Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/0b7fd3-90f0-45d1-8a58-6785cd456871/1/4TjsJCpD6cnUzrJdyQ5UUzc9P0Y.mft
File: 4TjsJCpD6cnUzrJdyQ5UUzc9P0Y.mft (raw, json)
Hash identifier: hx51I6H2H7VHkb9MsIa+UkFdRTwjlavFnUt129vcSPI=
Subject key identifier: 79:19:EE:42:E3:FD:85:43:4F:51:4F:12:1E:15:16:55:5D:92:77:1D
Authority key identifier: E1:38:EC:24:2A:43:E9:C9:D4:CE:B2:5D:C9:0E:54:53:37:3D:3F:46
Certificate issuer: /CN=e138ec242a43e9c9d4ceb25dc90e5453373d3f46
Certificate serial: 01978244FA30C9303DEC5DDC5F5090E2E498
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4TjsJCpD6cnUzrJdyQ5UUzc9P0Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/0b7fd3-90f0-45d1-8a58-6785cd456871/1/4TjsJCpD6cnUzrJdyQ5UUzc9P0Y.mft
Manifest number: 15A8
Signing time: Wed 18 Jun 2025 09:00:47 +0000
Manifest this update: Wed 18 Jun 2025 09:00:47 +0000
Manifest next update: Thu 19 Jun 2025 09:00:47 +0000
Files and hashes: 1: 4TjsJCpD6cnUzrJdyQ5UUzc9P0Y.crl (hash: +HKVC8vy/JyHnPBu3srHMGGYDBZe2MEra8LSWSQS1Mc=)
2: 9le1peACXBsZiHPrKGecXIwJa-c.roa (hash: abfbtZOYUj++vuicVi05zrp5kGNnF9HGnL5WTr/9qlE=)
3: AP7i3LahdsovYM70eVMlu0H0VyQ.roa (hash: gGYT6xMXK+q6XWFTZbqb5glJj73Q26Rxlysft5i280U=)
4: De0WCETpJfbN-_KAZM7Z5RJy8Ss.roa (hash: Kcw5neScj8y714DABjN4V/ktwunea0zBp9yHTOn8VeE=)
5: WCta5h-gHZZ_q49m5T2AptEQh0A.roa (hash: UEF6WvkAssJSXqYGaMl3u6THXq5hVmf7y+Pa60Tl3Bc=)
6: WIgYr5JYPXYMftdONSWv5Do5-Gk.roa (hash: Z2h27NPSq0u/AueWae1+/QX3Wc6gNsL5Ji2s5jEoznc=)
7: fLAxf74rd6UX3gfivf6snrbKhmg.roa (hash: 2y9JcTYhuslVBan0BBae3TsVIsvndLj/5tEYAdt92BQ=)
8: oSdrWOCaJ0gBbDhOrwzjpvj5kgk.roa (hash: fLc644uvb/7KJE5lOwMGlDoVjD+MslKnwZyZQoL0QcU=)
9: obrA-ZoCgk0zS8hgJpmT67NaB2Y.roa (hash: z5uErOAwohXeLePMQPhb50zJXMj4qbujXHMXCoCiW5E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/0b7fd3-90f0-45d1-8a58-6785cd456871/1/4TjsJCpD6cnUzrJdyQ5UUzc9P0Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/0b7fd3-90f0-45d1-8a58-6785cd456871/1/4TjsJCpD6cnUzrJdyQ5UUzc9P0Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/4TjsJCpD6cnUzrJdyQ5UUzc9P0Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 19 Jun 2025 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:82:44:fa:30:c9:30:3d:ec:5d:dc:5f:50:90:e2:e4:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e138ec242a43e9c9d4ceb25dc90e5453373d3f46
Validity
Not Before: Jun 18 09:00:47 2025 GMT
