Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/f6be03-4f44-4354-b9eb-ba4d06df0be5/1/4uSsYiT-GURCDcOpjdY6uuSvfgA.mft
File: 4uSsYiT-GURCDcOpjdY6uuSvfgA.mft (raw, json)
Hash identifier: gbkkD+ogiOkvq+q7rxW9UVKYaMQZ0JlETs+Mnoaf2d0=
Subject key identifier: 1D:A4:A8:F9:CE:1E:40:52:20:9A:A5:59:BE:67:CF:B5:BB:D1:1D:61
Authority key identifier: E2:E4:AC:62:24:FE:19:44:42:0D:C3:A9:8D:D6:3A:BA:E4:AF:7E:00
Certificate issuer: /CN=e2e4ac6224fe1944420dc3a98dd63abae4af7e00
Certificate serial: 01983DCEA395F46647C0AC961207DCE2E78F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4uSsYiT-GURCDcOpjdY6uuSvfgA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/f6be03-4f44-4354-b9eb-ba4d06df0be5/1/4uSsYiT-GURCDcOpjdY6uuSvfgA.mft
Manifest number: 1228
Signing time: Thu 24 Jul 2025 19:00:09 +0000
Manifest this update: Thu 24 Jul 2025 19:00:09 +0000
Manifest next update: Fri 25 Jul 2025 19:00:09 +0000
Files and hashes: 1: 4uSsYiT-GURCDcOpjdY6uuSvfgA.crl (hash: p9QFvtZSkEyQKIwycWg/YU9qUYr5P/aMt0EkBTJ8tJE=)
2: UELJaiMVSRwrvUCFtrZ9GXV7epU.roa (hash: q9QCYQSQGQmo5qqoOtk1Ibo5KX8kGvjJhcZ2aob3nKM=)
3: v6hueYNyF9uNlLtlUb0AzeNT4cA.roa (hash: 9y1HAaiP+48RFVQa5JDWbbUjnwyoOqmjCXAn55Eo2zI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/f6be03-4f44-4354-b9eb-ba4d06df0be5/1/4uSsYiT-GURCDcOpjdY6uuSvfgA.crl
rsync://rpki.ripe.net/repository/DEFAULT/0e/f6be03-4f44-4354-b9eb-ba4d06df0be5/1/4uSsYiT-GURCDcOpjdY6uuSvfgA.mft
rsync://rpki.ripe.net/repository/DEFAULT/4uSsYiT-GURCDcOpjdY6uuSvfgA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Jul 2025 19:00:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:3d:ce:a3:95:f4:66:47:c0:ac:96:12:07:dc:e2:e7:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e2e4ac6224fe1944420dc3a98dd63abae4af7e00
Validity
Not Before: Jul 24 19:00:09 2025 GMT
Not After : Jul 25 19:00:09 2025 GMT
Subject: CN=1da4a8f9ce1e4052209aa559be67cfb5bbd11d61
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:d4:9d:7a:78:28:c4:45:f7:f8:a1:ab:24:8a:
73:fd:9f:f6:b1:7b:2c:7b:a4:52:dd:f5:a5:2c:51:
ec:42:4c:1e:ae:ed:23:42:a2:72:bf:77:b1:82:2d:
41:af:21:74:8d:39:95:ef:84:8d:95:18:85:0d:c1:
a9:c3:55:de:16:b8:39:cd:5b:4b:f2:7a:00:e3:b3:
d4:8b:ad:61:5f:fb:c6:6f:9f:5f:4e:50:e9:a7:98:
0c:ea:3f:25:89:ce:49:0b:a8:42:54:71:ba:6c:44:
91:cc:59:b5:2e:57:c2:62:e8:26:d4:8b:7e:d3:47:
f9:15:18:62:aa:5f:5d:61:2d:b7:4d:be:48:7b:66:
74:ec:18:11:d7:b4:d0:61:ba:2a:ef:16:4a:b6:9b:
49:90:bc:32:93:c9:bc:bc:1a:3a:dd:7c:a6:89:a5:
e7:9f:9c:cf:e8:f9:49:44:ac:d2:a8:c1:77:b6:9e:
86:96:9a:98:96:51:73:73:fe:4a:4c:ce:45:ff:29:
02:fc:a8:a0:70:87:88:96:ec:0b:03:1f:42:f4:d6:
94:24:76:58:45:4d:49:0b:4f:03:bc:ec:1e:c6:f9:
73:39:51:65:39:19:64:95:29:7b:ab:94:ee:f3:07:
e8:65:6b:c5:9b:30:a5:df:2f:44:81:a1:02:23:1e:
18:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:A4:A8:F9:CE:1E:40:52:20:9A:A5:59:BE:67:CF:B5:BB:D1:1D:61
X509v3 Authority Key Identifier:
keyid:E2:E4:AC:62:24:FE:19:44:42:0D:C3:A9:8D:D6:3A:BA:E4:AF:7E:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4uSsYiT-GURCDcOpjdY6uuSvfgA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/f6be03-4f44-4354-b9eb-ba4d06df0be5/1/4uSsYiT-GURCDcOpjdY6uuSvfgA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/f6be03-4f44-4354-b9eb-ba4d06df0be5/1/4uSsYiT-GURCDcOpjdY6uuSvfgA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:89:77:74:c2:3d:fa:24:e9:1c:17:53:6c:be:cf:43:a9:6f:
63:c6:aa:59:01:47:4f:8b:7e:df:35:35:f1:af:28:0c:14:e0:
f8:04:80:b8:0f:19:75:06:a9:36:fd:89:cb:c0:0a:99:07:ec:
44:fd:c2:d9:e9:83:4f:8b:d7:3c:71:6f:7a:81:8c:4a:59:27:
f4:e9:b3:53:a9:83:93:f0:98:9f:ba:9d:bb:fc:60:6c:b8:d6:
14:35:59:ba:77:51:67:54:a6:2f:25:9f:02:86:83:9f:c6:50:
67:5c:7a:54:f6:c3:ef:e6:51:af:d8:98:b3:83:3f:a1:26:2c:
4c:1a:12:4a:0a:a4:29:41:a4:f8:9c:24:3e:36:bf:48:40:60:
18:37:bd:c0:dd:15:ee:3e:1e:a4:98:d0:ed:38:18:3d:88:2c:
a3:5d:bc:d4:74:0d:92:da:86:86:b7:ea:d9:3a:aa:fd:cf:3a:
60:f8:00:fd:5f:97:32:6d:8d:68:5c:f4:98:2a:70:7e:5c:a1:
bb:a7:e3:a3:12:ea:18:66:45:3a:a1:da:3a:4b:34:96:79:c9:
0e:de:6b:90:4d:26:a7:32:1a:de:96:9b:ad:08:73:b9:8b:53:
7d:4f:91:69:c2:9b:41:c2:74:e6:22:98:ba:c7:60:91:99:2b:
40:50:24:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 25 00:34:03 2025 by rpki-client