Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/a18cf1-a080-4945-8b21-05556959c455/1/4YDru8oPiQ3jU4kUIag91bZT2UA.mft
File: 4YDru8oPiQ3jU4kUIag91bZT2UA.mft (raw, json)
Hash identifier: Xt4N2Z5v23164w7gJe8PDuSzV2arSTvCq1euuooHXJU=
Subject key identifier: A0:47:05:18:75:50:D3:D7:D5:E7:E4:BB:D1:B4:FF:6D:7B:47:2F:4C
Authority key identifier: E1:80:EB:BB:CA:0F:89:0D:E3:53:89:14:21:A8:3D:D5:B6:53:D9:40
Certificate issuer: /CN=e180ebbbca0f890de353891421a83dd5b653d940
Certificate serial: 0197B632EE41B1577198B3A6C850AADE005A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4YDru8oPiQ3jU4kUIag91bZT2UA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/a18cf1-a080-4945-8b21-05556959c455/1/4YDru8oPiQ3jU4kUIag91bZT2UA.mft
Manifest number: 15BE
Signing time: Sat 28 Jun 2025 11:01:20 +0000
Manifest this update: Sat 28 Jun 2025 11:01:20 +0000
Manifest next update: Sun 29 Jun 2025 11:01:20 +0000
Files and hashes: 1: 3FLOlTCLI1G1gTETun5ejoasBuA.roa (hash: ZqTUajmkPh8jnrRO1gF7H9NNj5iQ+rkTS+4qDwUhPQw=)
2: 4YDru8oPiQ3jU4kUIag91bZT2UA.crl (hash: nUnXVpdoSsvDFI2qfcAK2ZeLRBpl+GMza1aVwoyBmgM=)
3: CMHg46_N_Yzu5cDNrodsWcXH1qs.roa (hash: 9+kqVKjcfEEoN1RX5aOJP2hJFs9a0+X0ktGFEifqfTA=)
4: ccRftpql5fjXlNV0NylDd4KOG5c.roa (hash: kdsSlrhnC//Y+wGXnH9Z3RLM6M+rlU4Fjt+Q8g1QTKU=)
5: iGsK_B5kc7f5LtdtrLxtSL9ku54.roa (hash: raQtWkSW1CK//C2quX0UqsJsM/839tIzJbksWP0Gq+o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/a18cf1-a080-4945-8b21-05556959c455/1/4YDru8oPiQ3jU4kUIag91bZT2UA.crl
rsync://rpki.ripe.net/repository/DEFAULT/f8/a18cf1-a080-4945-8b21-05556959c455/1/4YDru8oPiQ3jU4kUIag91bZT2UA.mft
rsync://rpki.ripe.net/repository/DEFAULT/4YDru8oPiQ3jU4kUIag91bZT2UA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 11:01:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:32:ee:41:b1:57:71:98:b3:a6:c8:50:aa:de:00:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e180ebbbca0f890de353891421a83dd5b653d940
Validity
Not Before: Jun 28 11:01:20 2025 GMT
Not After : Jun 29 11:01:20 2025 GMT
Subject: CN=a04705187550d3d7d5e7e4bbd1b4ff6d7b472f4c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:a3:32:1c:5e:4d:fd:87:73:74:0d:f4:ca:8f:
52:31:1d:18:0a:c1:c8:cb:fb:05:da:63:89:a1:b0:
38:d6:3c:47:7d:9c:40:68:01:ef:6e:79:37:a3:6a:
93:1a:ee:bc:a6:c6:b4:ef:2a:fd:46:73:4a:9d:8a:
75:b1:0a:c4:a0:9f:92:de:4a:0f:71:12:bf:4b:c2:
9c:32:fa:9d:82:2c:5d:1c:a1:7a:d9:eb:07:66:e1:
7a:74:ee:fa:3c:df:6f:12:b6:dd:1f:7f:dc:f7:4d:
ef:e2:05:32:5a:8f:7b:6a:62:de:ee:b5:41:4f:7b:
3d:3c:6a:0a:01:c1:e2:e8:7d:2b:b0:2f:bd:14:76:
ee:d6:d5:96:d0:24:c1:f1:de:65:d9:be:8b:1e:df:
ce:2c:15:0a:80:e1:58:7a:cd:f0:be:e4:40:c6:ba:
4f:67:04:e0:34:e1:7e:36:3f:4c:77:ca:21:89:89:
d7:37:0b:2c:c7:61:4f:26:0e:13:fe:91:29:e1:30:
61:ad:01:be:26:10:5f:85:92:03:14:05:4a:bb:17:
3c:15:e5:f3:0b:c4:90:75:d2:6d:31:cf:12:30:5a:
c6:8f:6e:5c:39:d7:52:c7:3e:a5:70:d5:47:67:78:
fa:ed:40:e7:91:6c:c4:50:65:36:f5:e3:b8:c0:5a:
7c:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:47:05:18:75:50:D3:D7:D5:E7:E4:BB:D1:B4:FF:6D:7B:47:2F:4C
X509v3 Authority Key Identifier:
keyid:E1:80:EB:BB:CA:0F:89:0D:E3:53:89:14:21:A8:3D:D5:B6:53:D9:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4YDru8oPiQ3jU4kUIag91bZT2UA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/a18cf1-a080-4945-8b21-05556959c455/1/4YDru8oPiQ3jU4kUIag91bZT2UA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/a18cf1-a080-4945-8b21-05556959c455/1/4YDru8oPiQ3jU4kUIag91bZT2UA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
aa:32:b2:ad:82:87:f3:8c:de:dc:de:f3:96:38:74:ae:0b:95:
4a:5f:77:b3:a0:e2:65:3e:87:f4:d8:f8:d0:dc:cc:20:ee:63:
22:4c:87:c2:0d:cb:d7:c1:2c:65:91:e7:99:f2:32:bb:d7:b9:
a6:a6:fa:13:b3:59:56:35:47:16:00:05:6b:fe:1f:1c:34:66:
3f:a2:9a:c4:b7:18:5e:d4:fa:10:fd:8c:b3:e5:33:b0:5e:ff:
e6:6c:9a:5f:36:b6:8e:18:17:d0:5e:4c:9c:7e:18:12:55:f5:
5a:bb:c8:b6:56:c3:bc:9d:8a:f0:ba:df:0f:ea:ef:4a:d6:44:
c7:08:77:17:c1:76:b3:2a:9e:57:f6:29:c7:9a:60:75:30:49:
6c:33:1a:42:6d:17:f9:42:3a:82:51:11:bd:0e:46:5a:11:02:
4f:ef:99:9c:2b:e7:b1:30:5b:75:4b:7f:fc:43:b8:be:53:f1:
40:e4:2d:63:de:29:8f:9b:db:f0:a1:d9:c4:9c:f9:83:30:7c:
e8:b4:3a:75:e5:78:c7:fc:97:6f:66:63:67:7c:af:99:42:11:
ca:15:bd:43:b3:ad:8f:f2:b4:c4:fa:a1:62:ad:9c:e4:00:f1:
8d:ff:62:3a:93:ac:a9:b0:2e:b4:38:6c:16:01:67:53:6d:cd:
5f:16:b7:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 20:44:32 2025 by rpki-client