Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/497ced-0526-4d3b-bd2b-80d21c20d918/1/4GMUdXVI8HToT68_y7e4LYLe8-U.mft
File: 4GMUdXVI8HToT68_y7e4LYLe8-U.mft (raw, json)
Hash identifier: d0XCzob8M8X+RxY5eyqcyXaIaCl35IaA48yWLZAU0dc=
Subject key identifier: A5:59:79:CA:10:60:84:EB:E9:5B:F5:3A:34:37:FA:79:12:37:56:79
Authority key identifier: E0:63:14:75:75:48:F0:74:E8:4F:AF:3F:CB:B7:B8:2D:82:DE:F3:E5
Certificate issuer: /CN=e06314757548f074e84faf3fcbb7b82d82def3e5
Certificate serial: 0197B7EA24CBB3F0788744DB2EAA2A1E1615
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4GMUdXVI8HToT68_y7e4LYLe8-U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/497ced-0526-4d3b-bd2b-80d21c20d918/1/4GMUdXVI8HToT68_y7e4LYLe8-U.mft
Manifest number: 15BA
Signing time: Sat 28 Jun 2025 19:01:04 +0000
Manifest this update: Sat 28 Jun 2025 19:01:04 +0000
Manifest next update: Sun 29 Jun 2025 19:01:04 +0000
Files and hashes: 1: 4GMUdXVI8HToT68_y7e4LYLe8-U.crl (hash: BPuLNK3JmmiPdmbjl84uuW3n9NfKGXz5aQq+rgg8REs=)
2: _uc6ePERzBPoPdpauMr-UXjyyZU.roa (hash: vCpgESgcY5qI/pPtl3hBvs20Co9NLRffYPoazf5J82E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/497ced-0526-4d3b-bd2b-80d21c20d918/1/4GMUdXVI8HToT68_y7e4LYLe8-U.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/497ced-0526-4d3b-bd2b-80d21c20d918/1/4GMUdXVI8HToT68_y7e4LYLe8-U.mft
rsync://rpki.ripe.net/repository/DEFAULT/4GMUdXVI8HToT68_y7e4LYLe8-U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:ea:24:cb:b3:f0:78:87:44:db:2e:aa:2a:1e:16:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e06314757548f074e84faf3fcbb7b82d82def3e5
Validity
Not Before: Jun 28 19:01:04 2025 GMT
Not After : Jun 29 19:01:04 2025 GMT
Subject: CN=a55979ca106084ebe95bf53a3437fa7912375679
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:21:bc:a2:80:ee:1f:ad:d6:2d:20:2b:43:ad:
8d:30:29:20:67:bd:ba:98:4a:85:d6:2b:85:0a:1d:
30:c9:de:3e:1e:22:ba:c8:6b:09:92:6e:97:ed:b2:
04:95:1a:5e:18:fa:f2:6b:b4:2f:50:f8:dc:83:91:
91:59:bb:85:80:ad:8c:5a:b9:e3:a8:f8:c2:71:25:
0e:bc:6a:d3:ca:b4:7c:a6:43:a6:a4:52:19:f3:93:
82:36:01:d1:04:6b:57:26:ba:cd:73:21:30:89:53:
d0:83:1c:c1:ee:a1:e7:49:9f:91:a9:af:c9:6c:8f:
fb:cb:94:70:f3:49:c3:ed:e5:e6:3f:5b:a6:6f:c0:
2a:82:44:0d:12:f0:35:fe:d7:ef:8e:4a:cd:e3:5a:
33:6e:3d:a9:8e:11:54:fb:be:61:c5:5e:1b:f6:62:
81:eb:92:b4:15:7a:4a:a9:e6:be:55:97:40:42:5d:
76:ae:ef:12:8b:61:7d:eb:39:02:b7:47:39:00:81:
43:8a:08:07:35:55:9b:be:56:22:3f:cc:30:7a:e8:
a0:1c:b7:44:77:8e:2e:b7:0a:d1:dc:f3:f1:30:c4:
41:a7:a5:e5:5e:c0:c5:25:06:d2:83:ea:9a:89:0f:
1c:64:5f:1b:3b:86:72:d8:4e:7f:59:22:8f:9d:2b:
0f:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:59:79:CA:10:60:84:EB:E9:5B:F5:3A:34:37:FA:79:12:37:56:79
X509v3 Authority Key Identifier:
keyid:E0:63:14:75:75:48:F0:74:E8:4F:AF:3F:CB:B7:B8:2D:82:DE:F3:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4GMUdXVI8HToT68_y7e4LYLe8-U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/497ced-0526-4d3b-bd2b-80d21c20d918/1/4GMUdXVI8HToT68_y7e4LYLe8-U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/497ced-0526-4d3b-bd2b-80d21c20d918/1/4GMUdXVI8HToT68_y7e4LYLe8-U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:35:7b:72:0a:6b:e9:75:a2:62:12:89:27:43:81:c1:1c:0f:
bb:e5:f5:17:03:66:47:d3:7f:78:18:35:28:3f:50:7c:dd:13:
91:2e:a3:36:e4:5c:6d:91:f4:3c:8c:ef:bb:a9:76:83:b6:80:
09:5e:37:78:ad:24:0c:40:43:79:e4:0f:ee:84:e1:70:d8:3b:
67:04:9f:54:63:8f:19:fe:65:f7:dc:e0:2b:4d:ec:06:46:6c:
9b:93:28:98:8a:48:a5:c8:c3:6a:25:76:c5:ff:6c:5f:59:9a:
80:55:37:9e:cd:2f:3d:7d:f7:7b:7e:e2:2e:49:39:4c:8f:11:
df:05:61:84:20:5a:a1:61:f6:c5:f3:f6:5c:22:0b:32:8f:e2:
1e:52:40:d9:47:26:eb:e5:9f:9f:3f:d4:c1:a1:c4:2a:82:f8:
42:33:d8:81:50:95:5e:86:54:3b:b2:ec:f7:77:1a:8d:a8:cd:
d8:39:e4:f3:e7:3e:11:4a:ab:46:d6:e5:6d:cc:77:0f:f9:6d:
dd:d0:e4:e2:2d:30:0f:b5:62:22:09:bb:1d:1b:1d:e5:e5:95:
ec:79:bd:c2:14:7e:49:cc:df:21:f2:fa:f6:96:ec:01:4e:9d:
be:ff:9b:55:94:c8:af:78:19:88:6f:12:fd:86:83:29:54:f1:
da:fd:1e:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 22:00:38 2025 by rpki-client