Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/06db38-9886-4d70-8904-27cab0a60264/1/4ZAOVZbAg3SX8RiUELHtIqzbfhM.mft
File: 4ZAOVZbAg3SX8RiUELHtIqzbfhM.mft (raw, json)
Hash identifier: 6Voa5+BGhvfaj2kh+P8HFMUH3t4JqC9nQFeAa7VfBuY=
Subject key identifier: 2F:CA:AE:F8:9C:31:1D:F8:6B:92:E3:65:F0:C5:6F:3D:CB:23:CA:C9
Authority key identifier: E1:90:0E:55:96:C0:83:74:97:F1:18:94:10:B1:ED:22:AC:DB:7E:13
Certificate issuer: /CN=e1900e5596c0837497f1189410b1ed22acdb7e13
Certificate serial: 0197586D9B93E7B7573358541CBFB3558281
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4ZAOVZbAg3SX8RiUELHtIqzbfhM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/06db38-9886-4d70-8904-27cab0a60264/1/4ZAOVZbAg3SX8RiUELHtIqzbfhM.mft
Manifest number: 0A9E
Signing time: Tue 10 Jun 2025 06:01:07 +0000
Manifest this update: Tue 10 Jun 2025 06:01:07 +0000
Manifest next update: Wed 11 Jun 2025 06:01:07 +0000
Files and hashes: 1: 4ZAOVZbAg3SX8RiUELHtIqzbfhM.crl (hash: Lfp8XNPyD5pJl67ojqT2wJPmhhl0+jFK5iA+IVawU2I=)
2: 8jfWRZ1NLj1bjkrxzRMG9yYupLo.roa (hash: 89HNIKxmIWfFBZvw0N2AfHWlUXDjHZG4VVH2GueEE+4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/82/06db38-9886-4d70-8904-27cab0a60264/1/4ZAOVZbAg3SX8RiUELHtIqzbfhM.crl
rsync://rpki.ripe.net/repository/DEFAULT/82/06db38-9886-4d70-8904-27cab0a60264/1/4ZAOVZbAg3SX8RiUELHtIqzbfhM.mft
rsync://rpki.ripe.net/repository/DEFAULT/4ZAOVZbAg3SX8RiUELHtIqzbfhM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 11 Jun 2025 06:01:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:58:6d:9b:93:e7:b7:57:33:58:54:1c:bf:b3:55:82:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e1900e5596c0837497f1189410b1ed22acdb7e13
Validity
Not Before: Jun 10 06:01:07 2025 GMT
Not After : Jun 11 06:01:07 2025 GMT
Subject: CN=2fcaaef89c311df86b92e365f0c56f3dcb23cac9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:b9:d3:45:2b:12:84:31:21:3e:b2:88:19:2a:
cc:31:fc:29:05:5e:0c:08:e9:d8:f0:0c:d6:48:16:
ff:0c:03:5c:75:14:90:b0:72:3f:7c:c3:47:9c:14:
56:61:25:df:32:43:b0:c8:11:b9:49:05:16:5c:6f:
8f:3c:40:8b:b9:ee:fb:10:88:90:87:9b:39:d3:7c:
38:5c:07:48:34:db:88:d4:f0:14:1f:6b:95:e7:08:
42:83:c3:ba:14:49:34:0e:d3:99:35:72:52:cc:cf:
04:2a:71:b1:2f:10:8c:7a:24:49:7a:5a:f3:f1:3c:
5b:bd:d7:35:de:ad:9f:cf:d0:41:55:a8:b5:8a:66:
49:ca:26:df:d8:72:05:19:de:f2:70:cd:46:62:78:
7f:ac:3e:59:b1:de:fb:9d:42:e5:1f:39:1d:7c:bc:
b7:c8:8d:a1:e7:6d:ec:f1:ec:fd:76:48:cd:f8:7f:
7f:ed:36:96:55:ad:e0:de:70:01:1f:aa:52:d4:24:
22:49:67:d4:45:5e:95:fe:0a:74:91:65:bd:cd:db:
b6:9d:2b:84:70:6e:12:8b:39:93:4c:df:17:07:c2:
68:3c:d5:3b:17:2c:32:65:13:c6:93:11:a0:ce:85:
81:4e:5d:58:da:61:ec:33:43:27:17:9d:03:ab:75:
17:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:CA:AE:F8:9C:31:1D:F8:6B:92:E3:65:F0:C5:6F:3D:CB:23:CA:C9
X509v3 Authority Key Identifier:
keyid:E1:90:0E:55:96:C0:83:74:97:F1:18:94:10:B1:ED:22:AC:DB:7E:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4ZAOVZbAg3SX8RiUELHtIqzbfhM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/06db38-9886-4d70-8904-27cab0a60264/1/4ZAOVZbAg3SX8RiUELHtIqzbfhM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/82/06db38-9886-4d70-8904-27cab0a60264/1/4ZAOVZbAg3SX8RiUELHtIqzbfhM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ce:9e:fd:41:11:d4:70:19:4b:d7:c2:3a:06:5f:ce:27:dd:43:
bd:18:6b:09:1f:6d:03:fe:8d:27:cf:b3:ba:d4:e9:0a:8f:3b:
94:73:92:72:e6:5e:46:91:d3:ff:4c:77:50:8c:34:23:cd:5f:
7a:e8:50:3a:e2:30:48:9e:0d:9a:b7:a1:5a:11:ec:20:2b:22:
f2:2f:d0:68:4d:27:af:88:32:57:b4:c0:1d:14:64:43:61:5c:
51:05:8c:f0:dd:03:2a:1e:f9:f8:ab:13:ff:15:92:01:a7:77:
9a:2e:79:e4:27:ae:0d:5f:1b:8b:62:53:d4:28:11:a8:90:c0:
11:e9:22:1e:05:c6:6c:22:af:c7:bd:2a:99:7d:c9:ea:76:a2:
0b:c3:5e:ae:89:de:c9:65:41:0f:9d:f0:b4:29:fb:5d:ac:db:
78:90:71:c4:af:d8:7a:36:bd:f9:eb:89:3b:cd:96:33:cb:fb:
c6:54:4d:88:70:3a:73:83:c0:61:3b:66:07:02:5f:f9:ae:d5:
0a:8c:52:89:40:25:73:5b:85:bf:e0:b8:5b:e4:c7:d8:2e:50:
eb:22:e9:95:68:29:6b:d1:37:99:07:74:67:78:db:87:60:8a:
c4:43:ab:d0:9a:a8:d2:fc:58:36:c4:56:f7:de:c2:42:9c:f6:
a6:89:87:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 10 13:03:30 2025 by rpki-client