Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/0e6f4a-fd57-411b-a94b-6b6fdb54ba31/1/4an-PIpp1Qk1ofdJZm4I3HVFlN0.mft
File: 4an-PIpp1Qk1ofdJZm4I3HVFlN0.mft (raw, json)
Hash identifier: ZSwGeyjmQXYc+J0K3zP4paLUoEMG/YL7X849W5KYM6A=
Subject key identifier: BC:1F:F5:2A:84:48:92:36:D1:5F:63:AE:C2:EF:5E:83:95:D7:16:5B
Authority key identifier: E1:A9:FE:3C:8A:69:D5:09:35:A1:F7:49:66:6E:08:DC:75:45:94:DD
Certificate issuer: /CN=e1a9fe3c8a69d50935a1f749666e08dc754594dd
Certificate serial: 0197B70EAC7BEFB5A678729E02CD778CE85A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4an-PIpp1Qk1ofdJZm4I3HVFlN0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/0e6f4a-fd57-411b-a94b-6b6fdb54ba31/1/4an-PIpp1Qk1ofdJZm4I3HVFlN0.mft
Manifest number: 1078
Signing time: Sat 28 Jun 2025 15:01:21 +0000
Manifest this update: Sat 28 Jun 2025 15:01:21 +0000
Manifest next update: Sun 29 Jun 2025 15:01:21 +0000
Files and hashes: 1: 3BfIScw6HImdI4whE_vk-buQO8s.roa (hash: G0gYam1RQRQrZL9flb7DmAGTR2cR1ZnF922oRZ/xNlg=)
2: 4an-PIpp1Qk1ofdJZm4I3HVFlN0.crl (hash: ybIipY8bXbbbPk65HJKqi0zY0/oQgY+idoLzKIFk0cE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/0e6f4a-fd57-411b-a94b-6b6fdb54ba31/1/4an-PIpp1Qk1ofdJZm4I3HVFlN0.crl
rsync://rpki.ripe.net/repository/DEFAULT/24/0e6f4a-fd57-411b-a94b-6b6fdb54ba31/1/4an-PIpp1Qk1ofdJZm4I3HVFlN0.mft
rsync://rpki.ripe.net/repository/DEFAULT/4an-PIpp1Qk1ofdJZm4I3HVFlN0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:0e:ac:7b:ef:b5:a6:78:72:9e:02:cd:77:8c:e8:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e1a9fe3c8a69d50935a1f749666e08dc754594dd
Validity
Not Before: Jun 28 15:01:21 2025 GMT
Not After : Jun 29 15:01:21 2025 GMT
Subject: CN=bc1ff52a84489236d15f63aec2ef5e8395d7165b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:da:6a:b9:59:04:ce:33:aa:ff:ce:e4:71:49:
1d:00:9b:cc:e9:6e:f0:7d:8b:04:22:1f:73:d1:d3:
25:67:ea:79:02:c7:ff:df:1f:00:df:f6:f0:7f:c7:
76:22:0d:0a:76:bf:dd:f7:23:36:92:5b:11:7b:08:
f9:f8:49:67:3c:c9:87:41:ef:af:43:c6:30:3c:2a:
fe:04:9a:f8:f0:a8:60:f7:08:34:99:f6:b9:2b:9b:
85:70:d2:fb:af:1d:3f:f2:dc:97:5e:a8:4e:8f:f3:
ad:e1:72:04:c4:93:8d:20:05:3d:60:c3:b5:13:f9:
d6:77:63:07:5a:f2:19:1d:55:b5:97:49:43:c7:4e:
75:08:77:53:3d:25:f9:4d:c6:56:f1:41:04:23:9a:
89:cd:1e:99:6e:a1:43:16:b6:9f:90:88:82:42:8e:
8e:1e:76:54:24:fc:36:14:c4:71:1c:3a:ff:11:cf:
90:14:b5:aa:b3:d5:0b:28:8c:9b:15:9a:c9:73:43:
58:1d:90:a1:f0:49:c8:cb:ec:22:e4:3a:4c:cb:9b:
38:79:30:89:73:fc:e6:c2:2c:b3:36:94:4a:ea:42:
d5:2a:6e:bd:67:f9:fe:1e:ad:99:77:f2:4f:71:ff:
93:0d:2b:4f:00:f2:8e:f9:a6:4a:94:dc:58:25:e0:
cf:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:1F:F5:2A:84:48:92:36:D1:5F:63:AE:C2:EF:5E:83:95:D7:16:5B
X509v3 Authority Key Identifier:
keyid:E1:A9:FE:3C:8A:69:D5:09:35:A1:F7:49:66:6E:08:DC:75:45:94:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4an-PIpp1Qk1ofdJZm4I3HVFlN0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/0e6f4a-fd57-411b-a94b-6b6fdb54ba31/1/4an-PIpp1Qk1ofdJZm4I3HVFlN0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/0e6f4a-fd57-411b-a94b-6b6fdb54ba31/1/4an-PIpp1Qk1ofdJZm4I3HVFlN0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:e4:bb:5a:88:2b:d9:8b:0c:f5:dc:d1:0a:c0:d4:f2:6f:88:
c3:ba:68:2c:a9:d1:1b:ae:cb:cf:43:fc:6e:63:67:56:f9:98:
92:40:26:f2:5c:15:7b:78:23:3c:40:d5:7c:62:0b:6a:45:55:
00:9b:7f:ff:55:4a:0f:64:95:6e:c9:22:ef:ee:0b:cd:5b:eb:
68:69:e9:e5:6a:86:e1:af:ce:1c:a2:ee:0f:e7:05:dd:43:c2:
49:a6:fb:9b:88:b1:c8:33:78:e2:a3:27:42:c6:6b:84:36:0b:
98:83:a1:f5:46:f0:a2:36:85:9d:cd:cd:05:92:f4:4a:e6:fb:
0a:e4:d1:d7:9e:6f:2b:3f:e5:a5:80:e7:55:e3:5e:65:3c:46:
ff:b0:9d:1b:3f:a7:fa:d9:9f:f5:26:ba:fb:7b:14:79:17:12:
10:f1:77:a5:5b:61:06:37:34:18:40:fd:b9:4a:41:c2:04:cf:
56:50:0d:82:f5:13:1e:b3:32:41:17:3a:25:52:17:de:1b:92:
75:36:f0:15:b8:93:56:d8:3f:9c:6f:e8:9b:46:2a:44:53:a7:
13:65:e8:8e:95:63:63:e0:9f:3d:b0:b3:d3:26:cf:48:74:9a:
54:4c:18:19:a8:1f:92:0b:e4:ee:9a:dc:48:54:06:c9:ac:d7:
61:26:97:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 21:35:22 2025 by rpki-client