Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/65398a-0faa-4b64-bd09-09886c0c46a0/1/4uevc8B6V4KvJINOvdt0qciXxP8.mft
File: 4uevc8B6V4KvJINOvdt0qciXxP8.mft (raw, json)
Hash identifier: pcUDJs7rFH2lRMR/VVrcVJqYio5rN/vMH9CZSk5qgOY=
Subject key identifier: BC:25:58:EE:BE:28:D5:B2:96:72:25:E1:E2:15:37:13:61:25:94:14
Authority key identifier: E2:E7:AF:73:C0:7A:57:82:AF:24:83:4E:BD:DB:74:A9:C8:97:C4:FF
Certificate issuer: /CN=e2e7af73c07a5782af24834ebddb74a9c897c4ff
Certificate serial: 0197B74522D3C2B8C79B9254916EC6016371
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4uevc8B6V4KvJINOvdt0qciXxP8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/65398a-0faa-4b64-bd09-09886c0c46a0/1/4uevc8B6V4KvJINOvdt0qciXxP8.mft
Manifest number: 0210
Signing time: Sat 28 Jun 2025 16:00:50 +0000
Manifest this update: Sat 28 Jun 2025 16:00:50 +0000
Manifest next update: Sun 29 Jun 2025 16:00:50 +0000
Files and hashes: 1: 4uevc8B6V4KvJINOvdt0qciXxP8.crl (hash: ShQFugmYr1MYk0Y3xKSWbw4CLNapdUSpUHuZDXCJCxQ=)
2: k33f_PMIoHn5FXjWs9o_hAagQPU.roa (hash: CQN6YPAgrfc6UnCswx4tiN7JfnanWIcuyP1dM7rzekg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/65398a-0faa-4b64-bd09-09886c0c46a0/1/4uevc8B6V4KvJINOvdt0qciXxP8.crl
rsync://rpki.ripe.net/repository/DEFAULT/ba/65398a-0faa-4b64-bd09-09886c0c46a0/1/4uevc8B6V4KvJINOvdt0qciXxP8.mft
rsync://rpki.ripe.net/repository/DEFAULT/4uevc8B6V4KvJINOvdt0qciXxP8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:45:22:d3:c2:b8:c7:9b:92:54:91:6e:c6:01:63:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e2e7af73c07a5782af24834ebddb74a9c897c4ff
Validity
Not Before: Jun 28 16:00:50 2025 GMT
Not After : Jun 29 16:00:50 2025 GMT
Subject: CN=bc2558eebe28d5b2967225e1e215371361259414
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:91:d5:0a:56:d2:a0:6a:a1:d5:ec:40:38:a1:
97:bf:22:ec:cc:a7:df:9f:39:8d:62:b9:d0:ac:9c:
0c:c1:50:89:7a:6a:ce:d8:1f:ba:c5:a6:9a:a1:ec:
fb:3b:39:34:20:b1:da:b0:b5:d8:71:23:b6:06:cf:
4e:84:4d:09:52:60:e9:b2:22:ae:6e:c7:48:a3:ae:
3b:be:fd:5a:18:9d:db:db:25:1c:2c:58:cc:0d:2c:
27:88:49:9d:dc:47:00:e0:a3:90:ce:01:04:6e:f9:
23:5e:cb:b1:09:2a:0d:60:c0:f9:05:ce:09:10:ce:
c7:3e:5b:6d:d3:3a:39:09:3d:0b:67:a5:51:54:61:
84:34:c9:04:19:d0:a0:b0:de:f9:da:fc:8f:98:c9:
48:0e:a6:5d:0c:4a:74:5b:97:d4:f0:15:a6:fd:09:
be:42:18:5a:9b:b9:b8:ee:19:76:50:54:10:d2:41:
fb:c3:17:51:7c:e4:1e:2d:87:fe:16:d9:bc:3a:f5:
71:80:f1:0c:71:dc:c4:9e:d0:cf:11:42:20:7f:92:
05:21:cc:3f:ea:22:2c:2e:b9:02:62:71:e3:3c:2f:
9c:7f:5b:6f:99:e4:28:07:46:75:75:ac:4b:e7:a4:
e8:7f:cf:5b:55:d4:ec:c1:87:ea:2f:14:8d:e5:c1:
23:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:25:58:EE:BE:28:D5:B2:96:72:25:E1:E2:15:37:13:61:25:94:14
X509v3 Authority Key Identifier:
keyid:E2:E7:AF:73:C0:7A:57:82:AF:24:83:4E:BD:DB:74:A9:C8:97:C4:FF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4uevc8B6V4KvJINOvdt0qciXxP8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/65398a-0faa-4b64-bd09-09886c0c46a0/1/4uevc8B6V4KvJINOvdt0qciXxP8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/65398a-0faa-4b64-bd09-09886c0c46a0/1/4uevc8B6V4KvJINOvdt0qciXxP8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:f1:b3:59:7d:63:aa:9d:b3:46:83:ce:80:7e:da:ac:a8:28:
28:08:7e:19:13:cb:44:26:e9:87:b4:84:dc:fc:19:70:c0:48:
c1:87:5d:e6:09:e1:b7:3d:6b:83:bf:7d:f0:a3:d3:e3:87:93:
17:29:6b:8d:57:67:7b:86:53:66:26:26:5e:d0:22:a7:bb:74:
a9:13:34:77:57:cb:cd:b5:5a:4a:18:6f:2b:84:cc:77:07:65:
e0:05:a3:a0:8d:27:07:ed:3a:28:a4:3e:16:0e:10:e8:bd:45:
92:47:96:2a:5e:53:68:21:e3:12:f7:5e:3f:3d:80:25:7b:83:
a9:71:fb:5d:bc:a7:61:3e:cd:84:44:af:64:71:80:b3:10:be:
c4:aa:1a:06:6d:00:d7:61:43:4e:c8:64:f1:3f:8e:27:dc:b8:
d2:69:63:b7:1e:ec:18:9b:a1:b3:94:a1:6e:14:ac:4c:c0:ce:
5e:10:4d:2c:14:4d:3a:c5:99:6e:99:b4:43:7c:64:c8:f9:f7:
5b:df:b1:de:e2:ec:5b:69:7a:82:ad:28:df:38:07:3c:33:8a:
de:50:60:80:4a:e4:8d:d3:70:e5:a9:d2:23:c6:7d:ad:80:29:
e3:e3:78:1a:99:ad:be:d1:96:96:2f:6a:e3:e3:36:5b:48:1c:
d5:94:a2:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 22:46:43 2025 by rpki-client