Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/1a85a8-e4f8-498b-a5ae-a4be172c76ba/1/4_GcxeONj5wdZUcXdmX4khHeyJk.mft
File: 4_GcxeONj5wdZUcXdmX4khHeyJk.mft (raw, json)
Hash identifier: ZZt0Rp19u8Ol/cGK7qGpRi9ckPVD/KgUEZBscsbz02o=
Subject key identifier: FB:85:1B:B0:24:0A:68:4F:EB:A6:BA:79:75:1B:C6:CD:28:E6:E0:01
Authority key identifier: E3:F1:9C:C5:E3:8D:8F:9C:1D:65:47:17:76:65:F8:92:11:DE:C8:99
Certificate issuer: /CN=e3f19cc5e38d8f9c1d6547177665f89211dec899
Certificate serial: 0197790ABBAADA5FB40206F124AAD5AAE576
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4_GcxeONj5wdZUcXdmX4khHeyJk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/1a85a8-e4f8-498b-a5ae-a4be172c76ba/1/4_GcxeONj5wdZUcXdmX4khHeyJk.mft
Manifest number: 0E02
Signing time: Mon 16 Jun 2025 14:00:35 +0000
Manifest this update: Mon 16 Jun 2025 14:00:35 +0000
Manifest next update: Tue 17 Jun 2025 14:00:35 +0000
Files and hashes: 1: 4_GcxeONj5wdZUcXdmX4khHeyJk.crl (hash: VAADCUdZP7T64u6w4iZPx0bXeAEXCtw7U/nY64IDmdM=)
2: nCO98tc8B201HK59o3LGsGaIbRQ.roa (hash: 5XD9s6utrTJgO6HcLNBLSP37yElvartuHWVrwWT7jxg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/23/1a85a8-e4f8-498b-a5ae-a4be172c76ba/1/4_GcxeONj5wdZUcXdmX4khHeyJk.crl
rsync://rpki.ripe.net/repository/DEFAULT/23/1a85a8-e4f8-498b-a5ae-a4be172c76ba/1/4_GcxeONj5wdZUcXdmX4khHeyJk.mft
rsync://rpki.ripe.net/repository/DEFAULT/4_GcxeONj5wdZUcXdmX4khHeyJk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 17 Jun 2025 14:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:79:0a:bb:aa:da:5f:b4:02:06:f1:24:aa:d5:aa:e5:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e3f19cc5e38d8f9c1d6547177665f89211dec899
Validity
Not Before: Jun 16 14:00:35 2025 GMT
Not After : Jun 17 14:00:35 2025 GMT
Subject: CN=fb851bb0240a684feba6ba79751bc6cd28e6e001
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:34:24:a1:cf:49:4b:b4:2b:68:0f:72:a8:46:
8a:4d:cd:e2:89:f8:7a:4b:1f:22:88:93:a4:c6:ac:
f0:2b:9a:f5:c4:f4:29:c5:16:05:de:0f:1e:1d:68:
d3:82:14:a3:a4:11:2f:8e:a0:04:a7:a7:b0:73:97:
16:f0:1a:2d:d4:52:64:24:5b:89:97:d8:3c:3e:12:
32:34:73:d9:05:e8:ce:29:4c:71:a2:50:48:ec:fc:
ec:cf:5f:70:8e:7e:00:fd:28:7b:76:77:db:23:72:
ad:ca:59:8b:db:5c:e6:e3:4c:50:fc:6c:fa:ee:3d:
33:a5:50:95:c6:28:9f:30:a6:7b:ea:8d:7a:b3:f9:
6f:e6:42:2b:b9:e1:c7:91:7d:5d:5e:61:46:f8:45:
51:80:bc:29:f6:7d:ac:75:e6:78:ed:fa:db:ef:28:
b6:a1:1a:4f:92:b3:6a:8c:86:36:68:50:d8:6d:37:
a4:b5:d5:58:c3:8a:8c:d8:d3:f9:47:5f:bb:b4:b1:
eb:89:8f:dd:fb:2d:70:a9:8f:31:9c:7c:7b:1c:90:
0e:b8:81:62:69:09:4a:34:19:34:1e:60:41:15:dd:
80:74:e3:32:43:ff:a9:58:e4:8b:6b:0c:b2:15:a0:
e0:46:ef:84:07:6e:00:22:36:e9:6e:d8:bf:75:ef:
02:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:85:1B:B0:24:0A:68:4F:EB:A6:BA:79:75:1B:C6:CD:28:E6:E0:01
X509v3 Authority Key Identifier:
keyid:E3:F1:9C:C5:E3:8D:8F:9C:1D:65:47:17:76:65:F8:92:11:DE:C8:99
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4_GcxeONj5wdZUcXdmX4khHeyJk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/1a85a8-e4f8-498b-a5ae-a4be172c76ba/1/4_GcxeONj5wdZUcXdmX4khHeyJk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/23/1a85a8-e4f8-498b-a5ae-a4be172c76ba/1/4_GcxeONj5wdZUcXdmX4khHeyJk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:fb:bb:2c:52:18:87:6b:19:c5:7e:6a:a1:b4:08:b0:c1:a7:
35:18:f8:df:15:26:f9:5c:42:62:54:93:64:37:eb:bb:79:93:
b4:db:33:7b:72:41:34:c8:f2:66:d3:42:55:38:11:17:2c:1d:
d7:da:f3:c6:2f:e9:4d:c7:ac:3b:64:90:30:2a:50:52:dd:5d:
45:88:db:f4:12:3e:0c:c0:8c:98:5e:87:66:c8:4f:d0:5c:f5:
32:49:4a:51:29:1c:af:ce:24:0c:56:49:e6:0f:f7:2a:ca:8a:
ec:09:0e:50:48:41:35:83:42:c7:a0:46:2b:a8:92:18:28:e0:
ba:6c:04:c0:db:49:4c:35:08:0b:be:43:7b:8a:ca:ee:4e:66:
d3:b3:d7:8c:5d:de:fd:68:fb:50:22:08:9e:1c:2a:5e:0a:02:
c0:39:0e:fc:94:02:ef:6c:68:62:69:33:30:a9:ae:fd:d0:ff:
c9:52:4a:b6:66:b3:b9:32:2c:15:da:53:eb:9f:cb:83:ce:04:
ce:3b:80:59:ce:6c:9d:b4:21:b1:2d:37:dd:aa:40:79:33:c5:
94:49:73:60:de:4d:34:dc:c5:74:de:b7:ed:ef:5b:74:a6:f0:
4c:9a:35:5f:55:a3:8e:60:08:14:07:7c:8b:19:d9:a7:0a:d2:
9b:96:ed:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 20:46:02 2025 by rpki-client