Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/05ab60-dea6-43a3-87ef-7bfaeb195445/1/4GiTQCg3lEieQayGqvpEFPik1r4.mft
File: 4GiTQCg3lEieQayGqvpEFPik1r4.mft (raw, json)
Hash identifier: yJ1Oia0vmTB6otuVl6ZGyYb7GekazBir1SZ18gPXbb0=
Subject key identifier: 7D:65:05:46:73:61:E1:47:C6:35:BC:48:0C:65:9B:53:FB:8A:5D:C6
Authority key identifier: E0:68:93:40:28:37:94:48:9E:41:AC:86:AA:FA:44:14:F8:A4:D6:BE
Certificate issuer: /CN=e0689340283794489e41ac86aafa4414f8a4d6be
Certificate serial: 0197512188DA9F78E7317AD10C831033B5F0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4GiTQCg3lEieQayGqvpEFPik1r4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9a/05ab60-dea6-43a3-87ef-7bfaeb195445/1/4GiTQCg3lEieQayGqvpEFPik1r4.mft
Manifest number: 1584
Signing time: Sun 08 Jun 2025 20:00:41 +0000
Manifest this update: Sun 08 Jun 2025 20:00:41 +0000
Manifest next update: Mon 09 Jun 2025 20:00:41 +0000
Files and hashes: 1: 4GiTQCg3lEieQayGqvpEFPik1r4.crl (hash: Ye2LeuGaCmBMOE+yAdVv71mFxoeQ9LaAsiN8Q92Vuwk=)
2: URa5fH07dVIqF3IJwFtjDdus5xo.roa (hash: bQ7L6PdzuMotAJCcbvlg+nm2FLpujqZUwsr24eILLiQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9a/05ab60-dea6-43a3-87ef-7bfaeb195445/1/4GiTQCg3lEieQayGqvpEFPik1r4.crl
rsync://rpki.ripe.net/repository/DEFAULT/9a/05ab60-dea6-43a3-87ef-7bfaeb195445/1/4GiTQCg3lEieQayGqvpEFPik1r4.mft
rsync://rpki.ripe.net/repository/DEFAULT/4GiTQCg3lEieQayGqvpEFPik1r4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 17:19:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:51:21:88:da:9f:78:e7:31:7a:d1:0c:83:10:33:b5:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e0689340283794489e41ac86aafa4414f8a4d6be
Validity
Not Before: Jun 8 20:00:41 2025 GMT
Not After : Jun 9 20:00:41 2025 GMT
Subject: CN=7d6505467361e147c635bc480c659b53fb8a5dc6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:0c:0b:c3:0b:1a:48:44:53:b3:0c:6f:78:28:
2d:bc:0e:30:d5:f5:7f:80:5b:07:7a:ae:78:95:1a:
44:ab:92:55:8b:44:39:fb:11:95:63:75:08:f0:d1:
93:70:75:ef:64:d7:32:e9:a3:f2:c2:28:17:ec:2e:
e7:89:63:cf:29:8f:d2:d3:81:f3:ee:83:ee:ff:ce:
f4:82:81:ec:31:be:5f:18:42:fe:a0:c4:8f:f0:db:
b3:7c:54:f9:de:42:7d:83:b7:a0:8d:2d:c9:61:8a:
38:9c:53:19:97:34:c4:72:c1:ce:a8:7c:85:f5:93:
8c:00:fb:08:df:de:d1:f2:e5:e4:ce:9d:c7:c9:ac:
37:6a:3b:3a:54:49:8d:89:d9:ab:27:9a:35:f7:2e:
23:99:da:2b:10:39:9e:4f:93:72:88:4d:a4:5a:d5:
ca:12:55:8e:b7:05:2d:bb:d4:92:af:ba:2b:3a:82:
0f:2e:35:96:58:37:51:c3:7f:8b:a6:09:af:b0:23:
80:76:10:98:b1:11:b2:95:ef:42:5d:f9:df:80:ee:
eb:36:0d:8c:fe:9c:a1:3f:8d:51:fe:0a:88:9a:c6:
e0:d7:70:2f:7b:43:2e:64:ff:ef:5d:f0:84:ae:be:
ed:62:9e:b9:d6:c4:c9:5a:f5:29:15:7f:89:1c:4d:
f7:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:65:05:46:73:61:E1:47:C6:35:BC:48:0C:65:9B:53:FB:8A:5D:C6
X509v3 Authority Key Identifier:
