Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/d8c4ba-1c48-480b-bb59-d2310bba0e11/1/4OvbaaM-jzrzY64UT4U1OOgDG2M.mft
File: 4OvbaaM-jzrzY64UT4U1OOgDG2M.mft (raw, json)
Hash identifier: 6gQTDROyJBcUjMrVhVZ0e36SmBMx3IbzwFXSJkyNu04=
Subject key identifier: B4:D6:E8:3C:62:B6:D2:C2:4B:AE:9E:30:E8:A4:60:4B:6B:DD:5E:CB
Authority key identifier: E0:EB:DB:69:A3:3E:8F:3A:F3:63:AE:14:4F:85:35:38:E8:03:1B:63
Certificate issuer: /CN=e0ebdb69a33e8f3af363ae144f853538e8031b63
Certificate serial: 01974E8E69E98B88EB060D30D138EFB2AD59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4OvbaaM-jzrzY64UT4U1OOgDG2M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/d8c4ba-1c48-480b-bb59-d2310bba0e11/1/4OvbaaM-jzrzY64UT4U1OOgDG2M.mft
Manifest number: 0856
Signing time: Sun 08 Jun 2025 08:00:45 +0000
Manifest this update: Sun 08 Jun 2025 08:00:45 +0000
Manifest next update: Mon 09 Jun 2025 08:00:45 +0000
Files and hashes: 1: 3eUay2tu69uIVC2ydoh-KNcQB3E.roa (hash: G/dDpLohr3NTC2lM78apSFe1V+YNmYFmlWqkTGl1RZw=)
2: 4OvbaaM-jzrzY64UT4U1OOgDG2M.crl (hash: IphRSady5BJeeM23Vi1L69XvXeGPjpYochj6q73tsGE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/78/d8c4ba-1c48-480b-bb59-d2310bba0e11/1/4OvbaaM-jzrzY64UT4U1OOgDG2M.crl
rsync://rpki.ripe.net/repository/DEFAULT/78/d8c4ba-1c48-480b-bb59-d2310bba0e11/1/4OvbaaM-jzrzY64UT4U1OOgDG2M.mft
rsync://rpki.ripe.net/repository/DEFAULT/4OvbaaM-jzrzY64UT4U1OOgDG2M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 03:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4e:8e:69:e9:8b:88:eb:06:0d:30:d1:38:ef:b2:ad:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e0ebdb69a33e8f3af363ae144f853538e8031b63
Validity
Not Before: Jun 8 08:00:45 2025 GMT
Not After : Jun 9 08:00:45 2025 GMT
Subject: CN=b4d6e83c62b6d2c24bae9e30e8a4604b6bdd5ecb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:f5:55:54:d2:55:89:6b:1b:3b:e4:23:54:00:
14:c9:c2:14:b2:e0:12:e8:3b:b9:80:82:ba:63:90:
9a:64:2e:75:0b:5d:a1:39:03:a0:41:a7:c6:9a:e4:
24:f4:2f:9b:90:a9:b7:5d:ec:62:98:31:5b:30:b3:
90:5c:13:7b:7a:cd:12:23:68:31:c5:fa:a3:60:02:
62:83:dc:ea:51:02:5a:6f:c7:a6:63:27:54:5a:ad:
58:c8:42:65:34:fa:05:53:d3:bb:90:52:f5:4d:de:
c3:b9:8b:47:a7:e8:12:db:29:5b:b2:fe:d9:3c:67:
80:f7:c9:09:ce:c0:89:77:2e:60:40:82:e8:9b:46:
84:6b:11:69:04:5e:16:54:64:0c:5f:42:40:0d:9e:
b9:93:f1:35:6c:8b:66:ff:b0:dc:f7:85:37:ac:7a:
f3:90:86:10:28:f1:4b:58:f1:82:20:6b:09:d0:b8:
5a:04:ec:1e:b9:f2:48:de:8f:11:d4:e1:48:2c:51:
95:8c:18:db:98:9b:c5:55:39:55:cb:70:cb:9c:43:
d8:c8:c2:b9:9b:82:44:3b:a6:6b:c6:ef:ec:f9:d4:
f8:ca:e4:4d:41:76:36:a7:a4:9c:e9:20:84:85:9c:
7b:b5:58:d5:19:9f:d9:ee:f5:f3:e5:a6:45:f3:87:
64:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:D6:E8:3C:62:B6:D2:C2:4B:AE:9E:30:E8:A4:60:4B:6B:DD:5E:CB
X509v3 Authority Key Identifier:
keyid:E0:EB:DB:69:A3:3E:8F:3A:F3:63:AE:14:4F:85:35:38:E8:03:1B:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4OvbaaM-jzrzY64UT4U1OOgDG2M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/d8c4ba-1c48-480b-bb59-d2310bba0e11/1/4OvbaaM-jzrzY64UT4U1OOgDG2M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/d8c4ba-1c48-480b-bb59-d2310bba0e11/1/4OvbaaM-jzrzY64UT4U1OOgDG2M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:d2:29:42:5f:97:70:38:eb:43:58:b8:63:82:ca:61:d7:5c:
cd:16:cb:98:d6:a6:c2:39:b5:de:21:60:ac:87:0c:b4:bf:8b:
8e:3c:81:d4:ac:f9:38:9f:3d:d9:12:d0:1b:47:86:85:eb:33:
12:72:51:3d:f2:e7:49:6c:e7:95:53:a9:00:15:46:10:35:15:
99:d5:49:a5:20:85:69:7e:fd:d8:34:a6:d4:f9:71:cd:30:bf:
b3:ae:0a:05:04:6e:15:17:40:ef:5b:a1:87:5f:50:b1:09:a5:
0c:64:35:21:c0:8b:17:b5:a8:a7:1f:77:6e:06:aa:fa:03:c6:
ec:50:dd:93:22:d2:b8:61:e0:ba:56:94:51:da:b4:39:57:86:
0d:ae:e0:f6:79:7a:a0:da:80:e0:ef:f9:45:f5:99:d7:a0:bf:
10:61:f5:3c:3e:a5:d3:81:81:52:7b:30:c8:b2:3a:a1:de:18:
32:e3:10:a6:87:8f:12:61:08:ab:88:4c:0c:c0:ad:9f:bf:d9:
a9:a9:b5:a6:bd:97:8b:09:85:7e:36:06:ef:e8:44:e2:25:21:
24:f3:18:95:44:68:b3:2d:c5:cc:1e:95:b4:71:88:89:b9:6c:
1c:48:42:1c:fb:01:95:b5:47:77:5d:07:9f:3d:16:82:15:82:
14:b3:d9:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 12:14:01 2025 by rpki-client