Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/0167eb-0d16-4cc1-8047-142fcacd7a49/1/4xVK21ou2ZnPHbnBJxsiCdrTRJ4.mft
File: 4xVK21ou2ZnPHbnBJxsiCdrTRJ4.mft (raw, json)
Hash identifier: mj0cmPF33fXnwZ97ON9ma4V9WrONSpfgUpm3+Ukl4lw=
Subject key identifier: B5:F8:5E:73:65:7E:C1:50:DB:26:1E:DF:1B:49:98:8B:DE:5F:15:27
Authority key identifier: E3:15:4A:DB:5A:2E:D9:99:CF:1D:B9:C1:27:1B:22:09:DA:D3:44:9E
Certificate issuer: /CN=e3154adb5a2ed999cf1db9c1271b2209dad3449e
Certificate serial: 0197B77CB84B8EEA11AF7C8B37151EE3E539
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4xVK21ou2ZnPHbnBJxsiCdrTRJ4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/0167eb-0d16-4cc1-8047-142fcacd7a49/1/4xVK21ou2ZnPHbnBJxsiCdrTRJ4.mft
Manifest number: 1449
Signing time: Sat 28 Jun 2025 17:01:33 +0000
Manifest this update: Sat 28 Jun 2025 17:01:33 +0000
Manifest next update: Sun 29 Jun 2025 17:01:33 +0000
Files and hashes: 1: 4xVK21ou2ZnPHbnBJxsiCdrTRJ4.crl (hash: 9BT6+ryRzrEab8YtV92MOFMOS4Z/EKoW4N8HRZFb3n0=)
2: YKk_IxXaH7sfK7_gRS3093UyRYo.roa (hash: COs47LOLhU2xn+3tfczoJAT+wVHUvoY7/hZnsmTjtwc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/23/0167eb-0d16-4cc1-8047-142fcacd7a49/1/4xVK21ou2ZnPHbnBJxsiCdrTRJ4.crl
rsync://rpki.ripe.net/repository/DEFAULT/23/0167eb-0d16-4cc1-8047-142fcacd7a49/1/4xVK21ou2ZnPHbnBJxsiCdrTRJ4.mft
rsync://rpki.ripe.net/repository/DEFAULT/4xVK21ou2ZnPHbnBJxsiCdrTRJ4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:7c:b8:4b:8e:ea:11:af:7c:8b:37:15:1e:e3:e5:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e3154adb5a2ed999cf1db9c1271b2209dad3449e
Validity
Not Before: Jun 28 17:01:33 2025 GMT
Not After : Jun 29 17:01:33 2025 GMT
Subject: CN=b5f85e73657ec150db261edf1b49988bde5f1527
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:5d:9e:c4:6b:d3:86:f0:74:c1:8b:86:71:0b:
1d:70:cf:cd:9e:d9:c4:e0:a0:3b:58:ae:70:14:77:
a4:93:3a:03:5a:34:e3:98:60:42:df:e8:0d:06:43:
7b:d0:47:03:89:e1:47:6e:09:16:a1:19:60:61:08:
e1:b3:31:10:f6:e8:83:4b:ad:43:85:df:78:bf:03:
35:60:42:af:b0:a3:a1:15:2c:4a:81:a4:2d:e4:19:
29:34:04:a2:2b:c7:42:2f:e5:28:32:67:72:c6:27:
d4:43:46:0f:97:03:ac:3f:2b:77:7a:16:bf:09:ed:
cb:80:6a:52:67:a6:48:1a:e6:b2:f7:20:59:ce:9b:
d5:29:42:e5:d5:3b:a5:98:31:99:c4:78:08:8d:42:
8b:4d:32:1c:70:c1:93:1b:af:f6:43:2e:40:0c:42:
bd:a9:b8:72:8b:78:cf:e5:a0:c5:90:87:55:09:31:
25:15:21:ce:2e:74:b2:47:c4:28:c7:d6:ba:51:71:
b1:e1:ca:07:d3:55:b6:b5:14:d8:74:6e:25:f9:ee:
aa:b8:d7:42:12:31:7e:b5:18:73:ca:11:e5:2c:71:
70:2d:69:ab:68:b4:2e:fd:9f:fc:f8:38:ae:57:88:
ea:38:f4:a6:87:ef:95:b3:09:5c:a6:10:fe:f0:e0:
9a:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:F8:5E:73:65:7E:C1:50:DB:26:1E:DF:1B:49:98:8B:DE:5F:15:27
X509v3 Authority Key Identifier:
keyid:E3:15:4A:DB:5A:2E:D9:99:CF:1D:B9:C1:27:1B:22:09:DA:D3:44:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4xVK21ou2ZnPHbnBJxsiCdrTRJ4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/0167eb-0d16-4cc1-8047-142fcacd7a49/1/4xVK21ou2ZnPHbnBJxsiCdrTRJ4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/23/0167eb-0d16-4cc1-8047-142fcacd7a49/1/4xVK21ou2ZnPHbnBJxsiCdrTRJ4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:30:b8:3d:ba:43:53:f2:b5:05:bf:b6:3b:4e:c6:5b:a8:c1:
a5:31:77:00:08:25:46:c5:3f:b9:98:2c:c6:ad:03:bb:54:6e:
02:c8:0a:63:9d:ad:24:1e:77:42:6e:a7:81:4e:fd:ae:bf:c1:
a9:0d:83:cb:31:ab:36:3f:64:76:9e:8c:60:6b:94:2d:63:44:
99:d9:69:fe:45:1a:17:7b:37:66:43:eb:70:18:ed:05:52:4f:
87:49:07:77:17:19:a7:57:ab:db:8b:cb:b4:27:1c:d8:34:58:
8d:6b:b7:6f:99:45:8f:49:90:fd:58:f1:95:55:28:6e:3a:9f:
2c:5b:28:d0:c8:18:8c:07:81:bc:a4:24:c5:24:03:24:40:35:
a2:76:53:94:5a:4c:0b:8b:4a:44:9b:ad:50:08:8a:08:70:54:
8a:2b:26:36:86:ce:0d:8a:bb:1f:8d:3f:e1:b1:f3:e5:6f:b8:
31:9a:92:89:9f:bd:85:60:7b:9a:f5:bb:3b:40:a4:4e:93:a2:
18:79:b7:89:38:b0:d3:24:d4:6e:71:cd:4a:82:f1:7e:a8:13:
c5:71:ea:0f:45:a4:54:3c:3f:a0:11:44:e7:97:52:c2:85:c6:
ba:ba:cb:8a:53:fd:fe:4b:fc:ab:82:8d:d4:1d:f3:03:3a:61:
71:9e:77:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 19:20:09 2025 by rpki-client