Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/c4f2e2-0188-4a43-8503-d2601cc12377/1/TblS7RzXo4A89Nv9NA6nSWMmi6A.mft
File: TblS7RzXo4A89Nv9NA6nSWMmi6A.mft (raw, json)
Hash identifier: kreoeRXD6QQJzWKNm8m7haQI8MocUsX8qF77j6OtwfQ=
Subject key identifier: EA:4A:CC:AC:FA:2C:0A:21:6E:21:C7:91:26:4F:56:F8:6D:57:37:E9
Authority key identifier: 4D:B9:52:ED:1C:D7:A3:80:3C:F4:DB:FD:34:0E:A7:49:63:26:8B:A0
Certificate issuer: /CN=4db952ed1cd7a3803cf4dbfd340ea74963268ba0
Certificate serial: 0197B77C70F41839C6E2E7C5911587CDB57D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TblS7RzXo4A89Nv9NA6nSWMmi6A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/c4f2e2-0188-4a43-8503-d2601cc12377/1/TblS7RzXo4A89Nv9NA6nSWMmi6A.mft
Manifest number: 1300
Signing time: Sat 28 Jun 2025 17:01:15 +0000
Manifest this update: Sat 28 Jun 2025 17:01:15 +0000
Manifest next update: Sun 29 Jun 2025 17:01:15 +0000
Files and hashes: 1: TblS7RzXo4A89Nv9NA6nSWMmi6A.crl (hash: kiFXhkKwiHlAoaZ6A7M2Rib9AQcVaWnyky93ZaMkw0A=)
2: j5Ft5Wy8JxIF_GoPXz22l_KXIjU.roa (hash: mypsPRsnwnV3Yo/ZoSy7EsoVz4ps6Bh9fIm4sESstXw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/c4f2e2-0188-4a43-8503-d2601cc12377/1/TblS7RzXo4A89Nv9NA6nSWMmi6A.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/c4f2e2-0188-4a43-8503-d2601cc12377/1/TblS7RzXo4A89Nv9NA6nSWMmi6A.mft
rsync://rpki.ripe.net/repository/DEFAULT/TblS7RzXo4A89Nv9NA6nSWMmi6A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:7c:70:f4:18:39:c6:e2:e7:c5:91:15:87:cd:b5:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4db952ed1cd7a3803cf4dbfd340ea74963268ba0
Validity
Not Before: Jun 28 17:01:15 2025 GMT
Not After : Jun 29 17:01:15 2025 GMT
Subject: CN=ea4accacfa2c0a216e21c791264f56f86d5737e9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:2c:8d:b1:db:59:d5:a2:96:57:25:ea:e3:85:
6c:95:8f:ed:eb:2c:36:3d:20:cb:e6:c5:86:6a:5d:
ea:5f:f7:6b:c9:ed:e1:a9:a6:da:49:04:6d:52:3b:
be:26:aa:51:d1:46:a0:f3:af:b8:70:ce:66:f5:0a:
fb:6e:9e:42:11:b9:04:ed:13:80:11:9b:03:b0:4d:
33:cc:e4:0a:0f:ea:b5:e1:84:76:de:ed:14:79:04:
53:f3:2d:2c:79:f6:c6:a6:2e:81:c7:ca:e2:0f:e1:
2b:78:99:fb:e5:fc:8b:af:40:3a:ac:fb:f8:7a:08:
63:ff:61:06:75:7f:64:34:e8:95:a9:db:7a:79:9d:
46:fc:31:0e:d0:da:1a:90:21:6e:42:b5:66:b0:46:
15:12:10:cf:bb:6d:64:10:7c:4c:49:74:0c:5b:f5:
b9:56:46:0f:75:af:85:ba:eb:b2:0b:b0:b1:54:45:
71:cf:82:3f:e9:d3:71:e1:eb:83:b6:4d:7e:4d:9f:
be:57:b6:ed:6c:ee:fa:03:6b:d3:71:89:02:c5:87:
fc:cf:22:ab:30:fe:84:01:af:75:89:0d:e5:f2:8e:
78:c2:f3:6f:31:f9:53:0e:ab:11:ee:b9:19:19:bd:
2e:69:14:15:a2:f3:a1:fe:97:cc:4e:9e:86:48:0a:
f6:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:4A:CC:AC:FA:2C:0A:21:6E:21:C7:91:26:4F:56:F8:6D:57:37:E9
X509v3 Authority Key Identifier:
keyid:4D:B9:52:ED:1C:D7:A3:80:3C:F4:DB:FD:34:0E:A7:49:63:26:8B:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TblS7RzXo4A89Nv9NA6nSWMmi6A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/c4f2e2-0188-4a43-8503-d2601cc12377/1/TblS7RzXo4A89Nv9NA6nSWMmi6A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/c4f2e2-0188-4a43-8503-d2601cc12377/1/TblS7RzXo4A89Nv9NA6nSWMmi6A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:73:54:6d:e1:59:3a:9a:3c:d0:cf:4c:0c:12:5a:ca:54:28:
46:52:bb:a0:c0:a0:b7:fd:de:8e:cc:97:75:a1:1d:b7:87:6c:
ae:be:ef:5a:5e:ac:95:33:a9:64:fa:24:d0:5e:ae:5d:fe:ca:
bd:43:fa:56:75:96:fb:39:8f:65:f0:30:57:be:ca:8e:02:2b:
ef:c1:ab:4d:3f:ed:51:1c:b6:48:5b:cb:9f:5c:d3:99:15:eb:
19:fb:63:d6:8d:89:da:9f:21:d8:e6:1d:0a:ae:8d:5a:6f:7f:
65:2d:52:b6:a2:f4:d8:ad:c3:58:c4:35:5c:78:e8:fc:22:4a:
12:e6:71:8e:10:0f:c5:12:bd:97:f9:3b:0f:8a:f2:ca:6f:05:
e0:a2:10:1e:eb:7f:7a:24:60:66:12:b1:4f:f8:4d:fb:b5:92:
5f:13:fb:80:86:ab:7a:94:62:8d:bc:ea:2a:bd:b6:f6:e1:ce:
b7:8c:4b:e2:13:b3:6f:92:40:15:c3:a8:2a:de:0b:6f:b4:36:
ce:73:f1:b6:ef:a2:44:b5:84:7d:6a:99:34:94:b0:d6:50:eb:
ab:47:85:28:7b:8c:fc:db:f3:14:7e:c7:d6:0e:77:19:05:d4:
b2:e5:8c:ea:13:cc:69:b2:b9:ad:b3:ef:2a:22:f2:04:57:9d:
b8:52:4a:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 20:43:14 2025 by rpki-client