Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/55354e-bce7-4a5d-b561-9113fd7afd6c/1/4pDpzDt-Nj1ya9cCdQtT8psFCn0.mft
File: 4pDpzDt-Nj1ya9cCdQtT8psFCn0.mft (raw, json)
Hash identifier: 6ZBVTZP06Z4qggNWgqr3e27il9ezjiLLDctSwJwpe3A=
Subject key identifier: D7:1A:7D:11:AB:1E:EE:57:24:2A:40:6E:C1:63:37:B1:11:5F:67:D1
Authority key identifier: E2:90:E9:CC:3B:7E:36:3D:72:6B:D7:02:75:0B:53:F2:9B:05:0A:7D
Certificate issuer: /CN=e290e9cc3b7e363d726bd702750b53f29b050a7d
Certificate serial: 0198499C5FA72E66E1F1C88E0C7F81414166
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4pDpzDt-Nj1ya9cCdQtT8psFCn0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/55354e-bce7-4a5d-b561-9113fd7afd6c/1/4pDpzDt-Nj1ya9cCdQtT8psFCn0.mft
Manifest number: 0AA4
Signing time: Sun 27 Jul 2025 02:00:41 +0000
Manifest this update: Sun 27 Jul 2025 02:00:41 +0000
Manifest next update: Mon 28 Jul 2025 02:00:41 +0000
Files and hashes: 1: 4pDpzDt-Nj1ya9cCdQtT8psFCn0.crl (hash: TfvscjCAFRmCc+336TZLFkFbCQKBT/pzn77Hxb+eRyY=)
2: 5sj4OfjUHNqFx_j1Ef8g7Ypw6oo.roa (hash: Pny1CSiGEjtv4l10QsiP9fVNmh1agrbGLVUftiy6LQs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/55354e-bce7-4a5d-b561-9113fd7afd6c/1/4pDpzDt-Nj1ya9cCdQtT8psFCn0.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/55354e-bce7-4a5d-b561-9113fd7afd6c/1/4pDpzDt-Nj1ya9cCdQtT8psFCn0.mft
rsync://rpki.ripe.net/repository/DEFAULT/4pDpzDt-Nj1ya9cCdQtT8psFCn0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 00:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:49:9c:5f:a7:2e:66:e1:f1:c8:8e:0c:7f:81:41:41:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e290e9cc3b7e363d726bd702750b53f29b050a7d
Validity
Not Before: Jul 27 02:00:41 2025 GMT
Not After : Jul 28 02:00:41 2025 GMT
Subject: CN=d71a7d11ab1eee57242a406ec16337b1115f67d1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:c3:5a:c2:cc:1f:67:22:af:cb:21:13:6b:de:
33:fa:50:a8:59:db:cd:b6:ee:74:94:53:4b:85:a8:
77:94:c9:36:b6:43:60:21:37:51:d1:ab:85:eb:3f:
29:ea:e0:63:c8:6b:af:0a:f7:f8:fd:d0:7e:81:98:
b5:de:51:fa:74:23:d2:2e:6e:01:42:80:6c:d6:f3:
81:4a:4d:8e:e1:3f:62:a7:1e:68:01:a5:12:bb:a4:
c4:2f:e6:75:5a:86:29:76:d2:c2:da:5e:0a:99:ed:
a6:14:1d:46:cc:0c:d8:eb:47:3f:95:2b:bc:62:96:
3f:99:43:2c:8a:07:cb:a9:1f:ee:48:73:db:0b:a1:
38:f1:10:49:15:50:a5:36:ee:9a:ea:95:0e:eb:07:
94:7a:d2:0f:7f:c9:3a:2f:7a:ea:dd:c1:dd:de:54:
87:14:70:9c:09:79:fc:e7:bb:bd:6a:8a:2b:96:2f:
d8:2e:67:e8:a4:84:70:9d:2c:2c:18:f3:6c:30:1c:
af:32:9d:31:b8:01:ef:26:8d:c3:19:d4:88:5e:42:
a0:85:2d:5b:83:c3:66:95:80:34:0c:5c:7e:12:59:
09:b0:52:9e:1a:81:25:26:ad:44:c8:f1:e1:25:f3:
c6:fe:9e:3a:fe:d5:08:ce:f9:8c:07:de:59:de:ff:
26:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:1A:7D:11:AB:1E:EE:57:24:2A:40:6E:C1:63:37:B1:11:5F:67:D1
X509v3 Authority Key Identifier:
keyid:E2:90:E9:CC:3B:7E:36:3D:72:6B:D7:02:75:0B:53:F2:9B:05:0A:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4pDpzDt-Nj1ya9cCdQtT8psFCn0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/55354e-bce7-4a5d-b561-9113fd7afd6c/1/4pDpzDt-Nj1ya9cCdQtT8psFCn0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/55354e-bce7-4a5d-b561-9113fd7afd6c/1/4pDpzDt-Nj1ya9cCdQtT8psFCn0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
92:56:64:79:23:f1:fc:80:3b:c5:5f:6a:2a:0d:56:46:6c:00:
39:a3:b4:37:9f:6e:b6:39:fd:8d:6f:0b:d5:14:fb:40:3b:a8:
70:96:6a:e9:57:44:7b:ef:d4:27:bf:10:ef:c3:72:b4:e7:52:
c3:af:7e:66:56:3e:05:1f:85:3c:53:19:4d:e0:27:78:b4:87:
aa:b5:ff:8b:9a:8b:03:e0:6d:a6:f5:e7:e2:0c:8b:9d:42:d0:
cd:77:e9:51:f5:af:38:c2:b2:67:5a:0b:4b:7d:5e:80:c0:8f:
c5:e4:07:ec:fc:81:cb:67:c6:83:ac:71:3b:28:fa:27:50:d6:
81:9c:ad:91:dd:98:e5:aa:d4:71:71:e1:82:01:f6:90:d1:83:
93:ae:b9:5c:83:f9:ee:04:d7:64:2f:bc:90:bc:59:81:00:71:
e9:30:9a:0b:45:4a:6d:97:c7:b3:c7:87:95:95:b2:1e:b2:72:
48:e6:d7:6b:25:dc:c9:3b:bb:07:5e:23:b1:a7:55:ee:a7:91:
94:36:85:e7:fe:7f:de:52:2d:bd:14:06:5a:7a:81:33:73:db:
8b:e3:8a:da:ab:48:e9:c2:bf:69:c4:59:ec:53:55:64:ae:14:
c2:c3:61:96:fc:28:e2:a9:53:9c:1e:0b:5e:97:c7:5a:0e:4a:
9f:5c:b2:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 08:57:28 2025 by rpki-client