Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/4d2928-c636-40c0-9c9b-7990e3d1ddaa/1/4r7xjk9w0I3z-zD-5QfltakZb5k.mft
File: 4r7xjk9w0I3z-zD-5QfltakZb5k.mft (raw, json)
Hash identifier: 5x9paDK9UvCHGBk+LVUoTg2+dJVJdCazJtSX1nCq94Q=
Subject key identifier: DD:4E:91:3A:D4:D9:06:C5:86:51:44:7D:4D:17:AB:59:14:5A:02:56
Authority key identifier: E2:BE:F1:8E:4F:70:D0:8D:F3:FB:30:FE:E5:07:E5:B5:A9:19:6F:99
Certificate issuer: /CN=e2bef18e4f70d08df3fb30fee507e5b5a9196f99
Certificate serial: 0197B6A2208A0617B3148F045AD17A559F0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4r7xjk9w0I3z-zD-5QfltakZb5k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/4d2928-c636-40c0-9c9b-7990e3d1ddaa/1/4r7xjk9w0I3z-zD-5QfltakZb5k.mft
Manifest number: 081A
Signing time: Sat 28 Jun 2025 13:02:47 +0000
Manifest this update: Sat 28 Jun 2025 13:02:47 +0000
Manifest next update: Sun 29 Jun 2025 13:02:47 +0000
Files and hashes: 1: 4r7xjk9w0I3z-zD-5QfltakZb5k.crl (hash: 9Yeyr3HbQ0UL4M1u2RpTGISC3eTNF6hSE8cnRSxhxm8=)
2: MiW57nOg30xLDqZY9OOUVNFKZQY.roa (hash: 2YBiQuBVr6rbcdD+nTl7ci5JjnWlTA1kLFdMgjGPElQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/4d2928-c636-40c0-9c9b-7990e3d1ddaa/1/4r7xjk9w0I3z-zD-5QfltakZb5k.crl
rsync://rpki.ripe.net/repository/DEFAULT/e3/4d2928-c636-40c0-9c9b-7990e3d1ddaa/1/4r7xjk9w0I3z-zD-5QfltakZb5k.mft
rsync://rpki.ripe.net/repository/DEFAULT/4r7xjk9w0I3z-zD-5QfltakZb5k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 13:02:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a2:20:8a:06:17:b3:14:8f:04:5a:d1:7a:55:9f:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e2bef18e4f70d08df3fb30fee507e5b5a9196f99
Validity
Not Before: Jun 28 13:02:47 2025 GMT
Not After : Jun 29 13:02:47 2025 GMT
Subject: CN=dd4e913ad4d906c58651447d4d17ab59145a0256
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:ea:08:ee:70:68:66:06:96:9e:ef:96:7c:7d:
1d:95:2c:61:a0:94:e1:a9:b0:a5:d9:bb:58:b4:d4:
11:a4:f3:fc:ca:83:20:db:a0:2d:8e:96:a1:f0:c0:
bb:ab:18:a3:f0:00:3e:8a:84:0c:f9:be:91:3b:5b:
d1:00:b1:65:fb:52:25:4b:43:ea:2b:31:65:a3:8a:
27:3d:2c:a0:18:26:a8:f2:d0:8b:f5:4f:d9:80:ed:
0f:a4:2a:62:8b:39:8d:79:4c:13:25:7c:e8:80:71:
82:0e:f2:aa:ba:df:2f:ea:4e:99:b6:11:02:04:ed:
fb:aa:62:d9:77:fb:62:87:29:62:7d:12:99:d5:13:
b4:d2:6f:cb:05:40:bc:05:22:fc:54:d6:2b:d5:c9:
ae:e0:69:79:f1:68:c9:24:79:0d:6f:c3:b4:dd:e1:
63:70:12:3b:ee:f5:92:3c:57:0e:16:41:b0:c3:f1:
59:a5:15:23:a9:82:05:eb:25:c5:05:bf:1e:b7:20:
10:f8:ea:0d:2a:ef:cf:51:6c:4f:a3:f3:91:24:21:
86:55:9a:f6:a1:88:90:d6:aa:d7:48:70:ff:31:7f:
35:11:5a:4d:56:0e:b8:79:b2:65:22:86:1c:a5:cf:
8e:f8:92:18:64:8f:49:d6:4e:58:76:53:ad:ac:0e:
25:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:4E:91:3A:D4:D9:06:C5:86:51:44:7D:4D:17:AB:59:14:5A:02:56
X509v3 Authority Key Identifier:
keyid:E2:BE:F1:8E:4F:70:D0:8D:F3:FB:30:FE:E5:07:E5:B5:A9:19:6F:99
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4r7xjk9w0I3z-zD-5QfltakZb5k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/4d2928-c636-40c0-9c9b-7990e3d1ddaa/1/4r7xjk9w0I3z-zD-5QfltakZb5k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/4d2928-c636-40c0-9c9b-7990e3d1ddaa/1/4r7xjk9w0I3z-zD-5QfltakZb5k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d1:a4:92:b2:ef:4f:7e:87:48:c6:b5:18:1e:7e:e4:43:14:84:
98:52:23:05:80:49:86:25:03:d7:e5:ed:c1:de:6f:2e:f4:a4:
bd:63:e0:53:20:f9:93:7d:bd:40:6b:d7:11:e2:7e:72:38:47:
d6:29:2c:8e:2b:a5:5b:08:69:e7:68:22:02:34:62:a3:30:92:
cb:ff:4e:cc:0a:5a:a9:92:75:e5:07:74:98:c2:65:62:48:06:
a6:58:a2:b2:fc:9b:12:3e:13:7e:03:c2:17:0c:2b:fc:1a:c2:
ea:bc:b7:0d:ca:f6:b5:e8:bc:b4:9c:50:62:62:5b:cb:3a:b0:
af:90:bb:4a:7f:77:f8:0e:aa:29:94:6c:f4:5a:81:79:66:9d:
93:c0:79:61:89:b5:99:04:cd:3e:43:ed:fb:b8:3c:11:ea:e6:
c4:6f:73:8f:f3:ed:59:aa:5c:07:f1:4f:d7:8d:e2:d4:ea:af:
58:d0:e6:6b:f7:b6:1e:71:3a:b3:bd:25:95:f3:1b:6c:f7:98:
67:05:82:e4:e4:28:16:50:27:df:54:c2:26:53:e8:67:7d:c2:
29:6c:e6:10:61:23:71:7f:a8:ee:32:d8:69:ec:82:75:2d:ff:
6c:32:1e:60:9a:05:b0:c9:89:89:3d:80:e3:3b:7d:d4:9e:d7:
2e:0e:05:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 22:55:38 2025 by rpki-client