Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/ee42bb-1e49-4c21-a4d6-ec287e1d37e5/1/4xYxgkfSEYQfliCpoRMAEN20hvI.mft
File: 4xYxgkfSEYQfliCpoRMAEN20hvI.mft (raw, json)
Hash identifier: 4ycwQ+hQN65jWXqpvvu5BcAVB+DhiNhKe5nvlfZpVyE=
Subject key identifier: 24:6C:38:AA:D6:86:97:95:0C:8C:58:C0:79:AF:12:B9:A7:DC:8A:FA
Authority key identifier: E3:16:31:82:47:D2:11:84:1F:96:20:A9:A1:13:00:10:DD:B4:86:F2
Certificate issuer: /CN=e316318247d211841f9620a9a1130010ddb486f2
Certificate serial: 01978661975FCBE20474A10143BADF7BA5E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4xYxgkfSEYQfliCpoRMAEN20hvI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/ee42bb-1e49-4c21-a4d6-ec287e1d37e5/1/4xYxgkfSEYQfliCpoRMAEN20hvI.mft
Manifest number: 0DBC
Signing time: Thu 19 Jun 2025 04:10:31 +0000
Manifest this update: Thu 19 Jun 2025 04:10:31 +0000
Manifest next update: Fri 20 Jun 2025 04:10:31 +0000
Files and hashes: 1: 4xYxgkfSEYQfliCpoRMAEN20hvI.crl (hash: an+Z3GjfHU3duFRdhl+QmoWLa3IlYMHLQV6uBFSLaNg=)
2: OPoJJXIKKrWhudAq1xiuARrS1H4.roa (hash: sQTnuyk1NVfltmH/ouY0am8WUGDv6HXMop3KtZ2xXJo=)
3: Y0KH9jUtOdTdVzzVwvfGtDjZxIU.roa (hash: ECg0/VJoY6yBxbdarx1o6Xry+PkavLOkwZaMHO8CBps=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/ee42bb-1e49-4c21-a4d6-ec287e1d37e5/1/4xYxgkfSEYQfliCpoRMAEN20hvI.crl
rsync://rpki.ripe.net/repository/DEFAULT/99/ee42bb-1e49-4c21-a4d6-ec287e1d37e5/1/4xYxgkfSEYQfliCpoRMAEN20hvI.mft
rsync://rpki.ripe.net/repository/DEFAULT/4xYxgkfSEYQfliCpoRMAEN20hvI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 20 Jun 2025 04:10:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:86:61:97:5f:cb:e2:04:74:a1:01:43:ba:df:7b:a5:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e316318247d211841f9620a9a1130010ddb486f2
Validity
Not Before: Jun 19 04:10:31 2025 GMT
Not After : Jun 20 04:10:31 2025 GMT
Subject: CN=246c38aad68697950c8c58c079af12b9a7dc8afa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:c9:c4:ce:a7:d0:82:6a:43:a5:a8:cf:22:93:
5b:e3:39:20:b3:8a:eb:a7:dc:6c:92:4f:5f:23:50:
c9:98:4c:01:d1:7b:11:c6:4a:30:e1:02:92:77:3c:
5c:09:a0:33:81:ce:a9:6a:1e:9a:f6:b3:46:c3:b4:
8c:f3:77:1e:5e:05:a9:d0:e4:6c:dc:d4:fd:43:e5:
28:ce:69:5c:bc:bc:54:b0:c3:3f:2d:4b:84:3e:1a:
53:6d:6d:b9:48:8d:64:88:40:68:dd:42:af:4c:51:
53:72:82:ef:75:90:67:b5:2f:97:35:70:1d:31:4c:
ce:e2:a2:1c:ed:23:b2:7c:48:54:da:b0:a4:b8:d0:
5b:b2:43:88:b0:d3:62:56:3b:9f:9e:0d:95:4f:c6:
40:f7:a2:69:1f:06:a8:60:cd:69:d9:e9:e1:5a:52:
7a:17:7b:9c:05:d5:ce:6c:79:15:76:d9:17:e4:8b:
d6:2b:d0:6e:e0:37:b4:20:a4:ee:69:d9:ba:03:cc:
25:d4:31:7e:ac:62:1e:83:e2:a2:02:57:0c:de:d6:
aa:d5:52:ff:f3:8b:19:f8:2a:1f:1c:bd:d6:9e:60:
df:54:db:9e:b4:30:28:70:dd:c7:34:24:17:5d:9a:
59:a1:55:1a:33:21:be:46:9a:6d:6e:27:bb:9f:36:
39:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:6C:38:AA:D6:86:97:95:0C:8C:58:C0:79:AF:12:B9:A7:DC:8A:FA
X509v3 Authority Key Identifier:
keyid:E3:16:31:82:47:D2:11:84:1F:96:20:A9:A1:13:00:10:DD:B4:86:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4xYxgkfSEYQfliCpoRMAEN20hvI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/ee42bb-1e49-4c21-a4d6-ec287e1d37e5/1/4xYxgkfSEYQfliCpoRMAEN20hvI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/ee42bb-1e49-4c21-a4d6-ec287e1d37e5/1/4xYxgkfSEYQfliCpoRMAEN20hvI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:dc:2d:91:e5:07:9a:52:6f:23:d5:a9:df:76:11:a2:7b:12:
8b:7d:aa:13:ac:af:36:5a:7c:2e:8a:c3:94:d7:54:75:f8:81:
fc:09:55:86:68:ea:f9:c9:0d:14:87:cd:2b:73:d2:b4:d6:f4:
05:e2:c4:d1:e1:31:8e:31:4d:46:ad:5f:48:12:93:63:21:df:
cf:03:0d:e7:d2:05:8f:26:5d:42:6a:aa:25:03:17:1e:52:ee:
5a:85:28:6b:b9:27:bd:99:68:51:97:57:bb:15:f7:96:1c:e7:
44:5e:0a:3c:be:1b:e1:36:45:a4:65:dd:3f:8b:ee:b7:48:12:
d1:8d:0b:15:1d:a2:f7:7b:49:2e:7a:26:b1:40:50:b5:2a:a4:
9c:d5:84:58:04:8a:ed:a2:6e:aa:8c:2c:9d:89:a4:ba:11:69:
84:5a:4a:81:11:f9:24:a1:8d:d8:e2:00:56:06:42:4e:9b:15:
28:f3:bb:e0:90:86:8e:29:4c:31:df:48:46:10:db:44:93:33:
df:09:86:f3:d9:2c:4e:15:c1:3b:11:c2:a9:a1:c4:5c:e3:9e:
46:27:f3:2b:05:8d:09:ac:f7:dc:fc:21:ff:6a:41:95:b9:dc:
b9:f2:a8:99:17:bf:2c:dc:78:c5:5e:b7:3b:17:58:21:5f:5a:
27:93:1c:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 19 12:43:58 2025 by rpki-client