Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/01000b-aa96-4bc6-8cc1-af07a9e87fc0/1/4FotrPXdTpv6LS2bLTw_lnh0WEE.mft
File: 4FotrPXdTpv6LS2bLTw_lnh0WEE.mft (raw, json)
Hash identifier: X6XObZWZJ/dlXg128f7enEs4YeaA2Qe43BSQVh3FTXc=
Subject key identifier: B8:A9:23:62:13:ED:FF:7E:D9:B9:D1:4E:4C:AE:3B:E8:4B:74:54:DF
Authority key identifier: E0:5A:2D:AC:F5:DD:4E:9B:FA:2D:2D:9B:2D:3C:3F:96:78:74:58:41
Certificate issuer: /CN=e05a2dacf5dd4e9bfa2d2d9b2d3c3f9678745841
Certificate serial: 019768F30DC44A8EE9A2089B14D4CB25E863
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4FotrPXdTpv6LS2bLTw_lnh0WEE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/01000b-aa96-4bc6-8cc1-af07a9e87fc0/1/4FotrPXdTpv6LS2bLTw_lnh0WEE.mft
Manifest number: 158F
Signing time: Fri 13 Jun 2025 11:00:48 +0000
Manifest this update: Fri 13 Jun 2025 11:00:48 +0000
Manifest next update: Sat 14 Jun 2025 11:00:48 +0000
Files and hashes: 1: 4FotrPXdTpv6LS2bLTw_lnh0WEE.crl (hash: 6hPonuZoRS+4E0egbaE6PTz3Cgh1U+EIblb6LZcgpRk=)
2: BS790JJGQ7DZlNZUL_em5Su64B4.roa (hash: VVqWBTRMk3+7j4zbJrp8La5lSHjcZGiKvxZueV8Sl7A=)
3: UJGm2ryO8HuvxtqrnMckm6HvQuw.roa (hash: LmIHTI0l7Czq42uu144MFysAfpmWgQRM3SWHkhVtvVI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/01000b-aa96-4bc6-8cc1-af07a9e87fc0/1/4FotrPXdTpv6LS2bLTw_lnh0WEE.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/01000b-aa96-4bc6-8cc1-af07a9e87fc0/1/4FotrPXdTpv6LS2bLTw_lnh0WEE.mft
rsync://rpki.ripe.net/repository/DEFAULT/4FotrPXdTpv6LS2bLTw_lnh0WEE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 11:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:68:f3:0d:c4:4a:8e:e9:a2:08:9b:14:d4:cb:25:e8:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e05a2dacf5dd4e9bfa2d2d9b2d3c3f9678745841
Validity
Not Before: Jun 13 11:00:48 2025 GMT
Not After : Jun 14 11:00:48 2025 GMT
Subject: CN=b8a9236213edff7ed9b9d14e4cae3be84b7454df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:04:f9:1e:bb:a3:62:80:82:41:bc:4e:4c:80:
7a:3f:ed:12:de:e3:10:e0:37:53:43:a8:78:d5:6b:
1e:1a:c4:51:62:5b:d8:63:a6:46:04:9e:a2:6c:8b:
28:de:63:c8:ed:93:2e:1a:13:43:b9:3b:49:58:e1:
cf:90:c0:26:5b:bf:73:9d:a4:dc:c7:e5:ef:66:ab:
04:6f:4d:77:7d:e3:ed:59:76:9b:1f:e7:87:01:71:
2b:7c:ba:33:ee:87:a4:b6:d0:e2:60:27:f5:25:8e:
bb:b9:c2:99:5e:43:c9:39:fd:7f:a3:f8:6e:4a:a2:
2a:a7:08:58:ac:49:a4:69:07:1d:8a:90:29:ac:01:
2d:33:fe:fd:00:93:9f:b1:f1:b0:1a:7e:b1:2a:04:
f3:26:8e:f9:d3:72:b0:21:60:fc:31:3d:3c:cb:a9:
8a:46:9b:1b:87:23:a4:62:9b:ba:bf:c0:c2:a1:22:
e8:e5:c3:46:07:83:67:87:81:6a:dc:c1:15:3a:a3:
18:39:b2:b6:d0:ac:d2:d7:7e:dc:d4:92:c3:41:f1:
d7:02:89:52:9b:2e:8d:a8:d3:82:a2:ef:e2:38:ca:
c1:10:fc:22:76:93:35:32:33:a6:7f:99:69:2c:e1:
5a:10:45:8b:37:11:0e:b4:1e:a6:e4:f8:c2:9a:9b:
b8:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:A9:23:62:13:ED:FF:7E:D9:B9:D1:4E:4C:AE:3B:E8:4B:74:54:DF
X509v3 Authority Key Identifier:
keyid:E0:5A:2D:AC:F5:DD:4E:9B:FA:2D:2D:9B:2D:3C:3F:96:78:74:58:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4FotrPXdTpv6LS2bLTw_lnh0WEE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/01000b-aa96-4bc6-8cc1-af07a9e87fc0/1/4FotrPXdTpv6LS2bLTw_lnh0WEE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/01000b-aa96-4bc6-8cc1-af07a9e87fc0/1/4FotrPXdTpv6LS2bLTw_lnh0WEE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:bc:20:d7:eb:58:2f:f5:b4:09:31:ed:ce:cb:d0:a4:43:8b:
a8:16:99:0e:41:f7:54:e4:f8:78:50:e1:85:1b:33:7f:28:6a:
40:c2:58:53:5f:de:63:62:30:e6:ca:fa:12:34:8e:09:2b:53:
fb:b1:4b:a2:0b:3c:69:a8:35:5e:d6:1d:e5:12:74:e4:ce:3e:
44:80:fc:65:d6:21:cb:af:c9:f5:71:24:4f:4c:a7:ea:f1:cc:
01:17:d2:0e:78:77:71:32:98:da:91:98:c4:b0:b8:5f:32:e2:
73:8e:da:aa:dc:6c:30:27:d1:6d:b2:3c:c7:c5:5d:db:84:eb:
47:4f:e0:74:a9:07:77:3b:76:b3:2b:53:5a:48:0e:c9:ce:af:
68:f2:b4:8c:5c:44:9b:a9:27:fc:b3:6c:a1:23:3a:70:9a:f1:
8a:2d:9a:1f:6b:9d:82:22:9f:49:f9:39:8a:8e:b9:67:cb:fe:
71:b8:09:80:b7:1d:d4:c6:c2:7d:50:c7:67:ec:2f:ef:2a:f5:
24:5e:7e:0b:6b:eb:4a:fc:77:60:2d:2c:d2:1f:f9:da:51:e9:
b9:c3:f3:57:6a:f6:41:28:a6:5c:64:7b:d4:13:f6:d1:c2:d8:
59:16:fa:ce:68:0c:ce:29:97:c7:5f:d0:43:15:fc:fc:8a:e5:
41:a1:d1:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 18:58:11 2025 by rpki-client