Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/379816-d6b4-42b5-95ad-fe27921e1542/1/e4k4XAACMwsJZWeyFRTY4bwJaJ8.mft
File: e4k4XAACMwsJZWeyFRTY4bwJaJ8.mft (raw, json)
Hash identifier: rYEDyryzTT5+owSasjUp/qIK4Jzh8GmwOoGTyl+rc9Q=
Subject key identifier: CB:87:0D:FB:4E:69:38:EB:BF:41:69:53:C2:69:E1:31:54:F6:04:0D
Authority key identifier: 7B:89:38:5C:00:02:33:0B:09:65:67:B2:15:14:D8:E1:BC:09:68:9F
Certificate issuer: /CN=7b89385c0002330b096567b21514d8e1bc09689f
Certificate serial: 01976026C15E68CFB4347E2097D8538FEF9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/e4k4XAACMwsJZWeyFRTY4bwJaJ8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/379816-d6b4-42b5-95ad-fe27921e1542/1/e4k4XAACMwsJZWeyFRTY4bwJaJ8.mft
Manifest number: 158B
Signing time: Wed 11 Jun 2025 18:00:42 +0000
Manifest this update: Wed 11 Jun 2025 18:00:42 +0000
Manifest next update: Thu 12 Jun 2025 18:00:42 +0000
Files and hashes: 1: cLYB6l9FZL9zQXyfpqoagDuHdic.roa (hash: bfsqI0s1izdNOdCWZ5Wt/vOuavl9t3l+ssIuSAYSQTY=)
2: e4k4XAACMwsJZWeyFRTY4bwJaJ8.crl (hash: P3qO+pDZSw6SlveViuzxQzuSyjjFNB/55xy80ZiNqug=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/379816-d6b4-42b5-95ad-fe27921e1542/1/e4k4XAACMwsJZWeyFRTY4bwJaJ8.crl
rsync://rpki.ripe.net/repository/DEFAULT/28/379816-d6b4-42b5-95ad-fe27921e1542/1/e4k4XAACMwsJZWeyFRTY4bwJaJ8.mft
rsync://rpki.ripe.net/repository/DEFAULT/e4k4XAACMwsJZWeyFRTY4bwJaJ8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 12 Jun 2025 15:40:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:60:26:c1:5e:68:cf:b4:34:7e:20:97:d8:53:8f:ef:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7b89385c0002330b096567b21514d8e1bc09689f
Validity
Not Before: Jun 11 18:00:42 2025 GMT
Not After : Jun 12 18:00:42 2025 GMT
Subject: CN=cb870dfb4e6938ebbf416953c269e13154f6040d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:7c:a2:e3:41:54:2a:22:64:2b:61:a2:0a:5c:
10:e7:9a:54:75:83:f4:e4:45:92:d4:e4:04:25:95:
f5:ee:97:0c:7d:cf:f3:9b:e5:3f:36:5b:6d:a1:c0:
fa:1a:ef:71:d1:76:b1:1e:4a:19:06:83:5b:50:e1:
ad:b8:86:5d:29:e5:36:b3:aa:d9:80:fa:ba:69:21:
42:7e:a4:e6:0d:c0:ac:65:95:36:24:2c:7e:d3:92:
57:71:60:d0:b8:60:d2:3a:e4:ff:58:ef:0c:29:9f:
7a:bc:1a:59:85:54:f0:f1:46:89:52:d8:53:29:48:
ea:67:e7:de:fb:40:d4:43:57:3a:bb:13:33:37:21:
b3:44:81:47:f1:00:15:e7:a7:9a:d0:a8:17:1b:b8:
c4:74:7d:e2:21:26:2b:d8:2f:67:e9:da:89:a5:d5:
39:6b:ae:d1:d3:64:ba:35:91:71:93:96:f1:b4:a1:
aa:a2:32:8a:04:de:57:46:3c:35:fd:9b:57:84:76:
b4:ed:74:ed:e7:52:ae:fb:8c:fb:3c:8a:46:03:91:
5b:42:95:c7:32:51:36:81:03:0f:5c:71:9d:68:1c:
1a:02:80:a5:c8:95:64:e1:5d:ed:05:c8:8e:9f:e8:
31:58:4c:25:30:4a:68:18:04:da:f8:76:f4:ed:b4:
72:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:87:0D:FB:4E:69:38:EB:BF:41:69:53:C2:69:E1:31:54:F6:04:0D
X509v3 Authority Key Identifier:
keyid:7B:89:38:5C:00:02:33:0B:09:65:67:B2:15:14:D8:E1:BC:09:68:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4k4XAACMwsJZWeyFRTY4bwJaJ8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/379816-d6b4-42b5-95ad-fe27921e1542/1/e4k4XAACMwsJZWeyFRTY4bwJaJ8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/379816-d6b4-42b5-95ad-fe27921e1542/1/e4k4XAACMwsJZWeyFRTY4bwJaJ8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:e3:8d:60:0d:79:67:71:c9:b3:67:70:bb:3d:56:ff:b4:6c:
b7:a9:a3:a8:3f:d8:98:87:68:a5:57:85:7b:d7:32:32:8c:94:
44:34:87:98:5f:37:7e:6b:da:c0:b3:a5:ae:94:a0:83:c0:f7:
08:e1:7a:9f:00:64:02:f5:16:12:a7:7c:08:09:72:50:3c:5b:
16:e7:3c:15:23:21:9e:d3:51:8d:f2:6b:f7:fe:c2:9d:db:25:
59:5c:c6:8c:09:1b:87:80:53:60:e0:84:02:93:67:a6:d1:b9:
d7:98:24:f1:ef:c4:82:73:15:44:42:01:5b:03:8c:c8:dc:9f:
f2:ab:0f:28:e7:21:60:bf:8d:50:96:f2:7c:da:3f:7f:bd:7b:
2a:64:ee:ae:9b:cb:67:de:38:d4:8c:11:06:e0:13:71:67:df:
4b:fe:57:90:26:84:4f:ff:f8:ba:c9:f6:56:3b:91:81:a7:e2:
0e:4f:2a:2e:b6:ee:e6:87:2c:a0:1a:a6:17:d1:9c:83:17:a7:
2d:84:a8:7d:8a:47:03:60:4e:53:dc:31:b8:c3:ca:51:94:b9:
db:cd:1f:aa:d0:df:79:70:12:bf:f2:92:94:fb:21:c1:05:57:
b8:ae:b3:93:1a:68:a7:bb:5e:d5:bc:b3:f5:98:3f:1e:41:f9:
9f:c7:2d:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 11 23:48:31 2025 by rpki-client