Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/7e3025-8caf-402c-b54f-cbb8cfee6e3c/1/4kLCt011daIop-ZPBAbzo5fHrlY.mft
File: 4kLCt011daIop-ZPBAbzo5fHrlY.mft (raw, json)
Hash identifier: 1SAQa5kZt9rjug5agkgP+ZtwX5l35JLWvhZz2XMzlFc=
Subject key identifier: 3F:02:C8:5A:3B:5E:6F:63:33:DF:61:BC:F2:62:81:F6:56:44:C7:65
Authority key identifier: E2:42:C2:B7:4D:75:75:A2:28:A7:E6:4F:04:06:F3:A3:97:C7:AE:56
Certificate issuer: /CN=e242c2b74d7575a228a7e64f0406f3a397c7ae56
Certificate serial: 0197B745130B0B888844957BAB121073212F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4kLCt011daIop-ZPBAbzo5fHrlY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/7e3025-8caf-402c-b54f-cbb8cfee6e3c/1/4kLCt011daIop-ZPBAbzo5fHrlY.mft
Manifest number: 0977
Signing time: Sat 28 Jun 2025 16:00:46 +0000
Manifest this update: Sat 28 Jun 2025 16:00:46 +0000
Manifest next update: Sun 29 Jun 2025 16:00:46 +0000
Files and hashes: 1: 4kLCt011daIop-ZPBAbzo5fHrlY.crl (hash: b7x0XlzBdZhe1HAmNp9yQ+E2xtz5NXLD3J6sQh5gtvc=)
2: tqH_QlpRHC3I-MGoNxLkAHQ-nF8.roa (hash: NbmtGcVLSkgpCEX2NZ9d9iO41gK+6pDcIvg0Zs3pCA8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/7e3025-8caf-402c-b54f-cbb8cfee6e3c/1/4kLCt011daIop-ZPBAbzo5fHrlY.crl
rsync://rpki.ripe.net/repository/DEFAULT/e5/7e3025-8caf-402c-b54f-cbb8cfee6e3c/1/4kLCt011daIop-ZPBAbzo5fHrlY.mft
rsync://rpki.ripe.net/repository/DEFAULT/4kLCt011daIop-ZPBAbzo5fHrlY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:45:13:0b:0b:88:88:44:95:7b:ab:12:10:73:21:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e242c2b74d7575a228a7e64f0406f3a397c7ae56
Validity
Not Before: Jun 28 16:00:46 2025 GMT
Not After : Jun 29 16:00:46 2025 GMT
Subject: CN=3f02c85a3b5e6f6333df61bcf26281f65644c765
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:a1:0a:b7:b4:a6:17:26:6c:ec:7b:a4:cf:b5:
a0:a0:3b:94:f0:18:41:dc:4e:37:bf:f3:28:42:5c:
0e:2e:b4:ac:42:30:31:01:d6:52:b5:7d:39:d7:70:
66:5e:3d:57:37:c2:cb:c9:52:6f:8d:70:8d:d5:ba:
5b:39:b0:dd:10:9d:ac:a5:da:5c:fa:4d:b8:0e:64:
4a:27:c2:9a:9e:84:2d:0c:48:ca:41:ca:9b:ab:8a:
e1:5c:a9:88:1e:20:f1:85:a0:79:33:f7:cd:70:10:
b5:75:12:52:fa:e1:39:8a:7c:11:68:d8:7e:00:20:
8c:c9:45:0a:7b:f7:8b:33:2c:90:4f:f3:26:05:81:
48:ac:d6:29:3c:03:fa:45:2b:c9:10:2f:f6:c2:d4:
fb:f8:21:9e:d4:f8:f2:40:63:66:2a:33:22:63:b8:
89:7a:65:ca:77:0e:60:9d:f6:11:5b:8f:db:96:05:
1a:8a:84:7d:76:aa:97:8a:0b:92:24:05:45:80:13:
1d:c3:15:d3:88:a8:a4:d5:21:9d:cf:5b:01:4c:8e:
5a:04:d0:f6:9b:bc:a6:b0:4e:9d:ee:5a:32:48:20:
52:a7:32:77:53:3f:e7:a8:bd:7f:af:fa:bd:6f:08:
d4:7d:30:63:f0:ca:65:26:bb:23:4c:ab:4e:ff:b1:
b5:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:02:C8:5A:3B:5E:6F:63:33:DF:61:BC:F2:62:81:F6:56:44:C7:65
X509v3 Authority Key Identifier:
keyid:E2:42:C2:B7:4D:75:75:A2:28:A7:E6:4F:04:06:F3:A3:97:C7:AE:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4kLCt011daIop-ZPBAbzo5fHrlY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/7e3025-8caf-402c-b54f-cbb8cfee6e3c/1/4kLCt011daIop-ZPBAbzo5fHrlY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/7e3025-8caf-402c-b54f-cbb8cfee6e3c/1/4kLCt011daIop-ZPBAbzo5fHrlY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:f3:85:ec:54:3c:8c:41:fc:b6:dc:64:d3:2b:41:0b:9b:96:
29:13:ed:73:46:15:3a:a5:6c:6c:33:8f:89:12:c3:bf:db:3f:
c2:44:68:8f:db:08:c3:d5:a6:49:67:a6:c2:85:b4:27:34:fc:
31:35:dc:b7:06:62:51:cb:c0:bf:3d:38:a9:8b:03:cb:14:21:
14:68:b3:06:6e:93:37:8e:77:e0:48:18:27:e0:98:c8:0e:30:
4b:58:b8:43:6f:d1:cc:a2:44:a9:5b:5b:d6:bb:1f:33:cc:a7:
02:78:25:1d:48:f4:fa:ac:5e:90:91:5c:93:f3:d4:52:78:9c:
87:cd:af:63:4c:fd:b4:bc:65:46:80:d4:6d:e7:c4:f9:23:e1:
d0:70:c5:eb:bc:3d:cf:37:3c:45:8b:e1:bc:06:3b:48:c5:ab:
60:94:87:5c:3b:8f:8e:13:2b:27:86:09:e5:79:d3:69:56:a6:
5a:ba:c8:56:4c:3f:68:37:99:69:9f:50:7a:af:2c:65:fa:11:
b0:b0:d0:18:d4:a1:4e:c6:ee:ce:f9:be:49:38:a1:27:4b:16:
cd:80:43:bf:8c:7f:74:7d:14:90:a8:45:54:4a:9b:1b:38:df:
10:43:3a:58:5e:0e:be:be:3a:13:46:f8:c0:a5:25:73:84:94:
6b:90:e2:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 19:21:12 2025 by rpki-client