Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/b2698c-6409-459c-b046-ea6f705d2c0d/1/4jy32eUh5kaf1-KtE2A_t-6_4OA.mft
File: 4jy32eUh5kaf1-KtE2A_t-6_4OA.mft (raw, json)
Hash identifier: BfQAuBbvR4fiGVZVdg+v2X48BFLY2oRly8Jd3Nnk1XE=
Subject key identifier: 35:39:A9:25:F1:15:F1:F5:21:BA:F6:8C:0E:8D:B5:3E:6B:AD:B9:18
Authority key identifier: E2:3C:B7:D9:E5:21:E6:46:9F:D7:E2:AD:13:60:3F:B7:EE:BF:E0:E0
Certificate issuer: /CN=e23cb7d9e521e6469fd7e2ad13603fb7eebfe0e0
Certificate serial: 019854FD1B98F671AE0809BD27046F40577C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4jy32eUh5kaf1-KtE2A_t-6_4OA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/b2698c-6409-459c-b046-ea6f705d2c0d/1/4jy32eUh5kaf1-KtE2A_t-6_4OA.mft
Manifest number: 093E
Signing time: Tue 29 Jul 2025 07:02:10 +0000
Manifest this update: Tue 29 Jul 2025 07:02:10 +0000
Manifest next update: Wed 30 Jul 2025 07:02:10 +0000
Files and hashes: 1: 4jy32eUh5kaf1-KtE2A_t-6_4OA.crl (hash: nCqrlq9uFmgJJe4mtcfwMTnruvnlOa2LHFM+J8C75WE=)
2: A2XZpMhjoSl2eIpUcSwowos8QQA.roa (hash: 7IQHzb+LeNjLi41+XbYgKffdbEsxRoe4BI+dUjjQXH8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/b2698c-6409-459c-b046-ea6f705d2c0d/1/4jy32eUh5kaf1-KtE2A_t-6_4OA.crl
rsync://rpki.ripe.net/repository/DEFAULT/ba/b2698c-6409-459c-b046-ea6f705d2c0d/1/4jy32eUh5kaf1-KtE2A_t-6_4OA.mft
rsync://rpki.ripe.net/repository/DEFAULT/4jy32eUh5kaf1-KtE2A_t-6_4OA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Jul 2025 07:02:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:54:fd:1b:98:f6:71:ae:08:09:bd:27:04:6f:40:57:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e23cb7d9e521e6469fd7e2ad13603fb7eebfe0e0
Validity
Not Before: Jul 29 07:02:10 2025 GMT
Not After : Jul 30 07:02:10 2025 GMT
Subject: CN=3539a925f115f1f521baf68c0e8db53e6badb918
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:33:db:a4:ce:95:ab:16:5f:12:7d:17:79:9e:
a1:1b:9d:6b:65:77:c1:61:93:87:ac:72:25:c0:34:
cf:c0:55:9e:81:d8:8b:7b:db:3f:06:48:aa:42:44:
ae:5a:2c:22:e7:2d:a6:d7:52:55:7e:30:57:e2:54:
68:63:99:67:3f:91:78:67:e5:ca:05:9b:23:08:a5:
d4:33:94:a0:c6:f4:2f:da:91:ee:a0:43:e6:eb:ed:
42:ed:fe:c1:fd:6e:d0:7a:0b:39:5e:48:12:5a:37:
51:4e:18:5e:54:55:17:d7:ba:c1:e7:39:8d:3b:86:
df:09:28:8a:ef:c4:a1:6c:f3:0d:1d:87:85:ac:da:
71:70:84:ed:c2:be:49:ef:a1:85:80:e0:fa:c4:3d:
da:32:e5:6d:d8:5f:26:68:6f:52:ae:5b:b6:f4:c2:
97:28:36:19:47:c1:b7:29:99:99:f1:94:18:ff:df:
47:69:56:fa:9c:89:31:f7:87:45:07:f2:9e:70:8c:
5c:f4:c8:6c:ef:15:69:0b:5b:19:73:86:f1:c4:74:
13:28:b3:db:1a:a4:c0:49:b7:45:4c:98:f2:1a:8f:
70:a6:14:9c:12:c4:ab:ba:63:77:4d:2f:c5:78:3d:
cf:ce:8b:16:92:f9:2a:74:67:84:83:66:48:97:8a:
ea:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:39:A9:25:F1:15:F1:F5:21:BA:F6:8C:0E:8D:B5:3E:6B:AD:B9:18
X509v3 Authority Key Identifier:
keyid:E2:3C:B7:D9:E5:21:E6:46:9F:D7:E2:AD:13:60:3F:B7:EE:BF:E0:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4jy32eUh5kaf1-KtE2A_t-6_4OA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/b2698c-6409-459c-b046-ea6f705d2c0d/1/4jy32eUh5kaf1-KtE2A_t-6_4OA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/b2698c-6409-459c-b046-ea6f705d2c0d/1/4jy32eUh5kaf1-KtE2A_t-6_4OA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:bb:46:80:b7:d5:c8:99:d5:34:d7:7f:38:01:dd:34:b5:b3:
1e:fb:80:15:ae:15:14:0b:cb:17:d6:72:68:bd:f6:4e:4b:78:
e2:79:f1:dd:de:46:b4:00:b7:d9:1d:98:8f:e1:a7:f5:da:5d:
47:82:68:7e:2e:cd:1c:49:3a:41:d8:83:71:f9:55:64:5a:8b:
fc:fe:ee:ae:bd:bd:84:a9:9e:9d:52:37:4f:08:a1:c1:f3:a2:
9f:b7:1b:ef:c4:ee:ab:27:8f:65:38:ae:0a:6f:50:72:e8:d6:
02:00:a0:a5:85:d3:e1:68:71:ae:97:b0:54:4a:15:fd:38:92:
94:2c:54:8a:06:71:ad:92:5c:7c:3f:c5:9a:89:c8:25:ae:8a:
b4:f2:a0:1f:5e:6f:af:99:e2:49:52:32:63:60:95:d7:38:b9:
d9:63:43:f7:fd:63:a0:b2:6b:ae:12:94:3b:cf:a6:4e:51:a5:
be:2f:9e:b2:87:77:90:64:03:0b:e4:5d:c4:89:7f:2f:87:61:
e4:cf:0f:e9:ab:b9:09:06:02:cd:4d:d7:d8:57:8e:87:6a:96:
0d:fc:29:e0:6c:e0:0b:cc:e8:0b:cc:22:3d:78:ce:fc:ca:d8:
4f:6e:7a:6b:ce:f7:88:a7:a9:51:6b:7a:e4:07:f9:4e:0e:fc:
9e:ef:b7:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 29 14:36:45 2025 by rpki-client