Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/976565-a699-4d88-8117-3421ea41df36/1/ElIPiyr4oUUwiaYg0jkvZrCj6_Q.mft
File: ElIPiyr4oUUwiaYg0jkvZrCj6_Q.mft (raw, json)
Hash identifier: Yj34GSR4zxpy24ieGXIVIRtdd+z7rXuEKUIT4bFMpFs=
Subject key identifier: B6:61:4E:9F:A4:3E:DE:9F:26:41:9D:E8:DF:6A:F3:85:B0:56:18:C8
Authority key identifier: 12:52:0F:8B:2A:F8:A1:45:30:89:A6:20:D2:39:2F:66:B0:A3:EB:F4
Certificate issuer: /CN=12520f8b2af8a1453089a620d2392f66b0a3ebf4
Certificate serial: 01989223A73CE05BB0FB7E8CF05209D688DF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ElIPiyr4oUUwiaYg0jkvZrCj6_Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/976565-a699-4d88-8117-3421ea41df36/1/ElIPiyr4oUUwiaYg0jkvZrCj6_Q.mft
Manifest number: B4
Signing time: Sun 10 Aug 2025 04:01:06 +0000
Manifest this update: Sun 10 Aug 2025 04:01:06 +0000
Manifest next update: Mon 11 Aug 2025 04:01:06 +0000
Files and hashes: 1: ElIPiyr4oUUwiaYg0jkvZrCj6_Q.crl (hash: QDJluX2sBRIe7eNvbGngy3iB5IY9SCprxbstE7bQXjQ=)
2: nHxs1XMfnqzh-Z8aeIMb_NiElkE.roa (hash: 8Qy8fF7R1NwaP6gn0wt2uKO1stfFsvaIv7LK8MDpXo4=)
3: uPdsoPPsIplTvcCyAbcJMwYg9pQ.roa (hash: csIN1YT5O+6UepoAW4L5bp8f0Qp/luUK9hGbpbp+j+I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/976565-a699-4d88-8117-3421ea41df36/1/ElIPiyr4oUUwiaYg0jkvZrCj6_Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/a5/976565-a699-4d88-8117-3421ea41df36/1/ElIPiyr4oUUwiaYg0jkvZrCj6_Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/ElIPiyr4oUUwiaYg0jkvZrCj6_Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 11 Aug 2025 04:01:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:92:23:a7:3c:e0:5b:b0:fb:7e:8c:f0:52:09:d6:88:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=12520f8b2af8a1453089a620d2392f66b0a3ebf4
Validity
Not Before: Aug 10 04:01:06 2025 GMT
Not After : Aug 11 04:01:06 2025 GMT
Subject: CN=b6614e9fa43ede9f26419de8df6af385b05618c8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:e5:9c:57:58:02:39:d1:81:9f:91:03:83:69:
c3:a7:d1:5a:1f:bb:cd:2e:2d:65:72:9b:f8:d3:ef:
04:6a:25:58:86:25:d7:3e:d3:5f:f9:3f:be:bc:99:
d1:55:b7:85:41:54:f1:8c:89:33:fb:78:9f:a7:f0:
88:47:07:30:fd:11:a1:fb:c5:29:4a:47:97:9f:d7:
f7:75:a3:aa:78:23:b2:91:ad:ce:82:ac:53:51:26:
e0:24:c0:4a:1c:ce:f9:27:6c:06:2c:ab:a5:65:6e:
ca:df:59:0c:21:01:13:be:a4:98:df:b1:33:42:32:
b5:04:ff:d1:a1:37:4c:f7:b0:18:89:bf:5c:ab:3e:
a7:d2:58:e4:5e:b1:b3:8f:1e:d2:69:be:6c:bc:9b:
6b:a2:59:fd:06:10:39:24:81:29:4e:de:ae:b8:eb:
8e:91:77:3a:f6:d6:a2:37:03:e8:63:5b:26:a2:2c:
e1:fc:b3:0a:c3:78:ba:89:3a:7c:54:ab:02:1c:a7:
50:fd:68:61:fa:5b:f6:ab:d0:4e:aa:1e:0b:cf:09:
ac:89:41:70:6d:ac:35:1c:0e:23:14:6b:71:31:cd:
9f:73:f1:e9:00:85:98:74:80:cd:39:c0:ff:66:22:
0b:6a:b0:00:89:5f:4b:b4:b2:66:ee:b7:d0:4a:a9:
bb:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:61:4E:9F:A4:3E:DE:9F:26:41:9D:E8:DF:6A:F3:85:B0:56:18:C8
X509v3 Authority Key Identifier:
keyid:12:52:0F:8B:2A:F8:A1:45:30:89:A6:20:D2:39:2F:66:B0:A3:EB:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ElIPiyr4oUUwiaYg0jkvZrCj6_Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/976565-a699-4d88-8117-3421ea41df36/1/ElIPiyr4oUUwiaYg0jkvZrCj6_Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/976565-a699-4d88-8117-3421ea41df36/1/ElIPiyr4oUUwiaYg0jkvZrCj6_Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
96:3c:ac:c5:7c:3c:62:13:2f:ca:69:2a:04:33:2f:7d:02:3c:
fb:f9:9f:5f:13:c0:8a:6d:50:92:d1:5d:ad:e9:4f:a4:23:69:
a6:5e:f4:38:c0:b9:50:49:6f:fb:01:42:1b:fc:58:83:a4:01:
21:f8:75:bf:0f:bf:65:4a:11:31:31:ec:e9:97:b4:1c:96:ef:
88:b2:95:d7:37:96:31:44:7d:13:57:19:40:47:78:79:60:7e:
15:88:e6:ca:bf:77:7b:ea:27:e7:61:2a:5f:17:fc:de:fe:57:
ff:31:28:4f:72:35:eb:04:6d:40:21:c0:64:dc:01:f4:ca:19:
0b:05:b7:b3:e6:05:9f:d5:c8:98:6c:b4:12:c8:db:a2:27:a2:
ff:c2:de:cb:80:a3:c3:23:ce:c5:da:99:5f:11:c2:7d:98:b8:
ed:6a:a6:ce:ed:68:a7:f9:22:c5:37:21:be:b8:df:bf:d7:7d:
e5:f9:f5:aa:e2:b9:fe:22:9c:ba:7e:00:21:d7:f8:9c:a0:4f:
c4:81:06:18:10:a0:37:d1:c1:8f:80:68:3a:a0:8b:db:1f:79:
1a:76:69:fe:eb:62:2e:3a:69:f5:3c:86:43:b8:39:85:19:5f:
b3:a8:69:f3:3e:15:c0:bd:2d:50:d1:89:c5:67:38:e2:14:e1:
36:f4:0c:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 13:52:27 2025 by rpki-client