Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/b1b26c-2b7c-4117-b235-8b301bac30c9/1/xAbqjV1wVO-Jl-YpLjsESwk6J8Y.mft
File: xAbqjV1wVO-Jl-YpLjsESwk6J8Y.mft (raw, json)
Hash identifier: +NTBqeOlymkP0y/UmQ2zlnBopN3yUL05Q+nuVFiu2c8=
Subject key identifier: BA:75:84:11:C0:0F:FD:1A:77:64:20:7B:76:DF:9D:5D:5E:9A:D6:02
Authority key identifier: C4:06:EA:8D:5D:70:54:EF:89:97:E6:29:2E:3B:04:4B:09:3A:27:C6
Certificate issuer: /CN=c406ea8d5d7054ef8997e6292e3b044b093a27c6
Certificate serial: 0197C641FC2992851CBE1C48C670F32A122B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xAbqjV1wVO-Jl-YpLjsESwk6J8Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/b1b26c-2b7c-4117-b235-8b301bac30c9/1/xAbqjV1wVO-Jl-YpLjsESwk6J8Y.mft
Manifest number: 4B
Signing time: Tue 01 Jul 2025 13:51:42 +0000
Manifest this update: Tue 01 Jul 2025 13:51:42 +0000
Manifest next update: Wed 02 Jul 2025 13:51:42 +0000
Files and hashes: 1: NGw8ktOj6OOwsyhqpmQcxVz3HFU.roa (hash: Z7YWYHXxapOgTQP+VOKpEFoycxd68wL+FS31DhS3NVc=)
2: xAbqjV1wVO-Jl-YpLjsESwk6J8Y.crl (hash: 3CZicQMjaYwCDvO8lOm8rIKDmOPpub+tPBUwJtM4cDg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/b1b26c-2b7c-4117-b235-8b301bac30c9/1/xAbqjV1wVO-Jl-YpLjsESwk6J8Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/b1b26c-2b7c-4117-b235-8b301bac30c9/1/xAbqjV1wVO-Jl-YpLjsESwk6J8Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/xAbqjV1wVO-Jl-YpLjsESwk6J8Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 02 Jul 2025 13:51:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:c6:41:fc:29:92:85:1c:be:1c:48:c6:70:f3:2a:12:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c406ea8d5d7054ef8997e6292e3b044b093a27c6
Validity
Not Before: Jul 1 13:51:42 2025 GMT
Not After : Jul 2 13:51:42 2025 GMT
Subject: CN=ba758411c00ffd1a7764207b76df9d5d5e9ad602
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:2b:4b:ce:91:52:75:b3:05:d1:52:6b:6f:74:
b9:47:80:ff:27:62:29:ed:6a:9c:57:9d:20:49:15:
1b:e0:96:98:ab:9e:bf:0d:ce:f4:b3:56:e9:27:31:
01:1f:7a:59:8f:00:99:e0:78:68:a7:49:61:a4:27:
e1:4e:b4:88:8b:ce:e4:f1:e2:e8:43:00:d7:cd:5a:
c6:5f:dd:b0:2c:a8:ff:3b:bc:bd:6e:76:48:29:cd:
b0:df:5c:b3:64:5a:ea:5c:75:58:8f:d2:19:38:8c:
a5:c8:cd:47:7a:54:7f:73:15:e9:84:1a:e4:aa:af:
8a:5d:18:3b:f1:eb:85:90:1c:ac:74:53:f9:74:8d:
fc:c6:fb:f1:e0:51:7f:c8:b2:f3:86:2f:b4:a4:f5:
35:17:ac:33:b0:c7:27:29:3e:96:48:2e:32:f0:00:
8c:93:cf:3f:59:dc:a4:09:46:52:ef:39:92:3b:8f:
1f:41:9e:b0:b8:1f:f3:32:d6:6e:90:34:94:67:87:
91:dc:42:d0:8f:57:25:ce:35:8f:7e:3c:82:7e:9e:
8b:01:8d:8d:7a:84:f8:73:69:08:e0:ac:53:bf:d0:
2f:b2:49:84:f4:f6:e9:8a:50:23:89:ce:fe:51:46:
af:b3:0f:83:58:dc:da:2b:74:63:1e:1a:47:2b:77:
a9:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:75:84:11:C0:0F:FD:1A:77:64:20:7B:76:DF:9D:5D:5E:9A:D6:02
X509v3 Authority Key Identifier:
keyid:C4:06:EA:8D:5D:70:54:EF:89:97:E6:29:2E:3B:04:4B:09:3A:27:C6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xAbqjV1wVO-Jl-YpLjsESwk6J8Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/b1b26c-2b7c-4117-b235-8b301bac30c9/1/xAbqjV1wVO-Jl-YpLjsESwk6J8Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/b1b26c-2b7c-4117-b235-8b301bac30c9/1/xAbqjV1wVO-Jl-YpLjsESwk6J8Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:c4:cd:70:b3:43:c4:c2:c8:6b:99:ce:5d:44:ea:b5:a4:0a:
5f:bd:97:71:29:ff:76:44:59:ce:e4:9b:b5:ce:eb:21:d2:9c:
f3:d2:38:97:69:c2:67:0b:ce:89:59:2b:87:d3:d5:13:53:3a:
0f:2d:7b:6a:1c:14:02:73:9a:2f:b1:2b:8f:0a:41:18:87:92:
7a:67:16:5f:5e:4e:dc:d7:a7:ca:93:b1:c0:75:65:bc:c9:7f:
38:52:15:5a:31:62:01:a7:62:33:42:ac:fd:87:0d:84:96:bc:
e3:37:7b:85:61:22:51:a8:c2:c2:29:6c:dd:ee:f8:fb:ee:65:
3c:75:11:75:86:79:de:b6:55:c8:1d:2b:76:a2:c9:f5:e1:a9:
36:c7:e9:28:26:0c:55:b0:13:9b:f1:02:55:61:5d:92:91:c0:
bb:5e:b9:f6:72:35:e7:61:33:74:1d:11:29:02:6d:e2:b3:90:
44:38:d9:d2:e3:82:56:b9:6a:c3:a2:f0:df:99:45:24:5c:3d:
b0:e7:f3:b8:99:74:b9:4a:a7:34:03:cd:27:09:7b:47:bc:d1:
a4:6e:7d:b7:ae:13:6e:5a:a7:91:86:23:df:45:11:56:df:35:
1a:54:f8:33:42:94:ae:77:e2:2b:33:d8:8a:4e:ac:db:bd:70:
71:af:7f:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 22:39:10 2025 by rpki-client