Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/9680c7-57d7-49c6-8b63-40153c5d0a47/1/_4IIsSnFPofD8NDtG8qFcwFA85A.mft
File: _4IIsSnFPofD8NDtG8qFcwFA85A.mft (raw, json)
Hash identifier: A+Qx+eYzrUp1h0QzAdZ10i80+JDFnnAM5uIzJKGAxnY=
Subject key identifier: F5:66:0E:E9:6A:68:B3:98:C8:D7:9A:8E:13:79:DF:96:28:AC:A6:A0
Authority key identifier: FF:82:08:B1:29:C5:3E:87:C3:F0:D0:ED:1B:CA:85:73:01:40:F3:90
Certificate issuer: /CN=ff8208b129c53e87c3f0d0ed1bca85730140f390
Certificate serial: 01976884BE858EBDF81B3B649FFF4AD1E548
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_4IIsSnFPofD8NDtG8qFcwFA85A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/9680c7-57d7-49c6-8b63-40153c5d0a47/1/_4IIsSnFPofD8NDtG8qFcwFA85A.mft
Manifest number: 0E9A
Signing time: Fri 13 Jun 2025 09:00:19 +0000
Manifest this update: Fri 13 Jun 2025 09:00:19 +0000
Manifest next update: Sat 14 Jun 2025 09:00:19 +0000
Files and hashes: 1: THr3g9OkPvsy14BHilEZG56BiqU.roa (hash: 3xhlPP170oH7ChTM2ZqRCOHhpB5jGmO+80m0RUL/u1M=)
2: _4IIsSnFPofD8NDtG8qFcwFA85A.crl (hash: e+dIh1BjOPmEp885dlcHVULjHtPkkHsS93k0lE//llg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/9680c7-57d7-49c6-8b63-40153c5d0a47/1/_4IIsSnFPofD8NDtG8qFcwFA85A.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/9680c7-57d7-49c6-8b63-40153c5d0a47/1/_4IIsSnFPofD8NDtG8qFcwFA85A.mft
rsync://rpki.ripe.net/repository/DEFAULT/_4IIsSnFPofD8NDtG8qFcwFA85A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 09:00:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:68:84:be:85:8e:bd:f8:1b:3b:64:9f:ff:4a:d1:e5:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ff8208b129c53e87c3f0d0ed1bca85730140f390
Validity
Not Before: Jun 13 09:00:19 2025 GMT
Not After : Jun 14 09:00:19 2025 GMT
Subject: CN=f5660ee96a68b398c8d79a8e1379df9628aca6a0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:3b:06:0f:8e:e1:64:49:d0:51:c4:d5:d0:1a:
5a:86:d2:da:63:c2:9a:1b:e7:02:c0:f6:22:b0:71:
3a:7a:33:08:91:27:65:db:55:91:35:81:df:09:0b:
7e:e0:30:6c:c1:ef:de:2f:a3:32:5c:ab:38:e5:81:
c0:3b:9d:61:ef:c9:16:6b:70:d9:3c:9b:6a:6f:3b:
d7:10:f0:d7:04:12:74:1a:97:05:17:07:3a:9f:87:
97:77:f5:1e:b7:97:1b:c5:5a:b7:8d:9d:bd:a0:8a:
28:fb:55:64:d0:f9:ff:50:22:31:c9:37:c4:0c:96:
28:80:bc:ab:14:32:72:6f:c6:6c:7e:7e:36:83:32:
19:f5:29:92:aa:e9:6a:21:0e:b6:9d:49:fe:fe:52:
5c:ea:7f:d4:9c:05:84:ad:df:89:65:b3:9d:07:01:
23:b9:19:29:b9:4d:d9:61:cf:dc:4c:e8:c4:a7:7f:
96:cd:5c:c0:da:96:4f:bb:78:cf:1c:39:d0:50:4c:
b5:2f:e7:04:21:52:15:75:f6:b8:3d:20:1d:b0:9b:
de:84:e3:5e:0c:9a:9a:26:96:1c:55:2d:85:da:33:
11:56:54:4e:5a:9c:38:e5:27:9f:cb:1f:ca:91:30:
09:f7:37:cb:6a:d2:9f:1d:5e:fc:51:d4:35:3a:f0:
b9:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:66:0E:E9:6A:68:B3:98:C8:D7:9A:8E:13:79:DF:96:28:AC:A6:A0
X509v3 Authority Key Identifier:
keyid:FF:82:08:B1:29:C5:3E:87:C3:F0:D0:ED:1B:CA:85:73:01:40:F3:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_4IIsSnFPofD8NDtG8qFcwFA85A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/9680c7-57d7-49c6-8b63-40153c5d0a47/1/_4IIsSnFPofD8NDtG8qFcwFA85A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/9680c7-57d7-49c6-8b63-40153c5d0a47/1/_4IIsSnFPofD8NDtG8qFcwFA85A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:15:28:36:98:de:bc:ed:84:52:9d:fe:f1:cd:96:06:77:14:
4e:82:b9:e1:94:a6:fe:e5:1c:27:ce:31:a8:6b:10:1f:fc:fb:
58:8e:8e:2e:0c:c4:cb:4b:54:67:95:bc:64:c8:f5:67:bc:74:
23:58:5a:07:53:32:71:5e:cf:fa:b4:71:d2:a5:18:61:cc:b8:
e4:87:f4:f3:8a:82:06:c0:d6:60:05:cb:b0:98:82:db:62:8a:
00:84:6f:bc:64:c1:60:8f:90:54:47:06:2b:bc:b9:d3:63:7a:
9e:7b:0b:da:15:da:67:63:e6:35:e3:a2:ad:32:65:0c:8c:77:
41:23:34:89:ce:91:b8:b5:c2:fa:01:b5:8c:88:64:5d:51:bd:
da:43:64:6b:20:30:68:9e:12:d8:f2:ac:b8:6a:4b:b7:89:bd:
d4:a5:15:b5:42:b2:b6:0f:b8:fa:ad:a5:db:94:ae:0c:a4:9a:
73:ec:b4:45:13:44:d0:ec:5e:fd:0e:df:30:16:89:58:22:14:
3e:fc:df:74:a6:d2:08:18:cb:6f:ae:77:9a:a3:4d:10:d5:b3:
85:6d:62:da:50:11:a0:e0:31:09:87:5c:2a:47:20:5b:7d:ca:
ce:39:32:4d:81:0e:a6:e1:9e:44:85:e0:55:28:31:f4:ac:f5:
56:a5:6f:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 19:20:52 2025 by rpki-client