Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/3c0f04-8caf-49d4-aab7-59e611d76574/1/4DkMHDYd8FIkN2EI7_myDcLuAmU.mft
File: 4DkMHDYd8FIkN2EI7_myDcLuAmU.mft (raw, json)
Hash identifier: 5d4sIOoaG/BM5FD7fqL1FqL/JL3Tvxvjd6LVSC6rhdg=
Subject key identifier: D4:40:AE:F5:A0:F1:80:0B:6C:91:76:6E:AD:C6:B0:C8:BB:EC:B5:EB
Authority key identifier: E0:39:0C:1C:36:1D:F0:52:24:37:61:08:EF:F9:B2:0D:C2:EE:02:65
Certificate issuer: /CN=e0390c1c361df05224376108eff9b20dc2ee0265
Certificate serial: 0198537AB11F3421F0741DA7CD22E91B38F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4DkMHDYd8FIkN2EI7_myDcLuAmU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/3c0f04-8caf-49d4-aab7-59e611d76574/1/4DkMHDYd8FIkN2EI7_myDcLuAmU.mft
Manifest number: 1603
Signing time: Tue 29 Jul 2025 00:00:06 +0000
Manifest this update: Tue 29 Jul 2025 00:00:06 +0000
Manifest next update: Wed 30 Jul 2025 00:00:06 +0000
Files and hashes: 1: 4DkMHDYd8FIkN2EI7_myDcLuAmU.crl (hash: FF/6i7xxYeJ4z9jwit3bdAuZgnumf1JQ15yldyFn/vs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/3c0f04-8caf-49d4-aab7-59e611d76574/1/4DkMHDYd8FIkN2EI7_myDcLuAmU.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/3c0f04-8caf-49d4-aab7-59e611d76574/1/4DkMHDYd8FIkN2EI7_myDcLuAmU.mft
rsync://rpki.ripe.net/repository/DEFAULT/4DkMHDYd8FIkN2EI7_myDcLuAmU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Jul 2025 23:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:53:7a:b1:1f:34:21:f0:74:1d:a7:cd:22:e9:1b:38:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e0390c1c361df05224376108eff9b20dc2ee0265
Validity
Not Before: Jul 29 00:00:06 2025 GMT
Not After : Jul 30 00:00:06 2025 GMT
Subject: CN=d440aef5a0f1800b6c91766eadc6b0c8bbecb5eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:ae:c8:8a:3d:38:c0:12:cf:3e:07:ad:90:6c:
bf:26:80:76:ed:1c:c4:9c:3d:b0:36:ea:16:b7:31:
5a:31:fe:40:d4:27:53:8e:bf:2a:01:2a:5d:0a:76:
8c:d6:d7:e8:25:44:26:e9:a2:11:1f:20:22:38:d7:
d2:4c:3b:5a:60:6f:2a:41:ab:ce:ba:5b:1c:24:70:
6c:87:b0:a4:6c:5c:1d:98:87:88:1e:58:b3:a9:65:
4a:f6:ca:0f:3e:84:3a:69:97:40:0b:41:96:7a:c9:
d8:ef:ce:3e:ec:1e:c4:46:4e:ba:77:e5:0a:ce:32:
07:ac:69:e3:57:a8:c6:8a:4d:bb:af:ea:de:95:68:
1e:53:51:ce:64:50:4d:6b:15:c7:58:2d:45:55:06:
ca:f0:17:8a:21:97:46:e4:0b:74:55:4f:1b:a7:ff:
91:da:d5:a9:73:e4:c8:88:a2:49:55:b3:75:14:e8:
cf:3e:53:0f:1f:d2:f8:cc:8e:50:ca:fa:53:7e:b4:
e7:a4:2c:08:08:82:e7:83:80:03:76:14:be:01:2f:
d4:06:25:c0:d5:ce:c9:2a:bd:55:0f:12:71:b0:0f:
3a:38:82:94:dc:ba:5c:ba:b7:fa:58:d9:d0:9e:2a:
49:ff:7a:2e:3e:59:f4:a4:ac:4e:cf:06:f9:2e:ed:
87:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:40:AE:F5:A0:F1:80:0B:6C:91:76:6E:AD:C6:B0:C8:BB:EC:B5:EB
X509v3 Authority Key Identifier:
keyid:E0:39:0C:1C:36:1D:F0:52:24:37:61:08:EF:F9:B2:0D:C2:EE:02:65
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4DkMHDYd8FIkN2EI7_myDcLuAmU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/3c0f04-8caf-49d4-aab7-59e611d76574/1/4DkMHDYd8FIkN2EI7_myDcLuAmU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/3c0f04-8caf-49d4-aab7-59e611d76574/1/4DkMHDYd8FIkN2EI7_myDcLuAmU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:ac:cb:65:2a:6e:3d:2f:0f:c7:51:e6:02:82:3f:a1:68:22:
5d:0a:2d:87:41:83:3a:65:94:91:05:65:9b:6b:c0:57:cd:3c:
d4:c4:99:ec:45:31:33:e9:27:94:04:e3:9f:6c:a5:b7:1b:dd:
0f:a3:d3:f5:ff:ab:6e:fe:e3:00:62:08:d6:a2:ba:7c:3b:9a:
13:4b:ba:2c:7a:d7:26:d0:3b:dd:f8:b9:6e:49:c4:af:47:dd:
32:a3:ca:70:f8:c9:fe:a2:a8:91:46:13:d8:dd:4a:67:80:67:
01:76:a8:02:00:b1:31:00:0c:c4:a5:f0:b9:56:3f:cf:1d:a6:
65:8d:48:4a:5b:86:49:47:ab:84:05:84:c3:4d:a3:f3:6e:7a:
81:80:b5:8f:f3:8b:a9:63:63:03:e1:b2:72:ba:ea:e7:2e:ff:
84:9d:57:9c:31:52:64:09:c1:89:f1:f7:09:e7:d1:d1:66:ec:
b4:87:4e:0d:f5:95:70:8f:8c:a6:5b:b7:1b:92:bc:46:ec:f9:
fc:0f:02:59:6b:5d:5d:e4:be:f2:86:ac:bf:fb:c0:26:45:8c:
9d:da:f6:03:7b:20:1d:28:19:04:0c:f2:26:8a:13:72:78:85:
14:87:a4:67:d8:d0:65:24:67:04:6c:53:c9:08:34:4a:d6:30:
02:b0:3a:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 29 04:03:50 2025 by rpki-client