Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/06db38-9886-4d70-8904-27cab0a60264/1/4ZAOVZbAg3SX8RiUELHtIqzbfhM.mft
File: 4ZAOVZbAg3SX8RiUELHtIqzbfhM.mft (raw, json)
Hash identifier: gQdUWLOqFVlEJqPs/n+zJxP5UCuEOQV6KQ1nuhSbwPM=
Subject key identifier: F1:04:4B:FF:28:FB:2C:BF:7D:E4:17:68:F7:68:F0:D2:5D:1A:B7:B0
Authority key identifier: E1:90:0E:55:96:C0:83:74:97:F1:18:94:10:B1:ED:22:AC:DB:7E:13
Certificate issuer: /CN=e1900e5596c0837497f1189410b1ed22acdb7e13
Certificate serial: 019769CE9D3615312D9A4C94B59E9E9C4C51
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4ZAOVZbAg3SX8RiUELHtIqzbfhM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/06db38-9886-4d70-8904-27cab0a60264/1/4ZAOVZbAg3SX8RiUELHtIqzbfhM.mft
Manifest number: 0AA7
Signing time: Fri 13 Jun 2025 15:00:37 +0000
Manifest this update: Fri 13 Jun 2025 15:00:37 +0000
Manifest next update: Sat 14 Jun 2025 15:00:37 +0000
Files and hashes: 1: 4ZAOVZbAg3SX8RiUELHtIqzbfhM.crl (hash: Sm8tDbul9w2m9y84xgRZ9WnNgX0WW0xb1CjB3Bz4AXk=)
2: 8jfWRZ1NLj1bjkrxzRMG9yYupLo.roa (hash: 89HNIKxmIWfFBZvw0N2AfHWlUXDjHZG4VVH2GueEE+4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/82/06db38-9886-4d70-8904-27cab0a60264/1/4ZAOVZbAg3SX8RiUELHtIqzbfhM.crl
rsync://rpki.ripe.net/repository/DEFAULT/82/06db38-9886-4d70-8904-27cab0a60264/1/4ZAOVZbAg3SX8RiUELHtIqzbfhM.mft
rsync://rpki.ripe.net/repository/DEFAULT/4ZAOVZbAg3SX8RiUELHtIqzbfhM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 07:00:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:69:ce:9d:36:15:31:2d:9a:4c:94:b5:9e:9e:9c:4c:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e1900e5596c0837497f1189410b1ed22acdb7e13
Validity
Not Before: Jun 13 15:00:37 2025 GMT
Not After : Jun 14 15:00:37 2025 GMT
Subject: CN=f1044bff28fb2cbf7de41768f768f0d25d1ab7b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:4b:f2:57:04:fd:34:08:54:03:6d:39:36:f3:
e8:fe:ad:86:30:57:ed:2c:35:1b:f9:16:4b:c6:c5:
f3:29:16:3e:24:86:16:a1:a9:bf:6a:b8:6d:0d:72:
4b:c1:af:fe:cd:92:85:af:3d:3a:63:dc:b2:ae:1e:
77:f6:ef:47:35:fc:bd:c2:93:14:97:73:40:67:8e:
b8:c9:9f:57:79:d4:6d:b5:b8:1b:28:ae:26:81:15:
7c:b1:3c:7e:23:80:d6:40:bb:57:81:10:7c:55:2d:
17:e8:17:d3:ac:47:3e:7e:42:37:92:20:ec:b2:95:
05:6b:7d:b7:0b:0d:89:83:b4:22:bb:fa:6e:c0:04:
d0:03:bb:44:b7:19:20:bc:0e:99:32:0d:36:7b:82:
12:8a:51:37:7e:32:9c:0b:cf:92:36:aa:65:d9:9d:
fe:3c:b4:f9:85:cf:94:d3:1c:d4:7e:c0:84:2d:50:
17:8a:35:39:cf:17:f7:fb:3e:d5:25:84:13:bc:fd:
d2:ce:0c:48:f9:ce:03:68:35:59:5c:15:69:48:45:
a7:b1:14:eb:23:30:74:6b:3f:3a:92:47:06:67:30:
8d:53:31:e1:c4:4d:ab:3d:85:bd:b1:f2:a7:c1:1c:
00:6c:c7:0b:22:80:7c:02:45:52:ec:9a:dd:7e:41:
3d:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:04:4B:FF:28:FB:2C:BF:7D:E4:17:68:F7:68:F0:D2:5D:1A:B7:B0
X509v3 Authority Key Identifier:
keyid:E1:90:0E:55:96:C0:83:74:97:F1:18:94:10:B1:ED:22:AC:DB:7E:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4ZAOVZbAg3SX8RiUELHtIqzbfhM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/06db38-9886-4d70-8904-27cab0a60264/1/4ZAOVZbAg3SX8RiUELHtIqzbfhM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/82/06db38-9886-4d70-8904-27cab0a60264/1/4ZAOVZbAg3SX8RiUELHtIqzbfhM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:68:16:0d:4c:e9:17:6c:f8:a8:81:85:96:4f:b5:ca:49:3d:
21:15:5e:af:c4:b3:49:62:f3:7c:0a:d7:f6:91:c9:c7:02:a0:
68:5f:d4:2b:25:56:a7:7d:b7:7e:6e:bf:75:51:b9:14:99:a1:
bb:54:00:49:c2:11:f1:4e:c7:04:e5:30:b7:2d:a1:13:c2:15:
dd:8e:97:07:72:55:ce:e6:f4:32:40:5f:47:9b:13:e4:4c:22:
cb:9d:7f:54:cd:cd:80:32:68:af:97:51:d8:1f:4a:f8:e6:59:
be:99:98:3d:ce:e3:f9:2d:44:fe:69:35:d7:80:12:4c:ab:5a:
53:36:79:c5:58:75:2a:6d:59:8a:98:42:e5:33:df:75:75:54:
f7:63:d0:04:94:18:29:d5:40:82:de:a8:a7:e6:1a:71:6b:53:
ab:f9:59:cd:3f:ca:e2:13:69:38:08:d9:60:54:78:e2:4f:71:
64:87:e8:62:99:aa:69:57:f1:fe:f0:0b:a3:f5:64:28:1e:7e:
76:74:da:0e:ff:86:60:36:d4:54:08:35:6d:4e:30:ac:0d:20:
f0:e1:21:76:b3:b9:f6:f7:82:0c:6d:1b:1a:95:bc:91:67:4d:
75:39:0f:99:b6:2d:7d:4e:31:5d:ae:52:db:68:2f:fb:5e:17:
9e:0f:7e:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 17:01:48 2025 by rpki-client