Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/655a1c-baf5-475f-a308-932ab341a367/1/4p9JZACcdLuBrtnGcHgBPcho7xc.mft
File: 4p9JZACcdLuBrtnGcHgBPcho7xc.mft (raw, json)
Hash identifier: hiLcP67oCjLPrLr9iCyx66aP5rIREQpEU45jv668ec0=
Subject key identifier: 4A:69:B9:ED:AD:90:17:1D:D6:FA:4D:9E:2E:9F:A3:2B:4C:44:C4:57
Authority key identifier: E2:9F:49:64:00:9C:74:BB:81:AE:D9:C6:70:78:01:3D:C8:68:EF:17
Certificate issuer: /CN=e29f4964009c74bb81aed9c67078013dc868ef17
Certificate serial: 0197CB3A6EA98138AE30A0398F336EB4878C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4p9JZACcdLuBrtnGcHgBPcho7xc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/655a1c-baf5-475f-a308-932ab341a367/1/4p9JZACcdLuBrtnGcHgBPcho7xc.mft
Manifest number: 15C1
Signing time: Wed 02 Jul 2025 13:01:33 +0000
Manifest this update: Wed 02 Jul 2025 13:01:33 +0000
Manifest next update: Thu 03 Jul 2025 13:01:33 +0000
Files and hashes: 1: 1KTjmYkB3cj_19bwNwOyE5tGxCk.roa (hash: H8xeX/8Uyv31FbjznlcJqitCSYJrp0RSe/v1PmExVLA=)
2: 4p9JZACcdLuBrtnGcHgBPcho7xc.crl (hash: 6kurmjQGOnEy0PMJsPIm8OSL7PxtDqYdT3iXlrW8hXI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/655a1c-baf5-475f-a308-932ab341a367/1/4p9JZACcdLuBrtnGcHgBPcho7xc.crl
rsync://rpki.ripe.net/repository/DEFAULT/d5/655a1c-baf5-475f-a308-932ab341a367/1/4p9JZACcdLuBrtnGcHgBPcho7xc.mft
rsync://rpki.ripe.net/repository/DEFAULT/4p9JZACcdLuBrtnGcHgBPcho7xc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 03 Jul 2025 11:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:cb:3a:6e:a9:81:38:ae:30:a0:39:8f:33:6e:b4:87:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e29f4964009c74bb81aed9c67078013dc868ef17
Validity
Not Before: Jul 2 13:01:33 2025 GMT
Not After : Jul 3 13:01:33 2025 GMT
Subject: CN=4a69b9edad90171dd6fa4d9e2e9fa32b4c44c457
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:8e:9d:37:0e:d7:6b:ae:89:6e:bd:d5:82:a0:
6e:2a:e1:1d:4c:7f:08:e8:12:60:71:39:16:d5:b8:
4f:51:07:6b:6a:ee:d7:cc:01:81:8c:c8:16:af:68:
50:23:22:1a:37:0a:aa:55:1e:9c:6d:b8:0e:c8:23:
3c:18:62:45:91:87:1d:62:50:d2:ee:26:23:84:a0:
17:98:08:32:ba:7a:68:97:cb:90:34:8c:1f:96:a0:
1b:55:eb:e5:be:10:76:97:ca:31:39:a6:0a:7f:91:
fc:bb:0e:d1:c0:57:39:9c:89:ee:b2:c4:a8:4d:d3:
17:ec:0a:b0:67:2a:7f:56:5f:83:a8:32:30:73:97:
bf:f6:16:29:01:2a:42:3f:83:5c:99:9b:d3:24:75:
50:87:f3:4c:23:45:e5:fa:21:a5:24:d7:e3:07:e2:
56:1e:33:c8:d9:e3:bc:09:f0:67:3a:fc:d9:7a:3f:
b3:a1:86:66:09:70:12:28:7c:e5:d3:10:62:ed:58:
26:89:30:e5:3c:16:d1:8e:72:50:e2:b0:80:48:a6:
6d:a0:bd:48:bf:7d:2a:35:a8:3e:a0:18:9b:a4:6c:
35:8b:a2:6f:e1:06:7b:54:95:fe:95:ad:b1:99:79:
32:4c:c2:bc:c8:08:5f:fb:11:d7:e5:aa:be:ba:f1:
e2:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:69:B9:ED:AD:90:17:1D:D6:FA:4D:9E:2E:9F:A3:2B:4C:44:C4:57
X509v3 Authority Key Identifier:
keyid:E2:9F:49:64:00:9C:74:BB:81:AE:D9:C6:70:78:01:3D:C8:68:EF:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4p9JZACcdLuBrtnGcHgBPcho7xc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/655a1c-baf5-475f-a308-932ab341a367/1/4p9JZACcdLuBrtnGcHgBPcho7xc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/655a1c-baf5-475f-a308-932ab341a367/1/4p9JZACcdLuBrtnGcHgBPcho7xc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:74:a5:11:30:5d:f8:12:2f:58:25:87:68:8a:72:2b:37:1b:
8c:3d:4a:52:45:95:8b:0d:f3:92:21:82:f4:d5:69:c1:50:1b:
de:dd:9e:24:be:04:ef:9b:1a:c4:0e:0a:cc:c4:61:1b:8a:c0:
3e:75:e2:44:68:98:2d:a5:a3:9d:85:3e:0a:b7:02:6d:d0:d9:
b1:cc:aa:ee:8c:66:a0:fc:b7:a9:78:ba:66:21:9f:de:4d:d2:
08:a7:7c:29:be:19:50:67:4b:a7:2e:be:db:4b:5b:99:6d:6b:
27:19:61:e8:da:c5:22:de:f2:5d:9d:fd:08:5f:1b:db:91:7d:
62:75:54:c7:e9:f3:02:f4:8e:3b:a5:da:f1:e5:ae:f3:45:d5:
47:f7:c9:99:3a:3c:06:4b:9b:87:f4:a4:bd:bf:d6:5a:16:ed:
77:5f:89:45:60:46:88:11:f8:34:b7:1a:a1:b8:ee:e8:5d:cf:
76:31:16:7f:fd:eb:4c:f3:73:91:de:88:18:fd:a5:60:5f:fd:
21:18:a6:7f:c6:7c:e4:f3:97:05:25:58:a3:22:22:96:ed:64:
b8:89:01:1b:df:cc:f3:27:b4:c5:60:2f:b1:51:67:3b:f2:98:
91:8a:5c:de:cb:42:c6:13:92:c2:3d:28:e2:03:5a:e1:e2:77:
c5:a8:a7:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 2 14:54:00 2025 by rpki-client