keyid:E0:68:93:40:28:37:94:48:9E:41:AC:86:AA:FA:44:14:F8:A4:D6:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4GiTQCg3lEieQayGqvpEFPik1r4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/05ab60-dea6-43a3-87ef-7bfaeb195445/1/4GiTQCg3lEieQayGqvpEFPik1r4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/05ab60-dea6-43a3-87ef-7bfaeb195445/1/4GiTQCg3lEieQayGqvpEFPik1r4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:86:60:7b:df:31:f5:60:80:36:74:99:86:47:e4:24:25:13:
f6:5d:05:cf:4c:41:4b:8b:cb:57:8c:20:fa:ea:eb:87:6b:75:
05:14:b0:de:71:3a:df:03:d9:aa:29:44:37:62:ed:30:e6:35:
54:da:17:88:f2:a9:80:60:e7:38:65:5b:1c:72:9c:e8:3e:de:
a7:ae:3c:e1:db:19:f4:c9:44:fd:e7:e8:7c:94:57:b3:63:59:
7d:90:4d:0d:4c:5a:bf:05:e0:17:be:9b:d6:67:40:ed:e7:06:
86:41:44:0a:3a:20:5a:8a:f1:f3:a1:48:86:5b:b8:ae:93:58:
2a:00:2d:f7:26:14:f4:b3:22:af:e3:79:83:bc:5c:79:15:84:
26:ea:ed:c9:1a:39:0b:c1:37:60:e8:a1:97:c7:00:8b:7f:d7:
31:ff:5f:69:f4:97:53:aa:47:8a:81:a8:2a:23:85:e8:4a:91:
61:55:1b:e1:5b:8e:0d:26:c2:ee:bc:31:72:d1:b9:2a:04:12:
27:3d:b7:c0:e2:ae:30:91:aa:d8:8c:46:c6:4f:04:07:03:d7:
90:56:74:bc:e6:58:0f:fd:97:1a:f8:a3:34:55:d2:73:9b:93:
23:0c:b9:6e:02:87:fa:70:e6:2c:20:cd:c8:f5:e5:12:50:8d:
f2:5f:c8:f9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdRIYjan3jnMXrRDIMQM7XwMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUwNjg5MzQwMjgzNzk0NDg5ZTQxYWM4NmFhZmE0NDE0Zjhh
NGQ2YmUwHhcNMjUwNjA4MjAwMDQxWhcNMjUwNjA5MjAwMDQxWjAzMTEwLwYDVQQD
Eyg3ZDY1MDU0NjczNjFlMTQ3YzYzNWJjNDgwYzY1OWI1M2ZiOGE1ZGM2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhQwLwwsaSERTswxveCgtvA4w1fV/
gFsHeq54lRpEq5JVi0Q5+xGVY3UI8NGTcHXvZNcy6aPywigX7C7niWPPKY/S04Hz
7oPu/870goHsMb5fGEL+oMSP8NuzfFT53kJ9g7egjS3JYYo4nFMZlzTEcsHOqHyF
9ZOMAPsI397R8uXkzp3Hyaw3ajs6VEmNidmrJ5o19y4jmdorEDmeT5NyiE2kWtXK
ElWOtwUtu9SSr7orOoIPLjWWWDdRw3+LpgmvsCOAdhCYsRGyle9CXfnfgO7rNg2M
/pyhP41R/gqImsbg13Ave0MuZP/vXfCErr7tYp651sTJWvUpFX+JHE33mwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFH1lBUZzYeFHxjW8SAxlm1P7il3GMB8GA1UdIwQY
MBaAFOBok0AoN5RInkGshqr6RBT4pNa+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNEdpVFFDZzNsRWllUWF5R3F2cEVGUGlrMXI0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85YS8wNWFiNjAtZGVhNi00M2EzLTg3ZWYt
N2JmYWViMTk1NDQ1LzEvNEdpVFFDZzNsRWllUWF5R3F2cEVGUGlrMXI0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85YS8wNWFiNjAtZGVhNi00M2EzLTg3ZWYtN2JmYWViMTk1NDQ1
LzEvNEdpVFFDZzNsRWllUWF5R3F2cEVGUGlrMXI0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASYZge98x
9WCANnSZhkfkJCUT9l0Fz0xBS4vLV4wg+urrh2t1BRSw3nE63wPZqilEN2LtMOY1
VNoXiPKpgGDnOGVbHHKc6D7ep6484dsZ9MlE/efofJRXs2NZfZBNDUxavwXgF76b
1mdA7ecGhkFECjogWorx86FIhlu4rpNYKgAt9yYU9LMir+N5g7xceRWEJurtyRo5
C8E3YOihl8cAi3/XMf9fafSXU6pHioGoKiOF6EqRYVUb4VuODSbC7rwxctG5KgQS
Jz23wOKuMJGq2IxGxk8EBwPXkFZ0vOZYD/2XGvijNFXSc5uTIwy5bgKH+nDmLCDN
yPXlElCN8l/I+Q==
-----END CERTIFICATE-----
Generated at Sun Jun 8 23:26:18 2025 by rpki-client