Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9d/d612a3-4631-47de-940d-8be0d97682ab/1/4OOXbZ7LgwmoGB-9AlylL-8WGZk.mft
File: 4OOXbZ7LgwmoGB-9AlylL-8WGZk.mft (raw, json)
Hash identifier: 5SNClL7fHYv3eFVrFlmf/IJGRnDmMPZ7ZFgQBeE0d3Q=
Subject key identifier: 21:23:5B:95:83:99:4B:0D:3F:2E:25:33:74:8A:D1:D8:D6:9E:89:D2
Authority key identifier: E0:E3:97:6D:9E:CB:83:09:A8:18:1F:BD:02:5C:A5:2F:EF:16:19:99
Certificate issuer: /CN=e0e3976d9ecb8309a8181fbd025ca52fef161999
Certificate serial: 0197526B0BFDF3E335082D8624A33BAB5E95
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4OOXbZ7LgwmoGB-9AlylL-8WGZk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9d/d612a3-4631-47de-940d-8be0d97682ab/1/4OOXbZ7LgwmoGB-9AlylL-8WGZk.mft
Manifest number: 099C
Signing time: Mon 09 Jun 2025 02:00:36 +0000
Manifest this update: Mon 09 Jun 2025 02:00:36 +0000
Manifest next update: Tue 10 Jun 2025 02:00:36 +0000
Files and hashes: 1: 4OOXbZ7LgwmoGB-9AlylL-8WGZk.crl (hash: 9klUsw0sG17bMulWWspwh6v8uz6vdtqXwiIDc7hTCu0=)
2: cK4llrkBdLlV4HeILjRyQ98esEM.roa (hash: MuU2BWlfRFj75k9zGngWfQu7w/ZtaYOQ1aHN3Tj8NDI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9d/d612a3-4631-47de-940d-8be0d97682ab/1/4OOXbZ7LgwmoGB-9AlylL-8WGZk.crl
rsync://rpki.ripe.net/repository/DEFAULT/9d/d612a3-4631-47de-940d-8be0d97682ab/1/4OOXbZ7LgwmoGB-9AlylL-8WGZk.mft
rsync://rpki.ripe.net/repository/DEFAULT/4OOXbZ7LgwmoGB-9AlylL-8WGZk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 21:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:52:6b:0b:fd:f3:e3:35:08:2d:86:24:a3:3b:ab:5e:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e0e3976d9ecb8309a8181fbd025ca52fef161999
Validity
Not Before: Jun 9 02:00:36 2025 GMT
Not After : Jun 10 02:00:36 2025 GMT
Subject: CN=21235b9583994b0d3f2e2533748ad1d8d69e89d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:13:27:d3:cb:80:a3:c6:7a:05:08:19:58:5c:
d2:e6:93:64:bc:c7:ac:22:92:ff:a4:66:bb:db:c0:
0a:bd:b8:ed:29:62:ad:84:35:c4:e3:04:d4:22:a4:
bf:c8:27:f2:00:68:d0:a5:66:d4:3d:01:57:80:09:
a5:a5:a6:ad:47:1c:14:57:e4:eb:89:06:a7:97:ec:
2f:c1:5e:90:41:89:85:64:21:a7:ce:ed:19:d5:6c:
c1:18:76:d3:1c:15:5a:87:93:40:0c:be:23:c6:b4:
9e:c2:8b:f8:f8:12:bc:1e:9f:2d:89:98:d0:c7:34:
60:5b:47:d4:a3:8a:f3:c0:95:9e:ed:21:16:e0:4c:
8a:6f:a1:52:6a:6b:d2:11:b7:8a:5e:5e:74:d6:97:
7a:e0:06:ed:8e:3f:4a:9c:d8:86:f9:7d:0d:ca:ac:
ee:3a:e9:e1:1c:e8:a4:36:33:38:94:90:34:ec:af:
35:58:8f:ab:ed:fa:69:a0:b5:76:9f:9b:b4:51:db:
76:8c:79:cf:75:3f:ff:7b:7c:7e:b3:51:cc:13:57:
ba:21:ce:eb:41:8f:00:77:3d:32:40:ec:8f:61:dd:
a1:08:a3:9c:84:32:61:45:39:09:0a:0b:e6:dc:52:
06:a2:9d:a7:94:0e:eb:ec:80:dd:f8:71:32:a3:1f:
10:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:23:5B:95:83:99:4B:0D:3F:2E:25:33:74:8A:D1:D8:D6:9E:89:D2
X509v3 Authority Key Identifier:
keyid:E0:E3:97:6D:9E:CB:83:09:A8:18:1F:BD:02:5C:A5:2F:EF:16:19:99
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4OOXbZ7LgwmoGB-9AlylL-8WGZk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/d612a3-4631-47de-940d-8be0d97682ab/1/4OOXbZ7LgwmoGB-9AlylL-8WGZk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/d612a3-4631-47de-940d-8be0d97682ab/1/4OOXbZ7LgwmoGB-9AlylL-8WGZk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:23:c9:91:83:a0:3e:c3:11:ee:cf:f6:02:84:eb:ed:ec:40:
3c:34:dc:27:b7:52:5d:4c:0c:54:72:6b:9a:f3:3b:93:26:ec:
0c:9f:98:1b:26:65:b5:d8:03:38:78:25:22:db:26:11:fa:6a:
04:c2:aa:08:c9:27:b6:22:a1:aa:62:6d:87:3a:0d:3f:68:1a:
a6:f7:ec:11:bd:bf:71:dd:2b:2b:51:62:04:b8:13:72:ff:f5:
1f:d6:9d:64:5f:2b:c6:b8:f9:39:e9:3f:f2:a7:fb:2f:c7:82:
8c:23:0a:64:c7:ae:62:d7:cf:d4:bc:5d:91:57:a1:bb:68:47:
6f:f8:e5:c8:e8:a1:c6:4e:b1:69:59:99:67:4f:20:15:fb:ec:
8e:d5:48:e4:fa:16:8e:18:f0:93:12:86:38:f8:a7:f3:74:68:
ca:d2:e8:43:5c:46:eb:3a:4b:cd:78:28:8d:99:05:87:ec:79:
67:c4:eb:4d:90:41:32:a5:7d:ca:15:58:22:34:2d:4b:43:00:
4a:02:29:62:09:be:9e:b7:f5:9e:d7:b7:8e:09:b8:0f:63:93:
f5:20:b9:cb:c7:88:8d:9a:69:e7:95:06:c4:62:04:ee:fd:b2:
16:4d:37:cf:7a:c1:e5:1c:3c:52:9d:49:d8:a4:c5:40:60:03:
a1:32:29:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 07:26:06 2025 by rpki-client