Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/ce1c99-0abe-4277-aca2-fe1cf308a008/1/eRP4wTuoKQ9g2mO6iek1snWJOts.mft
File: eRP4wTuoKQ9g2mO6iek1snWJOts.mft (raw, json)
Hash identifier: UJSdrUPjF65cpzxiEGSqz34svrbxjromLzhJ6noK3bg=
Subject key identifier: 4F:D5:7F:A3:5C:95:69:98:F4:1A:AD:15:AA:1F:CF:2F:52:5F:4F:FD
Authority key identifier: 79:13:F8:C1:3B:A8:29:0F:60:DA:63:BA:89:E9:35:B2:75:89:3A:DB
Certificate issuer: /CN=7913f8c13ba8290f60da63ba89e935b275893adb
Certificate serial: 01976BBD0560CADF6CD4B75A89F6CEE1935B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eRP4wTuoKQ9g2mO6iek1snWJOts.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/ce1c99-0abe-4277-aca2-fe1cf308a008/1/eRP4wTuoKQ9g2mO6iek1snWJOts.mft
Manifest number: 0435
Signing time: Sat 14 Jun 2025 00:00:39 +0000
Manifest this update: Sat 14 Jun 2025 00:00:39 +0000
Manifest next update: Sun 15 Jun 2025 00:00:39 +0000
Files and hashes: 1: U1WA_e9bu6j5Y_kLVVIkz2GSbGk.roa (hash: hA3Tc0kWdN97ny1EHuTJ6/LUGMuF5PlrxnFA5mg1cTU=)
2: YDQxqLIV4eGHE5Lr0dVaaAovVAw.roa (hash: TOThRgToctB0QP5NsIL53wVfCPspvY/nNlunm9/S0iE=)
3: eRP4wTuoKQ9g2mO6iek1snWJOts.crl (hash: KVMDIt4FLdvF5hsTiHM50jtBUEK76V5QnHwEdOT5Mkg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/ce1c99-0abe-4277-aca2-fe1cf308a008/1/eRP4wTuoKQ9g2mO6iek1snWJOts.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/ce1c99-0abe-4277-aca2-fe1cf308a008/1/eRP4wTuoKQ9g2mO6iek1snWJOts.mft
rsync://rpki.ripe.net/repository/DEFAULT/eRP4wTuoKQ9g2mO6iek1snWJOts.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 00:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6b:bd:05:60:ca:df:6c:d4:b7:5a:89:f6:ce:e1:93:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7913f8c13ba8290f60da63ba89e935b275893adb
Validity
Not Before: Jun 14 00:00:39 2025 GMT
Not After : Jun 15 00:00:39 2025 GMT
Subject: CN=4fd57fa35c956998f41aad15aa1fcf2f525f4ffd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:7f:ae:25:1f:e7:b0:7f:7d:da:ea:c6:b2:37:
87:18:50:01:7e:be:7a:bc:06:0f:62:da:17:92:bd:
cb:79:43:c0:12:0f:82:03:af:e8:c6:84:cd:42:40:
a8:07:2a:2e:99:b3:bd:c2:2b:62:75:e2:3c:c6:e0:
f8:16:ab:46:c6:76:46:26:0b:7e:77:bb:bd:45:57:
6c:53:94:10:6c:fd:d1:0e:44:5b:d2:0e:89:7a:36:
2e:ce:3a:18:8b:9e:e2:f1:2e:30:30:ca:db:07:e7:
4c:d4:41:73:68:69:49:63:56:e6:18:de:05:b0:41:
97:5b:22:e0:70:30:2f:5f:ef:cf:c5:54:1b:9e:5d:
93:73:c2:ba:1a:39:7d:28:7c:52:5b:1c:d6:fa:29:
2c:2c:f3:82:b8:37:28:be:e3:7f:31:2a:f8:0d:d3:
bb:cb:db:92:ed:cb:7e:aa:b9:f8:16:63:af:db:c6:
5a:8d:05:05:4c:ec:86:ad:ba:b0:b1:58:2f:73:14:
2a:87:96:f6:a6:e9:91:5d:1e:08:4d:eb:24:2a:95:
c4:34:71:58:76:b4:59:09:67:e4:26:f3:f9:ed:05:
80:1b:ba:ae:e7:bd:f1:6e:c9:5c:33:08:57:02:3b:
3e:4e:bd:cf:75:22:08:cd:44:d4:0c:1b:fc:01:dc:
4d:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:D5:7F:A3:5C:95:69:98:F4:1A:AD:15:AA:1F:CF:2F:52:5F:4F:FD
X509v3 Authority Key Identifier:
keyid:79:13:F8:C1:3B:A8:29:0F:60:DA:63:BA:89:E9:35:B2:75:89:3A:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eRP4wTuoKQ9g2mO6iek1snWJOts.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/ce1c99-0abe-4277-aca2-fe1cf308a008/1/eRP4wTuoKQ9g2mO6iek1snWJOts.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/ce1c99-0abe-4277-aca2-fe1cf308a008/1/eRP4wTuoKQ9g2mO6iek1snWJOts.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:73:2e:4b:78:89:8b:3a:f1:a7:24:05:35:2e:06:2f:1f:2d:
66:03:c1:66:28:19:b9:c6:0f:17:97:b3:a4:42:32:25:0c:dd:
3b:3e:0a:e3:e0:cb:b7:c4:62:0b:ca:f8:0c:e0:a8:37:65:d0:
e8:43:7b:e0:ba:08:18:5f:84:36:51:ca:a1:56:dd:47:b3:d0:
e2:28:ef:76:5f:2a:3f:da:93:e3:ab:96:df:91:dd:79:c2:58:
38:18:97:da:e3:e4:d2:5c:3f:5b:8f:ad:7e:d1:6c:e7:99:73:
99:12:2a:2e:1e:86:cb:c2:83:de:1e:76:58:ac:5c:ba:cb:c2:
84:e7:75:8b:27:c3:e9:36:d2:20:81:ae:90:b1:dd:3c:af:e1:
8b:5d:8c:4e:df:b7:b6:a8:36:02:16:1d:7c:5f:e3:41:68:9e:
14:43:c3:f2:a2:55:ae:52:7b:7b:d0:95:ef:00:06:33:ac:79:
d4:b2:f6:d1:d1:e7:64:cb:7a:00:3d:08:40:73:49:df:55:5d:
9f:92:a4:b9:6a:d0:99:40:f0:0f:f2:fc:54:e2:ba:ff:2d:60:
5e:c5:7c:84:1f:d8:71:0a:ba:93:7b:b9:4d:f3:5f:48:eb:dd:
c5:b7:e1:1a:da:36:b1:92:76:b4:e6:32:73:27:a2:f8:86:06:
0d:41:64:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 09:58:30 2025 by rpki-client