Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/b41190-da28-4301-90c5-95a4ef43c215/1/dE4TPKDK2fH9FhWAWQspbbIjCM4.mft
File: dE4TPKDK2fH9FhWAWQspbbIjCM4.mft (raw, json)
Hash identifier: 7FnWiqIAJnbNIWaOs7d/iF9kqb/K7P+9NO+Cgi6cYQU=
Subject key identifier: 2F:88:2F:CB:01:BA:BF:C0:BC:E4:83:0D:89:AF:E1:FC:DE:03:89:48
Authority key identifier: 74:4E:13:3C:A0:CA:D9:F1:FD:16:15:80:59:0B:29:6D:B2:23:08:CE
Certificate issuer: /CN=744e133ca0cad9f1fd161580590b296db22308ce
Certificate serial: 0197B6A16484A2BAE53433DAE81394409AE3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dE4TPKDK2fH9FhWAWQspbbIjCM4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/b41190-da28-4301-90c5-95a4ef43c215/1/dE4TPKDK2fH9FhWAWQspbbIjCM4.mft
Manifest number: 0969
Signing time: Sat 28 Jun 2025 13:01:59 +0000
Manifest this update: Sat 28 Jun 2025 13:01:59 +0000
Manifest next update: Sun 29 Jun 2025 13:01:59 +0000
Files and hashes: 1: TP6kkH0vZwohnuu8LaNGGzK2bx4.roa (hash: 5TOk/KFa4qvBJB1w3rUK12jUjLhZzxVEKo+9hT469YM=)
2: dE4TPKDK2fH9FhWAWQspbbIjCM4.crl (hash: 6hP1Jwoeisq7Sp7koYxqZPeTI/k23btRgrgIoggVvjA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/b41190-da28-4301-90c5-95a4ef43c215/1/dE4TPKDK2fH9FhWAWQspbbIjCM4.crl
rsync://rpki.ripe.net/repository/DEFAULT/ff/b41190-da28-4301-90c5-95a4ef43c215/1/dE4TPKDK2fH9FhWAWQspbbIjCM4.mft
rsync://rpki.ripe.net/repository/DEFAULT/dE4TPKDK2fH9FhWAWQspbbIjCM4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 13:01:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a1:64:84:a2:ba:e5:34:33:da:e8:13:94:40:9a:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=744e133ca0cad9f1fd161580590b296db22308ce
Validity
Not Before: Jun 28 13:01:59 2025 GMT
Not After : Jun 29 13:01:59 2025 GMT
Subject: CN=2f882fcb01babfc0bce4830d89afe1fcde038948
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:88:de:09:24:ef:0a:21:bb:53:d0:78:4e:e8:
a5:9d:36:4c:4d:46:ca:3c:fc:43:72:ac:78:9b:d9:
78:19:85:20:aa:26:c6:50:ac:6c:23:ec:c0:b7:d1:
b3:7a:49:43:a9:21:d4:c2:5e:f8:13:56:54:39:22:
75:c0:41:05:74:55:b6:89:bc:2c:06:0c:87:a0:b6:
78:51:d3:3c:3f:a8:d4:45:df:d9:0a:5d:4b:ae:66:
48:3d:40:4b:c9:3c:f8:e7:e3:0f:e1:d6:e3:ad:73:
90:dc:de:81:ed:d2:24:51:ad:0c:02:11:03:f9:57:
74:18:dc:72:e7:72:b3:c0:54:75:37:5e:74:0d:a6:
a2:13:6b:4b:d8:cb:61:06:22:51:bb:8f:0c:46:2d:
e7:ca:ca:4e:6d:c5:d4:5d:e5:40:82:f5:19:c0:5c:
45:2a:3f:2b:94:34:2e:3a:bb:fe:06:af:97:ee:1d:
f7:3b:fe:19:77:cf:c3:8d:5c:41:5e:5a:db:47:e9:
16:67:67:c6:85:c3:6f:81:84:96:09:ea:b9:2e:74:
50:da:4d:bd:e1:ed:a3:13:a9:13:e6:c3:c2:d0:cf:
ed:ff:62:76:87:c0:15:4b:d9:37:1a:13:35:fe:60:
78:d5:7e:42:fd:48:b8:5c:bf:1b:28:e3:5b:4b:e2:
1a:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:88:2F:CB:01:BA:BF:C0:BC:E4:83:0D:89:AF:E1:FC:DE:03:89:48
X509v3 Authority Key Identifier:
keyid:74:4E:13:3C:A0:CA:D9:F1:FD:16:15:80:59:0B:29:6D:B2:23:08:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dE4TPKDK2fH9FhWAWQspbbIjCM4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/b41190-da28-4301-90c5-95a4ef43c215/1/dE4TPKDK2fH9FhWAWQspbbIjCM4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/b41190-da28-4301-90c5-95a4ef43c215/1/dE4TPKDK2fH9FhWAWQspbbIjCM4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:08:dc:54:ed:70:aa:e8:ab:c4:3c:73:dd:4e:97:a3:56:61:
3e:63:26:ac:7e:ad:38:00:56:1e:f5:ca:2e:3f:1f:5a:9d:de:
e9:c9:07:e8:bd:12:7e:61:83:d7:af:e6:4b:0f:b0:5e:dc:1b:
44:36:a5:46:32:c4:05:35:e7:f8:48:a0:b4:de:97:f1:5f:2c:
7e:d2:19:2f:8a:5b:27:c2:fe:cc:f7:7e:db:4d:99:b9:a3:89:
9f:c5:6f:46:6e:63:f7:ee:38:31:42:22:54:74:6b:4b:c9:ba:
1b:02:86:b2:17:3c:94:f5:c5:04:09:a5:fb:1b:ae:b3:2f:9e:
4b:e8:d3:4b:23:db:05:b7:a7:9f:a1:3e:27:f2:f8:da:a3:94:
e8:73:9a:c0:f9:9d:5a:95:27:36:c1:e2:47:b3:22:0c:81:f1:
3d:00:97:c6:6c:ba:9a:36:e9:9e:2d:7f:6c:ec:d2:e3:22:8d:
a2:e4:42:fc:2b:b7:16:d1:fc:3e:fd:aa:ce:ca:d9:4d:1e:d6:
c9:25:41:84:33:79:3d:20:18:37:de:92:20:01:45:b8:20:5e:
8e:74:53:08:91:8b:c6:11:25:ab:dd:18:d8:1a:41:30:38:9d:
e2:8c:81:44:09:bd:28:93:32:80:e5:53:72:22:d5:2e:88:92:
19:cf:e6:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:12:45 2025 by rpki-client