Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/647f28-59cf-4d68-a50f-1764b03618fc/1/4jwMPgEGyWXUYM0MPLxeI0-CprQ.mft
File: 4jwMPgEGyWXUYM0MPLxeI0-CprQ.mft (raw, json)
Hash identifier: q41BcB7hwMrdRmsROiVWVyMJ2x0igAblO7tw0g1s9EA=
Subject key identifier: 79:49:32:2F:C7:72:8A:7E:BA:EA:AF:F0:BE:AB:9E:11:23:DB:EF:69
Authority key identifier: E2:3C:0C:3E:01:06:C9:65:D4:60:CD:0C:3C:BC:5E:23:4F:82:A6:B4
Certificate issuer: /CN=e23c0c3e0106c965d460cd0c3cbc5e234f82a6b4
Certificate serial: 0197B88F2D453FC151B7675626EF5EA70852
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4jwMPgEGyWXUYM0MPLxeI0-CprQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/647f28-59cf-4d68-a50f-1764b03618fc/1/4jwMPgEGyWXUYM0MPLxeI0-CprQ.mft
Manifest number: 1018
Signing time: Sat 28 Jun 2025 22:01:20 +0000
Manifest this update: Sat 28 Jun 2025 22:01:20 +0000
Manifest next update: Sun 29 Jun 2025 22:01:20 +0000
Files and hashes: 1: 4jwMPgEGyWXUYM0MPLxeI0-CprQ.crl (hash: /OJSWn4urnh4x22cwt5uND5RSrMOVAj6+5F5lZuzp4A=)
2: lEkuEW8EviMetjsHoH1cfPquirw.roa (hash: a862beX9o/VH2MAJR1fguEQH5T+CIEuXUqOcrtZ0/zw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/647f28-59cf-4d68-a50f-1764b03618fc/1/4jwMPgEGyWXUYM0MPLxeI0-CprQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/c4/647f28-59cf-4d68-a50f-1764b03618fc/1/4jwMPgEGyWXUYM0MPLxeI0-CprQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/4jwMPgEGyWXUYM0MPLxeI0-CprQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 19:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b8:8f:2d:45:3f:c1:51:b7:67:56:26:ef:5e:a7:08:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e23c0c3e0106c965d460cd0c3cbc5e234f82a6b4
Validity
Not Before: Jun 28 22:01:20 2025 GMT
Not After : Jun 29 22:01:20 2025 GMT
Subject: CN=7949322fc7728a7ebaeaaff0beab9e1123dbef69
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:e2:1c:bb:1f:e1:de:3d:4f:cd:67:87:92:09:
5e:7b:38:8d:6a:be:9b:ba:3e:08:da:0d:42:e2:97:
3c:a6:19:bb:69:bd:17:b3:2a:a6:cc:d4:5a:36:cb:
74:cc:76:d1:bb:5b:06:1e:32:65:b3:0f:c1:70:91:
9c:46:9a:36:ed:8a:a9:fc:6f:54:03:e7:12:c7:5f:
62:2a:34:c1:79:f5:b3:e0:a3:53:0b:b7:49:9a:17:
6f:de:da:77:cc:33:da:c9:5d:c6:4f:b0:3e:75:a3:
97:47:85:f5:6c:c6:8d:52:05:ee:73:33:d8:5b:69:
13:9a:99:4c:50:8a:47:20:0b:24:8d:c2:ae:2f:34:
dd:c8:d8:03:07:98:64:53:04:05:be:6d:c4:62:19:
b5:fb:17:b3:86:79:9b:ce:52:d1:0c:33:0a:29:6d:
ce:db:62:b4:e7:8f:5c:95:7d:f7:be:4b:0f:bc:13:
18:43:84:50:9c:5b:3d:59:bf:1f:ef:a6:89:14:5c:
3f:06:c6:68:a8:3e:3d:83:6e:5f:4d:d2:bf:15:fe:
2a:b7:3c:6e:8a:a6:ba:22:5b:11:6d:8d:ae:98:81:
18:15:b8:e4:e1:7b:02:53:b6:ad:ce:5b:cc:02:b0:
6b:a0:90:fc:64:39:f1:63:60:51:18:3b:69:4d:b6:
91:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:49:32:2F:C7:72:8A:7E:BA:EA:AF:F0:BE:AB:9E:11:23:DB:EF:69
X509v3 Authority Key Identifier:
keyid:E2:3C:0C:3E:01:06:C9:65:D4:60:CD:0C:3C:BC:5E:23:4F:82:A6:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4jwMPgEGyWXUYM0MPLxeI0-CprQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/647f28-59cf-4d68-a50f-1764b03618fc/1/4jwMPgEGyWXUYM0MPLxeI0-CprQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/647f28-59cf-4d68-a50f-1764b03618fc/1/4jwMPgEGyWXUYM0MPLxeI0-CprQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:e3:8a:c2:f1:6c:0e:64:9c:fc:81:f3:f7:a9:d3:fd:e5:74:
2d:b8:36:65:fe:39:37:0c:0a:76:98:de:e2:31:36:a3:d5:68:
30:ac:4c:af:44:81:ee:fc:c5:38:c4:00:90:6b:d3:57:88:2a:
9a:37:5c:b6:e5:bb:39:97:9f:a2:c7:79:de:41:08:d8:ef:91:
79:93:96:3d:77:58:b1:26:28:9f:04:3e:4c:e6:c1:9c:c6:96:
d5:c1:42:d6:e4:d6:0d:da:d0:f7:e3:6a:44:6f:57:95:ce:95:
7b:95:c1:f1:a4:3c:1f:7b:a1:8c:f3:24:ad:3f:e9:cb:2b:99:
aa:3f:e2:e0:c8:a3:da:9a:3f:a5:86:04:f2:0b:28:b0:a7:ae:
2a:f8:13:7f:eb:88:e3:f0:54:01:13:e9:b8:29:aa:d3:8c:d0:
85:82:81:e0:e1:60:a4:de:0b:f4:14:40:ec:2e:72:81:21:a4:
bd:5f:fe:a6:d3:81:bf:c1:8a:10:e1:aa:b2:b8:f0:3a:82:5e:
d8:65:e3:d3:90:08:63:e7:c7:3a:26:54:f8:dc:5e:30:08:93:
6d:f4:d6:22:0a:b3:87:d6:73:6f:d7:49:a3:94:2a:51:a5:89:
c0:58:da:35:19:a6:78:b6:33:8e:f3:ac:11:5d:48:c2:07:b5:
9d:e2:4f:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 02:16:52 2025 by rpki-client