Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/6b78a5-4c5c-4383-87fd-0cf74be303ff/1/4Z2wxbLZYQ71hul_uh_Kh1AG89o.mft
File: 4Z2wxbLZYQ71hul_uh_Kh1AG89o.mft (raw, json)
Hash identifier: mmf4oGNDUUOyJXm0Aw6b0UOxFHZ4G9fXjHGrEeJIHe4=
Subject key identifier: 13:3C:C8:71:BD:86:E8:F3:21:54:08:EE:1D:EE:EB:79:F2:06:B6:71
Authority key identifier: E1:9D:B0:C5:B2:D9:61:0E:F5:86:E9:7F:BA:1F:CA:87:50:06:F3:DA
Certificate issuer: /CN=e19db0c5b2d9610ef586e97fba1fca875006f3da
Certificate serial: 0197C3B7AF97E56EC2F6A61961FA42EA5B74
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4Z2wxbLZYQ71hul_uh_Kh1AG89o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/6b78a5-4c5c-4383-87fd-0cf74be303ff/1/4Z2wxbLZYQ71hul_uh_Kh1AG89o.mft
Manifest number: 10EC
Signing time: Tue 01 Jul 2025 02:01:24 +0000
Manifest this update: Tue 01 Jul 2025 02:01:24 +0000
Manifest next update: Wed 02 Jul 2025 02:01:24 +0000
Files and hashes: 1: 4Z2wxbLZYQ71hul_uh_Kh1AG89o.crl (hash: OYKaqSkAodLI+ASjF0CDbWvgVY82VDRUwVJlkhvyNmQ=)
2: WX9ifdPc509PIWH1MshzaQ9gKs4.roa (hash: N2NEfXL50JrESYal+4AtaFkCctqevfpLSA3CNFTMaFM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/6b78a5-4c5c-4383-87fd-0cf74be303ff/1/4Z2wxbLZYQ71hul_uh_Kh1AG89o.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/6b78a5-4c5c-4383-87fd-0cf74be303ff/1/4Z2wxbLZYQ71hul_uh_Kh1AG89o.mft
rsync://rpki.ripe.net/repository/DEFAULT/4Z2wxbLZYQ71hul_uh_Kh1AG89o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 01 Jul 2025 23:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:c3:b7:af:97:e5:6e:c2:f6:a6:19:61:fa:42:ea:5b:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e19db0c5b2d9610ef586e97fba1fca875006f3da
Validity
Not Before: Jul 1 02:01:24 2025 GMT
Not After : Jul 2 02:01:24 2025 GMT
Subject: CN=133cc871bd86e8f3215408ee1deeeb79f206b671
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:dc:47:f9:66:43:a0:1c:59:71:fc:0e:86:17:
6a:3d:07:e0:05:a3:66:41:93:08:ed:75:25:b3:0f:
26:e9:66:41:a3:3c:fa:7d:98:aa:7a:6a:bf:50:8b:
c8:87:84:0a:e4:c5:2a:6c:d1:5e:a8:ad:65:32:e5:
9a:8e:76:d2:c7:5d:89:f7:04:40:4a:3d:50:be:f6:
75:7c:11:30:60:92:ef:25:58:92:8c:5f:15:d7:35:
f2:15:6b:ee:d5:2a:ea:a5:68:57:8d:cb:5b:a5:77:
64:82:52:82:a3:67:e8:13:f3:a8:ee:68:69:fa:67:
d5:03:96:26:1a:9f:44:4c:1f:a1:4a:40:52:07:bb:
bc:70:6a:90:ff:31:7c:85:17:0b:78:1f:a0:d1:13:
ba:a6:9a:57:27:58:7f:3a:12:24:bc:a3:29:d1:5f:
eb:69:44:5f:ee:c5:13:0e:0e:65:ff:08:1f:a3:96:
60:05:d7:f7:fa:9e:6e:4b:f5:7f:cd:6a:e8:53:00:
a6:d2:4e:9e:be:56:55:c7:43:2c:2a:fd:3f:2c:61:
e8:c6:29:24:b8:1b:4d:d7:ce:00:71:1c:26:07:b1:
4e:8e:8e:85:11:3d:de:5f:c6:98:ae:29:00:b4:0a:
da:05:e1:1d:72:b8:3d:61:4d:50:ce:1e:a7:47:5d:
23:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:3C:C8:71:BD:86:E8:F3:21:54:08:EE:1D:EE:EB:79:F2:06:B6:71
X509v3 Authority Key Identifier:
keyid:E1:9D:B0:C5:B2:D9:61:0E:F5:86:E9:7F:BA:1F:CA:87:50:06:F3:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4Z2wxbLZYQ71hul_uh_Kh1AG89o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/6b78a5-4c5c-4383-87fd-0cf74be303ff/1/4Z2wxbLZYQ71hul_uh_Kh1AG89o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/6b78a5-4c5c-4383-87fd-0cf74be303ff/1/4Z2wxbLZYQ71hul_uh_Kh1AG89o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:2c:9c:84:b5:a6:56:e7:c4:19:ec:2c:64:10:4f:7b:d1:0f:
d6:06:04:8d:a3:c3:88:26:7a:0a:ab:54:0a:ab:e4:4a:30:6b:
9f:1f:0a:97:de:6a:52:f0:0e:fa:ac:ea:f3:6a:92:62:79:f9:
aa:d0:5d:b4:0b:dc:aa:34:da:21:92:8a:bd:85:7a:a3:60:7a:
b6:f0:48:ef:2b:52:4d:df:e9:f2:6b:ca:64:65:46:01:ed:90:
bb:7e:cc:bb:2d:85:af:b4:f9:1d:22:b3:cc:8c:0f:18:45:27:
21:c0:a0:4a:55:84:5f:87:4d:e2:e7:02:ae:d7:26:22:2c:85:
f9:4b:de:09:70:09:bd:95:c9:d6:bb:1e:df:ae:bb:a9:cf:0d:
3c:72:d6:b6:4a:0d:e3:69:ff:fb:83:12:f5:ac:f3:07:a6:a3:
a1:c6:e1:19:4b:3f:a5:01:37:1d:f0:92:21:09:9e:a1:33:d9:
09:b4:ca:9c:28:d8:23:8d:e0:02:53:1f:11:ff:e7:37:ad:4f:
72:4b:f7:7c:e4:d6:2c:19:79:88:16:72:6c:5d:30:c3:83:af:
fe:d4:c0:66:d8:90:a7:77:4f:a3:9a:77:03:7b:3a:21:0c:1a:
e4:7e:0c:9c:b5:2b:4b:f1:c0:91:a5:f9:56:81:2f:e0:df:90:
9b:99:e4:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 07:32:51 2025 by rpki-client