Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/b6468d-10ed-4d48-803c-ea97665c13df/1/4oNEKXdeZVXldCSSKGJUsdqfGQM.mft
File: 4oNEKXdeZVXldCSSKGJUsdqfGQM.mft (raw, json)
Hash identifier: bJ1veqJxkNi7pQKrSyL5rS09ZiDzJiFMzi1++gdiLGs=
Subject key identifier: 98:1D:B2:65:0C:C5:6B:76:F3:8F:0B:74:1A:1A:FA:55:89:AA:78:03
Authority key identifier: E2:83:44:29:77:5E:65:55:E5:74:24:92:28:62:54:B1:DA:9F:19:03
Certificate issuer: /CN=e2834429775e6555e5742492286254b1da9f1903
Certificate serial: 0198752C1C82E9F89F1E2E7B22F8C32C2FAD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4oNEKXdeZVXldCSSKGJUsdqfGQM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/b6468d-10ed-4d48-803c-ea97665c13df/1/4oNEKXdeZVXldCSSKGJUsdqfGQM.mft
Manifest number: 0ED2
Signing time: Mon 04 Aug 2025 13:01:21 +0000
Manifest this update: Mon 04 Aug 2025 13:01:21 +0000
Manifest next update: Tue 05 Aug 2025 13:01:21 +0000
Files and hashes: 1: 4oNEKXdeZVXldCSSKGJUsdqfGQM.crl (hash: xICZO/Qwd2Upiw5klEiVDipHCdBwgC0cJNdXsbKiNvE=)
2: ZTmydTpXIXh_aFM6lIMP1nPGi4M.roa (hash: R6dO91YPQTwtwZipE8GfozYF7WvWuk+GMp9DghrSYmY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/21/b6468d-10ed-4d48-803c-ea97665c13df/1/4oNEKXdeZVXldCSSKGJUsdqfGQM.crl
rsync://rpki.ripe.net/repository/DEFAULT/21/b6468d-10ed-4d48-803c-ea97665c13df/1/4oNEKXdeZVXldCSSKGJUsdqfGQM.mft
rsync://rpki.ripe.net/repository/DEFAULT/4oNEKXdeZVXldCSSKGJUsdqfGQM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 12:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:75:2c:1c:82:e9:f8:9f:1e:2e:7b:22:f8:c3:2c:2f:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e2834429775e6555e5742492286254b1da9f1903
Validity
Not Before: Aug 4 13:01:21 2025 GMT
Not After : Aug 5 13:01:21 2025 GMT
Subject: CN=981db2650cc56b76f38f0b741a1afa5589aa7803
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:db:81:a2:ad:08:03:8c:24:a0:7a:f5:4c:12:
2a:fc:4e:90:75:53:87:6d:34:cc:73:05:e4:fd:d2:
e5:dc:d7:2c:e6:d7:02:1d:a6:00:05:59:84:f4:7f:
91:d4:22:15:f2:d1:c8:19:67:d0:46:7f:37:1d:83:
d4:16:13:0b:7d:48:52:5c:e6:5a:a6:79:41:90:57:
ee:02:3a:5e:f0:04:29:b8:6f:ec:6c:d9:e4:88:50:
60:2b:ea:1d:37:1d:e2:71:a6:cf:2d:8a:7f:f7:94:
7e:8d:66:22:60:c7:e8:33:60:86:50:02:2e:80:3e:
d0:bf:09:3a:f4:9c:c9:98:d5:f7:29:ec:c0:0e:d7:
38:b8:73:cc:0e:81:af:a3:e0:44:f8:34:0f:07:8d:
6e:32:cd:02:03:ab:d3:d9:38:60:c3:42:d5:ab:d5:
f5:3f:ac:21:8e:ae:17:f5:f5:bc:20:eb:fa:99:db:
10:b8:06:02:15:69:1a:d3:e4:b3:90:09:b8:8f:6d:
64:94:97:7a:23:4a:47:cf:36:5d:65:61:a2:96:04:
a8:54:1d:1a:ed:ea:eb:1b:45:68:c2:c8:ff:59:57:
c2:d5:54:c2:d0:00:94:d2:19:5d:c2:0c:57:9e:06:
8c:12:bb:0e:2b:85:0f:05:08:14:9b:c0:0f:aa:48:
a4:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:1D:B2:65:0C:C5:6B:76:F3:8F:0B:74:1A:1A:FA:55:89:AA:78:03
X509v3 Authority Key Identifier:
keyid:E2:83:44:29:77:5E:65:55:E5:74:24:92:28:62:54:B1:DA:9F:19:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4oNEKXdeZVXldCSSKGJUsdqfGQM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/b6468d-10ed-4d48-803c-ea97665c13df/1/4oNEKXdeZVXldCSSKGJUsdqfGQM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/21/b6468d-10ed-4d48-803c-ea97665c13df/1/4oNEKXdeZVXldCSSKGJUsdqfGQM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:84:86:97:ca:f1:fc:7d:97:8f:6d:ae:3c:5e:4f:20:89:9f:
74:cb:bd:4f:44:3b:f8:1e:6c:29:92:c6:2c:fa:de:76:3f:f7:
aa:d6:7b:2c:0c:92:27:a6:50:10:3e:6a:b2:cb:6b:10:27:ad:
f5:2a:9a:2f:e1:dc:0f:e1:3e:bf:f1:65:96:d7:a2:3e:69:f3:
93:1a:5c:71:53:b3:cc:71:5c:21:31:05:90:41:b1:a7:c8:0d:
c2:70:de:92:ed:ad:3a:88:f0:1d:ef:52:70:0d:e2:96:42:9c:
bf:02:c3:7c:0d:da:77:29:f8:d2:df:1e:fe:b1:b9:23:ed:7f:
13:be:04:7d:f3:e5:0e:c1:8e:a1:0d:94:ab:94:e4:0e:6d:3b:
d4:28:92:ee:71:36:95:6b:ab:ea:eb:fb:f0:f8:0b:6a:c3:c5:
97:69:a8:51:c1:10:d4:b2:62:11:4f:e9:71:fc:b5:fd:62:fd:
c9:64:6c:f3:f4:52:f5:ec:33:26:f7:a5:23:2a:2e:ab:0d:b8:
85:58:f8:38:6a:89:15:8e:8a:cd:55:87:fc:fe:14:93:1c:36:
b9:4a:e2:6e:c5:6a:74:ff:85:b0:a6:b4:c5:f4:9c:23:ee:ae:
95:73:55:1a:c3:08:49:32:7a:04:5e:a1:6e:c1:10:e6:86:8b:
c1:3f:ea:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 21:54:39 2025 by rpki-client