Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/8432ed-2c97-41d3-926a-6a4d04ba5898/1/4XsQ_WB62ScAbGLONWkeuqjwGLU.mft
File: 4XsQ_WB62ScAbGLONWkeuqjwGLU.mft (raw, json)
Hash identifier: ufQ6vkwF2N0bMtulF5hD7ig/QkCpzISvvsyOBOFQUF8=
Subject key identifier: 87:83:A9:EC:DA:E6:B0:94:8E:46:5E:E5:DD:BC:04:23:E3:62:F0:55
Authority key identifier: E1:7B:10:FD:60:7A:D9:27:00:6C:62:CE:35:69:1E:BA:A8:F0:18:B5
Certificate issuer: /CN=e17b10fd607ad927006c62ce35691ebaa8f018b5
Certificate serial: 01978BB54E414B54102D046284DBF20F99AB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4XsQ_WB62ScAbGLONWkeuqjwGLU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/8432ed-2c97-41d3-926a-6a4d04ba5898/1/4XsQ_WB62ScAbGLONWkeuqjwGLU.mft
Manifest number: 15A3
Signing time: Fri 20 Jun 2025 05:00:04 +0000
Manifest this update: Fri 20 Jun 2025 05:00:04 +0000
Manifest next update: Sat 21 Jun 2025 05:00:04 +0000
Files and hashes: 1: 4XsQ_WB62ScAbGLONWkeuqjwGLU.crl (hash: NGJVJT+Q3y8MGrEjAP2TGaxPiB6vN+ruVQlf8QDOxM4=)
2: AG6ksP0tzcHHRqcuNe-hk9nPNdc.roa (hash: 4Pxy9edWR16JJVWSm9ebgWIqidAnxsMd1sHHOAlque0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/8432ed-2c97-41d3-926a-6a4d04ba5898/1/4XsQ_WB62ScAbGLONWkeuqjwGLU.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/8432ed-2c97-41d3-926a-6a4d04ba5898/1/4XsQ_WB62ScAbGLONWkeuqjwGLU.mft
rsync://rpki.ripe.net/repository/DEFAULT/4XsQ_WB62ScAbGLONWkeuqjwGLU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 21 Jun 2025 04:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:8b:b5:4e:41:4b:54:10:2d:04:62:84:db:f2:0f:99:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e17b10fd607ad927006c62ce35691ebaa8f018b5
Validity
Not Before: Jun 20 05:00:04 2025 GMT
Not After : Jun 21 05:00:04 2025 GMT
Subject: CN=8783a9ecdae6b0948e465ee5ddbc0423e362f055
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:70:ad:2f:cc:51:b3:34:a2:3e:e7:d9:29:72:
df:69:72:03:80:58:3c:78:cf:28:a3:64:7f:2a:5d:
5a:58:2c:e1:b3:b9:df:4c:2f:a6:89:9e:50:a9:bb:
87:63:a3:27:ed:25:7b:2b:b8:85:0f:83:fb:7a:af:
2c:d6:0e:5a:fb:0a:ed:98:ce:d3:72:87:0b:27:c5:
cc:c4:bc:0f:59:1b:96:21:45:ff:27:a5:8c:92:a9:
f0:22:cd:3f:0a:e7:bd:f8:b6:7f:77:8d:fa:21:86:
61:02:c5:7c:e0:9d:be:73:b3:0a:1f:6f:ce:dc:bb:
df:6b:b6:c3:3d:b5:76:5a:ea:59:99:b4:0b:23:7e:
61:95:86:27:66:90:f4:e3:07:f2:1b:07:07:da:74:
07:9b:f3:2c:e0:ae:15:cb:8c:dd:fe:43:52:74:59:
04:c3:2c:b4:5c:9f:ce:89:81:ce:cc:3e:2b:b5:00:
f1:b5:e3:e8:2c:8e:46:5b:6a:7c:6d:1c:c3:df:30:
87:09:fb:fb:59:c6:af:8c:dc:02:27:08:a5:34:04:
e3:8d:ae:85:f0:aa:28:02:86:79:09:88:6d:47:3c:
60:cf:58:bf:bf:92:77:39:45:61:f6:90:42:de:ae:
a8:ab:e0:06:aa:29:42:9e:1d:e5:ee:e3:05:4c:d1:
9c:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:83:A9:EC:DA:E6:B0:94:8E:46:5E:E5:DD:BC:04:23:E3:62:F0:55
X509v3 Authority Key Identifier:
keyid:E1:7B:10:FD:60:7A:D9:27:00:6C:62:CE:35:69:1E:BA:A8:F0:18:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4XsQ_WB62ScAbGLONWkeuqjwGLU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/8432ed-2c97-41d3-926a-6a4d04ba5898/1/4XsQ_WB62ScAbGLONWkeuqjwGLU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/8432ed-2c97-41d3-926a-6a4d04ba5898/1/4XsQ_WB62ScAbGLONWkeuqjwGLU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
99:04:7f:d9:01:25:d5:d6:f5:38:06:ce:22:3a:63:94:fc:b3:
bc:f2:87:1d:64:49:db:b7:72:fa:af:d5:87:84:00:53:52:81:
cb:e6:92:df:18:0f:50:6e:ec:45:9a:07:d8:24:23:37:a1:3f:
c7:1c:a6:dc:10:13:6d:19:2b:f7:a4:7d:85:f5:0f:7b:3f:75:
33:ef:5b:36:41:d2:d6:ed:01:31:43:ed:04:b5:3c:eb:a0:84:
f3:48:98:07:80:7a:b6:a8:83:f1:68:fe:0d:fe:b1:f5:c2:61:
ef:1b:86:28:a9:f2:9c:f7:0f:f8:97:e4:a9:00:3b:3f:8b:95:
1d:4d:4d:2c:20:35:bc:4f:d1:8c:9a:c2:09:5e:27:f0:d8:b0:
6f:9b:8f:af:d4:cf:78:81:dd:1c:9f:63:fe:83:7d:a0:40:25:
c1:0e:0b:7e:d9:33:1b:42:5e:fb:24:46:8c:d0:be:a2:99:bc:
2c:a6:fd:e3:da:e9:b7:f8:6b:27:f6:86:c9:69:2f:4d:71:bf:
b9:dd:4f:04:ba:f2:35:98:44:1d:bb:d9:17:a1:33:6f:3b:4f:
a9:fd:c3:11:3c:41:22:9a:af:b7:8d:29:2d:45:2c:c0:77:a8:
bd:ee:78:4f:fb:52:ce:25:c9:68:77:5e:16:7f:6d:25:6f:89:
0d:0a:1d:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 20 12:19:08 2025 by rpki-client