Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/91402e-ed28-4a21-84e2-e4d64dca67ac/1/4xbAPPr_4TTHvtpIhquLCc9F-8Q.mft
File: 4xbAPPr_4TTHvtpIhquLCc9F-8Q.mft (raw, json)
Hash identifier: 4a5bC1MX25/B+N7tv92lqGNFhOnSpD+VOjfPcIFJehc=
Subject key identifier: F0:35:25:2B:47:AA:A9:9A:B2:23:8F:26:2A:BE:FE:82:AF:3D:FB:2C
Authority key identifier: E3:16:C0:3C:FA:FF:E1:34:C7:BE:DA:48:86:AB:8B:09:CF:45:FB:C4
Certificate issuer: /CN=e316c03cfaffe134c7beda4886ab8b09cf45fbc4
Certificate serial: 01974B1F4E428D6C95348AA906112E77805E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4xbAPPr_4TTHvtpIhquLCc9F-8Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/91402e-ed28-4a21-84e2-e4d64dca67ac/1/4xbAPPr_4TTHvtpIhquLCc9F-8Q.mft
Manifest number: 08F3
Signing time: Sat 07 Jun 2025 16:00:32 +0000
Manifest this update: Sat 07 Jun 2025 16:00:32 +0000
Manifest next update: Sun 08 Jun 2025 16:00:32 +0000
Files and hashes: 1: 26-qfn9ODUHJpEH89Qt0MRaUhuA.roa (hash: 2YdYGfBZn6lY/AbZT0o2XAew8LsHFvDqQ6x2hV85Y5I=)
2: 4xbAPPr_4TTHvtpIhquLCc9F-8Q.crl (hash: Oe5FAVOGka8bLh218Bi0x7hiKapNf7lRjRFNSi/OICw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/63/91402e-ed28-4a21-84e2-e4d64dca67ac/1/4xbAPPr_4TTHvtpIhquLCc9F-8Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/63/91402e-ed28-4a21-84e2-e4d64dca67ac/1/4xbAPPr_4TTHvtpIhquLCc9F-8Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/4xbAPPr_4TTHvtpIhquLCc9F-8Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 16:00:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4b:1f:4e:42:8d:6c:95:34:8a:a9:06:11:2e:77:80:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e316c03cfaffe134c7beda4886ab8b09cf45fbc4
Validity
Not Before: Jun 7 16:00:32 2025 GMT
Not After : Jun 8 16:00:32 2025 GMT
Subject: CN=f035252b47aaa99ab2238f262abefe82af3dfb2c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:d2:c2:b2:da:1f:08:c3:c5:ab:1c:fe:97:ef:
92:73:42:94:aa:e3:41:86:65:20:74:b3:3f:d8:25:
bd:44:1a:3c:7f:b6:cd:37:8f:f9:e3:b7:30:7e:65:
3e:c9:e5:c0:73:db:c7:84:9c:2e:99:26:4b:3d:d6:
41:8c:ac:68:d7:71:74:78:5b:59:f9:43:86:2b:bf:
c7:ce:d5:75:74:83:b3:4f:71:51:8f:62:bd:53:0f:
63:82:c9:44:ca:04:e9:b2:9d:57:17:54:0f:9f:4f:
1e:f2:30:ab:b6:4e:56:6e:b4:45:a3:e6:74:1a:fb:
ec:1e:14:e9:89:01:62:8d:7f:63:c4:5b:2e:4b:91:
aa:90:f8:86:cc:4d:89:0c:db:1d:8a:e4:08:44:99:
b0:04:05:95:78:af:d0:de:04:87:11:57:a7:ed:ff:
ce:ff:9f:b3:d2:41:9f:2c:b8:4f:47:fb:84:5c:20:
cd:42:d4:b5:99:ac:d9:82:3d:47:a7:5f:80:fc:43:
5b:a3:7c:0f:e4:84:d7:e9:7b:ea:40:8e:b2:05:f8:
a8:8a:ca:23:92:d7:d2:9a:dc:71:89:aa:2b:25:2e:
37:06:b6:4c:69:c0:2e:ad:7a:c3:b0:47:e4:f6:c2:
f3:9f:57:74:a9:84:d5:fb:93:68:ac:51:88:46:a7:
05:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:35:25:2B:47:AA:A9:9A:B2:23:8F:26:2A:BE:FE:82:AF:3D:FB:2C
X509v3 Authority Key Identifier:
keyid:E3:16:C0:3C:FA:FF:E1:34:C7:BE:DA:48:86:AB:8B:09:CF:45:FB:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4xbAPPr_4TTHvtpIhquLCc9F-8Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/91402e-ed28-4a21-84e2-e4d64dca67ac/1/4xbAPPr_4TTHvtpIhquLCc9F-8Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/63/91402e-ed28-4a21-84e2-e4d64dca67ac/1/4xbAPPr_4TTHvtpIhquLCc9F-8Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b2:65:84:aa:9d:7a:19:71:24:89:ff:cb:6d:a8:a5:3f:30:2a:
4b:78:38:ea:d0:1b:e5:ae:22:18:b3:19:13:a0:42:21:98:a4:
2e:53:28:03:be:27:ed:39:05:39:10:bd:e8:8d:b8:c3:a2:4f:
c9:21:a1:6c:8d:0c:1e:bb:e5:0a:f2:26:73:ea:a0:40:50:1f:
69:df:91:9e:95:12:b1:5d:5c:e5:e7:a8:26:11:fe:db:34:61:
40:a2:48:8d:4d:3d:ad:8d:2a:25:d1:78:49:ef:e5:e7:46:fb:
7c:cc:34:2e:3a:6e:2f:ff:ed:00:82:7e:6a:86:8f:f7:ff:d0:
de:da:a8:44:69:ec:92:11:4f:16:0a:90:18:88:e2:14:5a:dc:
d4:f8:b4:1e:38:a1:e4:af:b3:97:67:51:e5:ee:25:a3:3a:ba:
64:ce:4e:72:2a:fa:f6:1a:9f:d3:06:bf:3c:b5:62:de:8d:52:
ed:91:4f:d6:e6:4b:2e:5b:9f:1c:45:de:01:a6:19:27:5c:f2:
81:fd:5a:3a:e1:e3:7c:05:49:52:2b:ea:b0:e8:ff:0b:66:d8:
53:ca:77:07:91:99:8f:53:10:d3:34:6e:5f:6b:f9:c9:bd:02:
94:20:91:0d:4c:bd:1d:9a:cc:b5:a2:52:bd:48:91:b7:2b:6d:
69:17:78:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 02:40:38 2025 by rpki-client