Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/bb6a7c-31a4-4d33-a853-07cc46e63b50/1/43hlh61HIFqBEo5XjJDK7h5Igos.mft
File: 43hlh61HIFqBEo5XjJDK7h5Igos.mft (raw, json)
Hash identifier: hRkJCzOXg0H+4/v56mka2cg69zAnCT6Cn2roM2zx8C8=
Subject key identifier: A6:1E:59:31:7F:BF:6F:33:3B:80:6D:D3:3E:31:2F:AB:3A:AA:08:C3
Authority key identifier: E3:78:65:87:AD:47:20:5A:81:12:8E:57:8C:90:CA:EE:1E:48:82:8B
Certificate issuer: /CN=e3786587ad47205a81128e578c90caee1e48828b
Certificate serial: 0197B6A074CEBDBC8C1AE0767FE244346CA9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/43hlh61HIFqBEo5XjJDK7h5Igos.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/bb6a7c-31a4-4d33-a853-07cc46e63b50/1/43hlh61HIFqBEo5XjJDK7h5Igos.mft
Manifest number: 14E4
Signing time: Sat 28 Jun 2025 13:00:58 +0000
Manifest this update: Sat 28 Jun 2025 13:00:58 +0000
Manifest next update: Sun 29 Jun 2025 13:00:58 +0000
Files and hashes: 1: 43hlh61HIFqBEo5XjJDK7h5Igos.crl (hash: FaxNIGS0TbwzGsfL7/NMokBL7+3pjEripMrXpRZqVrE=)
2: LktO0B8qjGLInxw3N5jX_ouyGv4.roa (hash: 0acgVKGcL/QrYT0G9rMKO5SvHbTzsdzBy14zEKR/PS4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/bb6a7c-31a4-4d33-a853-07cc46e63b50/1/43hlh61HIFqBEo5XjJDK7h5Igos.crl
rsync://rpki.ripe.net/repository/DEFAULT/ed/bb6a7c-31a4-4d33-a853-07cc46e63b50/1/43hlh61HIFqBEo5XjJDK7h5Igos.mft
rsync://rpki.ripe.net/repository/DEFAULT/43hlh61HIFqBEo5XjJDK7h5Igos.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a0:74:ce:bd:bc:8c:1a:e0:76:7f:e2:44:34:6c:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e3786587ad47205a81128e578c90caee1e48828b
Validity
Not Before: Jun 28 13:00:58 2025 GMT
Not After : Jun 29 13:00:58 2025 GMT
Subject: CN=a61e59317fbf6f333b806dd33e312fab3aaa08c3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:d2:ed:e5:b1:a2:85:a7:e4:53:52:24:40:96:
f5:06:9f:64:ed:a2:c2:db:3e:86:7e:c0:c7:ad:af:
86:30:84:70:f8:3a:c2:6c:a8:5a:f5:d5:15:9d:d2:
9f:97:af:2d:61:f8:59:f3:84:9f:75:72:bf:18:b6:
e3:d3:8d:fd:8f:43:8e:f1:34:a6:92:05:a5:ae:48:
d4:0e:47:49:b9:4e:61:26:da:2d:9d:34:c3:47:cd:
5b:31:71:c2:89:91:ea:1e:af:92:48:bd:09:a0:42:
96:ee:c6:65:40:f3:f7:85:d2:91:b4:b4:9c:77:07:
52:48:db:9d:be:cf:7e:9c:b0:fc:c5:5a:76:1b:d0:
4b:96:e9:6e:59:1c:05:6a:af:b5:f9:71:81:fa:7e:
aa:89:82:25:68:97:47:88:3e:d1:c1:3f:1a:61:be:
a8:6a:13:1e:58:74:c6:74:59:c5:2b:5a:69:92:73:
f3:16:f3:b6:21:fa:cd:21:08:65:72:3a:75:07:08:
0f:71:60:20:42:b0:32:f2:72:2e:05:6f:0f:46:01:
87:b6:94:a6:0a:a4:8f:13:af:a5:70:0c:56:ff:14:
4d:69:49:f3:50:be:19:c8:75:e8:4c:3c:dc:e4:ed:
bf:ad:1b:a9:45:bd:11:64:11:06:1a:ba:34:d1:bf:
66:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:1E:59:31:7F:BF:6F:33:3B:80:6D:D3:3E:31:2F:AB:3A:AA:08:C3
X509v3 Authority Key Identifier:
keyid:E3:78:65:87:AD:47:20:5A:81:12:8E:57:8C:90:CA:EE:1E:48:82:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/43hlh61HIFqBEo5XjJDK7h5Igos.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/bb6a7c-31a4-4d33-a853-07cc46e63b50/1/43hlh61HIFqBEo5XjJDK7h5Igos.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/bb6a7c-31a4-4d33-a853-07cc46e63b50/1/43hlh61HIFqBEo5XjJDK7h5Igos.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a4:45:dd:df:21:7f:8b:fa:97:b5:bf:48:75:dd:e9:23:77:e4:
fc:04:66:b3:75:3c:ff:f6:51:0b:74:a0:dd:98:60:f2:20:d7:
74:25:b1:94:5e:e3:b5:59:c4:cb:64:4f:c1:95:ec:b2:03:28:
5f:cb:07:39:c3:36:4f:bb:68:7a:f2:0e:dd:c4:5b:b8:64:e9:
55:33:86:dc:e9:73:bd:4f:7a:49:a1:d9:bb:bb:ce:85:00:2d:
07:50:6f:ef:b4:8b:70:8e:69:2e:58:4e:a7:f5:15:ff:aa:6a:
ff:c1:ff:13:ff:44:54:18:ec:9f:e5:0c:c8:1f:ba:f7:84:31:
52:f8:ff:5b:fa:59:c3:3b:00:96:85:a0:31:da:02:88:ae:8a:
73:6c:50:de:2f:bf:42:20:d9:f1:fe:a4:30:b0:73:7e:59:11:
18:c6:db:f1:d9:4a:7c:82:e0:93:d1:60:1f:59:7c:db:a2:d1:
13:89:a4:e5:cc:ad:e3:d5:7d:0d:8f:c3:1f:72:c5:3c:27:cb:
91:10:44:fe:56:2d:58:af:37:ed:e6:f4:29:24:df:ae:7a:d9:
46:ba:2b:82:85:6c:4d:33:04:c1:ca:e0:2f:2d:b5:68:93:9a:
c5:a8:9e:0b:fa:1d:60:81:7a:50:83:6c:31:e6:6e:0d:c2:28:
05:c8:bd:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 19:43:47 2025 by rpki-client