Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/b18f32-473c-4d9e-ab85-7bd0cfa239f6/1/4Vanhb9_5NfEpca3ISFPDpbzrsk.mft
File: 4Vanhb9_5NfEpca3ISFPDpbzrsk.mft (raw, json)
Hash identifier: 354hCE+u7Qizu/5qs2hEmjxwPepCzIVfQuK3ExxwQ/w=
Subject key identifier: 1C:2D:8E:C8:E7:82:82:FE:A3:B6:33:E7:8A:58:5C:F6:0F:E2:24:35
Authority key identifier: E1:56:A7:85:BF:7F:E4:D7:C4:A5:C6:B7:21:21:4F:0E:96:F3:AE:C9
Certificate issuer: /CN=e156a785bf7fe4d7c4a5c6b721214f0e96f3aec9
Certificate serial: 0197B6A2207B4AC150E90A73E9C2D550C0D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4Vanhb9_5NfEpca3ISFPDpbzrsk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/b18f32-473c-4d9e-ab85-7bd0cfa239f6/1/4Vanhb9_5NfEpca3ISFPDpbzrsk.mft
Manifest number: 10DD
Signing time: Sat 28 Jun 2025 13:02:47 +0000
Manifest this update: Sat 28 Jun 2025 13:02:47 +0000
Manifest next update: Sun 29 Jun 2025 13:02:47 +0000
Files and hashes: 1: 4Vanhb9_5NfEpca3ISFPDpbzrsk.crl (hash: qpLVUh5WZqPgLN21KHKnhyKJszNnguwvZaShmmpGx30=)
2: NPk_GHNqq8k7MUydVHIUCQUBAQo.roa (hash: 8i7mapEQ11nmMTFwNuWUxWdEwqzqNv3Aacz7I3tfzMk=)
3: TY3bJpTGwSql-13Pjck1BzHDr8I.roa (hash: B/70euLBU/mf/YMvD1qZRHP7TxQr60sKZhW4C66SeVY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ee/b18f32-473c-4d9e-ab85-7bd0cfa239f6/1/4Vanhb9_5NfEpca3ISFPDpbzrsk.crl
rsync://rpki.ripe.net/repository/DEFAULT/ee/b18f32-473c-4d9e-ab85-7bd0cfa239f6/1/4Vanhb9_5NfEpca3ISFPDpbzrsk.mft
rsync://rpki.ripe.net/repository/DEFAULT/4Vanhb9_5NfEpca3ISFPDpbzrsk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a2:20:7b:4a:c1:50:e9:0a:73:e9:c2:d5:50:c0:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e156a785bf7fe4d7c4a5c6b721214f0e96f3aec9
Validity
Not Before: Jun 28 13:02:47 2025 GMT
Not After : Jun 29 13:02:47 2025 GMT
Subject: CN=1c2d8ec8e78282fea3b633e78a585cf60fe22435
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:dd:98:fa:aa:38:a9:31:b5:b0:4e:89:3e:63:
9c:83:60:50:8a:0f:82:d5:a0:aa:13:62:0c:9a:70:
4b:03:9c:a9:f7:38:e3:00:91:4b:e7:13:62:05:1f:
9c:68:ae:9e:25:b6:5c:83:15:c7:b9:eb:8b:1e:30:
4b:c1:9a:08:64:57:be:16:1f:ed:f5:c7:19:40:86:
33:52:ab:d7:d3:38:4d:bc:a3:2b:56:08:a0:3f:a0:
1e:cf:c3:4b:d9:6b:e8:2a:61:de:15:2a:e5:1f:b5:
bd:3e:c4:61:ae:d4:64:29:e1:5e:b8:45:28:1f:b3:
e5:2d:51:8c:0e:4b:53:e5:6c:a4:c2:a9:11:a3:8a:
84:40:88:8d:f7:4b:68:1f:3f:36:3d:27:26:77:4d:
9d:6a:68:fd:64:39:0a:de:f3:b5:f7:bd:5a:d5:69:
e3:48:84:76:13:67:3f:17:ec:20:ea:d1:eb:a0:17:
fb:41:96:ac:43:7b:6c:7f:d0:6c:89:ea:ce:a3:c7:
9c:4f:04:be:b4:78:bc:67:81:cd:0d:80:b1:b4:a6:
79:e9:58:5d:8b:1c:55:5b:c3:5f:e0:6f:ca:7c:dd:
36:fb:7f:a9:44:6f:c2:50:4b:a8:ae:0e:ee:6e:cf:
0e:20:83:11:d8:bd:fa:19:3b:69:45:4a:71:95:03:
8e:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:2D:8E:C8:E7:82:82:FE:A3:B6:33:E7:8A:58:5C:F6:0F:E2:24:35
X509v3 Authority Key Identifier:
keyid:E1:56:A7:85:BF:7F:E4:D7:C4:A5:C6:B7:21:21:4F:0E:96:F3:AE:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4Vanhb9_5NfEpca3ISFPDpbzrsk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/b18f32-473c-4d9e-ab85-7bd0cfa239f6/1/4Vanhb9_5NfEpca3ISFPDpbzrsk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/b18f32-473c-4d9e-ab85-7bd0cfa239f6/1/4Vanhb9_5NfEpca3ISFPDpbzrsk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:4b:7a:b4:9c:cc:d1:a2:f1:19:1f:2b:43:9f:07:52:61:d2:
90:c5:41:ca:0d:1b:1b:a2:69:96:99:60:92:16:9e:e7:19:ce:
4e:4f:be:c0:b3:09:46:d8:2c:0d:a3:0f:f0:bb:a8:4d:28:90:
a3:ee:a5:d6:f0:ad:9a:6e:d0:6b:bd:8e:2c:cf:e5:8e:39:2f:
bf:23:5b:9b:30:bf:5c:bd:f4:58:86:eb:96:26:af:28:29:56:
1e:d4:3c:39:ab:21:06:c2:f6:44:38:9b:36:0b:c9:6e:f6:8b:
81:1d:51:38:4e:cd:9c:d6:28:56:e7:6b:ae:76:c4:1e:41:25:
d5:2a:2d:34:2f:32:d6:f6:bb:1a:81:96:ca:1f:3d:f4:e4:ff:
eb:02:ce:d8:d0:02:49:bc:93:c9:f0:10:c1:66:24:12:10:3c:
e9:8e:e7:56:fd:19:7e:4b:b0:36:28:db:ab:9e:bf:04:11:15:
1c:9c:97:33:63:29:21:38:d9:ee:67:21:8c:fd:bf:a0:33:89:
b9:de:b1:3c:41:0d:ec:94:43:0a:1d:35:ed:c6:f3:8d:91:5e:
90:fb:b9:b4:d4:5c:e3:e3:f9:5e:6f:e7:b7:3d:10:70:7f:8b:
98:d6:a1:e9:08:1a:a9:c5:85:b0:f2:44:75:f4:21:81:92:80:
78:c1:21:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 19:02:58 2025 by rpki-client