Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/572ec8-7456-4e55-b776-d8ece26afec0/1/4-RuLEAWqNc5LIV0E0_UeTuUFaQ.mft
File: 4-RuLEAWqNc5LIV0E0_UeTuUFaQ.mft (raw, json)
Hash identifier: Cwf0NUaAR9vQ6KGbmpvLh8JM12EAReWWBYG9Rnt7Q8w=
Subject key identifier: E8:89:23:15:AD:2B:46:BA:48:6A:50:54:B1:D4:58:1C:E6:5F:53:2B
Authority key identifier: E3:E4:6E:2C:40:16:A8:D7:39:2C:85:74:13:4F:D4:79:3B:94:15:A4
Certificate issuer: /CN=e3e46e2c4016a8d7392c8574134fd4793b9415a4
Certificate serial: 019759EDCE3D0A16754B83679040B3F46B7E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4-RuLEAWqNc5LIV0E0_UeTuUFaQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/572ec8-7456-4e55-b776-d8ece26afec0/1/4-RuLEAWqNc5LIV0E0_UeTuUFaQ.mft
Manifest number: 10F3
Signing time: Tue 10 Jun 2025 13:00:46 +0000
Manifest this update: Tue 10 Jun 2025 13:00:46 +0000
Manifest next update: Wed 11 Jun 2025 13:00:46 +0000
Files and hashes: 1: 4-RuLEAWqNc5LIV0E0_UeTuUFaQ.crl (hash: x52eSdZN6LbdC0S/HUq2umd0B2SHo2NAeHr7VH2tU0g=)
2: rxnNIrhG3QldlOPtvjeA2wvjFbs.roa (hash: 2BblVg4dCI71TgTK0hUX2laI8AdtzWYFSV42O2qiwl4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/572ec8-7456-4e55-b776-d8ece26afec0/1/4-RuLEAWqNc5LIV0E0_UeTuUFaQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/ac/572ec8-7456-4e55-b776-d8ece26afec0/1/4-RuLEAWqNc5LIV0E0_UeTuUFaQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/4-RuLEAWqNc5LIV0E0_UeTuUFaQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 11 Jun 2025 13:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:59:ed:ce:3d:0a:16:75:4b:83:67:90:40:b3:f4:6b:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e3e46e2c4016a8d7392c8574134fd4793b9415a4
Validity
Not Before: Jun 10 13:00:46 2025 GMT
Not After : Jun 11 13:00:46 2025 GMT
Subject: CN=e8892315ad2b46ba486a5054b1d4581ce65f532b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:05:cf:62:2a:a3:64:09:ce:bf:96:b9:9b:43:
72:79:c6:ea:d9:3f:c4:9c:d1:18:c5:d1:e6:68:cd:
5f:10:73:19:97:0a:63:59:88:56:3b:34:d0:83:76:
be:50:44:87:75:ab:44:e3:52:ab:fd:98:fa:c4:41:
13:69:cf:4e:d3:b0:0d:04:e8:4e:b2:2b:c8:a0:87:
91:b5:67:d4:51:f4:3a:73:9a:da:e0:53:24:72:25:
65:eb:65:63:e2:45:e6:e0:12:37:2e:84:42:46:43:
d3:88:ca:c5:e0:33:2b:84:4b:f4:0f:67:b7:64:e2:
10:b0:4c:68:6e:93:5c:9f:17:b5:5b:a4:bc:aa:2a:
ef:d5:5d:bc:fe:a4:87:e1:5d:bb:4c:f0:a6:9d:eb:
c3:92:16:b0:48:db:d8:7b:bd:dd:1a:df:6c:0c:2d:
80:cb:f2:3f:1c:8b:4e:ed:b8:16:85:b3:d2:f1:18:
42:57:f1:be:28:97:3c:90:55:96:d7:1f:16:32:d0:
99:89:99:8c:98:3c:00:82:3e:89:d4:0f:61:bc:4b:
e3:0d:81:09:7a:87:09:c1:40:a1:f3:98:14:b8:d6:
66:99:02:92:df:96:1a:59:3c:b6:4b:ae:57:7b:24:
7f:e9:53:f8:d7:7c:28:de:a7:6c:95:a3:00:92:e6:
52:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:89:23:15:AD:2B:46:BA:48:6A:50:54:B1:D4:58:1C:E6:5F:53:2B
X509v3 Authority Key Identifier:
keyid:E3:E4:6E:2C:40:16:A8:D7:39:2C:85:74:13:4F:D4:79:3B:94:15:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4-RuLEAWqNc5LIV0E0_UeTuUFaQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/572ec8-7456-4e55-b776-d8ece26afec0/1/4-RuLEAWqNc5LIV0E0_UeTuUFaQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/572ec8-7456-4e55-b776-d8ece26afec0/1/4-RuLEAWqNc5LIV0E0_UeTuUFaQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:66:5b:e4:a2:73:cf:46:25:b2:7f:83:ff:fb:fc:53:0e:33:
8f:07:b5:b5:c2:97:d1:63:db:a8:c4:41:37:9e:64:e5:bd:fe:
cb:82:1a:21:33:f1:e9:eb:ba:ca:21:e9:e2:47:1c:80:70:11:
d1:e5:97:21:ba:40:9a:fb:b9:a4:54:6b:d1:0d:ae:9f:29:e3:
7a:a4:31:71:75:ff:df:f8:e6:75:69:0b:83:8a:7a:7e:e5:11:
c4:a8:48:aa:fe:89:2c:55:39:49:3d:3d:3d:da:9e:d0:4e:f8:
7f:45:ab:97:d8:18:88:69:11:77:d1:a0:a9:b6:3e:6f:bb:c0:
2c:41:53:de:e9:08:9b:dd:74:51:84:e7:e0:df:1b:53:fb:02:
ca:71:ec:ae:01:f3:90:71:eb:67:db:d1:a0:bc:82:11:2c:e1:
5e:cc:b9:fb:d6:aa:cc:ec:23:42:14:dd:18:4c:b0:fe:4c:44:
e2:67:e8:e2:5f:55:7e:9b:a6:1d:c1:7c:f9:1e:c8:05:5c:40:
d5:76:5f:27:0d:e1:9d:1f:04:ad:98:5a:41:a2:ba:3a:60:5a:
43:00:91:67:b5:71:ba:d2:5f:77:9a:27:d1:bd:d2:c0:b0:96:
b4:6e:29:56:93:0b:a1:db:0d:7d:d1:9b:f1:9e:e9:f8:0d:50:
07:67:b7:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 10 18:30:15 2025 by rpki-client