Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/e8f727-cb23-43ce-85d2-d48b7d2624db/1/4wEfCFnQaghJdfTovStVZxDdjDA.mft
File: 4wEfCFnQaghJdfTovStVZxDdjDA.mft (raw, json)
Hash identifier: lNNngas3Aatx7dkNgZP4m5F1g+EJB6jeVY/lLbj/DIo=
Subject key identifier: 25:0B:B5:3A:57:3F:35:92:4D:39:6B:60:53:58:C4:EE:36:D1:19:A8
Authority key identifier: E3:01:1F:08:59:D0:6A:08:49:75:F4:E8:BD:2B:55:67:10:DD:8C:30
Certificate issuer: /CN=e3011f0859d06a084975f4e8bd2b556710dd8c30
Certificate serial: 01974AE8542F902717C4F1F9222D394C2F0E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4wEfCFnQaghJdfTovStVZxDdjDA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/e8f727-cb23-43ce-85d2-d48b7d2624db/1/4wEfCFnQaghJdfTovStVZxDdjDA.mft
Manifest number: 1007
Signing time: Sat 07 Jun 2025 15:00:29 +0000
Manifest this update: Sat 07 Jun 2025 15:00:29 +0000
Manifest next update: Sun 08 Jun 2025 15:00:29 +0000
Files and hashes: 1: 4wEfCFnQaghJdfTovStVZxDdjDA.crl (hash: R5AnAZIlnLscBAAc047SyjE90rSwJSePgDHnT9wWAOI=)
2: y5czNixkNluft47-krcqIbdqVD0.roa (hash: AmEHJkAG0oDmal6HjQJOOd7Nfm7cgEA//96C9SqFxV0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/e8f727-cb23-43ce-85d2-d48b7d2624db/1/4wEfCFnQaghJdfTovStVZxDdjDA.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/e8f727-cb23-43ce-85d2-d48b7d2624db/1/4wEfCFnQaghJdfTovStVZxDdjDA.mft
rsync://rpki.ripe.net/repository/DEFAULT/4wEfCFnQaghJdfTovStVZxDdjDA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 15:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4a:e8:54:2f:90:27:17:c4:f1:f9:22:2d:39:4c:2f:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e3011f0859d06a084975f4e8bd2b556710dd8c30
Validity
Not Before: Jun 7 15:00:29 2025 GMT
Not After : Jun 8 15:00:29 2025 GMT
Subject: CN=250bb53a573f35924d396b605358c4ee36d119a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:6d:3b:a8:60:b4:52:bc:ec:04:2d:dc:4c:61:
90:09:81:e6:5a:26:17:97:2c:42:a4:53:bb:f7:63:
53:ec:d9:89:ca:45:c7:ee:07:74:30:5b:84:cc:cb:
cf:3f:27:a2:f4:4b:5d:a0:ae:88:d8:e1:77:a6:26:
56:da:45:21:86:bf:8c:07:fd:37:2d:13:c6:f8:56:
ee:4b:a0:f1:88:6c:b5:5f:ee:0d:41:94:6f:14:60:
a3:a9:9b:88:5b:f3:11:74:69:f6:c0:d1:c2:71:50:
13:32:61:a2:db:9d:15:f3:6e:8a:47:50:8a:e7:be:
1f:29:f6:87:f0:11:8d:fd:c1:67:1a:f8:47:3f:85:
4a:2d:04:c9:76:e1:85:6b:38:69:b6:82:f4:41:f8:
b7:4c:4e:0b:70:c8:2c:0c:50:df:41:1d:91:fa:30:
40:ce:05:69:f5:5e:0b:f7:bc:51:5a:07:a1:8b:69:
e6:ab:81:12:21:ff:34:6f:62:19:f0:bc:c2:06:e2:
c7:ab:b8:9d:71:99:67:3e:a1:17:2c:9f:ff:26:f3:
40:5e:5c:a3:57:84:9f:6a:a2:82:b2:4a:ec:de:ac:
37:a4:e1:f7:21:4f:9d:0b:c2:ac:a5:07:67:f1:32:
b6:22:97:cc:7f:07:6f:e7:2d:51:c6:01:e1:9a:92:
57:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:0B:B5:3A:57:3F:35:92:4D:39:6B:60:53:58:C4:EE:36:D1:19:A8
X509v3 Authority Key Identifier:
keyid:E3:01:1F:08:59:D0:6A:08:49:75:F4:E8:BD:2B:55:67:10:DD:8C:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4wEfCFnQaghJdfTovStVZxDdjDA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/e8f727-cb23-43ce-85d2-d48b7d2624db/1/4wEfCFnQaghJdfTovStVZxDdjDA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/e8f727-cb23-43ce-85d2-d48b7d2624db/1/4wEfCFnQaghJdfTovStVZxDdjDA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:6b:a7:f8:4a:73:e5:1d:a4:96:1b:19:db:c0:e7:fe:c6:b1:
70:4f:d2:a0:90:da:27:b7:bd:23:fb:fa:f0:3c:30:bd:8f:d4:
a5:d0:28:4c:f6:32:87:62:10:e2:97:c7:3b:e6:0a:13:ec:17:
f4:5e:e3:13:0f:97:a9:e2:6b:52:ac:46:68:28:9b:74:cf:75:
ee:b5:ba:88:ee:94:ea:a4:57:7b:8e:f3:6b:44:47:3b:d8:88:
d5:8f:8a:ec:b9:46:30:21:5d:a7:12:76:ab:bc:cd:7c:ac:97:
59:45:3b:85:4b:f3:45:7a:39:d5:d1:50:81:ad:04:b6:be:14:
a6:8f:bd:10:0e:8b:99:6d:5c:e4:f8:ab:1d:c7:ee:05:b7:89:
ec:a8:57:02:6d:d3:e3:d8:e0:2d:28:e3:85:8f:db:69:34:d4:
fe:9b:fe:8c:ec:c5:fe:13:e1:42:e2:a6:f7:72:73:23:63:dc:
52:53:03:f7:38:44:66:18:c7:ba:4a:36:e1:bb:c4:f2:2a:ae:
ba:cf:46:bf:c0:b6:b7:4a:ba:e7:b1:a3:72:aa:c5:d2:9a:e9:
10:ba:8d:ba:e0:dd:f4:da:b6:d3:88:50:74:79:8a:7b:76:b5:
4e:f0:54:75:74:2e:2a:68:25:fa:72:26:91:38:1f:c2:84:33:
8b:7d:b2:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 00:33:44 2025 by rpki-client