
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/8f8e84-ff35-49be-8fa2-b6b7481bec9e/1/4j-PXFJCXfYrREVDOqz9jKW_Lp0.mft
File: 4j-PXFJCXfYrREVDOqz9jKW_Lp0.mft (raw, json)
Hash identifier: 8Xiu9uAM1j2Hp0nSXSC8NlrRyB8V0w48GkIWfxeehEE=
Subject key identifier: 77:30:F6:F2:B3:B9:33:14:E6:04:1D:43:7A:FC:58:C5:09:A5:7B:03
Authority key identifier: E2:3F:8F:5C:52:42:5D:F6:2B:44:45:43:3A:AC:FD:8C:A5:BF:2E:9D
Certificate issuer: /CN=e23f8f5c52425df62b4445433aacfd8ca5bf2e9d
Certificate serial: 01975D9364C2100E06172021EA92F6A4F985
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4j-PXFJCXfYrREVDOqz9jKW_Lp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/8f8e84-ff35-49be-8fa2-b6b7481bec9e/1/4j-PXFJCXfYrREVDOqz9jKW_Lp0.mft
Manifest number: 0206
Signing time: Wed 11 Jun 2025 06:00:29 +0000
Manifest this update: Wed 11 Jun 2025 06:00:29 +0000
Manifest next update: Thu 12 Jun 2025 06:00:29 +0000
Files and hashes: 1: 4j-PXFJCXfYrREVDOqz9jKW_Lp0.crl (hash: AvbYepAREI2iwMphl0+TmWc6IuSAL6C8i181WJjtE6Y=)
2: 6ppH0TTYhzfLzHV3xSzl4LSdV6c.roa (hash: OehC5Yx+JGVn7qI8wxptwUUS4CQUtx99kzGyWmtybhI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/8f8e84-ff35-49be-8fa2-b6b7481bec9e/1/4j-PXFJCXfYrREVDOqz9jKW_Lp0.crl
rsync://rpki.ripe.net/repository/DEFAULT/90/8f8e84-ff35-49be-8fa2-b6b7481bec9e/1/4j-PXFJCXfYrREVDOqz9jKW_Lp0.mft
rsync://rpki.ripe.net/repository/DEFAULT/4j-PXFJCXfYrREVDOqz9jKW_Lp0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 12 Jun 2025 06:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:5d:93:64:c2:10:0e:06:17:20:21:ea:92:f6:a4:f9:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e23f8f5c52425df62b4445433aacfd8ca5bf2e9d
Validity
Not Before: Jun 11 06:00:29 2025 GMT
Not After : Jun 12 06:00:29 2025 GMT
Subject: CN=7730f6f2b3b93314e6041d437afc58c509a57b03
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:42:62:95:fe:8f:bc:67:43:02:ee:3e:69:33:
c9:d0:e8:55:f6:76:ee:8d:b1:9e:0e:22:b5:72:51:
fc:68:45:97:b3:a1:4d:d4:b8:c9:03:dc:e1:9a:81:
0f:de:0e:36:6d:1e:5a:d2:51:25:c8:d0:11:87:4c:
3f:72:9b:42:7b:15:05:ad:70:4e:02:47:48:f2:19:
2d:73:22:8c:99:f7:18:6f:e6:0b:a1:cb:77:1f:d3:
95:7e:d3:e5:c6:35:80:7e:cb:fd:ad:74:d7:de:eb:
5d:db:91:92:44:5c:e1:b2:76:93:d9:46:7b:c7:9d:
9f:09:ca:06:44:43:3f:68:fa:43:61:85:1d:20:38:
3b:20:d6:87:b4:84:1c:14:8e:4b:04:70:7b:d4:c8:
9c:c5:f4:9a:72:12:60:5b:61:28:9a:05:e1:91:83:
f8:cf:ca:ae:22:46:5f:c6:88:f1:2c:a0:68:de:75:
00:ad:f9:87:0d:72:3e:4a:22:24:41:cf:fd:34:d3:
42:ff:56:db:32:9c:03:88:37:f0:80:ec:bc:f7:1a:
3b:7f:7d:ee:db:69:14:b1:62:37:fa:6a:65:fd:9c:
ad:70:cd:ac:22:c5:15:b4:c6:d7:71:df:a7:60:f3:
11:99:9b:76:04:c7:38:62:e5:b6:8c:6d:ce:c7:65:
a5:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:30:F6:F2:B3:B9:33:14:E6:04:1D:43:7A:FC:58:C5:09:A5:7B:03
X509v3 Authority Key Identifier:
keyid:E2:3F:8F:5C:52:42:5D:F6:2B:44:45:43:3A:AC:FD:8C:A5:BF:2E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4j-PXFJCXfYrREVDOqz9jKW_Lp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/8f8e84-ff35-49be-8fa2-b6b7481bec9e/1/4j-PXFJCXfYrREVDOqz9jKW_Lp0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/8f8e84-ff35-49be-8fa2-b6b7481bec9e/1/4j-PXFJCXfYrREVDOqz9jKW_Lp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a8:02:5c:08:4f:6f:6d:24:ab:54:1a:fe:05:19:e1:6c:03:be:
dc:0e:4f:3b:4d:b6:16:f8:8a:3a:0e:94:d6:09:55:8a:9d:b1:
ea:f0:4f:24:ef:16:fb:89:37:5b:a7:60:11:e7:bd:3d:4b:63:
7b:3f:40:fa:d1:5f:f8:70:af:5a:b1:17:c7:24:b4:c5:aa:4d:
c7:23:dc:73:c1:b4:cd:21:8c:f4:dd:50:bc:af:7f:85:f3:13:
d5:0f:91:a2:a7:72:96:b8:1e:6e:6a:bf:df:95:4f:d8:81:4c:
49:32:c3:ac:23:66:59:5b:51:c1:db:e2:7d:e6:fe:6f:ce:f2:
2c:81:2c:ff:6e:0c:ab:fb:55:cf:19:7c:d6:14:04:5a:60:c2:
27:58:1c:cd:ac:26:26:d7:05:77:fa:08:9b:70:95:42:b1:3d:
24:41:f9:64:6f:ad:97:d3:60:e6:d0:6e:d5:7a:6e:c6:45:8f:
67:c6:a5:45:5d:53:17:c0:09:5a:67:46:ef:85:fd:3e:95:fc:
64:f5:b0:ff:45:62:6f:9b:5f:9e:63:33:59:a0:bf:24:6e:0c:
f1:e8:93:e8:55:24:43:87:7e:ae:66:99:42:b6:a3:0a:e7:b7:
d9:cb:92:0b:8d:0e:d0:4a:c2:a5:83:f3:a3:ca:69:16:53:bf:
e1:83:2b:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 11 14:39:46 2025 by rpki-client