:41:71:28:1a:fa:33:c3:45:95:94:61:35:bd:69:c3:
a2:b6:9a:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:07:13 2025 by rpki-client