Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/b6468d-10ed-4d48-803c-ea97665c13df/1/4oNEKXdeZVXldCSSKGJUsdqfGQM.mft
File: 4oNEKXdeZVXldCSSKGJUsdqfGQM.mft (raw, json)
Hash identifier: zSJMmAue2nsbjZfwpXtxWARQRPgW0Dqrze8XL9XFeWg=
Subject key identifier: FF:64:D4:81:AF:2A:59:51:E6:64:72:20:48:FA:2E:3A:A8:FA:70:26
Authority key identifier: E2:83:44:29:77:5E:65:55:E5:74:24:92:28:62:54:B1:DA:9F:19:03
Certificate issuer: /CN=e2834429775e6555e5742492286254b1da9f1903
Certificate serial: 019846D1E742B05FE9A7C1C136F28C8445DB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4oNEKXdeZVXldCSSKGJUsdqfGQM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/b6468d-10ed-4d48-803c-ea97665c13df/1/4oNEKXdeZVXldCSSKGJUsdqfGQM.mft
Manifest number: 0EBA
Signing time: Sat 26 Jul 2025 13:00:18 +0000
Manifest this update: Sat 26 Jul 2025 13:00:18 +0000
Manifest next update: Sun 27 Jul 2025 13:00:18 +0000
Files and hashes: 1: 4oNEKXdeZVXldCSSKGJUsdqfGQM.crl (hash: VEB09Y79U4jsjpMrBzgKnTJ97PyMGWkeO+TjDonEGrw=)
2: ZTmydTpXIXh_aFM6lIMP1nPGi4M.roa (hash: R6dO91YPQTwtwZipE8GfozYF7WvWuk+GMp9DghrSYmY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/21/b6468d-10ed-4d48-803c-ea97665c13df/1/4oNEKXdeZVXldCSSKGJUsdqfGQM.crl
rsync://rpki.ripe.net/repository/DEFAULT/21/b6468d-10ed-4d48-803c-ea97665c13df/1/4oNEKXdeZVXldCSSKGJUsdqfGQM.mft
rsync://rpki.ripe.net/repository/DEFAULT/4oNEKXdeZVXldCSSKGJUsdqfGQM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 06:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:46:d1:e7:42:b0:5f:e9:a7:c1:c1:36:f2:8c:84:45:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e2834429775e6555e5742492286254b1da9f1903
Validity
Not Before: Jul 26 13:00:18 2025 GMT
Not After : Jul 27 13:00:18 2025 GMT
Subject: CN=ff64d481af2a5951e664722048fa2e3aa8fa7026
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:d8:4d:2d:96:d1:aa:23:f8:35:5a:4f:48:40:
70:c4:bb:06:4f:5b:3d:64:9f:3a:6f:81:01:6b:5a:
6b:bd:34:bc:ca:44:0e:b0:04:03:83:63:b8:80:59:
50:65:b6:26:37:bd:0a:e1:ba:2e:fd:02:e8:f3:5f:
f8:12:c1:b7:bd:a2:9a:e9:68:b8:07:b9:bd:3b:e0:
71:af:48:0e:39:71:ae:64:79:92:a0:64:85:06:5a:
a3:d4:4e:bb:fe:0f:de:7c:3d:23:5b:cd:99:41:a4:
f7:cd:50:1d:38:ad:a1:08:4d:5b:0c:6c:3c:b2:f7:
af:77:32:eb:91:03:e7:96:b8:9a:98:f3:e3:83:03:
1f:2d:9a:e4:78:9c:9a:d5:3e:6c:c0:01:d9:2e:56:
71:11:4c:06:94:79:73:7f:a5:a6:5a:b7:d1:ce:7b:
29:92:3f:4d:65:3b:5a:18:f3:f5:29:dd:08:f3:af:
96:b2:62:58:09:d1:af:48:7b:da:c9:63:ca:61:fe:
15:29:4b:86:b4:d3:0f:ec:12:87:6e:1c:c1:af:e6:
80:52:c9:b9:8a:b1:91:1d:0e:e6:9f:6f:a8:db:18:
42:67:19:8f:d7:a0:f6:a2:cf:65:63:ce:69:dc:b6:
6e:ef:bb:6b:da:d0:38:29:5e:bb:8d:a6:7d:fa:3c:
bc:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:64:D4:81:AF:2A:59:51:E6:64:72:20:48:FA:2E:3A:A8:FA:70:26
X509v3 Authority Key Identifier:
keyid:E2:83:44:29:77:5E:65:55:E5:74:24:92:28:62:54:B1:DA:9F:19:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4oNEKXdeZVXldCSSKGJUsdqfGQM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/b6468d-10ed-4d48-803c-ea97665c13df/1/4oNEKXdeZVXldCSSKGJUsdqfGQM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/21/b6468d-10ed-4d48-803c-ea97665c13df/1/4oNEKXdeZVXldCSSKGJUsdqfGQM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:78:97:0b:64:6a:75:05:61:c8:b2:65:b5:56:ab:93:c7:06:
0d:ad:b1:8e:4e:50:ce:1a:1a:7f:08:e4:f8:1f:89:8f:fb:ec:
07:dc:c3:6d:30:b0:0a:52:1d:f9:61:fb:46:4b:30:52:7a:e6:
9a:85:e0:40:f2:83:8a:28:b0:96:5b:78:59:e3:5e:2f:ff:82:
9f:54:aa:9a:11:6e:0e:cb:a1:7a:32:bc:0a:e8:cb:b3:0a:a0:
3f:21:2c:d4:b9:12:11:1f:a5:ff:2c:c2:97:7d:36:38:2c:0c:
87:66:39:b5:68:a5:3d:7f:1f:8e:ba:70:92:59:74:25:50:00:
2c:57:62:7f:34:90:ee:c1:f4:f4:1f:c3:8a:c9:c2:a2:9d:aa:
30:e3:84:46:d2:bd:46:f7:c9:78:33:1f:06:da:34:3a:75:1b:
9a:5b:76:9d:26:82:9a:a1:90:9f:66:68:71:b6:3a:9e:9c:02:
88:0c:34:5b:af:96:5b:6f:7e:db:76:9e:ee:98:4f:c1:21:54:
b1:e5:c0:a4:52:d5:a7:1b:c7:c9:11:2f:16:21:14:4a:3b:9f:
47:ae:3a:4f:06:30:75:14:2d:96:dc:91:05:88:e8:c8:e5:e4:
19:2b:44:9e:c2:d4:7b:49:b0:51:99:db:23:d5:a1:b0:18:80:
e0:f0:61:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 14:48:09 2025 by rpki-client