Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/be9dab-5f27-43ce-ab22-739a91c620ac/1/4HdrCDj6Dh2hvk7cz4kkvUE7Hbc.mft
File: 4HdrCDj6Dh2hvk7cz4kkvUE7Hbc.mft (raw, json)
Hash identifier: yeGJR7bEEcL2eSVDfrKKKjXYkvEtSCtTUcViFglbAMY=
Subject key identifier: 54:42:1D:1F:8A:3D:6C:2A:15:1C:B8:EC:61:C6:97:43:F5:EA:A1:3C
Authority key identifier: E0:77:6B:08:38:FA:0E:1D:A1:BE:4E:DC:CF:89:24:BD:41:3B:1D:B7
Certificate issuer: /CN=e0776b0838fa0e1da1be4edccf8924bd413b1db7
Certificate serial: 01977865B7B433796ED4394009FEAD38A22B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4HdrCDj6Dh2hvk7cz4kkvUE7Hbc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/be9dab-5f27-43ce-ab22-739a91c620ac/1/4HdrCDj6Dh2hvk7cz4kkvUE7Hbc.mft
Manifest number: 012A
Signing time: Mon 16 Jun 2025 11:00:21 +0000
Manifest this update: Mon 16 Jun 2025 11:00:21 +0000
Manifest next update: Tue 17 Jun 2025 11:00:21 +0000
Files and hashes: 1: 4HdrCDj6Dh2hvk7cz4kkvUE7Hbc.crl (hash: QffUwHvyhOYNsXCMUlb5L3iNSj09WxD50Gd/7EO1fSY=)
2: U8sue3gZLueOLUNHI3zh7NTbaBA.roa (hash: aGzdRWMTM0/YLdPvutTc1s3WsmhuwZtks1XpZ/1ew6k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/be9dab-5f27-43ce-ab22-739a91c620ac/1/4HdrCDj6Dh2hvk7cz4kkvUE7Hbc.crl
rsync://rpki.ripe.net/repository/DEFAULT/2d/be9dab-5f27-43ce-ab22-739a91c620ac/1/4HdrCDj6Dh2hvk7cz4kkvUE7Hbc.mft
rsync://rpki.ripe.net/repository/DEFAULT/4HdrCDj6Dh2hvk7cz4kkvUE7Hbc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 17 Jun 2025 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:78:65:b7:b4:33:79:6e:d4:39:40:09:fe:ad:38:a2:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e0776b0838fa0e1da1be4edccf8924bd413b1db7
Validity
Not Before: Jun 16 11:00:21 2025 GMT
Not After : Jun 17 11:00:21 2025 GMT
Subject: CN=54421d1f8a3d6c2a151cb8ec61c69743f5eaa13c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f5:47:c1:45:1a:78:55:3a:58:f3:3a:c0:24:74:
5f:bb:60:17:43:90:fe:d0:d8:69:77:0e:4f:31:b2:
da:8d:26:de:f1:9f:ea:dc:f5:87:db:60:b5:e8:1c:
55:f4:e9:5b:9e:9b:fa:20:32:3a:27:be:9d:04:0e:
38:4a:b3:6e:46:b7:64:41:21:06:52:cd:d0:e4:63:
ab:9e:a6:cb:0b:0a:d2:57:e8:12:aa:46:c9:39:fc:
ca:5d:d0:29:d4:ff:29:3a:c7:67:fc:1c:fa:b2:53:
a0:f0:0a:8a:0e:4b:a7:9b:e5:09:0e:5b:65:90:0a:
5b:76:a0:13:d7:23:7f:fe:1a:5b:8f:4c:12:7d:18:
79:d2:c2:dd:e4:04:ba:f9:64:ca:6a:89:b8:35:f0:
ab:88:32:58:d2:4e:d0:42:5e:a9:d9:03:03:03:3f:
79:8b:6d:40:93:e8:b5:55:8e:fa:95:47:66:76:ac:
a1:87:77:46:5b:e5:41:b0:35:04:1c:6b:82:ee:07:
06:3e:f4:1f:e2:97:20:46:d2:ec:a8:4b:5d:23:c1:
7d:b9:d5:cc:00:79:2f:a2:01:c1:de:02:f4:8d:08:
11:35:e7:69:b6:19:cf:f6:ee:b2:7d:d0:dd:b8:05:
b7:50:2b:a6:63:7a:a0:8a:62:0a:70:07:11:bc:c2:
42:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:42:1D:1F:8A:3D:6C:2A:15:1C:B8:EC:61:C6:97:43:F5:EA:A1:3C
X509v3 Authority Key Identifier:
keyid:E0:77:6B:08:38:FA:0E:1D:A1:BE:4E:DC:CF:89:24:BD:41:3B:1D:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4HdrCDj6Dh2hvk7cz4kkvUE7Hbc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/be9dab-5f27-43ce-ab22-739a91c620ac/1/4HdrCDj6Dh2hvk7cz4kkvUE7Hbc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/be9dab-5f27-43ce-ab22-739a91c620ac/1/4HdrCDj6Dh2hvk7cz4kkvUE7Hbc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:97:8f:4d:bf:98:24:1d:ca:3d:84:d9:da:43:0a:d0:41:1a:
23:7c:e3:64:e1:41:ed:e1:f7:b2:fd:4e:26:d3:33:a0:53:7e:
d4:7c:70:25:8f:bf:6a:1e:43:e8:76:5d:b4:46:de:d7:c3:a3:
63:29:2b:cc:78:bb:e3:e4:ca:ae:30:6a:03:f1:fd:64:27:7d:
05:32:e2:b9:4a:94:0f:79:7d:18:f4:70:ce:08:7e:ea:cc:c4:
75:b7:8b:bf:63:d9:b0:cd:ca:02:70:24:54:1b:ba:2c:b5:c3:
9b:53:7b:56:36:5b:73:0e:9a:93:f0:06:f8:14:20:d7:f4:cd:
cf:f7:6f:e0:6f:53:a9:f7:0f:16:33:01:85:f2:28:4c:e4:32:
78:4f:d9:0e:80:22:f3:ca:07:44:ec:61:30:d0:bc:c3:a1:87:
3c:34:9f:38:64:03:91:77:10:c9:13:c3:71:31:70:75:12:f9:
13:5f:79:1b:30:0b:ab:d0:2d:cd:46:6a:3e:d1:68:7f:56:a6:
9b:c5:b8:01:15:0f:b4:70:ce:1a:2a:d7:db:23:8e:c8:19:1f:
da:06:e2:09:25:89:1e:d9:c0:7c:ec:77:60:2b:eb:7f:b0:2e:
d1:2c:e6:0f:cd:50:a7:7e:7b:6b:f6:b4:61:42:38:66:65:45:
29:4d:e6:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 13:09:06 2025 by rpki-client