Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/d16e3e-eb09-4fb9-9081-bd3e7adde8de/1/4g44BaG09bYc_nMBDoOMLw0ltEs.mft
File: 4g44BaG09bYc_nMBDoOMLw0ltEs.mft (raw, json)
Hash identifier: UV3eQpWDOW6gbZAJkEqrNrmzoD2BOPBxRC9lY4fWFpI=
Subject key identifier: C8:AC:96:EE:1A:5B:C5:24:C7:75:4A:DB:EB:9C:C1:A8:F9:0B:3B:B5
Authority key identifier: E2:0E:38:05:A1:B4:F5:B6:1C:FE:73:01:0E:83:8C:2F:0D:25:B4:4B
Certificate issuer: /CN=e20e3805a1b4f5b61cfe73010e838c2f0d25b44b
Certificate serial: 0197B6A175D52157C6E8D2F72FD0B721F779
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4g44BaG09bYc_nMBDoOMLw0ltEs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/d16e3e-eb09-4fb9-9081-bd3e7adde8de/1/4g44BaG09bYc_nMBDoOMLw0ltEs.mft
Manifest number: 0CC7
Signing time: Sat 28 Jun 2025 13:02:04 +0000
Manifest this update: Sat 28 Jun 2025 13:02:04 +0000
Manifest next update: Sun 29 Jun 2025 13:02:04 +0000
Files and hashes: 1: 4g44BaG09bYc_nMBDoOMLw0ltEs.crl (hash: rVCuD8KFrwqA8G4bbrDV6oNICvONh/HuPEYx5Nnliog=)
2: BD04oGhJezcKgfhBVSPLxiCwx-U.roa (hash: 6BJW9GRsg9XqwBDaRIKZatrd81rOIFw+haS77P869vM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/d16e3e-eb09-4fb9-9081-bd3e7adde8de/1/4g44BaG09bYc_nMBDoOMLw0ltEs.crl
rsync://rpki.ripe.net/repository/DEFAULT/ab/d16e3e-eb09-4fb9-9081-bd3e7adde8de/1/4g44BaG09bYc_nMBDoOMLw0ltEs.mft
rsync://rpki.ripe.net/repository/DEFAULT/4g44BaG09bYc_nMBDoOMLw0ltEs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 13:02:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a1:75:d5:21:57:c6:e8:d2:f7:2f:d0:b7:21:f7:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e20e3805a1b4f5b61cfe73010e838c2f0d25b44b
Validity
Not Before: Jun 28 13:02:04 2025 GMT
Not After : Jun 29 13:02:04 2025 GMT
Subject: CN=c8ac96ee1a5bc524c7754adbeb9cc1a8f90b3bb5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:8f:71:a4:b3:b3:1c:a1:09:e7:3f:0b:e5:d9:
f9:f9:27:db:b5:b5:82:a6:a9:11:34:a7:65:d8:0c:
41:3c:5b:09:a4:cd:36:8f:56:cb:76:15:3f:e5:45:
88:09:12:23:0e:ff:cf:a4:37:8c:47:d6:e5:c7:96:
c2:ae:0c:a9:4d:00:49:9e:1e:e4:80:33:62:f7:7d:
73:93:ed:35:1e:7f:95:39:5f:55:73:c2:27:f5:c1:
44:cc:02:a8:e5:5f:24:92:4e:2a:0d:ca:e4:c1:d3:
c9:16:37:90:e6:28:67:e5:23:c8:1d:b2:8a:27:0a:
f5:7d:e2:b3:f4:40:ad:f6:a6:d2:61:ce:b4:ea:07:
c1:f5:75:18:5e:76:05:78:49:7e:78:3f:96:f3:72:
94:cf:07:3c:cf:e5:03:fd:a4:3e:87:d0:41:74:59:
b0:30:7b:33:f0:5c:60:1b:40:b3:01:e5:b4:dd:50:
05:ae:bc:81:6d:a5:67:03:39:ae:17:36:02:ce:c8:
01:f4:e6:ae:15:0f:e7:19:7d:a1:d7:e2:8a:cb:10:
c0:0f:5b:a8:f7:8c:a6:80:6c:1d:a3:1c:0e:95:b1:
cc:f1:de:25:c0:b1:52:26:0d:38:16:d1:c1:c5:b1:
8f:bc:a3:e0:a4:bd:22:64:e6:cb:f5:95:e8:26:40:
fb:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:AC:96:EE:1A:5B:C5:24:C7:75:4A:DB:EB:9C:C1:A8:F9:0B:3B:B5
X509v3 Authority Key Identifier:
keyid:E2:0E:38:05:A1:B4:F5:B6:1C:FE:73:01:0E:83:8C:2F:0D:25:B4:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4g44BaG09bYc_nMBDoOMLw0ltEs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/d16e3e-eb09-4fb9-9081-bd3e7adde8de/1/4g44BaG09bYc_nMBDoOMLw0ltEs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/d16e3e-eb09-4fb9-9081-bd3e7adde8de/1/4g44BaG09bYc_nMBDoOMLw0ltEs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:8c:8a:a8:85:4c:4a:94:dc:b6:0e:95:e2:82:d4:dd:c5:51:
dc:dc:40:ad:b2:41:68:be:bb:ef:30:72:29:b7:63:c7:d4:4a:
6c:b9:55:59:81:4c:99:d7:3d:ae:76:6b:cb:ce:6e:4a:f1:d5:
bf:73:d3:67:35:3c:57:8a:c9:62:56:52:8b:7c:6f:69:e1:b0:
6d:5c:c0:3e:1e:1d:e2:3f:f4:75:e2:78:56:d6:bd:79:42:0d:
e6:82:fb:24:f8:74:c8:64:d1:38:95:7c:9a:9f:dd:41:ea:f3:
30:e3:a4:18:d2:ae:3e:de:c8:1d:5c:38:0f:f2:bf:61:e8:a0:
c3:a5:7f:4a:f2:63:ef:ea:c1:fc:00:8d:ca:96:49:48:c3:26:
5b:c9:a1:48:67:f1:2c:1d:2a:9b:9f:e8:0a:12:d0:d3:11:4b:
be:89:98:de:2b:16:c6:4f:a2:61:2d:ea:72:8a:10:99:d8:a9:
42:60:ec:44:e6:4c:56:98:58:09:4e:a7:5e:eb:20:30:dd:80:
96:b2:e6:0d:fa:41:26:2e:d6:63:13:9e:e6:65:78:64:b3:c5:
a4:17:52:06:5e:0e:d9:fd:2f:d9:e1:4a:d6:3e:22:51:bd:0d:
d4:ca:fc:5a:c9:40:ef:f0:e2:16:52:03:7d:0c:88:27:b9:a1:
36:5a:01:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 22:37:53 2025 by rpki-client