Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/d2e826-5acb-47d6-92a4-43bb19f2e53b/1/s4WUFGIC4vbDRWsGlv8YVi8bn4E.mft
File: s4WUFGIC4vbDRWsGlv8YVi8bn4E.mft (raw, json)
Hash identifier: xo0/wEP13v4FmhUA4pdn0mcAnDyHnRN0ECEl9Mu3DSA=
Subject key identifier: 2C:2A:61:B9:29:C5:E1:95:B3:91:43:00:AC:45:B4:F3:94:9C:0F:8E
Authority key identifier: B3:85:94:14:62:02:E2:F6:C3:45:6B:06:96:FF:18:56:2F:1B:9F:81
Certificate issuer: /CN=b38594146202e2f6c3456b0696ff18562f1b9f81
Certificate serial: 01976B8630FBE0B974CDB8B83B3FF77060FC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s4WUFGIC4vbDRWsGlv8YVi8bn4E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/d2e826-5acb-47d6-92a4-43bb19f2e53b/1/s4WUFGIC4vbDRWsGlv8YVi8bn4E.mft
Manifest number: 0917
Signing time: Fri 13 Jun 2025 23:00:45 +0000
Manifest this update: Fri 13 Jun 2025 23:00:45 +0000
Manifest next update: Sat 14 Jun 2025 23:00:45 +0000
Files and hashes: 1: IcIyZXTtvGCVT7kmzm3an6XI4Ds.roa (hash: 9+rlboX5YqLY2xGwqsRBQUwcIF0ZyOqFrf8SvNh+rfQ=)
2: s4WUFGIC4vbDRWsGlv8YVi8bn4E.crl (hash: sbOUhvg1GiWdsYMi/gXw737qq478I43ZUNQlvZyjmr8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/d2e826-5acb-47d6-92a4-43bb19f2e53b/1/s4WUFGIC4vbDRWsGlv8YVi8bn4E.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/d2e826-5acb-47d6-92a4-43bb19f2e53b/1/s4WUFGIC4vbDRWsGlv8YVi8bn4E.mft
rsync://rpki.ripe.net/repository/DEFAULT/s4WUFGIC4vbDRWsGlv8YVi8bn4E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 23:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6b:86:30:fb:e0:b9:74:cd:b8:b8:3b:3f:f7:70:60:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b38594146202e2f6c3456b0696ff18562f1b9f81
Validity
Not Before: Jun 13 23:00:45 2025 GMT
Not After : Jun 14 23:00:45 2025 GMT
Subject: CN=2c2a61b929c5e195b3914300ac45b4f3949c0f8e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:99:9b:99:ec:b4:7d:08:2c:07:89:ef:18:bb:
76:63:07:59:99:df:ff:7d:3b:78:88:79:b1:64:1f:
23:81:8e:dd:ef:2f:c1:ac:36:92:cd:21:56:f6:7e:
29:db:d6:35:60:ba:e6:b3:91:f7:6c:7f:e7:43:df:
98:57:3e:af:42:9e:a6:a2:bb:65:be:83:ca:85:69:
7a:c0:8a:7b:9c:1e:c2:61:52:fe:75:26:c9:fa:e8:
92:e1:72:8a:a3:a8:a5:c6:44:25:ee:ae:7b:54:7e:
48:e5:e2:56:f5:1a:ee:fd:c7:8a:9b:94:4d:bf:86:
1d:62:d8:ed:03:99:a6:79:f7:f1:5e:8c:49:82:76:
6d:6b:cf:cd:93:4e:c3:79:ea:33:02:4f:6b:30:1f:
e0:54:2c:02:65:3c:41:aa:84:a9:63:bd:fc:b7:31:
ee:77:c4:a8:d4:be:0f:33:58:a4:dc:63:5f:de:b5:
ee:ba:68:61:51:09:f5:bb:13:8f:18:d9:ce:ae:03:
cc:83:87:79:1a:8c:11:ae:dd:4f:37:5a:91:62:73:
38:cb:cf:16:c7:4a:ea:78:86:0a:53:4b:34:e5:55:
10:21:77:2e:89:90:11:55:57:e8:62:64:95:06:8c:
35:e0:dc:68:ff:f9:43:b6:8f:2f:1b:6e:85:62:54:
ef:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:2A:61:B9:29:C5:E1:95:B3:91:43:00:AC:45:B4:F3:94:9C:0F:8E
X509v3 Authority Key Identifier:
keyid:B3:85:94:14:62:02:E2:F6:C3:45:6B:06:96:FF:18:56:2F:1B:9F:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s4WUFGIC4vbDRWsGlv8YVi8bn4E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/d2e826-5acb-47d6-92a4-43bb19f2e53b/1/s4WUFGIC4vbDRWsGlv8YVi8bn4E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/d2e826-5acb-47d6-92a4-43bb19f2e53b/1/s4WUFGIC4vbDRWsGlv8YVi8bn4E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:6d:bf:7a:23:04:26:97:de:e2:de:32:5a:9b:5d:fc:fe:bd:
b0:28:9e:3f:a8:db:e8:27:7d:05:95:35:11:11:5c:1e:99:3b:
25:3c:ee:61:10:83:9e:fa:56:09:f9:fb:9c:54:00:21:d2:e7:
7b:d8:f4:72:b0:ec:a9:3d:25:92:8a:ee:bd:2c:2e:98:95:d1:
ab:d8:1a:98:d0:a7:ae:f2:ed:a2:e6:50:ba:9f:3c:6d:9c:56:
2a:1f:3d:6e:fe:b0:c0:4e:11:d0:ab:22:52:d9:a3:6e:17:7e:
49:0e:74:83:5e:1b:08:13:7e:a8:7f:b2:42:3c:95:ec:0f:86:
95:13:74:67:56:a2:8e:cd:de:5c:53:80:ff:f8:d8:a3:71:67:
75:b0:86:ac:bd:5f:36:5f:6a:db:e3:fa:8a:53:98:24:4f:5d:
08:da:26:e6:c2:c7:d8:06:6e:19:cc:18:d3:99:5c:ec:16:79:
26:79:3a:86:24:5e:7f:8e:07:59:11:8b:65:ad:3b:53:89:ae:
f0:d3:e1:e7:8b:af:18:e9:dc:9f:82:26:9d:0d:d5:f1:14:2c:
72:a4:37:2c:b5:4a:5f:95:1b:51:7c:59:50:8b:f9:45:e4:5b:
0e:5c:92:66:ab:ce:be:1b:b2:59:0d:0c:09:64:29:a0:15:38:
4a:52:a9:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 09:10:48 2025 by rpki-client