Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/d70833-68eb-4100-9123-94e1ab575094/1/4mthhRZS_I_twBGm8i966ba-sKM.mft
File: 4mthhRZS_I_twBGm8i966ba-sKM.mft (raw, json)
Hash identifier: RfovyR0bgVocd30BS1cg+9DCAHfyVqktVQ+lz0aYQoI=
Subject key identifier: AE:51:A0:1A:B8:75:0F:A5:8B:A4:7E:44:77:A7:78:7C:01:6F:BF:1E
Authority key identifier: E2:6B:61:85:16:52:FC:8F:ED:C0:11:A6:F2:2F:7A:E9:B6:BE:B0:A3
Certificate issuer: /CN=e26b61851652fc8fedc011a6f22f7ae9b6beb0a3
Certificate serial: 019849D3590E9C4B273F3A9748990BF5F99C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4mthhRZS_I_twBGm8i966ba-sKM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1f/d70833-68eb-4100-9123-94e1ab575094/1/4mthhRZS_I_twBGm8i966ba-sKM.mft
Manifest number: 0A2D
Signing time: Sun 27 Jul 2025 03:00:44 +0000
Manifest this update: Sun 27 Jul 2025 03:00:44 +0000
Manifest next update: Mon 28 Jul 2025 03:00:44 +0000
Files and hashes: 1: 4mthhRZS_I_twBGm8i966ba-sKM.crl (hash: X1ypvmWufLd2uSYHh0MW8F5pEjRtANotXh6LfmZZVxk=)
2: bp1oEKvy0k4AWur_R9trAhI-EY0.roa (hash: 1L++/xzP2iQbZgWJOfAhv8wOoNcuV9GiE8g7Q92+ZBo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1f/d70833-68eb-4100-9123-94e1ab575094/1/4mthhRZS_I_twBGm8i966ba-sKM.crl
rsync://rpki.ripe.net/repository/DEFAULT/1f/d70833-68eb-4100-9123-94e1ab575094/1/4mthhRZS_I_twBGm8i966ba-sKM.mft
rsync://rpki.ripe.net/repository/DEFAULT/4mthhRZS_I_twBGm8i966ba-sKM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 03:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:49:d3:59:0e:9c:4b:27:3f:3a:97:48:99:0b:f5:f9:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e26b61851652fc8fedc011a6f22f7ae9b6beb0a3
Validity
Not Before: Jul 27 03:00:44 2025 GMT
Not After : Jul 28 03:00:44 2025 GMT
Subject: CN=ae51a01ab8750fa58ba47e4477a7787c016fbf1e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:98:99:f0:02:df:a6:fc:16:72:a8:70:35:3f:
84:d1:24:75:fe:23:82:27:3a:84:38:e6:5c:b1:ce:
fc:5e:31:0d:1b:23:72:73:b1:98:ed:e1:9d:1d:60:
03:94:ad:10:60:2d:cd:2e:1b:c8:ca:1a:c6:cf:d8:
9d:3d:92:35:d0:13:a2:44:93:6b:a3:48:e6:81:58:
39:80:36:3f:47:7f:1d:10:a4:7a:8e:fe:85:0f:4d:
e3:8b:d0:bf:32:ff:2e:68:68:9f:14:30:43:cb:b2:
5f:7a:21:43:b4:34:34:cc:d0:e5:4e:4d:00:19:91:
19:8f:6d:fe:40:dd:80:7d:16:09:46:25:1f:4e:63:
b6:19:8c:09:8c:bc:6e:a7:26:ec:57:58:41:85:06:
83:2c:8c:a0:4c:ab:58:e2:6e:5e:22:4f:d3:21:7e:
63:eb:d1:6b:ee:c3:bd:ff:0d:c3:97:6e:cf:8d:2d:
d2:af:31:b2:0c:a9:11:81:ab:7f:0e:5c:2d:86:cd:
5f:6c:8b:4e:70:23:ed:7d:58:6c:99:c7:25:75:db:
7d:8b:0c:f0:23:f6:05:57:67:ec:45:2a:ba:55:6d:
26:80:fe:6f:df:70:17:19:90:83:ef:89:56:12:d5:
b8:50:b5:3e:11:c6:76:23:10:fc:cd:b7:3f:5d:63:
0d:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:51:A0:1A:B8:75:0F:A5:8B:A4:7E:44:77:A7:78:7C:01:6F:BF:1E
X509v3 Authority Key Identifier:
keyid:E2:6B:61:85:16:52:FC:8F:ED:C0:11:A6:F2:2F:7A:E9:B6:BE:B0:A3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4mthhRZS_I_twBGm8i966ba-sKM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/d70833-68eb-4100-9123-94e1ab575094/1/4mthhRZS_I_twBGm8i966ba-sKM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/d70833-68eb-4100-9123-94e1ab575094/1/4mthhRZS_I_twBGm8i966ba-sKM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:6f:fb:73:73:89:cf:4f:a8:f2:3d:31:ec:fb:bb:e8:2b:89:
fd:b3:53:c3:8f:6c:d3:b9:fe:5b:06:a6:e8:6a:62:8e:1e:0f:
24:8d:7d:1a:84:91:6d:c9:76:5d:86:a2:1f:d5:d0:b9:37:05:
1f:96:ca:29:7f:0a:7d:9c:28:59:d2:7b:e0:73:72:cb:d0:0c:
00:40:43:ef:e5:04:5e:55:25:55:06:5c:9e:d6:f1:25:5e:43:
4a:26:10:1d:35:5b:94:f8:4d:12:ab:b9:45:26:65:3e:a8:2d:
8e:a1:9a:46:37:c6:09:6f:9e:7e:9e:94:8f:2d:0a:8b:a2:74:
d8:30:e5:d2:fd:53:14:e5:24:a7:2f:9d:92:94:85:5e:04:65:
72:2e:34:bf:3f:aa:69:d1:15:1d:1f:bc:b2:50:0d:39:55:c5:
28:7b:5e:02:55:27:b7:c5:bb:32:2a:01:51:31:df:10:84:90:
aa:46:f1:4a:9d:f3:50:3a:5d:d3:75:19:e3:e3:3b:41:88:83:
8d:94:82:45:e7:9b:a5:1d:79:1b:fb:32:e5:ea:c4:3b:dd:15:
88:c3:c5:8b:bc:18:64:19:b7:41:24:20:12:1d:90:ea:e2:53:
81:71:28:c6:bd:86:ac:25:d8:3d:9c:52:b1:0d:4b:9a:95:13:
cb:4f:38:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 10:31:53 2025 by rpki-client