Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/1bcb11-341d-4ade-96b1-d2269f40f3d3/1/4mCwpVqHpm6Qp0Y6AdpkFPwDTT0.mft
File: 4mCwpVqHpm6Qp0Y6AdpkFPwDTT0.mft (raw, json)
Hash identifier: DpDsdsqt5ICJomyHuMCeSNDCudr+ju53WH6Q1oDODOQ=
Subject key identifier: 61:0F:14:B9:3E:BF:D8:A8:AC:F8:05:77:DF:6E:1F:40:13:32:62:1D
Authority key identifier: E2:60:B0:A5:5A:87:A6:6E:90:A7:46:3A:01:DA:64:14:FC:03:4D:3D
Certificate issuer: /CN=e260b0a55a87a66e90a7463a01da6414fc034d3d
Certificate serial: 0197B6A1BF6C680F586FC26EE3DB39F786D4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4mCwpVqHpm6Qp0Y6AdpkFPwDTT0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/1bcb11-341d-4ade-96b1-d2269f40f3d3/1/4mCwpVqHpm6Qp0Y6AdpkFPwDTT0.mft
Manifest number: 02B8
Signing time: Sat 28 Jun 2025 13:02:22 +0000
Manifest this update: Sat 28 Jun 2025 13:02:22 +0000
Manifest next update: Sun 29 Jun 2025 13:02:22 +0000
Files and hashes: 1: 4mCwpVqHpm6Qp0Y6AdpkFPwDTT0.crl (hash: S7YbkoynglUDPTXEK5zLSDOWxuZu0v2dve8shV7RUNk=)
2: H7jD667ua1MTRSgNeUALgotBmYc.roa (hash: DYMDYLZ2zWAIEYH23OdxIBtMbFHxghghtjADwNcrKf0=)
3: b9-JZ3RdF7ZemK1dm7cPMRh2l58.roa (hash: oUjihEIhXb/rvj31i27jlX3Sh4tmRUO23s5LKuEs2r0=)
4: lchTEZvN-6afhfJLiZL0vloeA9I.roa (hash: ralvdBvuAobYP/kvHgUFvqB6/N94B6BhMEuSMEPEay0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1d/1bcb11-341d-4ade-96b1-d2269f40f3d3/1/4mCwpVqHpm6Qp0Y6AdpkFPwDTT0.crl
rsync://rpki.ripe.net/repository/DEFAULT/1d/1bcb11-341d-4ade-96b1-d2269f40f3d3/1/4mCwpVqHpm6Qp0Y6AdpkFPwDTT0.mft
rsync://rpki.ripe.net/repository/DEFAULT/4mCwpVqHpm6Qp0Y6AdpkFPwDTT0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a1:bf:6c:68:0f:58:6f:c2:6e:e3:db:39:f7:86:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e260b0a55a87a66e90a7463a01da6414fc034d3d
Validity
Not Before: Jun 28 13:02:22 2025 GMT
Not After : Jun 29 13:02:22 2025 GMT
Subject: CN=610f14b93ebfd8a8acf80577df6e1f401332621d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:67:7e:31:61:24:3a:1b:dd:a3:63:74:b1:a3:
a5:12:2b:6b:05:05:25:ff:1e:ab:c7:8b:3c:5d:ab:
da:90:64:dd:d8:80:22:c3:5a:9d:e6:ab:60:3c:e0:
a7:81:3d:c2:76:f6:05:16:53:60:da:9e:83:6d:ac:
91:87:bf:ee:07:a5:c5:35:73:1e:4f:0d:81:3c:dd:
66:51:a6:8b:71:01:af:b6:37:75:9e:f4:87:ba:a4:
e3:5c:e6:d4:19:56:81:24:a7:e6:16:34:64:c8:06:
d5:c2:2e:32:b5:40:a7:17:38:6a:47:b3:34:c3:97:
4b:99:af:b3:b7:b5:23:36:23:4c:4b:1e:b0:87:61:
34:37:06:95:4d:e3:14:60:5f:22:64:46:a0:be:e4:
3e:db:19:2a:49:3c:e7:f6:d8:3b:d4:9e:3c:7d:a5:
88:d5:8c:79:5c:6d:c8:56:34:71:fd:b5:a5:73:7c:
14:68:60:f0:34:ab:c3:ef:de:5a:5e:f4:84:cb:60:
64:80:74:c7:fe:67:57:f4:ae:57:d1:6a:b1:79:72:
21:7b:ed:30:d2:08:08:f3:fb:03:96:3e:5d:50:9c:
e6:72:1f:9b:01:31:e4:b2:5f:3b:cf:8c:4c:31:b6:
e4:87:53:af:6a:7a:5f:4d:f6:0a:09:8f:cc:9a:02:
e0:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:0F:14:B9:3E:BF:D8:A8:AC:F8:05:77:DF:6E:1F:40:13:32:62:1D
X509v3 Authority Key Identifier:
keyid:E2:60:B0:A5:5A:87:A6:6E:90:A7:46:3A:01:DA:64:14:FC:03:4D:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4mCwpVqHpm6Qp0Y6AdpkFPwDTT0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/1bcb11-341d-4ade-96b1-d2269f40f3d3/1/4mCwpVqHpm6Qp0Y6AdpkFPwDTT0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/1bcb11-341d-4ade-96b1-d2269f40f3d3/1/4mCwpVqHpm6Qp0Y6AdpkFPwDTT0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:79:eb:26:38:b7:64:5d:0b:19:9e:e7:2b:58:dc:a7:80:93:
05:8c:e7:b3:85:96:5a:0c:bc:d2:59:0f:9c:bb:6b:b2:33:c8:
ee:fa:10:3f:78:11:04:69:70:64:aa:3f:41:63:ed:28:26:c8:
59:85:da:06:87:98:c4:0b:26:31:da:4b:ac:e2:50:35:a6:26:
07:eb:2c:a7:4d:9d:4c:77:76:1c:1e:00:55:a8:9d:40:29:88:
f9:08:a8:1d:21:43:6e:22:cc:99:cc:d7:0e:a5:ad:3b:ef:09:
e3:5a:2e:b6:d1:49:93:19:04:4f:79:98:a2:bb:cd:34:ab:cf:
ea:24:aa:be:31:89:46:3a:ef:68:ed:5a:80:e1:61:a8:58:b6:
25:91:4e:81:41:cf:90:12:9a:d9:20:a6:e9:5e:94:7e:69:2d:
46:4a:f0:33:bc:c3:a8:75:e4:a4:da:12:81:48:c1:bb:aa:3c:
5c:ab:ca:50:c5:5b:48:a3:55:11:51:8e:87:33:58:94:71:56:
e9:45:69:a3:49:bb:26:e7:18:9f:e7:41:55:f5:c8:62:6e:ab:
1a:96:b1:19:c5:79:e4:29:d7:ea:27:29:6f:97:89:e5:ea:2a:
00:3c:06:23:db:40:00:60:72:26:ea:a6:9b:e3:5e:99:55:2b:
0e:70:6b:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 19:23:29 2025 by rpki-client