Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/a6c6ee-4260-4f11-b218-dc1afb0f7f19/1/s4-3-dr7t_J8ZSqEbTf7nimODho.mft
File: s4-3-dr7t_J8ZSqEbTf7nimODho.mft (raw, json)
Hash identifier: oJRad8hTkbrkzIX2v5LEmHF0FfKcfxEaKSawRQRolZo=
Subject key identifier: 1B:4A:E6:40:11:0D:FD:DF:36:DF:69:76:7E:CA:BE:59:F4:F2:D0:11
Authority key identifier: B3:8F:B7:F9:DA:FB:B7:F2:7C:65:2A:84:6D:37:FB:9E:29:8E:0E:1A
Certificate issuer: /CN=b38fb7f9dafbb7f27c652a846d37fb9e298e0e1a
Certificate serial: 019873E345CBC63C7BFF31251C80589C8B0B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s4-3-dr7t_J8ZSqEbTf7nimODho.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/a6c6ee-4260-4f11-b218-dc1afb0f7f19/1/s4-3-dr7t_J8ZSqEbTf7nimODho.mft
Manifest number: 8E
Signing time: Mon 04 Aug 2025 07:02:10 +0000
Manifest this update: Mon 04 Aug 2025 07:02:10 +0000
Manifest next update: Tue 05 Aug 2025 07:02:10 +0000
Files and hashes: 1: s4-3-dr7t_J8ZSqEbTf7nimODho.crl (hash: w2eLSOM0T7m9YS8cQTO5RD/bE8kGgDeqoMCkC+5TTSM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/a6c6ee-4260-4f11-b218-dc1afb0f7f19/1/s4-3-dr7t_J8ZSqEbTf7nimODho.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/a6c6ee-4260-4f11-b218-dc1afb0f7f19/1/s4-3-dr7t_J8ZSqEbTf7nimODho.mft
rsync://rpki.ripe.net/repository/DEFAULT/s4-3-dr7t_J8ZSqEbTf7nimODho.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 07:02:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:73:e3:45:cb:c6:3c:7b:ff:31:25:1c:80:58:9c:8b:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b38fb7f9dafbb7f27c652a846d37fb9e298e0e1a
Validity
Not Before: Aug 4 07:02:10 2025 GMT
Not After : Aug 5 07:02:10 2025 GMT
Subject: CN=1b4ae640110dfddf36df69767ecabe59f4f2d011
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:f0:aa:eb:e8:cb:44:66:bb:e7:c6:fb:9b:78:
cd:e4:9c:9e:cb:3b:2a:0c:ce:67:83:36:07:68:4e:
2e:4a:23:70:65:f6:62:95:f7:c2:5e:2e:29:f8:6f:
ac:db:ff:0f:b5:a5:49:0b:02:5e:47:31:3f:1c:c4:
64:79:f2:a9:98:be:ba:59:d7:1f:09:3b:b2:df:73:
06:b8:bf:d8:0b:2a:9f:82:c3:0c:13:6b:56:8a:35:
8a:8f:d2:b8:1f:9a:70:e5:21:2f:2f:2c:30:ad:87:
83:44:bb:72:40:c2:38:ed:75:1b:0d:b8:00:04:05:
35:b7:17:42:a3:de:a1:5c:df:d3:02:78:3e:1e:4f:
ad:06:c6:b8:1a:6f:f7:19:4e:ee:4c:3f:85:c4:4b:
85:d1:1c:e4:3d:e5:4c:fb:84:15:28:c9:ff:ef:1a:
60:75:a0:d4:94:74:b3:f6:f7:e8:17:a1:af:c0:94:
03:be:f4:f3:6c:21:3c:23:f3:b7:69:16:2b:04:84:
e1:f6:2a:e2:e3:39:a0:5a:a0:50:0d:cb:de:4a:ac:
9e:e5:ef:5d:0e:d6:21:66:d4:21:15:bf:5e:7d:14:
cd:40:80:a5:d8:0d:23:c3:38:47:dd:d6:58:44:f9:
78:90:16:9b:bf:66:0b:c6:51:61:c2:d3:4b:ca:d2:
49:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:4A:E6:40:11:0D:FD:DF:36:DF:69:76:7E:CA:BE:59:F4:F2:D0:11
X509v3 Authority Key Identifier:
keyid:B3:8F:B7:F9:DA:FB:B7:F2:7C:65:2A:84:6D:37:FB:9E:29:8E:0E:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s4-3-dr7t_J8ZSqEbTf7nimODho.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/a6c6ee-4260-4f11-b218-dc1afb0f7f19/1/s4-3-dr7t_J8ZSqEbTf7nimODho.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/a6c6ee-4260-4f11-b218-dc1afb0f7f19/1/s4-3-dr7t_J8ZSqEbTf7nimODho.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a5:d7:f1:7f:bf:99:57:33:98:69:46:ee:6d:20:2d:78:ab:95:
a4:1d:72:b1:10:0a:06:02:e9:da:2e:d3:ad:c3:60:fa:ea:1c:
5e:ee:7b:7d:6e:49:93:1a:69:59:9a:59:1c:d6:a0:78:bc:49:
c2:c1:1c:21:21:6c:5e:f3:3c:94:0c:78:f1:e4:ca:bd:1b:21:
3f:fb:6b:62:fe:59:ad:e4:c4:03:15:62:03:d7:b2:b1:88:74:
45:50:83:63:75:0d:79:79:f5:3d:65:e3:0c:40:f2:b3:67:21:
53:69:e8:37:04:88:ac:28:4a:62:e0:fb:dd:b7:1e:99:df:a4:
36:1a:b2:84:3f:d8:61:2a:7a:70:da:43:26:cc:6d:85:fd:dd:
86:4b:1f:53:a8:90:ad:3f:59:5b:0a:7b:02:53:4d:11:a3:17:
89:98:df:8c:43:22:3e:b6:7c:a5:b3:f1:90:ac:53:9a:c3:6c:
53:ca:74:b0:3f:31:ec:2a:95:c3:51:09:9e:56:06:0f:14:fa:
0f:f2:60:11:82:89:31:a1:4a:72:08:57:af:cb:8e:80:45:7d:
a5:42:2e:31:5e:01:42:ab:e1:d6:06:32:a1:73:d6:77:1f:87:
47:2e:71:73:ce:e7:58:18:12:6d:25:0c:a6:5c:05:53:a7:82:
ac:d4:2b:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 15:58:03 2025 by rpki-client