Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/68569f-96cf-45e3-9dab-2ea52896bae1/1/4q9q9tGZ8R7LpDVVEOmbficatUA.mft
File: 4q9q9tGZ8R7LpDVVEOmbficatUA.mft (raw, json)
Hash identifier: Y9V43l9NHGKShnpy4tWcP0+/lBKmBmgXW6VsWh5zvac=
Subject key identifier: DE:BC:A7:F7:4E:76:3A:5F:07:18:78:02:19:A8:B0:EB:FA:81:67:26
Authority key identifier: E2:AF:6A:F6:D1:99:F1:1E:CB:A4:35:55:10:E9:9B:7E:27:1A:B5:40
Certificate issuer: /CN=e2af6af6d199f11ecba4355510e99b7e271ab540
Certificate serial: 0197D1AA09525558F6A5DA4C5ABBF6C4FE71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4q9q9tGZ8R7LpDVVEOmbficatUA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/68569f-96cf-45e3-9dab-2ea52896bae1/1/4q9q9tGZ8R7LpDVVEOmbficatUA.mft
Manifest number: F9
Signing time: Thu 03 Jul 2025 19:01:11 +0000
Manifest this update: Thu 03 Jul 2025 19:01:11 +0000
Manifest next update: Fri 04 Jul 2025 19:01:11 +0000
Files and hashes: 1: 4q9q9tGZ8R7LpDVVEOmbficatUA.crl (hash: oaBg3YSyWFks/MEn5ohvgMX9VsUeqmkPv2VMeoGTclU=)
2: C-s3qmcWvVMYI1a9KzViDKmJV5c.roa (hash: /bw45CjGjbfD9z7uFQfaYryXfUKu5UGOeYHJY32SaeY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/81/68569f-96cf-45e3-9dab-2ea52896bae1/1/4q9q9tGZ8R7LpDVVEOmbficatUA.crl
rsync://rpki.ripe.net/repository/DEFAULT/81/68569f-96cf-45e3-9dab-2ea52896bae1/1/4q9q9tGZ8R7LpDVVEOmbficatUA.mft
rsync://rpki.ripe.net/repository/DEFAULT/4q9q9tGZ8R7LpDVVEOmbficatUA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 04 Jul 2025 19:01:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:d1:aa:09:52:55:58:f6:a5:da:4c:5a:bb:f6:c4:fe:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e2af6af6d199f11ecba4355510e99b7e271ab540
Validity
Not Before: Jul 3 19:01:11 2025 GMT
Not After : Jul 4 19:01:11 2025 GMT
Subject: CN=debca7f74e763a5f0718780219a8b0ebfa816726
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:e8:07:f0:b5:b3:27:12:cc:5a:16:13:da:a8:
2e:ab:a9:0f:46:4d:b4:89:84:a2:50:3f:b5:98:c6:
af:3b:c5:86:ba:37:10:07:60:93:c7:b2:a6:42:c3:
e0:ea:c7:11:12:98:33:14:e4:7b:f4:63:f7:c2:99:
50:d9:05:59:15:5a:4f:bd:d8:90:61:37:f6:8a:ad:
9c:84:62:41:1a:76:3b:03:27:d1:30:59:2c:8c:c4:
df:50:f1:45:46:c9:54:53:20:e4:97:b6:79:17:be:
96:fe:c1:3e:47:44:f1:75:de:e6:94:b1:95:bb:65:
ca:4a:a7:eb:75:2a:4b:d3:9c:c0:8d:fb:62:8f:8f:
ae:ed:6f:d9:d6:48:10:9e:f3:6d:bf:e1:ea:81:44:
7d:67:db:6e:61:2b:a5:9b:7a:36:35:00:0b:d6:32:
ce:2f:ae:cd:28:ec:63:19:a3:10:0b:15:95:06:a9:
ee:e3:89:64:4a:48:29:c8:32:e1:c9:c0:0c:79:5c:
ac:18:84:d5:7c:3d:ad:9e:73:91:a7:67:9a:7d:76:
14:e2:d5:eb:50:98:84:ac:fd:34:c2:1b:3c:a4:e3:
c4:eb:24:6a:44:97:d2:bc:60:3d:3d:6f:a0:7a:b7:
c2:65:c2:7d:6c:ed:ff:eb:8f:86:d2:e6:97:c1:23:
be:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:BC:A7:F7:4E:76:3A:5F:07:18:78:02:19:A8:B0:EB:FA:81:67:26
X509v3 Authority Key Identifier:
keyid:E2:AF:6A:F6:D1:99:F1:1E:CB:A4:35:55:10:E9:9B:7E:27:1A:B5:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4q9q9tGZ8R7LpDVVEOmbficatUA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/68569f-96cf-45e3-9dab-2ea52896bae1/1/4q9q9tGZ8R7LpDVVEOmbficatUA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/68569f-96cf-45e3-9dab-2ea52896bae1/1/4q9q9tGZ8R7LpDVVEOmbficatUA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8c:25:24:f2:41:a9:c1:fe:50:92:3e:b2:b6:fd:b5:42:3b:22:
ff:73:ca:8e:2b:e2:e7:14:ba:7b:8c:93:a2:dd:43:87:1e:4f:
cf:78:98:27:71:fe:2c:17:21:9a:64:81:80:19:02:be:0e:fa:
cf:35:3d:d6:67:06:ae:8f:c7:05:20:c3:47:cb:c4:10:72:e7:
9e:78:88:29:dd:a4:b6:c0:2a:c4:67:df:b7:80:ec:b5:72:08:
68:c4:5d:34:a5:9b:00:7f:be:b4:0b:bd:c8:6e:07:d0:a0:b6:
ed:58:40:f7:7c:02:d9:23:29:70:3e:63:84:22:d6:11:87:0b:
2a:c6:4c:67:64:90:2e:e0:c9:a7:c5:19:30:f9:3c:30:8a:4b:
59:20:62:1a:0d:12:20:bc:d8:f8:01:aa:5e:5f:6c:71:f5:0b:
73:0e:8f:fb:1b:aa:a4:56:e4:e9:88:ac:dd:a6:7a:d3:44:92:
ee:d0:4b:72:3f:18:2b:cd:a7:44:70:32:d5:0e:e6:3f:d0:31:
25:44:3a:5e:40:28:e7:75:f4:3f:bd:42:4a:4d:25:1f:4f:9c:
2e:ad:01:e9:a1:75:8b:75:12:0c:1d:47:f6:2c:8f:b4:0d:0b:
f6:57:d3:d1:4e:4d:ff:dc:9a:97:26:a0:42:33:76:6f:a3:0b:
a3:89:b4:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 4 03:42:41 2025 by rpki-client