Not After : Jun 19 09:00:47 2025 GMT
Subject: CN=7919ee42e3fd85434f514f121e1516555d92771d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:be:e8:45:fe:21:a2:f2:e4:03:ef:3c:fb:a1:
07:88:7f:b1:21:c3:fe:38:c2:82:f4:7e:b3:d4:09:
b2:e2:fb:55:c4:42:f6:0f:ce:82:40:aa:b8:98:7e:
52:b2:fd:c5:d9:c3:57:91:3f:67:a5:5e:96:8b:9f:
4a:6d:bf:9d:5a:c6:a5:ca:18:8a:14:cf:e6:20:0a:
42:27:b3:2c:e9:49:da:c2:53:ea:99:56:3b:1b:84:
fe:42:63:bb:45:45:ba:2a:f9:ff:1d:68:3d:98:30:
29:8e:5a:59:7a:92:7f:65:5c:7c:1e:10:e2:79:d3:
53:fb:31:58:61:f5:56:7d:4c:b3:a1:b8:24:b7:50:
9c:cf:38:c7:03:0e:55:4a:25:6b:8b:bc:87:cf:6a:
ee:0f:84:34:ac:ab:be:21:4f:45:8a:85:2e:5e:54:
ca:ff:cf:ee:84:fc:32:ca:83:46:ab:d7:19:8b:96:
b1:bc:37:9e:7c:2c:a0:94:75:a8:14:3d:cb:b7:14:
2a:0b:5c:bf:15:47:09:6f:2d:03:a8:3b:16:72:59:
b0:c4:5a:20:b8:bf:5a:6e:0a:49:86:4b:55:48:68:
1e:bc:d0:f3:a9:51:6d:f5:62:54:fd:eb:22:be:f5:
bb:5d:cb:dc:f9:73:9c:ef:27:98:c6:f9:9e:0b:4e:
d4:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:19:EE:42:E3:FD:85:43:4F:51:4F:12:1E:15:16:55:5D:92:77:1D
X509v3 Authority Key Identifier:
keyid:E1:38:EC:24:2A:43:E9:C9:D4:CE:B2:5D:C9:0E:54:53:37:3D:3F:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4TjsJCpD6cnUzrJdyQ5UUzc9P0Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/0b7fd3-90f0-45d1-8a58-6785cd456871/1/4TjsJCpD6cnUzrJdyQ5UUzc9P0Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/0b7fd3-90f0-45d1-8a58-6785cd456871/1/4TjsJCpD6cnUzrJdyQ5UUzc9P0Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:9f:c6:0f:9f:e2:af:c7:c1:ad:5b:7b:ae:65:3a:6d:f5:5a:
50:5f:37:9b:bf:f7:90:98:06:a0:fa:00:d3:d2:2d:09:12:dc:
fc:43:da:70:d7:55:63:bd:e3:1c:7e:cd:5e:2d:0e:3b:15:6b:
1a:f5:a0:4d:ce:15:6b:e5:60:1f:b0:11:5a:0f:a5:29:e7:4d:
7e:63:ca:e2:29:e1:e3:c0:f4:0c:eb:0d:26:e5:80:7c:9b:06:
40:9b:94:5b:1f:f2:39:00:83:f6:af:7a:9f:56:d3:4e:e1:60:
e0:d6:59:60:b0:62:c5:ae:65:26:76:8c:93:81:8f:6e:f6:10:
4d:08:73:23:c8:90:6b:25:ca:56:fe:e7:34:2f:eb:86:46:4e:
c4:e0:ff:d2:ab:86:2c:8b:a1:99:8e:6f:13:47:9b:02:41:62:
61:a0:c3:93:0e:d7:41:eb:00:77:43:bf:36:b4:a0:ed:e6:c8:
01:6c:49:a9:3b:e4:e7:96:9d:a8:84:87:f7:e0:66:cc:20:b3:
ab:64:d8:d8:8e:3d:47:74:26:49:69:d9:11:55:f4:ba:aa:31:
3c:c4:6e:fd:f0:0b:99:bd:4a:ae:aa:6f:4e:6b:95:4d:99:9e:
30:dd:59:3e:c5:50:41:9d:f1:89:76:13:46:37:bb:a0:90:5f:
f7:a3:44:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 18 13:19:17 2025 by rpki-client