Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/5ea4b4-9ed7-444e-86bf-2eb0af3ac781/1/4zjNaBHc4u1PQmFDw_yEV7G0NLs.mft
File: 4zjNaBHc4u1PQmFDw_yEV7G0NLs.mft (raw, json)
Hash identifier: pX1zHakIgN+QI1C/mIzu/IFBou1zwngMt3t+gnJC4U4=
Subject key identifier: EA:D0:24:13:3D:DD:4C:5D:91:BB:14:EE:69:7E:93:E7:72:9C:32:84
Authority key identifier: E3:38:CD:68:11:DC:E2:ED:4F:42:61:43:C3:FC:84:57:B1:B4:34:BB
Certificate issuer: /CN=e338cd6811dce2ed4f426143c3fc8457b1b434bb
Certificate serial: 01976997D6E77B36B7AC747783D796AE7269
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4zjNaBHc4u1PQmFDw_yEV7G0NLs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/5ea4b4-9ed7-444e-86bf-2eb0af3ac781/1/4zjNaBHc4u1PQmFDw_yEV7G0NLs.mft
Manifest number: 158C
Signing time: Fri 13 Jun 2025 14:00:47 +0000
Manifest this update: Fri 13 Jun 2025 14:00:47 +0000
Manifest next update: Sat 14 Jun 2025 14:00:47 +0000
Files and hashes: 1: 4zjNaBHc4u1PQmFDw_yEV7G0NLs.crl (hash: DpkYIyN5c624aPJLeVWWMleMf7+k+wa7EnuDzUciMSI=)
2: MCauzdzhAV-eC2FQCIe1KmEfC3E.roa (hash: qyelRqdJ6kSMtNhACvHl/U5TJ8kn8s3czDwjuibAJCM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/5ea4b4-9ed7-444e-86bf-2eb0af3ac781/1/4zjNaBHc4u1PQmFDw_yEV7G0NLs.crl
rsync://rpki.ripe.net/repository/DEFAULT/27/5ea4b4-9ed7-444e-86bf-2eb0af3ac781/1/4zjNaBHc4u1PQmFDw_yEV7G0NLs.mft
rsync://rpki.ripe.net/repository/DEFAULT/4zjNaBHc4u1PQmFDw_yEV7G0NLs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 13:55:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:69:97:d6:e7:7b:36:b7:ac:74:77:83:d7:96:ae:72:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e338cd6811dce2ed4f426143c3fc8457b1b434bb
Validity
Not Before: Jun 13 14:00:47 2025 GMT
Not After : Jun 14 14:00:47 2025 GMT
Subject: CN=ead024133ddd4c5d91bb14ee697e93e7729c3284
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:70:65:3d:14:7e:8a:0c:d7:67:2f:ae:b3:f0:
45:8a:c6:00:8a:25:24:a0:a4:ab:ba:36:f4:7b:01:
e2:38:4e:00:3c:c4:2c:46:4f:3b:e7:81:7f:af:0f:
f9:20:0e:b9:c8:93:ac:cb:c5:f8:5a:1d:61:75:d8:
00:ee:ae:cb:b4:23:7b:f4:1b:29:50:2a:df:24:ea:
1e:de:de:bd:29:37:61:76:bb:da:60:c0:47:b6:a3:
1c:29:6b:57:33:99:02:41:ea:f1:83:ea:fd:95:c7:
b2:b3:6a:7c:ae:09:52:9c:9c:ab:fb:55:7b:50:90:
9e:64:cc:ba:b3:1e:c0:de:59:e1:8d:8f:c4:a4:86:
a2:e9:41:ca:02:da:0f:83:6e:ee:45:52:75:e2:1a:
54:45:72:42:00:22:49:c8:96:d6:9b:91:08:9f:f2:
db:16:bf:31:64:a7:27:81:35:7b:94:a4:ed:a8:32:
a2:5d:f7:73:8d:75:f4:eb:be:81:9a:e3:c8:cf:de:
31:6e:5f:35:d4:c9:17:19:dd:2a:86:95:39:81:76:
04:15:f4:65:54:b0:c9:7d:ae:b8:11:d1:f5:ab:99:
c3:12:58:17:4e:4e:49:b4:00:82:b5:8f:d9:06:4f:
e2:91:24:87:09:cc:aa:1d:9d:ab:46:3d:49:46:51:
ab:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:D0:24:13:3D:DD:4C:5D:91:BB:14:EE:69:7E:93:E7:72:9C:32:84
X509v3 Authority Key Identifier:
keyid:E3:38:CD:68:11:DC:E2:ED:4F:42:61:43:C3:FC:84:57:B1:B4:34:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4zjNaBHc4u1PQmFDw_yEV7G0NLs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/5ea4b4-9ed7-444e-86bf-2eb0af3ac781/1/4zjNaBHc4u1PQmFDw_yEV7G0NLs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/5ea4b4-9ed7-444e-86bf-2eb0af3ac781/1/4zjNaBHc4u1PQmFDw_yEV7G0NLs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a8:e7:9f:24:f5:b2:0a:79:97:1c:0f:73:cc:7d:81:a3:21:de:
55:2c:a4:67:ea:99:20:77:4c:84:1c:10:e6:be:c0:aa:bc:74:
a0:27:0d:c4:44:fd:80:46:30:49:52:c9:63:55:63:b0:8e:42:
09:3b:2f:41:0e:b6:b6:12:ac:fd:84:7d:73:bc:3a:0c:30:07:
14:25:6c:fa:f1:42:f0:56:4d:fc:9d:c7:14:5a:24:89:25:bb:
ad:91:a9:98:b8:65:11:c7:bd:d3:74:74:07:5f:c3:59:64:d0:
a0:23:ca:86:8f:46:a3:bc:02:10:ae:48:a0:7f:a9:49:12:d0:
43:93:82:ca:4a:4b:56:9a:45:f1:db:d6:d2:1e:d4:70:16:93:
14:7f:f9:a2:76:0e:e4:28:6b:33:71:53:c7:64:d5:2d:99:2b:
91:ae:db:ad:be:55:b4:47:65:85:bd:bb:a2:39:e4:a4:08:61:
05:2f:cb:bc:18:55:ba:60:5d:5c:1e:9b:d4:3e:f5:4a:06:0b:
3c:fe:1e:c9:2c:50:74:7b:54:2d:b3:0b:07:9d:e9:e8:df:3e:
55:1b:0f:33:65:a0:fd:03:45:54:3a:08:da:67:8a:c2:40:b8:
2c:ca:ce:bb:55:60:fd:bd:fa:a0:2a:7f:8e:1a:44:73:c4:16:
bd:9c:87:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 19:14:51 2025 by rpki-client