Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/d815fd-cfab-4a4a-9595-4166b75b08af/1/4SLitYIzoZPR9yd4Vl1smNdhY6c.mft
File: 4SLitYIzoZPR9yd4Vl1smNdhY6c.mft (raw, json)
Hash identifier: KEUKF5ltI4mdOZ6uAnl7S5TcrMFPYzb0claDe6EVO1w=
Subject key identifier: 09:D2:62:41:36:29:C2:E9:C4:B5:02:8F:D9:C0:58:EE:00:9D:D6:B6
Authority key identifier: E1:22:E2:B5:82:33:A1:93:D1:F7:27:78:56:5D:6C:98:D7:61:63:A7
Certificate issuer: /CN=e122e2b58233a193d1f72778565d6c98d76163a7
Certificate serial: 019874190F1D36EF9D96E4474349C3F7F656
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4SLitYIzoZPR9yd4Vl1smNdhY6c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/d815fd-cfab-4a4a-9595-4166b75b08af/1/4SLitYIzoZPR9yd4Vl1smNdhY6c.mft
Manifest number: 11F5
Signing time: Mon 04 Aug 2025 08:00:55 +0000
Manifest this update: Mon 04 Aug 2025 08:00:55 +0000
Manifest next update: Tue 05 Aug 2025 08:00:55 +0000
Files and hashes: 1: 4SLitYIzoZPR9yd4Vl1smNdhY6c.crl (hash: +LPrkvPba6GGaZ9FFPTCOj43d8Tt5BFZm9YbaTdT7eY=)
2: nD4yzDe8gN70BN6Uz9ud-RgMLcw.roa (hash: 7QOqgSW5O1ke2t+FI1SJBMG+D851WexAWFy5Iq9dI8I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/d815fd-cfab-4a4a-9595-4166b75b08af/1/4SLitYIzoZPR9yd4Vl1smNdhY6c.crl
rsync://rpki.ripe.net/repository/DEFAULT/ea/d815fd-cfab-4a4a-9595-4166b75b08af/1/4SLitYIzoZPR9yd4Vl1smNdhY6c.mft
rsync://rpki.ripe.net/repository/DEFAULT/4SLitYIzoZPR9yd4Vl1smNdhY6c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:74:19:0f:1d:36:ef:9d:96:e4:47:43:49:c3:f7:f6:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e122e2b58233a193d1f72778565d6c98d76163a7
Validity
Not Before: Aug 4 08:00:55 2025 GMT
Not After : Aug 5 08:00:55 2025 GMT
Subject: CN=09d262413629c2e9c4b5028fd9c058ee009dd6b6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:97:d5:b5:aa:3e:46:e3:7e:54:dd:85:51:54:
6e:8a:1e:a0:1c:9f:ad:ff:f8:26:04:79:d2:bb:3c:
31:92:e2:77:5c:f9:b6:47:39:be:6a:60:c4:c1:22:
7f:d0:12:88:20:e8:7b:a1:59:ca:a8:38:0a:2c:68:
a8:a9:8a:50:c7:19:3a:0e:bb:38:32:23:8d:1e:be:
67:cf:79:44:3a:35:15:2c:ac:14:bb:00:06:d9:a0:
65:b5:0b:17:9e:2d:a1:30:7f:e1:f3:f2:be:19:7c:
be:b9:ba:3d:24:7d:1e:89:bb:c1:02:5e:ef:ac:9c:
b8:72:e7:d1:66:5f:c8:9d:26:f1:9e:bc:8f:fc:28:
0a:43:a8:52:5b:cf:db:bd:2a:ca:62:b2:6c:dd:49:
fb:b2:45:4c:93:ce:f2:a9:63:c1:60:02:9d:76:a8:
f9:3a:4f:b7:39:5a:be:6b:4c:55:5a:18:e8:67:49:
8d:4c:33:b8:79:53:4e:77:48:b9:2b:3e:0f:db:8f:
bc:98:21:ce:62:a3:f9:24:6e:16:56:35:3c:c2:90:
89:ba:08:a9:dd:98:3f:a0:0b:b7:41:e5:a6:8e:d6:
0a:f6:7d:9e:48:ad:7d:ce:5f:5d:f1:95:25:d0:38:
24:c7:9f:0e:0a:59:ab:ed:6b:01:6d:38:cd:51:22:
41:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:D2:62:41:36:29:C2:E9:C4:B5:02:8F:D9:C0:58:EE:00:9D:D6:B6
X509v3 Authority Key Identifier:
keyid:E1:22:E2:B5:82:33:A1:93:D1:F7:27:78:56:5D:6C:98:D7:61:63:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4SLitYIzoZPR9yd4Vl1smNdhY6c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/d815fd-cfab-4a4a-9595-4166b75b08af/1/4SLitYIzoZPR9yd4Vl1smNdhY6c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/d815fd-cfab-4a4a-9595-4166b75b08af/1/4SLitYIzoZPR9yd4Vl1smNdhY6c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:ac:c6:9c:d6:24:ff:bc:1f:14:7b:4f:6f:72:4e:e9:76:9d:
a2:cd:6b:e2:de:70:f0:cf:52:a7:e0:6f:57:b6:03:1e:d9:ab:
a0:04:59:6d:1a:d0:c3:63:3a:80:92:31:44:c2:80:14:6c:00:
f3:a8:c6:a4:95:17:94:a0:23:9d:cb:dd:ef:9d:2c:c7:a3:e6:
c8:21:82:e0:09:ac:fa:5d:6f:b1:ca:c1:89:55:80:b2:8a:9b:
4c:bc:2c:94:bc:62:33:51:7c:42:35:f6:28:85:a2:18:03:02:
aa:e8:fa:3a:d0:34:2d:f7:6b:48:fe:29:53:35:65:55:bc:fa:
c4:31:85:e1:f7:3c:48:e2:ae:46:2d:49:fb:a4:4a:0c:78:1a:
ba:aa:fa:2d:ed:11:ec:f4:19:10:55:ff:2e:aa:f1:cf:e6:d6:
87:ed:7a:f3:27:b9:a6:5e:66:3a:65:f7:8a:21:b1:ba:28:cb:
4e:90:25:01:b1:d8:8a:41:bf:0e:dd:d4:7b:42:1b:df:cd:cc:
85:0f:7f:d3:72:3f:b1:0c:90:5e:0d:f1:7a:62:94:4b:b3:ac:
91:b0:6a:f6:f2:ac:3c:4c:00:5a:b0:6b:eb:eb:a1:f7:43:49:
f9:25:4f:a0:57:33:ea:2a:3d:c7:a2:2c:c3:bb:8d:01:86:ce:
30:b6:f2:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:24:26 2025 by rpki-client