Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/7e3025-8caf-402c-b54f-cbb8cfee6e3c/1/4kLCt011daIop-ZPBAbzo5fHrlY.mft
File: 4kLCt011daIop-ZPBAbzo5fHrlY.mft (raw, json)
Hash identifier: pbdy1Wd3YKKnX/zm22K957cWielDtlYSCYN6z0G07PI=
Subject key identifier: 91:CA:21:B8:6E:B6:37:BE:ED:56:AE:58:46:9A:9E:24:63:CD:D0:BC
Authority key identifier: E2:42:C2:B7:4D:75:75:A2:28:A7:E6:4F:04:06:F3:A3:97:C7:AE:56
Certificate issuer: /CN=e242c2b74d7575a228a7e64f0406f3a397c7ae56
Certificate serial: 01974B1F8993385182AFC1C7902F06C91BF7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4kLCt011daIop-ZPBAbzo5fHrlY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/7e3025-8caf-402c-b54f-cbb8cfee6e3c/1/4kLCt011daIop-ZPBAbzo5fHrlY.mft
Manifest number: 093F
Signing time: Sat 07 Jun 2025 16:00:47 +0000
Manifest this update: Sat 07 Jun 2025 16:00:47 +0000
Manifest next update: Sun 08 Jun 2025 16:00:47 +0000
Files and hashes: 1: 4kLCt011daIop-ZPBAbzo5fHrlY.crl (hash: aKbrj/LZr3VrFUq54Ds3cevpg3fthCATo9BkKYFtXUg=)
2: tqH_QlpRHC3I-MGoNxLkAHQ-nF8.roa (hash: NbmtGcVLSkgpCEX2NZ9d9iO41gK+6pDcIvg0Zs3pCA8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/7e3025-8caf-402c-b54f-cbb8cfee6e3c/1/4kLCt011daIop-ZPBAbzo5fHrlY.crl
rsync://rpki.ripe.net/repository/DEFAULT/e5/7e3025-8caf-402c-b54f-cbb8cfee6e3c/1/4kLCt011daIop-ZPBAbzo5fHrlY.mft
rsync://rpki.ripe.net/repository/DEFAULT/4kLCt011daIop-ZPBAbzo5fHrlY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 09:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4b:1f:89:93:38:51:82:af:c1:c7:90:2f:06:c9:1b:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e242c2b74d7575a228a7e64f0406f3a397c7ae56
Validity
Not Before: Jun 7 16:00:47 2025 GMT
Not After : Jun 8 16:00:47 2025 GMT
Subject: CN=91ca21b86eb637beed56ae58469a9e2463cdd0bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:1b:98:64:b0:f5:0b:5e:db:78:68:79:e4:f6:
eb:83:64:5f:be:53:2f:7f:97:54:a7:27:2f:cd:5a:
41:47:bb:0c:70:fd:cc:e1:9a:bf:c7:f1:02:d7:5a:
21:d1:10:f2:cb:ab:77:5e:61:19:79:8e:f9:24:49:
7e:0a:ea:e6:e9:e8:2f:07:d9:9b:b2:40:a6:0a:1f:
e9:6a:dd:8e:e8:1d:8b:da:7c:26:46:6b:a8:36:a9:
c5:59:2f:c1:68:0d:67:87:dc:94:cd:26:fe:53:e2:
76:f4:c2:b5:5f:ad:3f:4c:8b:21:89:0f:f8:8a:6a:
42:d5:09:71:ba:9a:5b:5d:75:00:99:08:78:b7:f8:
ca:3b:7c:3f:5a:7a:4a:fd:7d:07:41:20:ff:1b:62:
6a:8c:8c:9d:58:f2:20:47:5b:90:67:49:8c:83:be:
88:15:c2:f5:f7:b7:e5:65:48:2d:68:0a:69:07:e4:
71:e1:88:60:3b:38:e8:2c:ef:17:02:b2:2f:6c:2c:
e5:95:7f:34:a3:56:d4:70:d7:40:90:b0:8b:c2:24:
ae:93:bc:3d:c6:fc:8b:d5:f4:d1:c8:03:69:0c:0d:
4c:26:d7:15:73:d3:f4:ef:73:33:a2:5b:a6:13:fc:
f6:3a:4d:e5:0e:a9:8f:5c:48:60:59:40:7f:93:44:
8d:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:CA:21:B8:6E:B6:37:BE:ED:56:AE:58:46:9A:9E:24:63:CD:D0:BC
X509v3 Authority Key Identifier:
keyid:E2:42:C2:B7:4D:75:75:A2:28:A7:E6:4F:04:06:F3:A3:97:C7:AE:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4kLCt011daIop-ZPBAbzo5fHrlY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/7e3025-8caf-402c-b54f-cbb8cfee6e3c/1/4kLCt011daIop-ZPBAbzo5fHrlY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/7e3025-8caf-402c-b54f-cbb8cfee6e3c/1/4kLCt011daIop-ZPBAbzo5fHrlY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:3a:a1:0d:de:7a:99:87:65:f1:f5:a4:a7:be:a0:ac:ef:7a:
7a:90:b7:76:d9:55:41:3b:fd:ab:25:1e:67:53:ca:0a:a1:d0:
3e:08:2f:11:e7:06:83:96:e7:5d:56:1e:fa:2b:60:6a:78:0e:
d8:09:3b:3d:06:98:ac:29:5a:eb:85:54:73:71:e1:55:bb:64:
a7:7c:91:8d:f4:0a:e2:d3:71:0b:40:fa:43:db:b8:59:80:83:
af:63:48:c8:ee:0d:dd:08:ff:93:d0:ba:38:80:03:19:57:1e:
54:fa:86:49:f1:e8:4e:c7:c7:e4:bd:82:1a:78:87:95:c3:7b:
c7:b3:f9:e1:ff:4b:f7:8e:02:57:55:93:2f:c3:d1:f2:e1:94:
0c:6e:eb:0e:c3:99:29:e1:f0:6f:65:1f:9b:5c:68:c2:3a:03:
ba:f9:68:91:ff:58:cf:3c:fa:23:c3:ce:ad:4e:a3:10:12:82:
56:49:a4:ec:23:12:d2:7d:f8:56:2f:36:39:ee:ff:88:4f:67:
34:25:63:17:8d:ca:ad:c3:86:62:67:a1:a9:b4:9c:b8:40:28:
e8:91:f2:2d:1b:53:79:54:b4:42:f9:8e:60:ed:92:1a:c5:87:
71:55:3f:08:8d:bf:2d:6b:e3:8e:f0:4b:40:e0:50:81:b4:ed:
b5:8b:f3:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 18:44:47 2025 by rpki-client