Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9d/968a85-01d3-4b0c-b920-66cbf876ab3e/1/4B8Zbdft0RMdAiD9t3cSJiG7ve8.mft
File: 4B8Zbdft0RMdAiD9t3cSJiG7ve8.mft (raw, json)
Hash identifier: pfad7ZclYN0HUyPcCLpg05UVnEHMGq1qkRpkDkDnEvw=
Subject key identifier: 01:BE:97:9F:5B:9C:7F:80:A7:DA:7A:A8:61:48:94:3C:32:23:FC:31
Authority key identifier: E0:1F:19:6D:D7:ED:D1:13:1D:02:20:FD:B7:77:12:26:21:BB:BD:EF
Certificate issuer: /CN=e01f196dd7edd1131d0220fdb777122621bbbdef
Certificate serial: 01976BF41EB00A9DABF912B929733CD5FF53
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4B8Zbdft0RMdAiD9t3cSJiG7ve8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9d/968a85-01d3-4b0c-b920-66cbf876ab3e/1/4B8Zbdft0RMdAiD9t3cSJiG7ve8.mft
Manifest number: 0AA1
Signing time: Sat 14 Jun 2025 01:00:50 +0000
Manifest this update: Sat 14 Jun 2025 01:00:50 +0000
Manifest next update: Sun 15 Jun 2025 01:00:50 +0000
Files and hashes: 1: 4B8Zbdft0RMdAiD9t3cSJiG7ve8.crl (hash: LtOpbF1spEO/lK8cqJc1d7JC6/5dVRQAMGGPMbOrOSI=)
2: 4ea1dMd4wRgTBo1jIMebmZZJLM4.roa (hash: s7rnybcZ+EzxkGbEPGLzvVlVM7bMx+c1GhcuJyz67VI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9d/968a85-01d3-4b0c-b920-66cbf876ab3e/1/4B8Zbdft0RMdAiD9t3cSJiG7ve8.crl
rsync://rpki.ripe.net/repository/DEFAULT/9d/968a85-01d3-4b0c-b920-66cbf876ab3e/1/4B8Zbdft0RMdAiD9t3cSJiG7ve8.mft
rsync://rpki.ripe.net/repository/DEFAULT/4B8Zbdft0RMdAiD9t3cSJiG7ve8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6b:f4:1e:b0:0a:9d:ab:f9:12:b9:29:73:3c:d5:ff:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e01f196dd7edd1131d0220fdb777122621bbbdef
Validity
Not Before: Jun 14 01:00:50 2025 GMT
Not After : Jun 15 01:00:50 2025 GMT
Subject: CN=01be979f5b9c7f80a7da7aa86148943c3223fc31
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:0b:f6:79:71:36:4d:cd:ff:cd:5c:40:04:fc:
ca:7e:b3:67:58:8e:4d:bf:25:7b:f8:55:43:50:f6:
e1:30:c2:53:33:59:4f:33:6f:da:cc:3e:fd:a9:0e:
12:4b:88:18:c2:e2:fa:e9:ed:e0:02:54:cd:ac:7c:
87:00:0a:3d:4e:f0:6c:f4:ac:8f:53:9e:4c:b0:23:
70:64:ed:00:74:4f:e5:53:f1:79:26:cd:ac:39:33:
84:41:8e:c8:9c:96:d3:fd:2c:02:df:eb:0e:e8:4f:
bf:2b:89:b8:67:b2:a7:ee:81:5c:b2:27:24:24:c5:
ec:6e:49:27:36:f2:2b:9c:01:90:4a:bd:00:42:52:
0a:6e:70:1f:96:c4:1d:82:4f:e9:71:ba:95:f7:56:
6b:e3:49:29:49:22:98:c2:10:20:94:93:25:1d:5a:
ac:bb:22:2e:a0:44:c3:a0:d9:c2:87:4c:50:5e:1f:
a2:e0:c2:bc:66:9d:e8:29:f8:c6:6c:23:5b:84:de:
b5:fd:a4:12:66:51:19:fc:29:6a:ea:e9:9c:fb:45:
6c:7e:2b:7e:b8:2d:e0:ff:29:f9:c3:c7:e9:2b:b2:
b7:88:cf:77:ee:07:4c:08:1a:8c:82:84:8f:a7:b2:
9a:c6:14:f9:ac:c4:8d:f4:a7:d3:b9:72:f6:eb:dc:
2b:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:BE:97:9F:5B:9C:7F:80:A7:DA:7A:A8:61:48:94:3C:32:23:FC:31
X509v3 Authority Key Identifier:
keyid:E0:1F:19:6D:D7:ED:D1:13:1D:02:20:FD:B7:77:12:26:21:BB:BD:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4B8Zbdft0RMdAiD9t3cSJiG7ve8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/968a85-01d3-4b0c-b920-66cbf876ab3e/1/4B8Zbdft0RMdAiD9t3cSJiG7ve8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/968a85-01d3-4b0c-b920-66cbf876ab3e/1/4B8Zbdft0RMdAiD9t3cSJiG7ve8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:dd:18:11:d2:c2:3a:90:e6:5a:d5:07:a0:b6:7a:e8:18:2c:
b9:b4:1c:30:2b:15:85:64:94:b2:21:e6:8a:4a:a2:b4:1e:7d:
5d:43:ce:43:cb:dc:a6:e2:a6:e4:55:1d:b3:bf:99:37:8a:37:
31:e5:f4:e2:4f:b5:fb:ec:b2:f9:fe:b4:34:f8:cf:44:16:f8:
eb:9c:55:91:0b:fa:b5:a5:2a:72:3f:7c:4f:2c:18:9d:57:59:
c1:17:2a:8b:fd:5a:8c:e2:f6:4e:a2:cd:c6:c0:cd:4a:56:9a:
6b:e3:f5:27:29:68:ea:9f:27:e7:34:31:53:88:ab:5c:0d:33:
29:16:be:f3:a7:73:28:29:9c:3b:db:eb:f1:c2:36:aa:f1:63:
e7:84:0c:c7:47:7c:35:cb:38:ba:58:7d:bc:db:9d:88:1a:f8:
ab:e0:21:28:28:39:a5:49:73:e9:e0:ce:ac:b3:24:83:30:02:
07:4f:87:1e:f6:8b:ee:76:7b:84:b6:1f:cd:7c:7c:c9:68:7c:
f2:89:8e:e6:a0:bf:11:63:a3:ac:78:3a:45:f7:ae:73:e6:3c:
80:43:82:84:dc:a8:98:43:f7:62:5f:21:f4:a6:ae:63:c8:d9:
1e:60:57:3a:7b:b7:7b:e2:de:b2:41:27:45:28:64:34:c2:a0:
99:9d:b7:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 09:23:56 2025 by rpki-client