Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/c8900c-f3d2-457c-b38b-6d7650ca3d04/1/4oqGzL9We9migv3fdfC39VQiItI.mft
File: 4oqGzL9We9migv3fdfC39VQiItI.mft (raw, json)
Hash identifier: B0DjxsjDgvd6x5qIxHEPcAs78Ovdd4rOYePpAsfAiNM=
Subject key identifier: 5E:E0:22:84:6F:3B:7D:D1:01:45:C4:3D:24:EF:62:B3:0B:09:65:97
Authority key identifier: E2:8A:86:CC:BF:56:7B:D9:A2:82:FD:DF:75:F0:B7:F5:54:22:22:D2
Certificate issuer: /CN=e28a86ccbf567bd9a282fddf75f0b7f5542222d2
Certificate serial: 019874BE4443DD83FBDB623E3CD8BB080E05
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4oqGzL9We9migv3fdfC39VQiItI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/c8900c-f3d2-457c-b38b-6d7650ca3d04/1/4oqGzL9We9migv3fdfC39VQiItI.mft
Manifest number: 05CD
Signing time: Mon 04 Aug 2025 11:01:23 +0000
Manifest this update: Mon 04 Aug 2025 11:01:23 +0000
Manifest next update: Tue 05 Aug 2025 11:01:23 +0000
Files and hashes: 1: 4oqGzL9We9migv3fdfC39VQiItI.crl (hash: 0QbF0XZknkX+RGjKQVGhP5c5Izr9Vc+5jSf5H9ZE430=)
2: YqAFoc5kTd7Z4_KKDQIoEbzTXXs.roa (hash: 5bYNmgtpiY7zEyVHWvNikpnw6RjJjGyTau2g1VZIDwA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/c8900c-f3d2-457c-b38b-6d7650ca3d04/1/4oqGzL9We9migv3fdfC39VQiItI.crl
rsync://rpki.ripe.net/repository/DEFAULT/a3/c8900c-f3d2-457c-b38b-6d7650ca3d04/1/4oqGzL9We9migv3fdfC39VQiItI.mft
rsync://rpki.ripe.net/repository/DEFAULT/4oqGzL9We9migv3fdfC39VQiItI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 11:01:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:74:be:44:43:dd:83:fb:db:62:3e:3c:d8:bb:08:0e:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e28a86ccbf567bd9a282fddf75f0b7f5542222d2
Validity
Not Before: Aug 4 11:01:23 2025 GMT
Not After : Aug 5 11:01:23 2025 GMT
Subject: CN=5ee022846f3b7dd10145c43d24ef62b30b096597
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:03:86:85:fc:19:98:11:bd:f0:33:78:59:e3:
63:eb:98:1a:d3:50:97:5e:be:9a:15:c0:a9:26:f2:
1e:8c:0d:34:98:f3:57:59:38:b1:35:71:ff:69:39:
52:aa:bb:49:36:09:26:5e:fe:77:03:31:e7:2b:72:
f6:9e:72:7c:09:bb:d9:bf:7a:1f:e6:13:91:69:0b:
36:20:89:a6:d7:64:fe:1f:31:90:fc:ad:81:e0:41:
39:6a:67:e4:65:db:a7:57:20:44:bf:55:8f:e8:9d:
aa:22:19:e7:ac:22:e9:29:8c:cb:dc:c5:4f:8a:bb:
e5:34:a2:a1:26:f2:85:00:e1:03:73:ad:5b:61:3c:
7f:45:aa:b7:7f:c6:04:7a:3d:2c:08:10:8b:79:f0:
25:00:97:6c:3c:f0:f6:f7:af:84:da:01:ed:14:f6:
31:a7:e5:d6:eb:a4:fc:81:82:2c:80:82:e9:a4:60:
d1:bb:16:99:d5:d5:7d:21:9a:42:c4:b1:1b:dd:09:
52:cb:b0:12:fa:dc:c8:63:89:b1:c9:14:8a:1d:63:
1d:2f:32:c1:ad:07:06:e9:c6:29:92:1e:83:a0:0f:
de:71:d2:a8:44:8e:93:a9:9c:62:eb:ab:9a:98:f9:
e5:83:49:e5:41:2e:d2:07:31:af:d9:4b:b8:08:b1:
d9:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:E0:22:84:6F:3B:7D:D1:01:45:C4:3D:24:EF:62:B3:0B:09:65:97
X509v3 Authority Key Identifier:
keyid:E2:8A:86:CC:BF:56:7B:D9:A2:82:FD:DF:75:F0:B7:F5:54:22:22:D2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4oqGzL9We9migv3fdfC39VQiItI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/c8900c-f3d2-457c-b38b-6d7650ca3d04/1/4oqGzL9We9migv3fdfC39VQiItI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/c8900c-f3d2-457c-b38b-6d7650ca3d04/1/4oqGzL9We9migv3fdfC39VQiItI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:04:77:d0:25:13:af:43:54:28:26:bd:29:10:fc:1f:66:4b:
6d:a8:11:de:bd:c9:15:ca:2e:5d:4e:5d:ea:e3:4e:04:ea:f1:
58:6e:b7:1f:35:34:4f:62:73:2d:5a:70:4a:20:e6:6c:67:3f:
82:4e:fa:e2:fb:a1:16:f9:25:98:52:b1:b3:01:d3:c9:de:6b:
00:ab:8a:dc:b3:35:f0:48:0e:92:9d:3c:6e:2b:c3:fb:8a:08:
91:f9:c6:6d:cc:ea:3b:99:99:3a:d7:94:62:f6:c6:80:cf:70:
a3:f9:62:71:9c:ac:a6:eb:94:8f:dd:0d:aa:47:2c:c2:73:f5:
f8:2d:45:e8:fc:c1:29:54:ab:e1:de:33:bf:2f:31:d3:96:4a:
81:c0:a7:b2:d5:04:c0:86:d1:06:f7:44:a9:f2:61:b6:6a:c9:
43:71:2d:95:6c:7c:6e:91:07:77:4a:ca:00:9d:64:d2:7d:f4:
25:78:f9:9e:97:26:07:ef:29:da:f5:85:31:19:aa:e6:51:20:
5b:16:3d:aa:b4:e2:8e:4b:48:2e:9f:8c:9c:0e:de:8f:57:50:
85:a9:3c:42:c5:e3:4f:5c:a9:36:02:e4:08:40:34:b3:4b:44:
a5:ea:8a:ee:11:d6:15:fc:b0:85:55:bd:a2:92:b7:9e:61:b7:
a4:6c:b6:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 18:13:24 2025 by rpki-client