Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/64ed62-a8ef-4802-a1b4-9f97b0fc4832/1/4kVMRWzmi6j-ytVCqrlhCx7MEuI.mft
File: 4kVMRWzmi6j-ytVCqrlhCx7MEuI.mft (raw, json)
Hash identifier: JDX6NbcWMmVZn7v/UuvkHxNQomFYjMENEeCkxAdBnlo=
Subject key identifier: A6:A1:76:73:64:E5:C6:F0:8E:69:0C:C6:07:0F:F9:14:52:B1:22:32
Authority key identifier: E2:45:4C:45:6C:E6:8B:A8:FE:CA:D5:42:AA:B9:61:0B:1E:CC:12:E2
Certificate issuer: /CN=e2454c456ce68ba8fecad542aab9610b1ecc12e2
Certificate serial: 0197B70EE3BD8A57672CC5000DCDECC5E0FF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4kVMRWzmi6j-ytVCqrlhCx7MEuI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/64ed62-a8ef-4802-a1b4-9f97b0fc4832/1/4kVMRWzmi6j-ytVCqrlhCx7MEuI.mft
Manifest number: 15B8
Signing time: Sat 28 Jun 2025 15:01:35 +0000
Manifest this update: Sat 28 Jun 2025 15:01:35 +0000
Manifest next update: Sun 29 Jun 2025 15:01:35 +0000
Files and hashes: 1: 4kVMRWzmi6j-ytVCqrlhCx7MEuI.crl (hash: eNzemHyCeq+lnEVqJAieR5BXqp45+UpFYB3xSCHNt0E=)
2: 9wiAjxQ8cKdQoI4k97phXcqjm0U.roa (hash: aw34neSnWmkzi+er/oSuocGYd5WKHEhdmA5jFSEL7u8=)
3: VHke2dRAU413gG-qOq91BqFotnA.roa (hash: tCtViRscoxX/FUXZsRP79cmOS8/23LI5c9CHWFx8Vhg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/aa/64ed62-a8ef-4802-a1b4-9f97b0fc4832/1/4kVMRWzmi6j-ytVCqrlhCx7MEuI.crl
rsync://rpki.ripe.net/repository/DEFAULT/aa/64ed62-a8ef-4802-a1b4-9f97b0fc4832/1/4kVMRWzmi6j-ytVCqrlhCx7MEuI.mft
rsync://rpki.ripe.net/repository/DEFAULT/4kVMRWzmi6j-ytVCqrlhCx7MEuI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:0e:e3:bd:8a:57:67:2c:c5:00:0d:cd:ec:c5:e0:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e2454c456ce68ba8fecad542aab9610b1ecc12e2
Validity
Not Before: Jun 28 15:01:35 2025 GMT
Not After : Jun 29 15:01:35 2025 GMT
Subject: CN=a6a1767364e5c6f08e690cc6070ff91452b12232
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:51:e5:14:46:ec:e9:e6:94:ed:21:14:c0:07:
41:c0:a0:3a:06:84:6d:0c:8a:bf:82:91:07:c8:c3:
05:33:f2:07:b1:c1:d9:61:4a:15:0d:f1:34:d1:6c:
b9:ea:08:13:38:85:eb:51:15:25:c5:6c:c5:ac:f0:
1b:4a:a0:ff:40:81:aa:13:93:d8:b3:62:02:71:ca:
d6:b0:d4:c7:03:af:ae:b3:d6:2e:ac:19:48:76:52:
80:90:a0:fd:a5:d1:49:ca:68:44:c2:e5:2f:1e:0e:
5f:63:b2:90:ae:70:de:01:ed:4d:70:9d:70:7c:df:
36:57:68:da:75:c2:19:0b:6c:e6:10:5f:0c:04:33:
4e:63:5c:38:ca:56:0a:16:de:78:5e:eb:b3:7d:fc:
e1:7d:35:46:53:dd:62:2b:83:16:57:3c:c7:07:a9:
5e:e2:08:e0:cb:a3:74:f4:39:29:85:db:53:68:9a:
aa:fe:be:86:e2:15:7d:77:e0:12:05:86:61:fd:9a:
69:04:86:69:35:ec:07:d2:95:15:b3:66:83:4a:f8:
ad:8a:57:57:22:2c:53:eb:a5:0f:91:f8:fa:b9:bd:
f8:2f:dd:ed:07:f8:d8:ba:1f:e1:a2:5b:55:2b:51:
8d:53:46:b7:b0:af:ac:4b:6f:ac:f9:71:8b:52:8a:
52:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:A1:76:73:64:E5:C6:F0:8E:69:0C:C6:07:0F:F9:14:52:B1:22:32
X509v3 Authority Key Identifier:
keyid:E2:45:4C:45:6C:E6:8B:A8:FE:CA:D5:42:AA:B9:61:0B:1E:CC:12:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4kVMRWzmi6j-ytVCqrlhCx7MEuI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/64ed62-a8ef-4802-a1b4-9f97b0fc4832/1/4kVMRWzmi6j-ytVCqrlhCx7MEuI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/64ed62-a8ef-4802-a1b4-9f97b0fc4832/1/4kVMRWzmi6j-ytVCqrlhCx7MEuI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:4b:5c:a7:18:20:00:fe:7e:90:54:eb:7f:5c:d5:3d:d9:b8:
a3:ac:f7:60:68:ea:cd:69:f4:e2:c3:ec:16:bb:f9:96:35:7a:
9f:34:23:5f:38:5d:7f:bd:9b:56:76:6b:f4:fd:58:0c:b4:03:
31:94:34:bd:2e:0c:d5:e5:8d:df:7e:02:c8:ea:91:0a:5f:e9:
ba:8c:46:6b:c4:e2:55:42:5a:02:1b:63:0a:3e:81:fd:2b:0b:
40:6c:a5:2c:40:3c:51:5e:96:fa:6f:1c:a6:36:c3:2c:99:a0:
d6:d4:a3:78:4a:a4:a9:99:6d:8b:00:0a:4c:17:66:75:b8:62:
32:75:05:ed:35:bc:fe:7b:a5:af:08:14:f6:d9:bd:e5:38:7c:
23:08:36:b3:be:ee:97:9f:0a:99:13:cd:a6:65:cd:c5:53:c2:
c7:6a:67:89:b1:f3:85:ad:0b:a7:62:fd:04:10:4d:0b:c3:cf:
11:e7:ea:5f:f4:bc:6c:88:56:37:4f:6a:fb:3c:4d:73:dc:0b:
9f:80:f5:e5:38:eb:b9:38:8c:d1:f3:66:c0:c9:4a:3b:4f:a8:
20:bb:2a:60:4c:95:35:5b:09:89:64:ba:85:3f:c4:0e:8f:7d:
28:88:73:02:0e:2c:bc:3c:8e:2d:57:ef:22:9c:02:af:0b:a1:
54:47:69:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 22:49:33 2025 by rpki-client