Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/08aba8-b756-4492-a7ed-6320c460a3f8/1/4cxF6EsHjUWK342GdEXEb4yND64.mft
File: 4cxF6EsHjUWK342GdEXEb4yND64.mft (raw, json)
Hash identifier: iPcO6ip322D8CtYaq3QReSG6IhSgiyrspISSN6hVWR0=
Subject key identifier: 67:0A:AB:35:DE:65:64:5A:98:45:3F:07:41:53:5A:FD:EE:46:E8:29
Authority key identifier: E1:CC:45:E8:4B:07:8D:45:8A:DF:8D:86:74:45:C4:6F:8C:8D:0F:AE
Certificate issuer: /CN=e1cc45e84b078d458adf8d867445c46f8c8d0fae
Certificate serial: 0197771CD0771B57A4BB4716AE8870786040
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4cxF6EsHjUWK342GdEXEb4yND64.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/08aba8-b756-4492-a7ed-6320c460a3f8/1/4cxF6EsHjUWK342GdEXEb4yND64.mft
Manifest number: 1414
Signing time: Mon 16 Jun 2025 05:01:06 +0000
Manifest this update: Mon 16 Jun 2025 05:01:06 +0000
Manifest next update: Tue 17 Jun 2025 05:01:06 +0000
Files and hashes: 1: 4cxF6EsHjUWK342GdEXEb4yND64.crl (hash: Y2j3+bX//BMCWQVP9rTvF8xJCyrb4nFPZjlWrv2leqk=)
2: 5-SCWiXEymbKNvt1s5ha59PuWTI.roa (hash: afbec3zYVioBpbWwP/hx1ExlUGeRDVjKKku3aVOXbVc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/08aba8-b756-4492-a7ed-6320c460a3f8/1/4cxF6EsHjUWK342GdEXEb4yND64.crl
rsync://rpki.ripe.net/repository/DEFAULT/f3/08aba8-b756-4492-a7ed-6320c460a3f8/1/4cxF6EsHjUWK342GdEXEb4yND64.mft
rsync://rpki.ripe.net/repository/DEFAULT/4cxF6EsHjUWK342GdEXEb4yND64.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 17 Jun 2025 05:01:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:77:1c:d0:77:1b:57:a4:bb:47:16:ae:88:70:78:60:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e1cc45e84b078d458adf8d867445c46f8c8d0fae
Validity
Not Before: Jun 16 05:01:06 2025 GMT
Not After : Jun 17 05:01:06 2025 GMT
Subject: CN=670aab35de65645a98453f0741535afdee46e829
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:09:5a:33:79:43:b7:3c:42:a3:de:bd:96:b5:
51:ce:35:99:ef:1b:83:f6:21:59:b3:96:12:76:7e:
d6:d2:c4:56:1d:11:2d:47:70:d7:16:33:e6:8f:8c:
8b:a7:7a:15:e4:d4:15:c6:10:d9:f0:0d:d4:4e:f9:
25:d6:4e:1c:12:e1:f0:55:17:c2:44:6e:d6:b8:c2:
8e:53:bd:ac:f5:4b:1c:00:11:fd:5b:c5:05:78:90:
d9:4d:75:aa:3c:f5:cc:ba:21:3d:37:ee:59:f7:ab:
1b:5a:f8:b4:09:f3:d4:fe:5e:9e:7b:b2:c0:34:69:
37:86:18:ee:87:c4:16:1a:7c:04:2f:3e:da:02:a1:
32:88:9a:81:4c:e3:19:21:3c:de:d0:57:9a:ea:45:
ba:09:f1:43:b4:82:0f:b3:62:53:6d:cf:47:a9:27:
2f:0a:2e:7d:97:7a:44:46:68:9a:4b:5a:10:38:1f:
11:f1:be:52:17:2d:9e:64:22:d4:67:74:1d:21:b5:
12:bd:41:02:37:33:39:85:d6:e8:58:df:0b:d4:92:
1d:c9:cf:e1:78:77:a9:0e:b4:3c:10:23:2d:d5:b5:
f0:a5:4c:d2:85:19:53:8d:dc:98:21:4e:ab:8d:7f:
5d:85:57:2c:d8:b5:45:57:4b:06:a1:63:ae:7e:8a:
0c:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:0A:AB:35:DE:65:64:5A:98:45:3F:07:41:53:5A:FD:EE:46:E8:29
X509v3 Authority Key Identifier:
keyid:E1:CC:45:E8:4B:07:8D:45:8A:DF:8D:86:74:45:C4:6F:8C:8D:0F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4cxF6EsHjUWK342GdEXEb4yND64.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/08aba8-b756-4492-a7ed-6320c460a3f8/1/4cxF6EsHjUWK342GdEXEb4yND64.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/08aba8-b756-4492-a7ed-6320c460a3f8/1/4cxF6EsHjUWK342GdEXEb4yND64.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:5e:a3:88:c5:e6:86:60:13:d5:fb:10:ad:f3:5f:f3:77:66:
7d:35:9d:66:2c:64:b2:43:4a:f7:35:39:85:0c:f5:43:06:9f:
c1:e0:71:b3:7b:90:56:c1:55:e5:1e:62:0e:38:57:0c:a8:d1:
3a:73:9b:73:95:a7:61:a8:25:8b:39:10:51:b2:84:9c:95:30:
f5:58:50:64:b5:ee:24:a0:89:0a:34:ae:dc:4f:98:e9:6b:61:
34:f2:99:53:51:cc:56:61:db:0a:16:bd:05:22:81:c0:e4:4d:
93:13:ba:0f:5e:00:02:62:a8:39:1d:e1:c7:87:ff:60:82:e6:
64:84:b5:fb:18:70:86:71:41:a8:ff:bc:65:e4:e1:b5:02:1d:
95:a6:8c:4c:12:4b:82:ee:f6:63:82:39:51:15:f6:20:94:bd:
09:c0:fc:a4:ed:74:56:94:a3:06:6a:8d:13:8e:59:55:08:1c:
8d:72:7d:83:b4:15:83:f3:45:a0:e9:f2:a5:af:72:3a:59:eb:
90:dd:26:10:1c:7f:df:09:68:cd:5d:e1:40:c8:cf:cb:ca:dd:
a2:83:4b:be:99:46:48:ae:fe:3f:34:b1:3a:bd:85:f3:b2:5f:
0d:90:97:bb:36:a0:5a:e5:d9:ef:e5:4a:55:b5:33:57:1c:5d:
5b:13:a3:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 09:40:55 2025 by rpki-client