Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/1a85a8-e4f8-498b-a5ae-a4be172c76ba/1/4_GcxeONj5wdZUcXdmX4khHeyJk.mft
File: 4_GcxeONj5wdZUcXdmX4khHeyJk.mft (raw, json)
Hash identifier: H5qbbqXcYOk5gI88YKpMk/BYP6XuIo0ltfeIItyFKjs=
Subject key identifier: 1C:E6:C5:F5:8C:26:50:A0:5D:16:B6:91:0F:7B:7E:88:80:F9:CB:93
Authority key identifier: E3:F1:9C:C5:E3:8D:8F:9C:1D:65:47:17:76:65:F8:92:11:DE:C8:99
Certificate issuer: /CN=e3f19cc5e38d8f9c1d6547177665f89211dec899
Certificate serial: 0198499BD7E92E4DA2131FECF6ED9FCB64A8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4_GcxeONj5wdZUcXdmX4khHeyJk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/1a85a8-e4f8-498b-a5ae-a4be172c76ba/1/4_GcxeONj5wdZUcXdmX4khHeyJk.mft
Manifest number: 0E6E
Signing time: Sun 27 Jul 2025 02:00:06 +0000
Manifest this update: Sun 27 Jul 2025 02:00:06 +0000
Manifest next update: Mon 28 Jul 2025 02:00:06 +0000
Files and hashes: 1: 4_GcxeONj5wdZUcXdmX4khHeyJk.crl (hash: zIz4zC+Bo62InZ3aZiSMJE0CDLIePkPjbHK28W29f20=)
2: nCO98tc8B201HK59o3LGsGaIbRQ.roa (hash: 5XD9s6utrTJgO6HcLNBLSP37yElvartuHWVrwWT7jxg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/23/1a85a8-e4f8-498b-a5ae-a4be172c76ba/1/4_GcxeONj5wdZUcXdmX4khHeyJk.crl
rsync://rpki.ripe.net/repository/DEFAULT/23/1a85a8-e4f8-498b-a5ae-a4be172c76ba/1/4_GcxeONj5wdZUcXdmX4khHeyJk.mft
rsync://rpki.ripe.net/repository/DEFAULT/4_GcxeONj5wdZUcXdmX4khHeyJk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 00:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:49:9b:d7:e9:2e:4d:a2:13:1f:ec:f6:ed:9f:cb:64:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e3f19cc5e38d8f9c1d6547177665f89211dec899
Validity
Not Before: Jul 27 02:00:06 2025 GMT
Not After : Jul 28 02:00:06 2025 GMT
Subject: CN=1ce6c5f58c2650a05d16b6910f7b7e8880f9cb93
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:6c:6a:ed:6d:f0:ed:dc:2e:15:89:dc:27:75:
df:0a:f8:09:1a:38:82:6c:fd:c3:73:23:f2:10:f8:
76:aa:32:5c:34:f0:a4:1b:6f:ae:4e:6d:56:ce:00:
6e:19:80:83:97:26:52:7a:42:2d:5d:62:b0:94:76:
fd:b5:20:0b:fe:37:2f:2d:98:11:df:35:92:4a:a3:
ea:1c:b8:e5:a3:21:78:fc:1b:74:71:25:1e:d7:e3:
53:0c:93:b1:d7:f1:77:8f:35:b1:31:ac:b5:c9:3a:
01:5c:00:94:b9:33:a5:cd:12:ea:d1:37:be:e0:73:
d8:96:17:50:2b:ef:78:9e:a9:ef:2b:d6:2c:28:ca:
e4:2e:32:ed:40:c8:7a:64:0f:fb:3d:5d:c0:4b:26:
77:b1:c8:44:1c:2d:f5:44:8c:c5:4a:e6:6b:ce:df:
72:25:a8:fb:65:99:db:d3:cc:f1:56:ae:e8:81:88:
2c:81:c0:da:e4:23:f7:c2:af:7a:a5:5f:b8:42:61:
1e:32:38:ba:45:d2:f3:d1:ef:ab:ac:65:ea:04:ed:
c9:6a:a2:98:b7:93:4a:58:b4:fe:80:8d:1e:5a:72:
8b:69:fd:5d:9f:de:e7:bb:a5:b6:8a:fc:df:98:16:
86:ab:7a:85:b8:34:9d:5d:f7:5b:b9:12:01:2b:b9:
a3:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:E6:C5:F5:8C:26:50:A0:5D:16:B6:91:0F:7B:7E:88:80:F9:CB:93
X509v3 Authority Key Identifier:
keyid:E3:F1:9C:C5:E3:8D:8F:9C:1D:65:47:17:76:65:F8:92:11:DE:C8:99
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4_GcxeONj5wdZUcXdmX4khHeyJk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/1a85a8-e4f8-498b-a5ae-a4be172c76ba/1/4_GcxeONj5wdZUcXdmX4khHeyJk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/23/1a85a8-e4f8-498b-a5ae-a4be172c76ba/1/4_GcxeONj5wdZUcXdmX4khHeyJk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:ff:0c:7f:be:46:9a:87:c0:74:86:f1:8b:db:b5:d0:34:04:
81:d7:40:4c:d6:30:ca:84:d1:d9:f8:11:58:f8:fe:a7:6e:88:
43:9f:a2:d7:eb:68:c5:6c:03:34:3a:01:b8:50:a9:f9:bc:72:
1d:01:9d:76:3a:2d:fc:71:ea:69:79:55:a8:a3:34:19:6d:81:
9e:cd:61:db:84:74:28:8e:04:f5:41:fc:1a:14:ae:68:2f:f7:
27:57:71:9c:fb:6a:6d:ea:d3:b2:82:73:35:93:60:03:66:66:
a8:74:17:d2:70:b1:96:50:4e:0a:b9:9f:2e:7e:5b:55:e3:78:
93:49:40:f4:e4:af:d5:c2:84:37:46:34:53:b1:45:97:c5:01:
62:2e:c9:32:69:41:21:3b:39:91:a8:2c:c1:01:08:29:6e:15:
ae:04:41:4b:96:1c:ef:f5:d2:3b:df:ac:1c:f9:7a:60:e9:c9:
07:29:14:34:9d:76:44:7a:14:d4:24:14:fb:e7:ce:71:eb:06:
fc:7e:de:04:b7:65:df:17:01:1e:f5:85:67:56:1c:e4:d1:bd:
d1:9e:d3:86:91:44:16:8b:3d:c9:bc:35:54:ed:a2:40:5b:a3:
a1:42:fc:1a:77:02:92:dc:f7:b2:bf:2a:b4:0b:f7:b1:8e:94:
1d:3f:db:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 09:59:36 2025 by rpki-client