
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/be9dab-5f27-43ce-ab22-739a91c620ac/1/4HdrCDj6Dh2hvk7cz4kkvUE7Hbc.mft
File: 4HdrCDj6Dh2hvk7cz4kkvUE7Hbc.mft (raw, json)
Hash identifier: zLGdm4IXgvsH4MLCtr8M0CH6Kv4OMODXfKHcHF0BI9A=
Subject key identifier: DF:25:2C:4B:E6:30:81:AD:0C:6C:08:47:DC:99:00:97:B7:B5:63:53
Authority key identifier: E0:77:6B:08:38:FA:0E:1D:A1:BE:4E:DC:CF:89:24:BD:41:3B:1D:B7
Certificate issuer: /CN=e0776b0838fa0e1da1be4edccf8924bd413b1db7
Certificate serial: 01974BFB1CFBECA35D336A03FBD83F1C8E2C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4HdrCDj6Dh2hvk7cz4kkvUE7Hbc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/be9dab-5f27-43ce-ab22-739a91c620ac/1/4HdrCDj6Dh2hvk7cz4kkvUE7Hbc.mft
Manifest number: 0113
Signing time: Sat 07 Jun 2025 20:00:37 +0000
Manifest this update: Sat 07 Jun 2025 20:00:37 +0000
Manifest next update: Sun 08 Jun 2025 20:00:37 +0000
Files and hashes: 1: 4HdrCDj6Dh2hvk7cz4kkvUE7Hbc.crl (hash: cHVN/R/HsYcKh/JGIC3MPAC5WiFJpDhb+Plr38t3nGE=)
2: U8sue3gZLueOLUNHI3zh7NTbaBA.roa (hash: aGzdRWMTM0/YLdPvutTc1s3WsmhuwZtks1XpZ/1ew6k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/be9dab-5f27-43ce-ab22-739a91c620ac/1/4HdrCDj6Dh2hvk7cz4kkvUE7Hbc.crl
rsync://rpki.ripe.net/repository/DEFAULT/2d/be9dab-5f27-43ce-ab22-739a91c620ac/1/4HdrCDj6Dh2hvk7cz4kkvUE7Hbc.mft
rsync://rpki.ripe.net/repository/DEFAULT/4HdrCDj6Dh2hvk7cz4kkvUE7Hbc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 18:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4b:fb:1c:fb:ec:a3:5d:33:6a:03:fb:d8:3f:1c:8e:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e0776b0838fa0e1da1be4edccf8924bd413b1db7
Validity
Not Before: Jun 7 20:00:37 2025 GMT
Not After : Jun 8 20:00:37 2025 GMT
Subject: CN=df252c4be63081ad0c6c0847dc990097b7b56353
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:0d:0b:26:f9:7e:d6:52:61:c0:ad:11:3d:54:
b0:2c:ef:77:14:70:1f:bb:af:95:61:7b:0c:19:04:
76:66:5e:31:9c:06:b0:66:ef:38:5f:3b:85:6f:31:
45:42:8b:65:0d:ce:ff:6a:7f:c6:73:bb:29:21:a0:
fb:ae:2e:a0:42:ae:5e:9b:1e:93:6f:0e:5f:77:50:
50:6f:26:c4:30:e0:f3:37:58:72:70:ba:38:e0:1a:
de:ad:c2:14:19:ff:4f:04:9e:d9:a3:f9:a0:74:de:
a2:1f:84:d3:dc:b2:cd:bc:66:90:33:d5:c4:9b:3a:
39:63:54:f4:39:33:f4:08:ab:8a:eb:e3:a1:1c:1a:
ec:a0:b4:ca:72:31:2a:fc:bf:ed:c5:c9:8a:4f:98:
38:08:bd:95:ad:35:a0:a7:bc:cb:64:5c:7f:16:30:
aa:5b:d4:52:fa:6f:a0:66:bc:e1:f9:f6:9d:18:31:
f7:ea:12:40:e4:6b:24:fd:4e:f7:5a:80:1a:c3:e7:
30:af:a9:71:da:d6:89:06:3c:0f:c6:96:da:4f:6c:
ae:30:05:1b:ac:75:65:4f:5a:0c:3a:ee:04:a3:38:
e8:9e:fa:82:cb:fb:c6:bf:f0:69:6c:32:da:43:b0:
f6:63:c3:e8:c9:f8:b1:dd:af:94:46:f5:7e:b1:ea:
ea:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:25:2C:4B:E6:30:81:AD:0C:6C:08:47:DC:99:00:97:B7:B5:63:53
X509v3 Authority Key Identifier:
keyid:E0:77:6B:08:38:FA:0E:1D:A1:BE:4E:DC:CF:89:24:BD:41:3B:1D:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4HdrCDj6Dh2hvk7cz4kkvUE7Hbc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/be9dab-5f27-43ce-ab22-739a91c620ac/1/4HdrCDj6Dh2hvk7cz4kkvUE7Hbc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/be9dab-5f27-43ce-ab22-739a91c620ac/1/4HdrCDj6Dh2hvk7cz4kkvUE7Hbc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:44:9c:4d:ad:dd:3e:c7:82:76:f2:9b:c0:cb:63:b8:f8:8f:
8f:6e:d8:ac:c4:24:e6:d3:e2:0b:46:8e:84:cc:0e:5e:44:4e:
cd:50:5c:be:e6:b2:d6:00:8b:77:d9:88:e8:1e:80:f7:88:0b:
0f:b1:7b:89:15:f0:0a:66:34:16:88:66:ee:25:83:15:46:a6:
3c:59:9e:f0:f6:9f:5a:08:ec:c1:75:ca:16:47:cd:82:88:7e:
a7:64:83:bd:7d:d9:fd:89:84:8b:82:ef:df:27:01:87:d6:fa:
36:2b:d8:cc:d2:03:2d:31:19:cd:78:ed:ae:70:3c:d4:23:b9:
0e:03:cd:ff:4b:9f:b0:3f:a0:0b:39:bb:f8:4f:62:d4:f0:20:
73:6d:7d:90:9b:01:f9:98:5c:ac:8b:3e:d4:e8:72:09:8b:fd:
14:87:b7:b7:6b:70:97:fa:15:05:8a:3a:08:d2:35:19:ad:24:
4a:6f:8d:aa:b0:6f:c8:cd:96:f1:d5:aa:65:6f:05:c1:5a:41:
27:4a:bf:09:bd:27:8f:e2:7a:e8:f1:51:c2:ae:4c:83:98:17:
80:81:d8:be:34:95:32:83:a4:ec:49:37:e4:6a:6a:b3:fa:b8:
a8:a9:66:44:24:bb:74:3e:cf:1e:cd:c7:8e:26:7c:86:36:cd:
5e:06:0d:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 04:24:19 2025 by rpki-client