Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/6e2cbf-7056-4419-b51c-62b1da261329/1/R4x_xrIR4nH3SD9yHUXyON195cQ.mft
File: R4x_xrIR4nH3SD9yHUXyON195cQ.mft (raw, json)
Hash identifier: W1tCxJdtEUYuM8jXlBjvphJbwSpUQnFbmGpWxfbodag=
Subject key identifier: 01:24:04:7D:F6:1F:F7:3B:BF:EF:C4:70:6D:E2:D6:CA:73:E6:36:5C
Authority key identifier: 47:8C:7F:C6:B2:11:E2:71:F7:48:3F:72:1D:45:F2:38:DD:7D:E5:C4
Certificate issuer: /CN=478c7fc6b211e271f7483f721d45f238dd7de5c4
Certificate serial: 0197B6A13B439983D42672C395B6B71D8F8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/R4x_xrIR4nH3SD9yHUXyON195cQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/6e2cbf-7056-4419-b51c-62b1da261329/1/R4x_xrIR4nH3SD9yHUXyON195cQ.mft
Manifest number: 0760
Signing time: Sat 28 Jun 2025 13:01:49 +0000
Manifest this update: Sat 28 Jun 2025 13:01:49 +0000
Manifest next update: Sun 29 Jun 2025 13:01:49 +0000
Files and hashes: 1: R4x_xrIR4nH3SD9yHUXyON195cQ.crl (hash: R6X7L/45RspkmaHY7amX7XCFU4ebROj3wlFTiZDhTO0=)
2: bgKhGgsXnxYOt5etHFWwqDnUeNs.roa (hash: uM75kFMM5Lx2SB0GVKIXvYn71xMx4/TssgSDMD0euaE=)
3: eJaPcqVrFJ9nAn0ii5m8-wTNE2M.roa (hash: LKpNzbSMRXo8Ez4GuvTIIep3ThOtGE1xLAuyWwSMRJY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/6e2cbf-7056-4419-b51c-62b1da261329/1/R4x_xrIR4nH3SD9yHUXyON195cQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/ea/6e2cbf-7056-4419-b51c-62b1da261329/1/R4x_xrIR4nH3SD9yHUXyON195cQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/R4x_xrIR4nH3SD9yHUXyON195cQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 13:01:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a1:3b:43:99:83:d4:26:72:c3:95:b6:b7:1d:8f:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=478c7fc6b211e271f7483f721d45f238dd7de5c4
Validity
Not Before: Jun 28 13:01:49 2025 GMT
Not After : Jun 29 13:01:49 2025 GMT
Subject: CN=0124047df61ff73bbfefc4706de2d6ca73e6365c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:d6:75:c8:c9:6d:0f:92:b0:97:b1:5c:cd:34:
fb:60:dc:c7:7a:b8:06:8c:7d:6e:0b:cf:65:01:3d:
bb:1a:41:3e:f7:cc:65:47:33:bd:41:e5:50:ec:54:
4c:93:41:cb:33:a8:ba:91:77:69:d4:b2:a6:ec:7e:
66:3f:18:91:fc:42:05:d9:a0:ce:dc:d9:32:87:ce:
61:65:40:60:55:cc:46:c6:86:d1:c6:9c:84:48:1d:
f2:3d:89:d7:05:7f:6c:ed:70:b4:f1:d5:69:12:1a:
1a:ec:86:33:be:55:c7:ea:11:26:8f:1a:f7:b1:ce:
7e:b0:17:30:58:52:ba:8c:91:85:37:39:c8:5b:bf:
59:85:33:bc:e2:3e:a0:cd:58:7f:c7:e0:c7:85:d6:
ec:2e:f0:f2:18:fc:cc:a0:b1:10:ac:6c:50:b3:a7:
f8:83:83:60:54:7b:38:06:51:1a:6c:08:ba:04:7d:
ef:16:9d:c0:1a:0c:f5:21:c5:ae:fc:89:47:4f:85:
2e:2d:fe:94:2d:fd:98:59:df:ed:ff:f5:9e:c4:6a:
c3:34:f3:6a:f3:20:72:5a:4e:dd:d3:8c:b6:78:05:
b0:45:23:2a:bc:c3:40:37:98:06:55:49:a4:ad:50:
78:5b:7e:4d:6d:bf:cc:a2:e6:74:61:3c:2e:b8:2e:
5d:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:24:04:7D:F6:1F:F7:3B:BF:EF:C4:70:6D:E2:D6:CA:73:E6:36:5C
X509v3 Authority Key Identifier:
keyid:47:8C:7F:C6:B2:11:E2:71:F7:48:3F:72:1D:45:F2:38:DD:7D:E5:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/R4x_xrIR4nH3SD9yHUXyON195cQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/6e2cbf-7056-4419-b51c-62b1da261329/1/R4x_xrIR4nH3SD9yHUXyON195cQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/6e2cbf-7056-4419-b51c-62b1da261329/1/R4x_xrIR4nH3SD9yHUXyON195cQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:dc:ef:d0:29:29:6b:78:16:9f:b0:1d:dd:96:29:3e:79:98:
52:21:60:59:aa:d7:19:ca:74:bd:38:3d:a6:91:38:e9:f8:9a:
27:17:db:f0:de:94:be:e9:53:56:01:48:7a:4e:1f:13:9a:97:
94:6a:a8:e2:d3:66:78:fe:30:e2:b8:19:30:ba:60:59:c9:d1:
11:ff:b9:a6:30:83:fe:d9:12:3a:2a:b4:6d:43:bd:ac:16:d1:
3d:e7:35:bc:52:ab:17:76:6b:59:6a:1d:bf:e4:cb:9b:bc:53:
2f:68:73:44:b1:2b:c8:d3:f7:d1:ac:aa:35:92:3a:9f:50:82:
16:7d:2d:2b:e9:cf:58:da:5a:71:58:77:a0:f5:51:ca:17:79:
49:67:2a:a9:e3:41:93:e6:ea:6b:2f:e2:01:58:a6:4a:84:a9:
c3:5a:f6:76:73:9d:b3:29:51:34:cd:51:4e:40:e7:9d:0c:2f:
16:39:ee:a6:69:bf:ef:91:0f:83:9c:53:3e:a6:fa:cf:19:21:
7d:5d:fc:f1:93:4c:ca:93:97:ea:c1:a6:d9:04:92:28:f9:05:
d5:b4:52:c9:3d:a4:57:73:40:8d:92:98:d1:23:2e:27:bb:14:
0b:a0:38:1e:a2:c0:ef:44:7d:b4:e7:53:be:b1:01:01:ea:ef:
52:1b:51:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 20:11:16 2025 by rpki-client