Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/7e3025-8caf-402c-b54f-cbb8cfee6e3c/1/4kLCt011daIop-ZPBAbzo5fHrlY.mft
File: 4kLCt011daIop-ZPBAbzo5fHrlY.mft (raw, json)
Hash identifier: Wip7F4hn9DCYUgHc3Sr8RS2qKjg6C1+AAvooC20kv1k=
Subject key identifier: 6C:FE:A0:3E:0E:FC:F8:75:A4:5F:A7:A7:97:DA:67:84:FC:0B:40:67
Authority key identifier: E2:42:C2:B7:4D:75:75:A2:28:A7:E6:4F:04:06:F3:A3:97:C7:AE:56
Certificate issuer: /CN=e242c2b74d7575a228a7e64f0406f3a397c7ae56
Certificate serial: 019872985BBF4FFD5F790BC53A634E1B800F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4kLCt011daIop-ZPBAbzo5fHrlY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/7e3025-8caf-402c-b54f-cbb8cfee6e3c/1/4kLCt011daIop-ZPBAbzo5fHrlY.mft
Manifest number: 09D8
Signing time: Mon 04 Aug 2025 01:00:44 +0000
Manifest this update: Mon 04 Aug 2025 01:00:44 +0000
Manifest next update: Tue 05 Aug 2025 01:00:44 +0000
Files and hashes: 1: 4kLCt011daIop-ZPBAbzo5fHrlY.crl (hash: i+O/lBH8CTlELt/rEUSik76SLZShmISd3ppKr+ytdpk=)
2: tqH_QlpRHC3I-MGoNxLkAHQ-nF8.roa (hash: NbmtGcVLSkgpCEX2NZ9d9iO41gK+6pDcIvg0Zs3pCA8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/7e3025-8caf-402c-b54f-cbb8cfee6e3c/1/4kLCt011daIop-ZPBAbzo5fHrlY.crl
rsync://rpki.ripe.net/repository/DEFAULT/e5/7e3025-8caf-402c-b54f-cbb8cfee6e3c/1/4kLCt011daIop-ZPBAbzo5fHrlY.mft
rsync://rpki.ripe.net/repository/DEFAULT/4kLCt011daIop-ZPBAbzo5fHrlY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 01:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:72:98:5b:bf:4f:fd:5f:79:0b:c5:3a:63:4e:1b:80:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e242c2b74d7575a228a7e64f0406f3a397c7ae56
Validity
Not Before: Aug 4 01:00:44 2025 GMT
Not After : Aug 5 01:00:44 2025 GMT
Subject: CN=6cfea03e0efcf875a45fa7a797da6784fc0b4067
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:c3:59:dd:b1:ce:dd:d8:31:81:ad:c8:9d:a2:
31:7a:c8:b0:b3:97:1e:b1:17:c7:a5:96:b4:33:b5:
2f:84:d1:b5:86:e9:c3:e0:ac:fe:fc:52:5f:85:d9:
bc:37:41:7b:35:2d:b4:a0:5c:a6:11:df:ed:e7:83:
e1:a3:e7:6c:9e:c4:b0:ec:7e:11:c4:e3:4b:54:fa:
e4:63:be:4b:15:85:a8:8e:5d:79:53:d7:21:9d:f4:
3b:a3:56:7f:ac:54:45:2c:5f:b5:ce:1c:65:78:b9:
af:d3:a1:e2:63:53:1e:61:ee:1d:3b:84:ea:2f:99:
e0:0b:21:84:84:9f:ad:91:00:a1:0c:98:65:61:56:
10:56:e7:19:b6:fc:f7:15:a7:62:8e:01:db:83:ab:
e6:89:ec:84:ba:78:be:8c:6a:36:a2:43:07:05:df:
72:40:8d:b5:a4:0e:ca:43:60:f9:0b:a3:30:c8:4e:
5b:01:57:f1:8c:9d:24:42:ca:dc:e4:7a:41:5b:17:
bd:bf:4c:74:cf:f8:f6:ae:df:1f:89:65:cf:6d:d8:
1e:5d:7a:9d:a5:8c:0d:39:bb:47:05:7f:50:49:17:
a8:b2:2a:8b:9b:7d:aa:d7:e6:0b:32:95:3b:e0:6a:
f4:fd:b7:84:55:e1:9d:ff:d1:61:2a:c1:bf:c3:8e:
03:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:FE:A0:3E:0E:FC:F8:75:A4:5F:A7:A7:97:DA:67:84:FC:0B:40:67
X509v3 Authority Key Identifier:
keyid:E2:42:C2:B7:4D:75:75:A2:28:A7:E6:4F:04:06:F3:A3:97:C7:AE:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4kLCt011daIop-ZPBAbzo5fHrlY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/7e3025-8caf-402c-b54f-cbb8cfee6e3c/1/4kLCt011daIop-ZPBAbzo5fHrlY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/7e3025-8caf-402c-b54f-cbb8cfee6e3c/1/4kLCt011daIop-ZPBAbzo5fHrlY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:2e:33:25:c2:9a:62:c5:03:8b:92:79:0a:1a:4d:8f:9e:fa:
b8:54:03:fa:57:eb:b9:74:ea:92:d4:8f:2e:0c:43:c7:f4:01:
6d:76:2e:98:79:37:8c:bc:98:f2:79:e1:53:1f:a8:d2:e4:48:
6d:b5:a5:b2:45:19:fa:e7:44:af:ac:ec:b0:60:a2:aa:f0:d7:
e7:fd:d4:a3:b0:26:38:5f:df:4a:5b:fa:c0:2e:e0:2a:4a:02:
32:92:8c:7d:72:2f:7e:56:a9:69:e1:82:7a:52:b4:a9:60:74:
17:b2:0e:e8:9a:ce:74:ff:d4:e9:35:1d:4a:9d:43:15:9f:47:
78:58:a1:9d:43:20:d0:7d:83:95:97:da:44:dd:dd:14:77:c9:
38:70:d7:76:7b:c1:2c:77:05:88:77:60:8c:a7:e9:bf:d7:44:
38:38:8b:f7:14:e4:5d:73:76:95:3f:ac:e0:cc:a6:b1:4c:bf:
31:2e:ae:7c:17:15:29:15:52:dc:6c:f5:22:75:a5:77:28:e3:
ff:f1:c9:3f:67:1d:d4:7b:42:44:ad:5a:f3:34:88:26:95:34:
ca:18:4d:2d:e8:76:71:cb:ac:3d:05:47:16:4b:f1:2e:d9:7f:
d9:5a:05:7a:6e:3a:49:f2:3b:bd:85:4b:0b:ab:a6:7c:0f:96:
a0:78:07:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:07:09 2025 by rpki-client