Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/6c0563-6a1c-4432-a58d-3b64cc336c79/1/4KACksKhBiuzKYCjxEP_84OkEAI.mft
File: 4KACksKhBiuzKYCjxEP_84OkEAI.mft (raw, json)
Hash identifier: 8rGUsEMAsBcmMiRsuNwRrt/OE0UZQ6jlA8+jpN8X/ek=
Subject key identifier: 39:E3:19:52:AF:43:0D:8F:73:B9:1A:B3:AD:80:29:21:0E:29:24:0A
Authority key identifier: E0:A0:02:92:C2:A1:06:2B:B3:29:80:A3:C4:43:FF:F3:83:A4:10:02
Certificate issuer: /CN=e0a00292c2a1062bb32980a3c443fff383a41002
Certificate serial: 01984AAE9DC38CC89D0F493E2BC7F8B1BF1F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4KACksKhBiuzKYCjxEP_84OkEAI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/6c0563-6a1c-4432-a58d-3b64cc336c79/1/4KACksKhBiuzKYCjxEP_84OkEAI.mft
Manifest number: 09C1
Signing time: Sun 27 Jul 2025 07:00:14 +0000
Manifest this update: Sun 27 Jul 2025 07:00:14 +0000
Manifest next update: Mon 28 Jul 2025 07:00:14 +0000
Files and hashes: 1: 4KACksKhBiuzKYCjxEP_84OkEAI.crl (hash: NCZYcK6N5+zhhkM29AOwQfgzlTzLWV/NoGuJvNwt8PI=)
2: mSKL5dZ-DfhQmd3vDgNujHfDeWQ.roa (hash: kM0tftmTBoswJU9/17L/nHsaIm00B47zHx/WZDRsoCQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/6c0563-6a1c-4432-a58d-3b64cc336c79/1/4KACksKhBiuzKYCjxEP_84OkEAI.crl
rsync://rpki.ripe.net/repository/DEFAULT/b3/6c0563-6a1c-4432-a58d-3b64cc336c79/1/4KACksKhBiuzKYCjxEP_84OkEAI.mft
rsync://rpki.ripe.net/repository/DEFAULT/4KACksKhBiuzKYCjxEP_84OkEAI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4a:ae:9d:c3:8c:c8:9d:0f:49:3e:2b:c7:f8:b1:bf:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e0a00292c2a1062bb32980a3c443fff383a41002
Validity
Not Before: Jul 27 07:00:14 2025 GMT
Not After : Jul 28 07:00:14 2025 GMT
Subject: CN=39e31952af430d8f73b91ab3ad8029210e29240a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:07:aa:4f:f0:63:18:cb:ec:81:bd:31:ae:2d:
d0:2b:f4:54:3d:d3:bb:00:b9:51:3c:f0:e0:54:9e:
0b:f4:f2:88:c3:65:be:70:ed:dc:ff:1b:a2:4a:84:
00:2e:40:53:2b:d2:9f:9f:fd:14:76:1c:c2:fc:88:
fc:ac:e2:9a:05:02:8e:b6:a4:04:63:1d:3f:29:be:
bb:d5:bf:ea:8f:2d:3c:03:d4:18:0c:3a:9b:df:07:
24:8e:75:e5:80:45:9f:ea:bb:37:b6:3c:a6:37:76:
26:b9:fc:dc:47:13:f8:c1:30:5d:57:15:c9:85:f3:
e4:5f:9b:38:ea:95:78:8e:1b:44:d2:68:c3:38:66:
5f:60:70:2b:14:d1:ed:bc:88:df:ad:81:d4:07:44:
07:57:a1:c4:18:5d:92:17:2f:30:b7:7f:92:d8:b5:
5d:97:45:ac:4b:97:e3:0b:2d:fa:ec:44:16:d4:a2:
f7:bc:ad:b6:ad:ae:8c:dc:12:55:1f:9a:35:c5:77:
f8:d1:44:97:cb:79:a0:f2:d7:bc:5c:b1:3c:78:87:
bc:47:e9:ce:e3:8c:8d:9a:80:2c:ef:55:6f:c8:d8:
fc:e1:2e:34:81:dc:07:6d:4b:58:bc:99:57:90:73:
12:ed:5b:42:55:ef:8b:e8:24:1e:05:0e:bb:c3:ff:
fa:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:E3:19:52:AF:43:0D:8F:73:B9:1A:B3:AD:80:29:21:0E:29:24:0A
X509v3 Authority Key Identifier:
keyid:E0:A0:02:92:C2:A1:06:2B:B3:29:80:A3:C4:43:FF:F3:83:A4:10:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4KACksKhBiuzKYCjxEP_84OkEAI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/6c0563-6a1c-4432-a58d-3b64cc336c79/1/4KACksKhBiuzKYCjxEP_84OkEAI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/6c0563-6a1c-4432-a58d-3b64cc336c79/1/4KACksKhBiuzKYCjxEP_84OkEAI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
76:2b:58:9e:8e:7e:15:ff:73:64:3f:1c:61:60:58:5c:98:df:
57:6b:93:32:ec:5c:03:95:c0:de:27:6c:cf:fb:8f:6c:90:a4:
a3:86:ba:91:1e:95:eb:41:f5:53:53:3b:80:49:6f:fe:c8:0f:
c4:99:68:f4:2c:6e:4d:a3:89:1f:c0:c5:6d:a2:b9:17:b0:66:
54:31:24:ff:d5:d7:9e:90:1f:66:00:b7:93:3c:4c:e3:68:2a:
79:1a:7c:07:14:53:43:cb:53:8b:92:91:de:4f:cb:ff:23:b0:
00:ba:f1:42:8a:b8:69:42:de:7e:38:e7:6b:1b:e4:22:c7:29:
76:17:9c:c0:6b:2a:11:80:8b:dd:93:ea:03:e6:50:6c:c6:7f:
58:31:9f:fc:14:8a:f6:c2:e8:79:57:78:04:59:9d:c3:80:a7:
f9:5a:11:7f:8c:7c:d2:00:87:c8:b0:7b:01:e2:46:e2:3a:44:
b1:f6:4d:57:b3:2e:1b:bc:1d:c5:f5:de:71:cc:99:b3:d9:d9:
9a:db:0c:b1:73:c6:31:9e:81:8a:a4:b2:54:5c:01:d2:11:36:
00:d5:b6:f6:b6:b5:28:a0:0c:b2:5d:e6:db:b3:d8:b1:84:41:
84:40:3c:5e:29:1e:a7:8a:e7:0b:51:a9:db:74:29:96:79:09:
f2:67:65:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 14:18:13 2025 by rpki-client