Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/286d47-6434-41bd-9aa2-09ff79308bbe/1/4_cHBvbAz72cc6fz2DAjJApC9Q0.mft
File: 4_cHBvbAz72cc6fz2DAjJApC9Q0.mft (raw, json)
Hash identifier: cFUiHjkq4vAxGKjtg+PBlXonu1kXy4+vLPiSf2O3w7c=
Subject key identifier: 42:BB:60:FC:EB:0F:B4:F3:75:FE:3E:1A:AF:47:9A:C9:38:F3:2B:2B
Authority key identifier: E3:F7:07:06:F6:C0:CF:BD:9C:73:A7:F3:D8:30:23:24:0A:42:F5:0D
Certificate issuer: /CN=e3f70706f6c0cfbd9c73a7f3d83023240a42f50d
Certificate serial: 01977187F168B538ED3B4964C68E1584F0BB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4_cHBvbAz72cc6fz2DAjJApC9Q0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/286d47-6434-41bd-9aa2-09ff79308bbe/1/4_cHBvbAz72cc6fz2DAjJApC9Q0.mft
Manifest number: 0C9F
Signing time: Sun 15 Jun 2025 03:00:23 +0000
Manifest this update: Sun 15 Jun 2025 03:00:23 +0000
Manifest next update: Mon 16 Jun 2025 03:00:23 +0000
Files and hashes: 1: 4_cHBvbAz72cc6fz2DAjJApC9Q0.crl (hash: bZHg6BjfF8ao94CRVl50P7kkroQ6IQyMsc2eZj5Vb6s=)
2: JZBToS-O_vrT2aeKBSNggNB5se0.roa (hash: D8kzrex63NBxCoEgyWN4HyqVj2eRzOdT3Da1FU0u+nI=)
3: cKLdHjbMHa9DWXygLYK3fJRjYqw.roa (hash: aXunewdhx0tio/kXThZoUaubUGfQctWD4RTkIiazOVE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a8/286d47-6434-41bd-9aa2-09ff79308bbe/1/4_cHBvbAz72cc6fz2DAjJApC9Q0.crl
rsync://rpki.ripe.net/repository/DEFAULT/a8/286d47-6434-41bd-9aa2-09ff79308bbe/1/4_cHBvbAz72cc6fz2DAjJApC9Q0.mft
rsync://rpki.ripe.net/repository/DEFAULT/4_cHBvbAz72cc6fz2DAjJApC9Q0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 22:19:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:71:87:f1:68:b5:38:ed:3b:49:64:c6:8e:15:84:f0:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e3f70706f6c0cfbd9c73a7f3d83023240a42f50d
Validity
Not Before: Jun 15 03:00:23 2025 GMT
Not After : Jun 16 03:00:23 2025 GMT
Subject: CN=42bb60fceb0fb4f375fe3e1aaf479ac938f32b2b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:f5:2e:f8:79:08:3e:25:21:fa:a3:fe:5b:d9:
11:cf:09:ed:0f:4f:e4:5a:d4:d4:2e:df:b2:59:4f:
05:0b:a3:39:2e:b0:2d:75:92:a2:65:a4:81:58:8d:
8b:75:cc:1b:f4:c1:18:16:f3:31:f4:34:9e:45:99:
84:e2:84:80:72:c2:bd:02:16:d3:88:06:45:36:9d:
6f:16:ac:3d:8f:10:a7:3c:95:73:25:e4:a4:39:e5:
12:83:96:bb:2c:15:ea:07:8b:96:7e:41:91:73:ee:
57:32:fb:07:4f:8b:c7:d1:9a:73:00:d8:7e:98:1b:
bc:a6:37:48:be:de:5b:0c:37:38:c7:b0:86:15:f7:
68:84:02:3e:c4:92:9e:e2:db:ee:a2:bb:23:27:d8:
bf:7e:f0:a7:00:a6:d1:a0:b3:e0:f2:ce:d0:17:e4:
97:3c:7c:63:75:97:10:a9:fc:98:e2:4f:cb:09:73:
64:b2:6a:99:fa:75:cf:72:2a:c1:54:04:ae:06:e9:
78:de:38:8e:c3:a4:18:9e:e7:7e:07:06:db:6e:94:
52:3f:89:dc:18:19:55:72:78:c9:1b:51:52:8f:e4:
59:db:c5:ea:c2:ad:1e:93:4e:49:51:bb:f0:63:9d:
5e:cc:43:8a:cb:c9:19:e7:5a:cf:a0:c8:3a:80:09:
b4:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:BB:60:FC:EB:0F:B4:F3:75:FE:3E:1A:AF:47:9A:C9:38:F3:2B:2B
X509v3 Authority Key Identifier:
keyid:E3:F7:07:06:F6:C0:CF:BD:9C:73:A7:F3:D8:30:23:24:0A:42:F5:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4_cHBvbAz72cc6fz2DAjJApC9Q0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/286d47-6434-41bd-9aa2-09ff79308bbe/1/4_cHBvbAz72cc6fz2DAjJApC9Q0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/286d47-6434-41bd-9aa2-09ff79308bbe/1/4_cHBvbAz72cc6fz2DAjJApC9Q0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:0b:26:1b:ce:ed:a9:4a:9f:8e:55:2a:26:d1:f3:f6:85:c3:
e5:a1:06:82:71:f2:18:b0:99:19:e8:81:06:32:25:39:bc:d7:
c7:3d:6d:52:2a:0e:2c:19:2b:78:6d:d3:18:93:ac:20:a3:4c:
09:6b:5f:cb:72:88:fa:32:56:69:de:07:34:f6:00:74:e7:a2:
47:3f:44:1d:67:cc:f9:cb:93:19:8b:c8:08:da:2b:c1:fc:f8:
58:44:d0:1b:1f:05:dd:5e:02:87:99:18:92:0e:56:56:8d:9f:
a5:bf:fb:77:d4:79:6f:2f:48:3c:06:d0:07:57:90:f7:66:76:
25:08:72:4d:73:5d:09:24:7d:0f:3b:6e:73:b0:0f:c4:f3:99:
a3:a4:8e:e6:fe:99:f7:75:a7:f5:f0:88:60:de:76:47:6c:a2:
c7:90:fd:d0:49:82:ae:32:f3:e4:0c:1a:b8:f2:6c:c6:62:86:
66:8b:3d:de:8b:a7:e6:21:ce:f3:80:11:dc:47:47:d3:e2:17:
86:b9:75:43:a8:b2:5d:86:0a:94:5a:c3:ee:81:b7:a2:9c:bd:
ef:2f:e7:7c:c2:85:7f:39:c3:57:f9:68:5f:8b:31:8b:fa:19:
4b:c1:66:ee:a6:49:f9:8a:5b:f8:a9:b6:10:b7:9a:45:7f:bd:
94:0d:8b:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 07:36:26 2025 by rpki-client