Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/b18f32-473c-4d9e-ab85-7bd0cfa239f6/1/4Vanhb9_5NfEpca3ISFPDpbzrsk.mft
File: 4Vanhb9_5NfEpca3ISFPDpbzrsk.mft (raw, json)
Hash identifier: NOwqTojRDdiZeD6OsNQd2Z+r082DZCIliS1uGjrlHmM=
Subject key identifier: BB:7B:FB:1D:3E:A0:06:53:E0:41:46:5C:3B:72:F8:5C:FE:68:C2:2B
Authority key identifier: E1:56:A7:85:BF:7F:E4:D7:C4:A5:C6:B7:21:21:4F:0E:96:F3:AE:C9
Certificate issuer: /CN=e156a785bf7fe4d7c4a5c6b721214f0e96f3aec9
Certificate serial: 01984B55417E6B668EADB3110093C573A8D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4Vanhb9_5NfEpca3ISFPDpbzrsk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/b18f32-473c-4d9e-ab85-7bd0cfa239f6/1/4Vanhb9_5NfEpca3ISFPDpbzrsk.mft
Manifest number: 112A
Signing time: Sun 27 Jul 2025 10:02:15 +0000
Manifest this update: Sun 27 Jul 2025 10:02:15 +0000
Manifest next update: Mon 28 Jul 2025 10:02:15 +0000
Files and hashes: 1: 4Vanhb9_5NfEpca3ISFPDpbzrsk.crl (hash: azXu85uPX0QL6l2q1+DbVd1aH1tEb6OAlMxDgO4Wk+c=)
2: NPk_GHNqq8k7MUydVHIUCQUBAQo.roa (hash: 8i7mapEQ11nmMTFwNuWUxWdEwqzqNv3Aacz7I3tfzMk=)
3: TY3bJpTGwSql-13Pjck1BzHDr8I.roa (hash: B/70euLBU/mf/YMvD1qZRHP7TxQr60sKZhW4C66SeVY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ee/b18f32-473c-4d9e-ab85-7bd0cfa239f6/1/4Vanhb9_5NfEpca3ISFPDpbzrsk.crl
rsync://rpki.ripe.net/repository/DEFAULT/ee/b18f32-473c-4d9e-ab85-7bd0cfa239f6/1/4Vanhb9_5NfEpca3ISFPDpbzrsk.mft
rsync://rpki.ripe.net/repository/DEFAULT/4Vanhb9_5NfEpca3ISFPDpbzrsk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 09:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4b:55:41:7e:6b:66:8e:ad:b3:11:00:93:c5:73:a8:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e156a785bf7fe4d7c4a5c6b721214f0e96f3aec9
Validity
Not Before: Jul 27 10:02:15 2025 GMT
Not After : Jul 28 10:02:15 2025 GMT
Subject: CN=bb7bfb1d3ea00653e041465c3b72f85cfe68c22b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:64:b7:f4:a9:6e:6b:1a:94:46:ad:7d:39:da:
9f:88:43:9d:ef:57:3c:d9:34:64:30:1d:37:60:4d:
e6:d9:2c:ff:32:07:41:ba:2a:e5:ca:fa:ca:a0:3b:
92:16:ee:d6:11:c7:d0:f5:64:b4:64:40:e7:be:1a:
b6:37:de:a0:85:15:ab:1e:bd:cd:6b:e8:b0:66:5d:
f6:06:b6:33:29:61:4c:a7:43:b8:ff:16:69:e5:f2:
5b:95:0d:cd:1d:72:6c:ea:c0:b7:7c:9a:c0:91:2b:
66:c8:8f:41:a7:0e:94:86:7d:68:25:0a:b7:a8:db:
80:9b:b1:8a:80:e6:eb:16:8d:bd:07:d3:7f:09:b0:
4c:4b:91:5f:74:26:75:5b:5a:2c:55:a8:ca:f3:0f:
9b:a9:aa:bb:b6:42:33:41:65:99:b5:5e:2a:8d:ad:
88:05:bf:6d:fe:b6:87:c3:61:44:74:ba:41:b7:c6:
30:f4:1b:61:69:1b:1c:99:ec:c2:02:3c:16:b3:9b:
b6:89:4a:59:d1:3d:6d:a8:4e:39:12:75:6c:5a:ce:
26:f8:da:d8:65:00:22:8f:b3:c4:cd:25:82:be:d4:
f2:7d:fb:5b:1e:b5:fc:1a:85:f7:94:64:91:98:aa:
70:c2:71:0d:af:7e:64:eb:ed:68:f0:67:77:12:c0:
09:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:7B:FB:1D:3E:A0:06:53:E0:41:46:5C:3B:72:F8:5C:FE:68:C2:2B
X509v3 Authority Key Identifier:
keyid:E1:56:A7:85:BF:7F:E4:D7:C4:A5:C6:B7:21:21:4F:0E:96:F3:AE:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4Vanhb9_5NfEpca3ISFPDpbzrsk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/b18f32-473c-4d9e-ab85-7bd0cfa239f6/1/4Vanhb9_5NfEpca3ISFPDpbzrsk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/b18f32-473c-4d9e-ab85-7bd0cfa239f6/1/4Vanhb9_5NfEpca3ISFPDpbzrsk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:83:e1:8e:1b:3c:14:23:25:8f:8c:5f:a9:b1:56:65:c7:6c:
ac:51:c2:4c:9e:af:97:85:de:ee:da:65:a0:3e:87:ba:6a:f7:
87:5a:8e:46:08:47:2e:f1:ec:5c:64:c3:fa:f8:d8:44:af:58:
df:3c:c8:56:b9:65:20:c2:b1:04:da:6b:bc:74:ec:46:66:27:
95:0d:48:ed:6e:54:cf:a0:ff:e6:aa:ec:0c:fb:13:7c:fc:4b:
36:5a:86:dd:49:dd:6a:ef:5f:3d:fc:e2:d7:3f:ea:76:ce:12:
74:18:96:89:cc:0d:40:53:77:cb:7b:7b:3b:98:a0:97:81:da:
05:f4:9f:9d:b8:65:6e:0a:73:b1:e3:e9:7c:9f:37:47:c2:e7:
b5:f5:f1:1a:cf:a9:85:e7:2e:c2:76:9b:2a:75:14:be:84:12:
6d:fc:8b:d0:c2:f6:be:7e:ae:d7:2e:fa:49:36:55:87:f7:a1:
d0:eb:3b:a1:e3:9a:e0:90:36:af:17:28:fc:3e:1e:db:95:30:
3d:ab:8f:c6:98:3c:74:d2:e9:04:9e:e7:fe:07:16:a6:e8:4b:
b1:9d:f0:83:c0:e5:40:f2:d2:b0:96:37:00:22:cd:8a:9b:04:
59:81:9f:d5:3e:e9:96:e6:61:90:e5:72:51:19:a6:3a:96:2f:
70:74:12:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 15:10:43 2025 by rpki-client