Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/2618f8-1264-4011-9b88-e327e5227066/1/P4E4_qBm1vUEQ2ABzJ1_M523NMg.mft
File: P4E4_qBm1vUEQ2ABzJ1_M523NMg.mft (raw, json)
Hash identifier: /IqK0RVFt8X+44BURZgRCOheQP7Hh1hHM0ev608eMZg=
Subject key identifier: F9:0C:04:CC:7E:56:EA:1F:EC:4D:C9:60:0C:FD:4D:47:CC:6F:D2:6B
Authority key identifier: 3F:81:38:FE:A0:66:D6:F5:04:43:60:01:CC:9D:7F:33:9D:B7:34:C8
Certificate issuer: /CN=3f8138fea066d6f504436001cc9d7f339db734c8
Certificate serial: 019791EEF32D465DBCCA27626176E5DEFF61
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P4E4_qBm1vUEQ2ABzJ1_M523NMg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/2618f8-1264-4011-9b88-e327e5227066/1/P4E4_qBm1vUEQ2ABzJ1_M523NMg.mft
Manifest number: 0224
Signing time: Sat 21 Jun 2025 10:00:45 +0000
Manifest this update: Sat 21 Jun 2025 10:00:45 +0000
Manifest next update: Sun 22 Jun 2025 10:00:45 +0000
Files and hashes: 1: P4E4_qBm1vUEQ2ABzJ1_M523NMg.crl (hash: LjC74HmOgBcf/jl9kRp4LEqGWLU8TNd+GmAy9ruX5xc=)
2: a7YNlS63NsZTTW2uGzFrnfKok9w.roa (hash: A6Vj/t1HktktvRKs1GT2mBgPnzQ8ZrkihcAERAUHOMs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/75/2618f8-1264-4011-9b88-e327e5227066/1/P4E4_qBm1vUEQ2ABzJ1_M523NMg.crl
rsync://rpki.ripe.net/repository/DEFAULT/75/2618f8-1264-4011-9b88-e327e5227066/1/P4E4_qBm1vUEQ2ABzJ1_M523NMg.mft
rsync://rpki.ripe.net/repository/DEFAULT/P4E4_qBm1vUEQ2ABzJ1_M523NMg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 22 Jun 2025 10:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:91:ee:f3:2d:46:5d:bc:ca:27:62:61:76:e5:de:ff:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3f8138fea066d6f504436001cc9d7f339db734c8
Validity
Not Before: Jun 21 10:00:45 2025 GMT
Not After : Jun 22 10:00:45 2025 GMT
Subject: CN=f90c04cc7e56ea1fec4dc9600cfd4d47cc6fd26b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:43:4b:25:71:8d:97:d7:74:05:ed:21:6e:0d:
76:34:16:f7:e0:62:98:f6:5d:11:90:5d:5e:49:77:
d3:81:8c:a3:f1:66:74:ea:99:53:3e:32:ae:d9:85:
84:17:53:bb:2d:ea:3f:7f:dc:71:61:35:2d:14:9a:
90:1a:17:44:d4:46:71:c3:0b:f6:63:9e:34:64:2c:
48:25:b6:e1:3c:6e:ef:51:32:79:27:12:d4:fd:5d:
02:8b:16:64:fe:21:b0:98:3d:2e:4e:50:50:a1:68:
09:21:62:fa:7b:ea:2d:e7:ae:5a:79:f2:82:02:fb:
a8:30:f2:07:7f:a3:e2:1f:00:1f:4a:f2:eb:ce:bd:
5a:17:fe:6f:1d:3f:fd:75:80:b5:39:d2:0b:d7:fd:
01:a9:7f:16:ed:c2:34:d8:a9:80:08:33:13:bd:00:
ef:e9:89:c1:53:cf:2b:9f:99:9f:4a:bd:af:df:7b:
68:c4:a7:d5:94:be:e2:48:63:70:65:bf:43:ce:6a:
11:f9:e0:bc:44:b7:43:24:2e:ff:e8:cb:49:f6:67:
df:c4:c9:5d:54:4c:d2:9a:73:6f:85:01:85:8f:17:
05:50:02:71:64:a7:bd:33:b5:cc:18:4a:fa:9f:64:
21:c2:e3:ad:70:59:a5:77:01:5b:3a:11:04:2f:c8:
94:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:0C:04:CC:7E:56:EA:1F:EC:4D:C9:60:0C:FD:4D:47:CC:6F:D2:6B
X509v3 Authority Key Identifier:
keyid:3F:81:38:FE:A0:66:D6:F5:04:43:60:01:CC:9D:7F:33:9D:B7:34:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P4E4_qBm1vUEQ2ABzJ1_M523NMg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/2618f8-1264-4011-9b88-e327e5227066/1/P4E4_qBm1vUEQ2ABzJ1_M523NMg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/75/2618f8-1264-4011-9b88-e327e5227066/1/P4E4_qBm1vUEQ2ABzJ1_M523NMg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:03:14:f7:f7:f6:52:85:40:4c:9d:d5:14:c9:cb:3e:af:6d:
54:3d:9f:be:e9:63:0c:79:62:30:1a:18:42:b1:5c:70:37:c5:
40:91:0c:74:11:aa:70:bb:fc:7f:8a:d8:14:a1:d8:63:36:6d:
d7:4f:57:89:96:14:a2:05:da:e9:0e:e3:4f:1f:f0:fc:66:0d:
9e:6a:2f:bd:8b:8a:fd:9d:f1:9b:e7:5a:e3:65:cb:07:a0:59:
13:cf:ed:40:47:44:2d:85:35:ca:de:05:5f:b8:93:20:2f:bc:
9c:92:ea:e8:96:fd:a6:b3:a3:32:5b:5e:7f:2f:29:04:54:ce:
e2:52:f5:03:f1:c5:cd:83:a8:cc:2a:5a:03:df:70:5a:58:1a:
ae:9d:c8:f3:ce:1b:9e:45:a3:88:3f:f0:f3:59:a0:f8:c0:8a:
ee:05:d7:c5:c2:00:49:8b:8f:db:fd:fb:2d:77:3e:e1:08:2f:
0a:cb:9f:77:12:19:0d:46:b5:dd:a1:a3:59:38:13:74:44:8b:
d7:c1:5b:9f:68:52:0c:9e:e4:2b:95:98:0c:43:3d:a4:89:5a:
3a:e3:57:54:e2:1e:b8:ae:43:9e:d9:76:3b:dd:7a:47:99:ab:
c7:34:ff:d9:70:5f:b6:8f:a9:1b:8f:d6:fd:a7:51:04:97:8c:
7b:40:1c:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 21 18:56:46 2025 by rpki-client