Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/54be58-4175-407a-bc37-cc26d4316142/1/4hTrNaNf1IiGBwO3mQuBcK8XkS8.mft
File: 4hTrNaNf1IiGBwO3mQuBcK8XkS8.mft (raw, json)
Hash identifier: 66mJ2iKK7CfmNuvC9njXIvtXPWSPxrDQSYyZeIG8GlI=
Subject key identifier: CD:A0:41:F3:60:0C:7C:A9:68:4C:3F:4A:AF:79:B1:1F:FA:1A:D5:97
Authority key identifier: E2:14:EB:35:A3:5F:D4:88:86:07:03:B7:99:0B:81:70:AF:17:91:2F
Certificate issuer: /CN=e214eb35a35fd488860703b7990b8170af17912f
Certificate serial: 0197CD5F2C5CC2EE81551076774FD72AAAA4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4hTrNaNf1IiGBwO3mQuBcK8XkS8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/54be58-4175-407a-bc37-cc26d4316142/1/4hTrNaNf1IiGBwO3mQuBcK8XkS8.mft
Manifest number: 07FF
Signing time: Wed 02 Jul 2025 23:00:55 +0000
Manifest this update: Wed 02 Jul 2025 23:00:55 +0000
Manifest next update: Thu 03 Jul 2025 23:00:55 +0000
Files and hashes: 1: 4hTrNaNf1IiGBwO3mQuBcK8XkS8.crl (hash: mOuLtRcgQrOttUEduYVueBM8zfkvAY91/5akoIABCL0=)
2: wxwsQanfQy5790A813fRANF-qCc.roa (hash: bJCA9RXeZ9EZ2+fSpx3hkdts4SbbKPXcBRLWj1SMUSM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0a/54be58-4175-407a-bc37-cc26d4316142/1/4hTrNaNf1IiGBwO3mQuBcK8XkS8.crl
rsync://rpki.ripe.net/repository/DEFAULT/0a/54be58-4175-407a-bc37-cc26d4316142/1/4hTrNaNf1IiGBwO3mQuBcK8XkS8.mft
rsync://rpki.ripe.net/repository/DEFAULT/4hTrNaNf1IiGBwO3mQuBcK8XkS8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 03 Jul 2025 23:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:cd:5f:2c:5c:c2:ee:81:55:10:76:77:4f:d7:2a:aa:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e214eb35a35fd488860703b7990b8170af17912f
Validity
Not Before: Jul 2 23:00:55 2025 GMT
Not After : Jul 3 23:00:55 2025 GMT
Subject: CN=cda041f3600c7ca9684c3f4aaf79b11ffa1ad597
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:45:da:16:bf:d2:5f:3c:ab:29:29:db:bd:72:
45:bc:fe:7f:ab:09:df:3b:9a:14:1b:39:2b:6b:af:
2d:9c:00:d2:86:ae:3b:ae:3c:25:21:9c:a3:27:f8:
20:e7:1e:57:74:8f:bb:28:28:80:4c:54:ac:5e:33:
36:a6:66:20:fd:3b:d0:5d:d1:db:56:79:90:75:33:
e6:99:20:38:4a:ba:6b:df:77:63:48:b6:d9:0b:f7:
7b:7d:64:37:7b:fb:83:72:5e:fb:a2:1d:87:06:db:
d6:f3:0f:72:5d:e0:53:4a:7d:05:5d:ea:34:c9:24:
d1:b8:eb:fd:d4:ac:ae:ea:b7:0a:7a:b8:93:78:ea:
c1:0c:5f:ce:bf:8d:25:85:84:e7:e4:3d:80:47:33:
7f:2a:1d:bd:2d:fd:71:2a:c6:9c:fa:3a:0a:36:09:
66:06:91:65:04:d1:30:08:72:54:28:47:48:c2:ba:
c7:94:1f:53:6a:01:7c:6c:e9:80:f8:4d:ec:c7:c4:
2d:8c:81:8e:f4:4e:c6:8c:f2:f0:6a:49:a6:63:3e:
44:88:ad:c0:67:a6:de:bc:be:9c:41:a6:90:c1:dd:
27:ab:b6:84:dc:ee:4e:f0:64:03:36:fa:ef:0e:44:
2c:1c:4a:0b:d6:81:d4:46:93:76:18:79:31:25:73:
31:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:A0:41:F3:60:0C:7C:A9:68:4C:3F:4A:AF:79:B1:1F:FA:1A:D5:97
X509v3 Authority Key Identifier:
keyid:E2:14:EB:35:A3:5F:D4:88:86:07:03:B7:99:0B:81:70:AF:17:91:2F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4hTrNaNf1IiGBwO3mQuBcK8XkS8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/54be58-4175-407a-bc37-cc26d4316142/1/4hTrNaNf1IiGBwO3mQuBcK8XkS8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/54be58-4175-407a-bc37-cc26d4316142/1/4hTrNaNf1IiGBwO3mQuBcK8XkS8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:f3:24:47:7d:29:a2:ff:33:f8:e4:54:f2:1c:1e:05:04:5b:
86:c8:32:99:cd:39:98:b5:ee:12:b1:48:73:eb:5a:fa:82:8e:
5a:a4:d7:6c:b1:cc:77:22:94:5b:ab:5d:7d:4c:66:b0:22:a6:
0d:99:ea:f5:06:ab:0b:2a:40:99:c6:3f:87:b5:b7:15:84:ba:
2a:8d:44:68:b1:f0:20:a9:27:af:e0:43:e9:18:b2:09:55:a9:
60:bf:23:2a:2a:86:3a:37:96:3a:1c:40:7d:87:89:91:5f:2e:
47:1f:ce:b0:74:23:f2:1a:67:c0:8d:82:9b:16:f0:e9:37:c5:
f1:f5:f9:d4:85:5e:9b:8a:d1:52:13:52:db:d3:a2:88:a8:8b:
20:9f:90:89:ff:fa:e2:1c:51:08:94:ae:48:ed:8e:8f:d9:a7:
11:43:d2:be:63:e5:b9:7d:77:fb:76:7a:8e:a3:51:ff:27:96:
3b:37:e5:f4:36:a1:a6:ec:00:8f:d2:70:07:bd:6f:66:4c:11:
e1:f4:e9:70:7d:12:c1:57:f0:b9:5c:9a:62:6a:27:53:cc:61:
8f:73:84:a9:94:20:a4:66:0c:38:3a:15:63:f6:f4:3d:78:96:
c4:29:e1:84:ff:2c:e9:46:b6:56:06:7f:42:ac:c0:2c:be:1c:
74:85:28:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 3 09:05:27 2025 by rpki-client