Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/540897-f4b7-4848-b07b-96ab21696974/1/4jp0YwqEJMzV9bsPYCIIlFJ9cyw.mft
File: 4jp0YwqEJMzV9bsPYCIIlFJ9cyw.mft (raw, json)
Hash identifier: P5kYllipey3pF0bi+pF4fg/cV10RAUb6q66OjhZMWns=
Subject key identifier: 49:13:EB:AA:C5:F3:5F:13:A6:36:4E:A1:A7:76:85:6E:A1:C3:28:67
Authority key identifier: E2:3A:74:63:0A:84:24:CC:D5:F5:BB:0F:60:22:08:94:52:7D:73:2C
Certificate issuer: /CN=e23a74630a8424ccd5f5bb0f60220894527d732c
Certificate serial: 0197B7EA1BD2F3CC6B5A62E562568FEC7F48
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4jp0YwqEJMzV9bsPYCIIlFJ9cyw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/540897-f4b7-4848-b07b-96ab21696974/1/4jp0YwqEJMzV9bsPYCIIlFJ9cyw.mft
Manifest number: 104D
Signing time: Sat 28 Jun 2025 19:01:02 +0000
Manifest this update: Sat 28 Jun 2025 19:01:02 +0000
Manifest next update: Sun 29 Jun 2025 19:01:02 +0000
Files and hashes: 1: 4jp0YwqEJMzV9bsPYCIIlFJ9cyw.crl (hash: Z0+yEf+PJ122etcgUMZ3WC9SlapbKBzqo6PwDtTINZo=)
2: MQ8RZspaKkEig8cCCF7-zec3ZHI.roa (hash: TWPrc2azmEsVYvz4zvYsbEnxkist2uhLkvy3lSkFipY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/540897-f4b7-4848-b07b-96ab21696974/1/4jp0YwqEJMzV9bsPYCIIlFJ9cyw.crl
rsync://rpki.ripe.net/repository/DEFAULT/a6/540897-f4b7-4848-b07b-96ab21696974/1/4jp0YwqEJMzV9bsPYCIIlFJ9cyw.mft
rsync://rpki.ripe.net/repository/DEFAULT/4jp0YwqEJMzV9bsPYCIIlFJ9cyw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:ea:1b:d2:f3:cc:6b:5a:62:e5:62:56:8f:ec:7f:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e23a74630a8424ccd5f5bb0f60220894527d732c
Validity
Not Before: Jun 28 19:01:02 2025 GMT
Not After : Jun 29 19:01:02 2025 GMT
Subject: CN=4913ebaac5f35f13a6364ea1a776856ea1c32867
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:8c:f9:0e:21:a8:c0:e2:2f:85:b0:54:4b:a2:
1c:38:3c:2f:e3:6c:c5:c5:64:4d:fb:3a:8d:ab:3f:
7f:eb:b6:62:86:46:41:ed:1d:aa:f6:72:a2:f1:0c:
f3:b5:a8:28:7e:46:10:05:f9:d7:cd:30:92:42:1f:
fc:97:ae:dc:f2:d5:43:b2:d8:13:17:45:56:0e:ac:
c2:ed:3f:6c:f7:26:aa:22:08:fa:7c:13:a2:ee:31:
47:11:0d:f2:cf:56:3d:53:de:c0:7e:4a:0d:3e:d6:
d8:a3:55:15:5c:d0:94:fb:93:ca:10:f7:b1:f8:a9:
9a:d7:66:e5:b8:57:59:fe:cb:17:97:0c:45:f6:6f:
46:56:16:a3:39:92:ac:37:e6:7d:32:ae:59:d8:28:
44:28:bf:2a:c2:27:17:87:ce:d9:03:7a:42:9c:98:
a6:34:9e:f0:cd:f4:a7:43:a0:e9:01:32:57:84:25:
12:3a:43:5f:e8:80:79:1c:91:bd:14:d2:05:67:3e:
c0:9d:c9:e7:2f:f6:3a:96:32:81:cf:90:ac:24:d8:
e4:ec:6e:e7:92:39:57:4c:b0:94:1a:df:1f:12:51:
ca:c3:25:b4:18:15:00:53:19:c3:1b:2f:af:a0:6d:
8c:e1:f8:c2:3d:5d:29:f9:b5:f8:b1:2b:65:4f:6c:
d2:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:13:EB:AA:C5:F3:5F:13:A6:36:4E:A1:A7:76:85:6E:A1:C3:28:67
X509v3 Authority Key Identifier:
keyid:E2:3A:74:63:0A:84:24:CC:D5:F5:BB:0F:60:22:08:94:52:7D:73:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4jp0YwqEJMzV9bsPYCIIlFJ9cyw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/540897-f4b7-4848-b07b-96ab21696974/1/4jp0YwqEJMzV9bsPYCIIlFJ9cyw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/540897-f4b7-4848-b07b-96ab21696974/1/4jp0YwqEJMzV9bsPYCIIlFJ9cyw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b8:0a:02:bb:ff:25:60:e1:2a:49:5b:e0:90:60:a5:c2:5a:13:
56:03:25:9b:a4:fc:26:14:4c:63:43:87:6c:dc:d6:5d:3b:f0:
8e:0b:93:d3:98:93:26:60:fc:69:de:00:19:14:d5:71:69:a6:
aa:9f:a2:38:1e:54:18:62:ba:fc:5b:6e:db:88:de:ba:84:aa:
e6:4a:83:5b:69:1b:29:97:54:9a:1e:00:82:fb:37:ca:5f:91:
13:4f:0c:22:48:3b:dd:9b:ad:d3:22:f0:c5:dc:ed:fe:f1:4b:
98:61:58:dc:62:57:31:35:17:7e:94:09:64:8c:63:28:a3:3e:
7f:c5:7f:30:5d:26:32:8d:40:74:fa:43:ae:35:23:e4:21:48:
39:e5:ff:53:ad:e2:dd:57:c7:54:76:19:cd:a1:80:c7:37:87:
16:b1:7c:f7:5d:bc:c2:e5:5b:47:aa:4d:3f:b9:61:36:59:aa:
55:fa:14:8d:d4:8c:26:08:da:47:4d:4a:4d:ae:ee:ed:e3:c4:
ed:cf:b4:a2:dc:fe:00:51:e6:1c:58:fe:7e:24:6d:a5:1f:e8:
c1:01:94:bc:42:bf:30:42:9b:ba:e5:0b:62:95:01:d8:b7:2f:
8b:7a:5f:7a:31:69:0a:e5:c8:d3:3a:25:b1:a9:1a:46:fe:f3:
60:3b:c6:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:30:09 2025 by rpki-client