Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/286d47-6434-41bd-9aa2-09ff79308bbe/1/4_cHBvbAz72cc6fz2DAjJApC9Q0.mft
File: 4_cHBvbAz72cc6fz2DAjJApC9Q0.mft (raw, json)
Hash identifier: 9RsddR6si7SkeqyF7h1OR6SNmZ1TMpTmrhMIL4sFehI=
Subject key identifier: B2:51:91:6C:6C:B7:01:BC:5C:01:F1:D4:00:7A:E6:89:BD:B7:EC:39
Authority key identifier: E3:F7:07:06:F6:C0:CF:BD:9C:73:A7:F3:D8:30:23:24:0A:42:F5:0D
Certificate issuer: /CN=e3f70706f6c0cfbd9c73a7f3d83023240a42f50d
Certificate serial: 019849D36361082522C5ECDD0EEB2A72C1D5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4_cHBvbAz72cc6fz2DAjJApC9Q0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/286d47-6434-41bd-9aa2-09ff79308bbe/1/4_cHBvbAz72cc6fz2DAjJApC9Q0.mft
Manifest number: 0D0F
Signing time: Sun 27 Jul 2025 03:00:47 +0000
Manifest this update: Sun 27 Jul 2025 03:00:47 +0000
Manifest next update: Mon 28 Jul 2025 03:00:47 +0000
Files and hashes: 1: 4_cHBvbAz72cc6fz2DAjJApC9Q0.crl (hash: GUOs9XOe1uzJc2V4oEpgVRWIFscz0jcHvcBUTuapJCM=)
2: JZBToS-O_vrT2aeKBSNggNB5se0.roa (hash: D8kzrex63NBxCoEgyWN4HyqVj2eRzOdT3Da1FU0u+nI=)
3: cKLdHjbMHa9DWXygLYK3fJRjYqw.roa (hash: aXunewdhx0tio/kXThZoUaubUGfQctWD4RTkIiazOVE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a8/286d47-6434-41bd-9aa2-09ff79308bbe/1/4_cHBvbAz72cc6fz2DAjJApC9Q0.crl
rsync://rpki.ripe.net/repository/DEFAULT/a8/286d47-6434-41bd-9aa2-09ff79308bbe/1/4_cHBvbAz72cc6fz2DAjJApC9Q0.mft
rsync://rpki.ripe.net/repository/DEFAULT/4_cHBvbAz72cc6fz2DAjJApC9Q0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 00:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:49:d3:63:61:08:25:22:c5:ec:dd:0e:eb:2a:72:c1:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e3f70706f6c0cfbd9c73a7f3d83023240a42f50d
Validity
Not Before: Jul 27 03:00:47 2025 GMT
Not After : Jul 28 03:00:47 2025 GMT
Subject: CN=b251916c6cb701bc5c01f1d4007ae689bdb7ec39
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:fd:d9:8b:9d:9b:94:8f:06:51:0a:cf:16:0d:
74:c6:01:37:5c:14:14:e4:9f:9f:be:a9:50:20:8e:
d8:b1:f6:13:cb:b1:d3:08:5e:79:03:ab:21:54:a9:
0a:09:ec:36:93:53:7e:6f:12:cd:77:f4:d1:45:63:
fb:7f:bd:50:8c:ad:40:21:29:8c:dd:38:25:4c:9c:
db:50:cd:74:87:97:47:ca:ac:e2:e1:b3:e1:6c:3c:
c1:63:f1:5f:54:82:19:55:1d:80:88:71:9a:de:10:
ed:d8:d7:72:68:4f:94:6f:9f:d1:ee:cf:b4:67:b0:
f1:ae:60:72:20:fe:d5:a6:8f:a4:9c:70:52:0b:10:
b4:3c:34:f6:ba:0b:7d:ee:bf:ae:92:64:60:b8:ee:
82:f3:01:dd:26:ef:b4:5d:83:50:72:1d:58:31:0b:
be:d3:9b:7a:44:93:ca:40:a4:e8:b4:5c:7a:3c:58:
23:e8:79:fb:93:13:bb:17:bd:c8:9c:da:65:07:93:
09:2b:1c:a4:26:3e:72:11:04:99:81:7a:f4:e6:2e:
06:2f:1a:c8:95:b5:20:88:84:2c:4b:dc:ef:63:6c:
9a:b1:75:92:2f:b1:ec:a8:1c:07:38:cd:9b:af:71:
b7:22:e0:86:a6:80:2f:57:fc:d6:1b:4a:02:2e:a5:
78:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:51:91:6C:6C:B7:01:BC:5C:01:F1:D4:00:7A:E6:89:BD:B7:EC:39
X509v3 Authority Key Identifier:
keyid:E3:F7:07:06:F6:C0:CF:BD:9C:73:A7:F3:D8:30:23:24:0A:42:F5:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4_cHBvbAz72cc6fz2DAjJApC9Q0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/286d47-6434-41bd-9aa2-09ff79308bbe/1/4_cHBvbAz72cc6fz2DAjJApC9Q0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/286d47-6434-41bd-9aa2-09ff79308bbe/1/4_cHBvbAz72cc6fz2DAjJApC9Q0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:4a:44:b3:74:4f:2d:9f:ba:3e:cf:8b:6d:64:9f:d1:38:f7:
7b:ef:ad:b5:37:5d:16:df:e6:ba:cc:a4:ea:d2:fa:86:ef:ed:
c2:af:38:87:e7:41:68:52:89:ff:a7:5a:82:5d:db:ca:e1:57:
f1:46:24:da:53:25:79:c9:d4:5b:6b:de:a7:e7:8c:43:24:c8:
d0:b3:c2:f3:fb:51:0e:2c:46:05:97:f0:07:67:8d:68:18:36:
87:be:2c:f7:a3:87:e8:4c:61:16:27:71:e1:45:46:f3:22:54:
41:3c:44:78:ba:96:4c:4d:11:f2:8b:72:bb:c6:dc:ce:d7:45:
7c:5f:d5:12:ad:65:21:c3:36:a7:5e:51:a6:92:c7:46:0b:4d:
3a:97:a2:b1:83:26:3f:0d:a0:3a:5c:d8:54:2b:f5:31:94:c4:
75:1f:73:36:18:9d:8a:79:ae:7c:70:eb:86:72:b0:6b:2f:05:
07:be:0c:82:a7:07:9c:61:ae:57:ff:5b:84:3a:74:8b:3c:bc:
8b:ec:e4:a6:12:e5:73:a6:1a:6d:f9:0b:ab:00:0d:1a:77:81:
2e:04:59:ae:79:f9:fd:81:0e:f6:0b:40:20:c3:a1:6a:3a:3c:
0f:05:65:24:33:d9:ad:21:3e:b2:c6:40:18:a9:20:66:4b:cb:
7b:4e:34:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 06:15:28 2025 by rpki-client