Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/aa5cc0-bb56-4b47-b7c1-44f41d9e1277/1/4GmrbwlXKvtG6fjpoGOdgguWlCI.mft
File: 4GmrbwlXKvtG6fjpoGOdgguWlCI.mft (raw, json)
Hash identifier: 4DcLT5WLf+/ldWlepKbOVBekzpdMNUWiVvmU1VhPJOY=
Subject key identifier: 00:6D:BC:14:5C:F0:A1:CD:FE:70:F6:37:C4:33:0C:27:F3:B1:90:DB
Authority key identifier: E0:69:AB:6F:09:57:2A:FB:46:E9:F8:E9:A0:63:9D:82:0B:96:94:22
Certificate issuer: /CN=e069ab6f09572afb46e9f8e9a0639d820b969422
Certificate serial: 01976BF47800CE6F179B9D920F55E2445020
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4GmrbwlXKvtG6fjpoGOdgguWlCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/aa5cc0-bb56-4b47-b7c1-44f41d9e1277/1/4GmrbwlXKvtG6fjpoGOdgguWlCI.mft
Manifest number: 1524
Signing time: Sat 14 Jun 2025 01:01:12 +0000
Manifest this update: Sat 14 Jun 2025 01:01:12 +0000
Manifest next update: Sun 15 Jun 2025 01:01:12 +0000
Files and hashes: 1: 3JZ_5w4aMWvRVbzCod8mUk7eyJM.roa (hash: vnbCaew1m+lh3Dj5sXD9W+bmDkZl62H3PlaW/PwhcMY=)
2: 4GmrbwlXKvtG6fjpoGOdgguWlCI.crl (hash: MZqqN7wAgkd7V0iOHNXSRO+0DS/0VqD/2ATettkuh7E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9b/aa5cc0-bb56-4b47-b7c1-44f41d9e1277/1/4GmrbwlXKvtG6fjpoGOdgguWlCI.crl
rsync://rpki.ripe.net/repository/DEFAULT/9b/aa5cc0-bb56-4b47-b7c1-44f41d9e1277/1/4GmrbwlXKvtG6fjpoGOdgguWlCI.mft
rsync://rpki.ripe.net/repository/DEFAULT/4GmrbwlXKvtG6fjpoGOdgguWlCI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6b:f4:78:00:ce:6f:17:9b:9d:92:0f:55:e2:44:50:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e069ab6f09572afb46e9f8e9a0639d820b969422
Validity
Not Before: Jun 14 01:01:12 2025 GMT
Not After : Jun 15 01:01:12 2025 GMT
Subject: CN=006dbc145cf0a1cdfe70f637c4330c27f3b190db
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:e3:e2:e6:29:c8:9b:a7:a0:33:da:66:d3:c6:
6e:d3:2a:57:cb:34:c2:1b:c7:7b:89:8d:6b:18:9c:
84:43:0f:17:cd:ee:33:33:fb:36:0b:a5:52:d6:3b:
20:7d:4b:49:f7:fd:8a:28:2d:05:f3:1b:9f:e1:2f:
df:08:35:33:6a:66:c0:5a:c9:e0:21:94:d2:8f:6d:
b9:1c:3b:95:30:c1:6d:dc:0d:7c:cd:1a:e3:0f:c1:
84:dc:56:d8:1a:95:f6:59:9d:77:10:54:e1:b3:eb:
bb:21:00:79:e9:17:2a:ff:6f:42:3e:25:fc:7d:74:
89:00:b1:f8:6a:a0:91:64:b6:1d:2f:a8:5f:9c:84:
97:4b:9f:af:f2:00:18:8e:19:f6:07:6f:70:89:bc:
9f:a1:c4:7f:a4:f1:4e:fc:57:ff:1d:0b:a0:4d:71:
b2:fd:34:17:84:e0:f1:57:24:a8:e1:bb:9d:3c:51:
ca:20:55:a1:92:94:e3:99:b8:ea:0e:56:ad:fe:fe:
db:94:5d:25:2b:22:f4:44:e3:ca:04:cb:c9:92:85:
42:37:47:be:72:25:ac:9d:37:5a:aa:c9:da:cd:1a:
b9:c1:6c:a8:69:ea:97:80:3d:b2:04:ce:63:bb:59:
f8:63:86:95:5b:18:5b:d5:27:6e:fa:e2:40:0a:74:
e2:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:6D:BC:14:5C:F0:A1:CD:FE:70:F6:37:C4:33:0C:27:F3:B1:90:DB
X509v3 Authority Key Identifier:
keyid:E0:69:AB:6F:09:57:2A:FB:46:E9:F8:E9:A0:63:9D:82:0B:96:94:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4GmrbwlXKvtG6fjpoGOdgguWlCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/aa5cc0-bb56-4b47-b7c1-44f41d9e1277/1/4GmrbwlXKvtG6fjpoGOdgguWlCI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/aa5cc0-bb56-4b47-b7c1-44f41d9e1277/1/4GmrbwlXKvtG6fjpoGOdgguWlCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:8d:06:8c:63:ba:13:65:00:f9:69:e2:27:a2:b6:e2:1f:c2:
55:81:a6:28:13:3d:c7:73:4a:6a:cc:09:4f:b2:31:0f:9e:64:
4e:70:17:72:19:b0:81:8d:f0:d0:32:7c:0a:e2:13:df:9f:1e:
80:a9:e5:f8:fb:6b:0f:76:83:5b:4d:4a:f2:c3:0d:cd:b9:95:
4a:92:46:2b:ec:fc:c3:c0:3b:a4:b0:16:fd:fd:0a:93:34:bc:
41:7e:65:c2:e2:e4:db:a8:3e:36:f5:69:4b:e3:b3:38:2c:c1:
b3:9f:fc:00:61:35:d7:bd:42:9a:e6:02:88:61:3d:a2:83:4a:
35:95:06:24:95:1f:7e:95:11:dc:01:38:5c:da:94:ea:5d:bc:
0f:82:4d:eb:b4:73:ef:1e:2f:4d:34:d3:86:6b:20:55:f7:a5:
91:8e:0e:d5:ae:19:fb:3a:4f:f1:cb:4b:c9:52:07:fe:ac:a9:
a4:3c:9b:7a:f8:ba:9b:99:8c:37:8a:47:74:e7:5c:fc:81:08:
2d:8e:0d:3a:f8:cc:5d:e3:4a:c1:2d:76:96:04:3f:d0:d4:03:
e5:95:6c:c5:9a:de:58:d9:ef:03:48:06:30:a5:69:1d:c0:49:
e0:b9:0b:c6:2a:af:a5:b4:07:99:ec:93:20:c5:83:7e:0e:0c:
3f:3d:20:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 12:00:46 2025 by rpki-client