Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/481786-77fd-4316-96ce-822b842c3c0e/1/4iJ3_fZYKO9AtYzhAZRllVB_EzA.mft
File: 4iJ3_fZYKO9AtYzhAZRllVB_EzA.mft (raw, json)
Hash identifier: iiIT0xZAn3mBc+UWFecRZrvnMp4lAORScuM/sRdA4DA=
Subject key identifier: BA:FF:48:0D:30:88:6C:40:66:FD:E9:3B:A7:E6:AE:1C:0E:C7:90:FF
Authority key identifier: E2:22:77:FD:F6:58:28:EF:40:B5:8C:E1:01:94:65:95:50:7F:13:30
Certificate issuer: /CN=e22277fdf65828ef40b58ce101946595507f1330
Certificate serial: 01987D8AF6EA09534973B5EE19D5FDF141DA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4iJ3_fZYKO9AtYzhAZRllVB_EzA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/481786-77fd-4316-96ce-822b842c3c0e/1/4iJ3_fZYKO9AtYzhAZRllVB_EzA.mft
Manifest number: 161C
Signing time: Wed 06 Aug 2025 04:01:55 +0000
Manifest this update: Wed 06 Aug 2025 04:01:55 +0000
Manifest next update: Thu 07 Aug 2025 04:01:55 +0000
Files and hashes: 1: 4iJ3_fZYKO9AtYzhAZRllVB_EzA.crl (hash: e5VOBmR9H3gKUldjzzGboOflk6KJ7phNCDjHNF1KhCk=)
2: aWUQzBuRutK2_qLKMIBREYhWNS0.roa (hash: EEbZn4pmevKGtGGTKH3kqnYuG7haulAx42CNa2YJjd0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/481786-77fd-4316-96ce-822b842c3c0e/1/4iJ3_fZYKO9AtYzhAZRllVB_EzA.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/481786-77fd-4316-96ce-822b842c3c0e/1/4iJ3_fZYKO9AtYzhAZRllVB_EzA.mft
rsync://rpki.ripe.net/repository/DEFAULT/4iJ3_fZYKO9AtYzhAZRllVB_EzA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 04:01:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7d:8a:f6:ea:09:53:49:73:b5:ee:19:d5:fd:f1:41:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e22277fdf65828ef40b58ce101946595507f1330
Validity
Not Before: Aug 6 04:01:55 2025 GMT
Not After : Aug 7 04:01:55 2025 GMT
Subject: CN=baff480d30886c4066fde93ba7e6ae1c0ec790ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:4b:17:10:6e:15:14:7d:2c:80:c2:37:57:17:
4e:97:8c:29:c6:dd:c7:c3:8c:ed:9a:50:8d:86:58:
8d:88:4b:b4:f0:d4:50:b0:c4:e1:63:45:e5:8c:84:
5f:65:58:1b:fa:26:f1:0f:1f:f4:90:7a:e8:52:57:
d3:f7:75:f5:2a:12:34:31:f7:d6:f1:8d:12:c0:37:
9b:ba:ef:31:02:8a:6b:62:16:4b:42:6b:f5:49:e5:
74:03:a0:b3:79:2c:72:96:51:b7:2c:30:f0:3e:0e:
5d:b0:fa:72:92:f7:09:f1:f2:ec:5c:14:12:68:99:
91:ad:56:95:9f:d1:23:5b:7e:bc:75:e4:51:ed:29:
57:10:44:be:56:1f:14:0a:59:bc:c7:5b:a5:c0:8b:
91:30:1b:11:c1:34:d8:56:ca:07:ca:84:64:68:15:
ad:d4:95:0a:52:72:70:91:1d:dd:b6:37:0e:97:63:
9f:7b:ed:ed:db:be:3b:84:34:bc:12:9e:f7:58:e5:
05:01:f0:69:fb:44:09:a9:54:99:bc:f9:12:e4:7b:
b8:f1:ab:12:e5:11:34:c9:d7:72:30:f3:95:94:17:
7f:08:44:f3:b7:d2:6c:93:e8:ac:03:4d:08:db:57:
86:57:79:8d:1d:a3:0d:bd:0e:3a:be:68:18:b2:b2:
f5:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:FF:48:0D:30:88:6C:40:66:FD:E9:3B:A7:E6:AE:1C:0E:C7:90:FF
X509v3 Authority Key Identifier:
keyid:E2:22:77:FD:F6:58:28:EF:40:B5:8C:E1:01:94:65:95:50:7F:13:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4iJ3_fZYKO9AtYzhAZRllVB_EzA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/481786-77fd-4316-96ce-822b842c3c0e/1/4iJ3_fZYKO9AtYzhAZRllVB_EzA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/481786-77fd-4316-96ce-822b842c3c0e/1/4iJ3_fZYKO9AtYzhAZRllVB_EzA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
69:dd:28:65:9d:09:f4:1b:fc:51:ec:68:19:ea:2d:61:a6:09:
dd:bc:c5:f0:f4:c8:e2:31:d7:68:42:6c:76:02:b2:1a:0a:27:
25:a5:7d:48:00:7e:dc:86:0d:d5:45:07:12:40:a8:93:48:86:
41:b6:fa:0f:dc:d6:07:d5:7f:93:96:04:42:41:9b:1a:70:da:
aa:ff:17:1e:ba:cc:d4:79:54:65:1d:6a:07:bd:ee:64:ae:51:
1b:79:21:1a:fa:47:c1:e1:4e:02:10:92:e5:3d:4f:4b:29:5d:
d6:2d:4e:13:d1:22:fb:53:24:29:69:c7:0c:27:b4:3d:dc:f5:
18:9b:9b:1a:7f:0c:8a:e9:b8:9b:60:e3:b0:d0:f3:73:2a:8e:
9c:cb:63:f8:a9:c7:ee:42:29:c8:a0:aa:07:37:1e:62:db:df:
06:f5:6a:10:bf:c3:52:6a:be:c5:e5:02:9b:c5:d3:29:92:3d:
b8:03:95:26:3d:31:e2:3d:e2:a9:04:fe:2d:3e:69:8a:2b:80:
23:41:10:a1:f3:3a:04:94:91:01:ab:c9:ef:b7:86:39:39:5a:
b8:b4:f6:63:8a:5e:a2:3d:1f:8c:de:06:8c:3d:62:e6:16:f8:
9f:dc:50:6c:57:8f:a7:10:fa:f5:50:be:a5:cd:c5:7c:66:67:
24:03:b5:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 14:23:20 2025 by rpki-client