Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/2c0dcd-8e47-442c-b0f4-cc7679f1802f/1/4dPJr2z1K4o5C1jwCxSohxAzaUQ.mft
File: 4dPJr2z1K4o5C1jwCxSohxAzaUQ.mft (raw, json)
Hash identifier: NHS8ZbfIgL2pMOEKTzACrtyu5Mk11yrDCNhpMCC2wGM=
Subject key identifier: 94:3F:51:D5:49:FA:15:3E:6E:A9:DF:A2:4C:A9:C7:00:24:D4:40:EE
Authority key identifier: E1:D3:C9:AF:6C:F5:2B:8A:39:0B:58:F0:0B:14:A8:87:10:33:69:44
Certificate issuer: /CN=e1d3c9af6cf52b8a390b58f00b14a88710336944
Certificate serial: 01977B302621F68BAF7968FE182B0AEA8520
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4dPJr2z1K4o5C1jwCxSohxAzaUQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/2c0dcd-8e47-442c-b0f4-cc7679f1802f/1/4dPJr2z1K4o5C1jwCxSohxAzaUQ.mft
Manifest number: 1010
Signing time: Tue 17 Jun 2025 00:00:42 +0000
Manifest this update: Tue 17 Jun 2025 00:00:42 +0000
Manifest next update: Wed 18 Jun 2025 00:00:42 +0000
Files and hashes: 1: 4dPJr2z1K4o5C1jwCxSohxAzaUQ.crl (hash: /CA9gEOI2/buE8xU6Bf5yJyAPs/9Zyr6VXtXGZKCvlc=)
2: EIPXP4SEmPbV8aQA2-5L0Ta_OhQ.roa (hash: YwImDgJjuNmka436Jqvx4IjnyNxYmhqYhI9Yd1gMUo8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/2c0dcd-8e47-442c-b0f4-cc7679f1802f/1/4dPJr2z1K4o5C1jwCxSohxAzaUQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/e2/2c0dcd-8e47-442c-b0f4-cc7679f1802f/1/4dPJr2z1K4o5C1jwCxSohxAzaUQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/4dPJr2z1K4o5C1jwCxSohxAzaUQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 17 Jun 2025 21:51:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:7b:30:26:21:f6:8b:af:79:68:fe:18:2b:0a:ea:85:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e1d3c9af6cf52b8a390b58f00b14a88710336944
Validity
Not Before: Jun 17 00:00:42 2025 GMT
Not After : Jun 18 00:00:42 2025 GMT
Subject: CN=943f51d549fa153e6ea9dfa24ca9c70024d440ee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:e5:bd:fb:cb:5d:19:e7:23:70:d3:bd:ac:ac:
69:b4:6d:b1:1c:53:55:3e:13:cf:7c:be:c1:39:cf:
fd:f3:18:3d:cf:24:24:c4:0a:f8:f3:a2:58:8d:cd:
09:30:9e:9a:49:73:76:21:34:7b:01:c7:58:fd:cf:
00:23:96:61:6f:c3:08:df:a3:cb:15:6c:82:64:7a:
d1:90:e8:84:bb:63:bf:dc:04:b4:30:83:27:ea:3c:
56:6c:60:e1:cf:a2:f4:3f:da:c5:32:d3:c6:6f:cf:
8a:51:f1:89:f7:84:1f:56:47:fa:5a:75:9c:7f:d0:
df:4a:07:b6:25:53:a0:f2:dd:db:74:85:99:7c:30:
e7:90:ac:52:1b:0e:c7:2b:67:7b:77:fd:eb:5a:66:
10:50:5f:8c:38:87:5f:e5:2e:41:6e:46:16:ae:48:
94:14:36:49:ed:e7:b2:03:5f:31:22:c6:a7:c3:bd:
87:8c:93:d3:b7:af:5f:25:3b:b3:1a:3b:1c:a7:2c:
c9:55:55:3d:cd:6d:2e:51:05:b3:4b:bc:83:8f:8f:
0e:c2:b5:e3:37:9e:a1:d0:39:9d:ab:1f:e9:e9:55:
4e:1a:52:b4:01:66:da:30:c9:4d:98:b2:54:4d:be:
7b:8b:18:dd:21:ae:21:bb:2a:ad:aa:8f:1b:a1:b5:
4c:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:3F:51:D5:49:FA:15:3E:6E:A9:DF:A2:4C:A9:C7:00:24:D4:40:EE
X509v3 Authority Key Identifier:
keyid:E1:D3:C9:AF:6C:F5:2B:8A:39:0B:58:F0:0B:14:A8:87:10:33:69:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4dPJr2z1K4o5C1jwCxSohxAzaUQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/2c0dcd-8e47-442c-b0f4-cc7679f1802f/1/4dPJr2z1K4o5C1jwCxSohxAzaUQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/2c0dcd-8e47-442c-b0f4-cc7679f1802f/1/4dPJr2z1K4o5C1jwCxSohxAzaUQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b2:c1:a6:40:20:bc:ec:7a:dc:fd:4f:dd:82:a7:3d:ec:10:1e:
68:30:d9:c5:c7:ff:7b:17:07:f2:51:95:b4:be:da:cb:56:71:
03:b1:eb:2f:d4:62:ab:04:54:5b:56:68:d0:5d:62:f5:21:5a:
12:fb:c2:3f:c8:63:ce:5d:4b:a7:f3:87:fe:b0:18:af:5e:5b:
62:de:48:ad:c3:85:bb:2d:b9:49:e8:32:b4:42:9c:63:c0:69:
a9:53:8c:b3:f6:8e:96:3a:38:08:22:44:d2:18:0f:c0:12:30:
b8:37:b9:9b:3d:8f:44:e4:b5:5b:03:9f:fb:34:7b:78:2a:fa:
f8:6e:46:80:72:60:83:d2:1b:9b:e7:17:2a:bf:59:1e:47:70:
4f:06:9c:4b:ad:4b:b6:ed:c8:e2:9c:b9:47:c6:8f:cb:28:cd:
8f:25:20:b5:01:39:71:1e:bf:b6:5a:88:87:f3:a6:b7:dd:27:
74:c3:0c:62:5b:d6:8f:37:bc:a6:dd:76:57:f9:29:83:fd:2c:
2e:0d:bf:d8:e2:51:12:bf:b2:bb:8d:e7:9a:6e:4c:fd:6c:8c:
9f:43:f9:71:64:7b:3e:93:06:a3:ec:eb:e2:72:ee:a5:e7:00:
2d:15:f3:a0:97:fe:ca:84:ad:50:30:6d:af:09:31:7d:81:a1:
de:6c:38:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 17 03:59:47 2025 by rpki-client