Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/12e905-7854-473c-950b-cf4bd4f3f29d/1/4gShwspKTbAzN142DeMjeQumpbk.mft
File: 4gShwspKTbAzN142DeMjeQumpbk.mft (raw, json)
Hash identifier: /JqvroatylFg3BB7MoIuYnI7R2wYDOkMt+2wczvpBrg=
Subject key identifier: 4A:12:CA:DB:FA:A8:EC:07:F5:4D:BD:9B:8F:24:55:32:6A:76:99:37
Authority key identifier: E2:04:A1:C2:CA:4A:4D:B0:33:37:5E:36:0D:E3:23:79:0B:A6:A5:B9
Certificate issuer: /CN=e204a1c2ca4a4db033375e360de323790ba6a5b9
Certificate serial: 019847092F79E1EBBE033A496407F2911600
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4gShwspKTbAzN142DeMjeQumpbk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/85/12e905-7854-473c-950b-cf4bd4f3f29d/1/4gShwspKTbAzN142DeMjeQumpbk.mft
Manifest number: 0E94
Signing time: Sat 26 Jul 2025 14:00:40 +0000
Manifest this update: Sat 26 Jul 2025 14:00:40 +0000
Manifest next update: Sun 27 Jul 2025 14:00:40 +0000
Files and hashes: 1: 4gShwspKTbAzN142DeMjeQumpbk.crl (hash: cbSBXhBVz6WEu0QZgOD8ASgMgfHOaJ+zSfutjILHARk=)
2: gA2VeOc__NflxeLdsWWIIUZ9Deg.roa (hash: ipk5YS27VQlaPqS1epEEueLOZHeXvism8b/2q3vbuaY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/85/12e905-7854-473c-950b-cf4bd4f3f29d/1/4gShwspKTbAzN142DeMjeQumpbk.crl
rsync://rpki.ripe.net/repository/DEFAULT/85/12e905-7854-473c-950b-cf4bd4f3f29d/1/4gShwspKTbAzN142DeMjeQumpbk.mft
rsync://rpki.ripe.net/repository/DEFAULT/4gShwspKTbAzN142DeMjeQumpbk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 06:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:47:09:2f:79:e1:eb:be:03:3a:49:64:07:f2:91:16:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e204a1c2ca4a4db033375e360de323790ba6a5b9
Validity
Not Before: Jul 26 14:00:40 2025 GMT
Not After : Jul 27 14:00:40 2025 GMT
Subject: CN=4a12cadbfaa8ec07f54dbd9b8f2455326a769937
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:d4:59:da:9d:5a:5a:1b:e4:aa:a7:49:00:c4:
75:16:c4:7c:a2:48:f4:45:95:ac:4b:77:6a:e0:ef:
4c:be:19:68:ea:ca:f2:f6:1b:8c:f6:6a:a5:e6:a0:
97:9d:56:81:76:45:86:f3:54:0e:2b:f3:9c:f7:fd:
7d:f8:19:6a:c5:4a:05:6d:13:45:ed:f4:bb:4e:6b:
d3:17:f6:47:20:0e:fc:a9:2c:9a:2f:94:8a:df:42:
6a:a0:ac:d8:a4:99:ba:03:fd:15:2c:56:6f:67:9f:
cd:66:a3:9c:3e:b6:95:ba:20:34:5b:10:2d:81:cf:
1e:c6:56:85:25:84:b1:8d:a5:32:e7:44:38:3b:9f:
29:9a:fb:15:c4:ec:a4:fa:43:c9:b5:64:65:d1:50:
96:4e:7c:d5:ee:cc:f4:8c:47:bc:ea:6c:e2:bb:08:
e7:64:e3:40:42:69:4e:c6:1d:6f:b1:3a:89:3e:fa:
21:30:1e:6b:0d:95:5f:53:5c:da:77:c4:8b:d4:38:
00:60:df:b8:f6:6c:d5:2d:57:24:a6:45:47:01:14:
b1:7e:b5:74:53:39:9f:0e:f7:8b:a4:c3:d7:f8:0c:
14:a6:0d:42:60:81:41:33:c3:21:ce:5b:60:8e:10:
9c:e8:53:0b:57:92:78:c5:a0:16:ee:2e:10:eb:0a:
bc:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:12:CA:DB:FA:A8:EC:07:F5:4D:BD:9B:8F:24:55:32:6A:76:99:37
X509v3 Authority Key Identifier:
keyid:E2:04:A1:C2:CA:4A:4D:B0:33:37:5E:36:0D:E3:23:79:0B:A6:A5:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4gShwspKTbAzN142DeMjeQumpbk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/12e905-7854-473c-950b-cf4bd4f3f29d/1/4gShwspKTbAzN142DeMjeQumpbk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/85/12e905-7854-473c-950b-cf4bd4f3f29d/1/4gShwspKTbAzN142DeMjeQumpbk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:39:8e:48:b9:52:45:1e:4f:ca:8e:b7:c4:1d:b1:7c:4e:3c:
ee:87:ee:46:79:d7:7d:c7:2c:3d:1e:13:95:ab:d1:3a:11:7e:
38:6e:ef:3e:82:bd:0c:db:22:31:7b:7d:29:7c:3a:69:e4:c0:
6c:b7:35:4d:aa:97:5f:88:66:3c:9f:55:ed:ed:25:10:10:3e:
55:45:96:c3:1f:62:c0:9c:14:68:7a:2c:a0:4c:8c:c5:4e:c3:
ef:c7:68:94:bf:6c:be:1d:9d:4c:d0:13:98:f7:cd:c2:de:79:
15:c9:57:64:36:97:5e:7a:e4:49:9a:8f:36:e3:aa:49:47:b7:
53:93:e3:e3:c3:30:4f:7c:7d:fe:c5:f2:d2:46:38:f9:ca:e2:
b8:5a:b4:34:14:a8:d1:3c:73:f5:52:48:2f:54:a4:16:c5:a7:
68:6f:bf:10:c5:81:6e:76:76:27:96:0a:d5:de:0f:7a:5a:ab:
27:38:72:35:a4:58:a3:13:81:0d:73:5a:66:a5:e3:19:57:5d:
61:95:51:fd:78:7f:68:8e:ac:69:11:ff:17:ff:53:09:de:aa:
bc:9d:15:6d:7d:fa:3a:8d:80:dc:43:e6:80:9d:b7:05:6a:23:
e0:45:c5:3c:42:d3:65:f7:0c:fd:ab:84:43:f6:71:68:dd:23:
70:9b:e3:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 14:57:33 2025 by rpki-client