Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/7494bf-8acd-4e43-86ce-e7c8cf3af5de/1/4Udwcrka9cPzv-aXQyQ-fNo66Hk.mft
File: 4Udwcrka9cPzv-aXQyQ-fNo66Hk.mft (raw, json)
Hash identifier: NZl5BTv0VbIZT73qAGpkTfRCjRl5LBjqaT5BSfBwOFc=
Subject key identifier: 75:86:AE:96:97:29:E5:5E:D0:C9:0E:76:BE:3F:E0:24:81:E1:75:36
Authority key identifier: E1:47:70:72:B9:1A:F5:C3:F3:BF:E6:97:43:24:3E:7C:DA:3A:E8:79
Certificate issuer: /CN=e1477072b91af5c3f3bfe69743243e7cda3ae879
Certificate serial: 0197B6D7AB7B7307EC1CECED6799E8256266
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4Udwcrka9cPzv-aXQyQ-fNo66Hk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/7494bf-8acd-4e43-86ce-e7c8cf3af5de/1/4Udwcrka9cPzv-aXQyQ-fNo66Hk.mft
Manifest number: 0570
Signing time: Sat 28 Jun 2025 14:01:16 +0000
Manifest this update: Sat 28 Jun 2025 14:01:16 +0000
Manifest next update: Sun 29 Jun 2025 14:01:16 +0000
Files and hashes: 1: 4Udwcrka9cPzv-aXQyQ-fNo66Hk.crl (hash: PxhYZuk0AK39+z0pN2VHEE+yD4QBrfG6BQVvX/Fhdog=)
2: tCDe7wPjFadsHNNfvUOgDucY0uQ.roa (hash: BMf/pb8712weiBqMIzsz+9w0GyVgsUYRF3OPa//jU1U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/7494bf-8acd-4e43-86ce-e7c8cf3af5de/1/4Udwcrka9cPzv-aXQyQ-fNo66Hk.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/7494bf-8acd-4e43-86ce-e7c8cf3af5de/1/4Udwcrka9cPzv-aXQyQ-fNo66Hk.mft
rsync://rpki.ripe.net/repository/DEFAULT/4Udwcrka9cPzv-aXQyQ-fNo66Hk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 14:01:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:d7:ab:7b:73:07:ec:1c:ec:ed:67:99:e8:25:62:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e1477072b91af5c3f3bfe69743243e7cda3ae879
Validity
Not Before: Jun 28 14:01:16 2025 GMT
Not After : Jun 29 14:01:16 2025 GMT
Subject: CN=7586ae969729e55ed0c90e76be3fe02481e17536
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:42:bf:f8:b7:6e:9b:68:4c:1c:f2:db:ca:94:
fa:f0:1f:b8:eb:e8:46:b2:98:bf:00:c4:0f:46:75:
87:a9:27:ec:e1:b5:98:6c:ed:f1:ab:61:a1:3c:90:
c1:fe:67:42:7f:89:e3:72:a3:51:fd:73:d8:61:45:
6d:ab:16:36:db:36:46:87:e1:a7:5e:da:24:bf:07:
76:b1:79:eb:8a:8d:3e:66:0a:aa:5f:0a:93:8c:1f:
cc:b2:84:12:6c:7f:fc:01:9b:f7:46:12:d4:10:f4:
0f:f8:f4:b8:8d:ed:d9:3f:1e:be:3c:a4:81:5a:48:
54:ed:d6:92:28:2f:ec:62:d9:50:c6:6e:c6:95:c1:
60:2e:65:37:93:8a:c7:c8:a1:7d:b0:0e:b3:13:1a:
bb:be:e7:a4:bf:a9:09:46:3b:ac:d9:bb:53:14:31:
6f:64:a1:cd:f3:13:6b:3e:30:b2:a0:8c:b5:10:6a:
ab:76:f6:43:1b:ef:42:37:03:62:33:6d:69:6d:54:
54:f1:4c:e2:92:6f:5c:b2:d2:61:fd:da:5b:24:84:
fd:f7:97:21:ed:52:3e:4f:aa:d3:fa:6a:9d:a4:f8:
fc:0d:92:57:dc:52:2a:0f:76:1c:96:53:86:da:ff:
90:ea:4c:5e:78:39:4c:95:29:c8:e2:54:49:8a:ee:
b8:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:86:AE:96:97:29:E5:5E:D0:C9:0E:76:BE:3F:E0:24:81:E1:75:36
X509v3 Authority Key Identifier:
keyid:E1:47:70:72:B9:1A:F5:C3:F3:BF:E6:97:43:24:3E:7C:DA:3A:E8:79
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4Udwcrka9cPzv-aXQyQ-fNo66Hk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/7494bf-8acd-4e43-86ce-e7c8cf3af5de/1/4Udwcrka9cPzv-aXQyQ-fNo66Hk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/7494bf-8acd-4e43-86ce-e7c8cf3af5de/1/4Udwcrka9cPzv-aXQyQ-fNo66Hk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:43:6e:d5:42:a8:40:b5:0b:cc:6a:a3:76:ee:6f:31:9a:c1:
00:fe:3c:2d:cd:e8:49:9b:c1:f0:5a:79:0b:20:23:b5:0e:aa:
be:e9:89:ea:02:ab:04:1e:42:f9:1e:f0:d5:2c:ee:cc:92:fe:
fe:57:b0:98:48:5a:bf:ba:2d:e0:d2:b0:85:2c:18:40:e2:58:
09:01:03:a9:16:01:2b:2a:7e:28:a6:63:0f:45:ff:ea:fc:89:
69:ba:32:f5:12:fb:36:87:cb:51:ca:20:f0:f1:8a:17:f9:d7:
20:3e:66:af:b4:60:bb:76:bc:f8:97:aa:62:74:fb:dd:43:1b:
77:6a:fa:df:e9:1f:7c:63:11:8f:b5:f7:6a:29:ed:39:a5:86:
9c:e1:71:33:a7:1c:1d:06:25:59:a0:a4:d0:08:8d:2f:be:5a:
fb:59:c5:3e:f5:40:c5:cd:b7:23:af:25:65:67:90:c6:59:ff:
e4:38:ee:5a:4b:b2:27:6e:38:93:04:14:64:82:49:50:10:34:
91:a6:cc:ff:bc:54:f4:bb:27:f8:6b:ae:07:be:90:11:7d:ce:
1c:df:6e:12:e2:24:32:da:f9:4c:7e:3f:82:c6:94:2a:3f:04:
f9:c9:ac:89:77:05:5e:e0:ab:de:4c:3e:14:00:18:a2:68:79:
d8:d8:bf:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 20:48:19 2025 by rpki-client