Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/466119-873f-4cfd-91a6-b1e313d79893/1/4K-xYKlzOKshEUhArdxhgKW6QrE.mft
File: 4K-xYKlzOKshEUhArdxhgKW6QrE.mft (raw, json)
Hash identifier: g4BqDVO9IaBm+rpVnYFlHcqBGcEpPQQBH0nEKSWkLrc=
Subject key identifier: 67:EA:5F:B6:9D:58:4E:D1:DC:DD:10:AB:32:8B:8A:E2:CC:68:EC:27
Authority key identifier: E0:AF:B1:60:A9:73:38:AB:21:11:48:40:AD:DC:61:80:A5:BA:42:B1
Certificate issuer: /CN=e0afb160a97338ab21114840addc6180a5ba42b1
Certificate serial: 0198541F835ABAFF0A246B7130AF16090023
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4K-xYKlzOKshEUhArdxhgKW6QrE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6b/466119-873f-4cfd-91a6-b1e313d79893/1/4K-xYKlzOKshEUhArdxhgKW6QrE.mft
Manifest number: 12DB
Signing time: Tue 29 Jul 2025 03:00:07 +0000
Manifest this update: Tue 29 Jul 2025 03:00:07 +0000
Manifest next update: Wed 30 Jul 2025 03:00:07 +0000
Files and hashes: 1: 4K-xYKlzOKshEUhArdxhgKW6QrE.crl (hash: WB1JIoa6UEJgKFK6Ow2NtUgO0EfcareXt3qiMclAMXE=)
2: Gwy6_uUvgZKl_FsgbK0SBR2765s.roa (hash: e+42Dv5ZMct1RmCP3DiJKtyiBUgVYfDjN9qagjZj7ck=)
3: RoGLSCET83zk1v-3GNDAGUmNCf4.roa (hash: TK8/4ls6e1537IxcrmPC8DEH8k32Or5yu+pxFNpz4Eo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6b/466119-873f-4cfd-91a6-b1e313d79893/1/4K-xYKlzOKshEUhArdxhgKW6QrE.crl
rsync://rpki.ripe.net/repository/DEFAULT/6b/466119-873f-4cfd-91a6-b1e313d79893/1/4K-xYKlzOKshEUhArdxhgKW6QrE.mft
rsync://rpki.ripe.net/repository/DEFAULT/4K-xYKlzOKshEUhArdxhgKW6QrE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Jul 2025 23:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:54:1f:83:5a:ba:ff:0a:24:6b:71:30:af:16:09:00:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e0afb160a97338ab21114840addc6180a5ba42b1
Validity
Not Before: Jul 29 03:00:07 2025 GMT
Not After : Jul 30 03:00:07 2025 GMT
Subject: CN=67ea5fb69d584ed1dcdd10ab328b8ae2cc68ec27
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:e7:4c:9a:c5:0b:45:bc:f2:4a:71:7c:ac:09:
25:7b:9d:ec:92:9d:37:81:07:53:1c:28:09:28:c1:
c1:43:24:95:3b:88:20:65:7d:33:0f:59:3c:db:88:
72:e7:d1:af:a1:67:f6:51:fc:06:19:e1:d3:48:55:
b6:53:4d:49:16:85:ad:cd:e2:6c:61:02:68:2a:f1:
c3:5f:10:44:a6:2c:40:fe:ef:28:1d:12:12:b3:91:
73:7b:1c:fb:a8:72:15:55:2f:ec:8b:44:3d:64:fa:
3b:3b:a5:a5:26:82:d6:71:3e:e4:79:c5:85:2c:8b:
c9:a0:b7:8a:35:ae:c9:84:98:76:c7:b2:74:ae:ae:
86:57:dd:72:2a:56:54:a5:81:75:db:57:0c:5e:59:
2e:7f:bb:e3:3e:b1:c8:85:50:b8:ce:b6:a8:13:8c:
fa:7a:d1:cc:d9:fd:70:2c:52:95:9b:4d:3d:87:c1:
b8:29:b2:dd:b5:aa:22:62:58:22:a7:0f:91:3a:bc:
33:87:75:69:11:eb:5d:39:e4:f8:f9:08:91:ca:89:
a8:07:1e:9c:81:65:bb:a3:c9:d6:c1:55:99:cc:4d:
4e:fd:59:ee:a2:21:87:40:86:f8:ff:21:49:fb:f6:
24:56:c0:c6:e9:93:fd:39:fa:d2:bd:28:db:dd:38:
23:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:EA:5F:B6:9D:58:4E:D1:DC:DD:10:AB:32:8B:8A:E2:CC:68:EC:27
X509v3 Authority Key Identifier:
keyid:E0:AF:B1:60:A9:73:38:AB:21:11:48:40:AD:DC:61:80:A5:BA:42:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4K-xYKlzOKshEUhArdxhgKW6QrE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/466119-873f-4cfd-91a6-b1e313d79893/1/4K-xYKlzOKshEUhArdxhgKW6QrE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/466119-873f-4cfd-91a6-b1e313d79893/1/4K-xYKlzOKshEUhArdxhgKW6QrE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:f1:cb:82:a2:63:8f:59:be:ce:11:d0:6d:7c:11:46:80:c0:
eb:57:b7:fb:44:76:57:7d:0e:13:60:2b:31:f9:7b:01:f6:ce:
a8:25:fa:a6:a2:47:c3:b3:b0:64:d8:5b:f3:26:2a:7b:1c:63:
1f:99:6c:98:ba:4a:de:89:ca:96:23:c0:90:23:3e:fa:24:bd:
a3:2e:b9:bf:87:22:3e:7b:2d:b0:76:42:58:2f:06:c5:e0:61:
1c:db:66:bd:5a:5b:77:0d:7f:8f:e4:f9:f9:17:c6:bd:b1:b8:
b4:1f:7c:5f:df:09:c5:7b:ba:6e:48:00:9b:26:5c:02:f1:67:
6f:4d:d1:35:9f:e0:0a:e9:85:9f:47:89:c3:b9:ec:04:3d:05:
0e:80:90:59:21:91:d8:23:3c:9a:35:e2:ff:26:da:54:14:35:
cb:94:e3:80:10:f0:f5:56:62:53:e7:b4:a1:d8:ad:a4:d5:c8:
90:e9:bd:b0:48:6d:bc:db:35:c5:1f:d9:01:f0:ba:3e:b2:9c:
fa:8e:bd:10:63:48:02:ff:97:0a:53:52:c4:fd:cc:22:5e:68:
47:7d:2c:8c:f7:d8:25:ee:ae:8d:f9:26:bc:44:9a:31:34:8d:
ad:b1:47:62:c0:21:dc:ba:2b:26:a5:61:4b:33:86:29:34:d4:
0d:3a:60:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 29 07:44:15 2025 by rpki-client