Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/317cc1-64c2-472e-914b-0bfb86884404/1/4kycUM9OLawF4fBDKCJOIKRgXXc.mft
File: 4kycUM9OLawF4fBDKCJOIKRgXXc.mft (raw, json)
Hash identifier: wZz8w0YrRPc2sAgbYxVHQXX/L8rnSbfs/t3dQ+TJIcs=
Subject key identifier: 6A:68:9B:D0:80:44:F0:AB:E1:69:5E:0C:BB:02:CF:66:ED:E2:65:85
Authority key identifier: E2:4C:9C:50:CF:4E:2D:AC:05:E1:F0:43:28:22:4E:20:A4:60:5D:77
Certificate issuer: /CN=e24c9c50cf4e2dac05e1f04328224e20a4605d77
Certificate serial: 0197458B52B49A4B97AAE987E28CFF322194
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4kycUM9OLawF4fBDKCJOIKRgXXc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/317cc1-64c2-472e-914b-0bfb86884404/1/4kycUM9OLawF4fBDKCJOIKRgXXc.mft
Manifest number: 0C62
Signing time: Fri 06 Jun 2025 14:00:47 +0000
Manifest this update: Fri 06 Jun 2025 14:00:47 +0000
Manifest next update: Sat 07 Jun 2025 14:00:47 +0000
Files and hashes: 1: 4kycUM9OLawF4fBDKCJOIKRgXXc.crl (hash: 6p9fR51KCOzrybNirwcTshbGi3QUpvwWU1ARqNJ783Q=)
2: Q3-HdEPCyjZHl-Sg4_PuJRYIuT8.roa (hash: XEPQxkckVuIQ5rwgxJmegps237sKjQ4AEXFUBlmNa1Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/317cc1-64c2-472e-914b-0bfb86884404/1/4kycUM9OLawF4fBDKCJOIKRgXXc.crl
rsync://rpki.ripe.net/repository/DEFAULT/f4/317cc1-64c2-472e-914b-0bfb86884404/1/4kycUM9OLawF4fBDKCJOIKRgXXc.mft
rsync://rpki.ripe.net/repository/DEFAULT/4kycUM9OLawF4fBDKCJOIKRgXXc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 14:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:45:8b:52:b4:9a:4b:97:aa:e9:87:e2:8c:ff:32:21:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e24c9c50cf4e2dac05e1f04328224e20a4605d77
Validity
Not Before: Jun 6 14:00:47 2025 GMT
Not After : Jun 7 14:00:47 2025 GMT
Subject: CN=6a689bd08044f0abe1695e0cbb02cf66ede26585
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:17:48:4a:55:1e:4e:7c:3a:26:27:bd:0b:5f:
b3:40:7d:7a:4e:c2:f4:62:6b:7d:bd:88:92:cb:d1:
43:7f:41:96:ec:12:a7:4b:94:2c:96:2a:92:63:43:
41:9f:a6:5b:f6:e2:ef:c9:d4:81:f9:9f:cf:43:5a:
51:de:83:a3:80:7a:e3:0c:0f:2f:8d:f4:59:39:0b:
84:dd:b6:ab:31:80:0a:f9:90:67:40:9a:37:e0:21:
10:89:48:71:e0:b7:c0:be:2f:1b:2d:9c:5d:1e:94:
55:88:41:ce:5c:b1:cc:c8:52:1d:ac:81:8e:cb:5b:
63:99:29:0f:39:f1:c1:44:3e:1d:ee:23:6b:30:bb:
38:d3:cd:36:6c:49:47:bb:d2:e6:4f:ea:0e:85:b6:
e2:13:4e:bf:a2:35:81:ce:de:db:d9:90:60:4d:0a:
07:c2:80:bb:c1:53:26:45:cd:09:36:ed:72:ad:5e:
70:64:0b:11:28:38:cc:7c:c8:11:4d:b6:1c:1f:4f:
07:de:40:ed:46:c5:99:95:c3:5f:8f:dd:b4:bd:df:
48:9a:6b:05:1c:cf:df:9c:6e:ab:09:55:9c:70:53:
9c:26:5a:b4:63:ea:70:de:7b:b9:b3:48:86:20:7d:
ce:08:4d:d4:16:34:d4:35:ee:26:fa:34:84:91:73:
ff:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:68:9B:D0:80:44:F0:AB:E1:69:5E:0C:BB:02:CF:66:ED:E2:65:85
X509v3 Authority Key Identifier:
keyid:E2:4C:9C:50:CF:4E:2D:AC:05:E1:F0:43:28:22:4E:20:A4:60:5D:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4kycUM9OLawF4fBDKCJOIKRgXXc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/317cc1-64c2-472e-914b-0bfb86884404/1/4kycUM9OLawF4fBDKCJOIKRgXXc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/317cc1-64c2-472e-914b-0bfb86884404/1/4kycUM9OLawF4fBDKCJOIKRgXXc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ac:38:e3:91:7c:93:a4:68:c4:df:96:c0:b9:34:ce:32:a6:54:
f4:19:51:98:f2:c0:0c:a4:78:77:1e:46:2f:ee:23:ea:ab:88:
86:14:86:e8:0d:6e:3a:13:ed:0f:a9:06:a2:16:03:da:46:0d:
e8:fb:7a:9f:cc:11:d1:03:05:f0:c4:b7:2b:74:ab:cf:a0:18:
0a:1b:20:e2:1d:90:2f:f9:86:3b:56:7c:9e:a0:9f:a7:a8:41:
8e:c7:bd:47:27:be:ce:2d:08:a8:fe:62:10:81:cf:7c:ce:e0:
f2:ca:64:44:c9:b8:cc:ee:97:19:2a:23:b1:d9:64:69:72:d8:
67:a0:0e:da:6a:07:c6:33:ce:31:36:a7:0a:0f:aa:82:36:d9:
34:92:b8:17:b5:bc:e0:4f:a4:17:f2:f1:89:87:de:6c:4a:f2:
19:40:71:cc:16:91:0d:9d:7c:ac:c6:6e:76:b0:ea:76:91:89:
27:6e:dc:f9:d0:55:f8:08:dc:91:b6:70:3e:28:13:53:7b:28:
76:f0:11:72:d2:96:e2:64:c1:d5:e5:55:2c:f5:c0:bc:b6:5f:
96:90:4a:d7:eb:b2:fa:2d:36:0d:67:76:51:2a:94:0c:7e:70:
f5:8d:c4:67:25:c0:33:ba:00:13:48:96:a8:94:c4:53:eb:2b:
6c:e9:7d:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 01:46:15 2025 by rpki-client