Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/d31e5f-0f52-4623-867a-543d6182e294/1/4rHi5MUIxsepi2WYUodFyBP60x0.mft
File: 4rHi5MUIxsepi2WYUodFyBP60x0.mft (raw, json)
Hash identifier: VxHoTd1JngJCuy5mJibzeDaA7/B6g5mea/oIsl6V8fI=
Subject key identifier: 6A:A4:36:3C:21:AA:D9:C9:7D:EE:58:7A:D0:37:A8:CE:7B:37:7A:80
Authority key identifier: E2:B1:E2:E4:C5:08:C6:C7:A9:8B:65:98:52:87:45:C8:13:FA:D3:1D
Certificate issuer: /CN=e2b1e2e4c508c6c7a98b6598528745c813fad31d
Certificate serial: 019849D38A19F158AFFB69DDD9E8C06EA071
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4rHi5MUIxsepi2WYUodFyBP60x0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/d31e5f-0f52-4623-867a-543d6182e294/1/4rHi5MUIxsepi2WYUodFyBP60x0.mft
Manifest number: 1606
Signing time: Sun 27 Jul 2025 03:00:56 +0000
Manifest this update: Sun 27 Jul 2025 03:00:56 +0000
Manifest next update: Mon 28 Jul 2025 03:00:56 +0000
Files and hashes: 1: 4rHi5MUIxsepi2WYUodFyBP60x0.crl (hash: Bn6Io+WQl5S6Yrt+EJVhVgFDjeOzzT9lG/4GvTyu5TQ=)
2: 883carP1hhWb3_MmiKGn80hphf0.roa (hash: cPZWjDagkqb5tEO5wfwI807e/U08AzhpwxGlaqpcxgI=)
3: AnftS6a3tNRTfwARV2obSQtU-1Q.roa (hash: 1O5FkUYkHZKrQKTSneyG+jslWvu7oIHqq1i+yTKMvxI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7d/d31e5f-0f52-4623-867a-543d6182e294/1/4rHi5MUIxsepi2WYUodFyBP60x0.crl
rsync://rpki.ripe.net/repository/DEFAULT/7d/d31e5f-0f52-4623-867a-543d6182e294/1/4rHi5MUIxsepi2WYUodFyBP60x0.mft
rsync://rpki.ripe.net/repository/DEFAULT/4rHi5MUIxsepi2WYUodFyBP60x0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 03:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:49:d3:8a:19:f1:58:af:fb:69:dd:d9:e8:c0:6e:a0:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e2b1e2e4c508c6c7a98b6598528745c813fad31d
Validity
Not Before: Jul 27 03:00:56 2025 GMT
Not After : Jul 28 03:00:56 2025 GMT
Subject: CN=6aa4363c21aad9c97dee587ad037a8ce7b377a80
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:d8:df:00:8c:8b:a4:ff:08:bd:61:b2:dc:46:
29:e2:8d:23:20:b2:49:86:c8:eb:84:b3:58:da:60:
b9:36:aa:a3:15:27:34:90:d0:16:c4:e4:3e:58:5a:
4d:2e:b8:7b:f0:d7:85:56:68:bc:24:65:ba:68:01:
39:9c:40:c3:97:f8:bd:7e:7f:1f:a0:23:c8:c7:f6:
96:cf:12:e2:3e:7f:e1:98:fb:d4:29:59:06:3e:fa:
3e:57:9e:05:41:69:59:50:7c:75:8c:40:25:b0:a6:
ae:b7:e4:01:d0:c2:26:59:d5:a2:41:6f:a6:26:3e:
82:0e:e2:03:d6:60:9e:af:6e:fb:36:49:8e:80:9e:
18:bf:29:05:05:48:ec:30:da:f8:6e:e9:92:65:18:
75:57:be:49:fe:11:56:34:72:d9:cf:60:f8:17:b2:
43:79:4e:60:5f:96:07:e9:87:3c:98:ed:40:11:ca:
9d:75:fd:8f:a7:ea:f4:2e:3f:70:03:7f:12:48:9e:
58:82:5a:39:74:03:70:cf:4e:55:01:00:5a:4f:fb:
8c:52:d1:10:65:11:94:c3:fa:96:dc:a6:fe:5e:34:
86:72:91:05:85:6b:7e:3e:36:3a:6d:80:f2:50:96:
66:e1:cf:43:5b:cb:0a:7a:75:12:fb:24:37:44:b9:
8b:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:A4:36:3C:21:AA:D9:C9:7D:EE:58:7A:D0:37:A8:CE:7B:37:7A:80
X509v3 Authority Key Identifier:
keyid:E2:B1:E2:E4:C5:08:C6:C7:A9:8B:65:98:52:87:45:C8:13:FA:D3:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4rHi5MUIxsepi2WYUodFyBP60x0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/d31e5f-0f52-4623-867a-543d6182e294/1/4rHi5MUIxsepi2WYUodFyBP60x0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/d31e5f-0f52-4623-867a-543d6182e294/1/4rHi5MUIxsepi2WYUodFyBP60x0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a2:4b:eb:51:b3:9d:7d:58:c3:8a:c5:24:bb:54:7d:c1:6e:d7:
22:63:1b:e9:18:53:00:e1:9e:98:e3:3d:75:9b:12:94:d2:5f:
41:51:d8:30:c9:5b:93:9e:ab:f6:a5:f8:a5:bd:d5:51:05:c6:
dd:e0:37:63:70:8a:11:2a:6d:57:e1:c4:38:ee:62:de:ea:9b:
e2:60:95:32:69:2d:07:a7:fe:00:cd:d1:10:da:24:bc:91:80:
3a:19:ca:3a:71:1f:87:4b:2f:c3:69:bd:6f:18:c8:a2:90:30:
ac:09:03:63:92:fe:58:05:61:51:1d:b6:c6:93:fc:1b:72:da:
7c:06:20:79:5a:f9:d0:dd:4b:15:2e:e4:65:fb:0f:50:ad:b7:
7f:46:76:bc:48:5c:5b:ee:65:b3:a5:83:5d:62:b8:c2:dc:b6:
c7:6d:36:dc:6d:90:bc:6a:14:d4:2c:e8:f1:60:03:dd:a6:9b:
79:76:a3:8e:53:b4:a1:7f:3d:16:e7:21:f1:fa:31:6e:3a:2b:
77:a3:58:54:1e:e2:5e:f5:4b:5f:f0:12:7e:e5:86:c0:c9:29:
ff:50:24:62:75:fe:e8:df:b2:33:9c:3b:d1:d8:16:4b:43:0e:
53:0b:1f:84:90:10:76:ff:26:67:2a:d9:a6:f9:fd:44:55:12:
8c:44:24:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 10:26:33 2025 by rpki-client