Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/a5f498-6c76-4230-93d1-a39e009627ef/1/4T0_tqhjrA-k0f7v467DntjTiVw.mft
File: 4T0_tqhjrA-k0f7v467DntjTiVw.mft (raw, json)
Hash identifier: ZhKSmqMyX/k3ak4NtjyRdSPVDs7WCtdhK4G1+dnUUio=
Subject key identifier: 09:AB:AC:A1:E4:04:E0:F3:93:FC:FE:8D:23:8F:04:43:45:38:4E:98
Authority key identifier: E1:3D:3F:B6:A8:63:AC:0F:A4:D1:FE:EF:E3:AE:C3:9E:D8:D3:89:5C
Certificate issuer: /CN=e13d3fb6a863ac0fa4d1feefe3aec39ed8d3895c
Certificate serial: 0197B77CB12A01D698449813F361791F52FC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4T0_tqhjrA-k0f7v467DntjTiVw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/a5f498-6c76-4230-93d1-a39e009627ef/1/4T0_tqhjrA-k0f7v467DntjTiVw.mft
Manifest number: 1509
Signing time: Sat 28 Jun 2025 17:01:31 +0000
Manifest this update: Sat 28 Jun 2025 17:01:31 +0000
Manifest next update: Sun 29 Jun 2025 17:01:31 +0000
Files and hashes: 1: 4T0_tqhjrA-k0f7v467DntjTiVw.crl (hash: J1IljApkDvx031vffRw2kv/EDU10fcY6CZgaKRXE7ZA=)
2: C_W5uFOffH81U1XB_VG_eFr8n_A.roa (hash: kM5BT5a8AHJ+VqwyNcuISudnKqdFzEc+qETwFrySAkU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/a5f498-6c76-4230-93d1-a39e009627ef/1/4T0_tqhjrA-k0f7v467DntjTiVw.crl
rsync://rpki.ripe.net/repository/DEFAULT/46/a5f498-6c76-4230-93d1-a39e009627ef/1/4T0_tqhjrA-k0f7v467DntjTiVw.mft
rsync://rpki.ripe.net/repository/DEFAULT/4T0_tqhjrA-k0f7v467DntjTiVw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:7c:b1:2a:01:d6:98:44:98:13:f3:61:79:1f:52:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e13d3fb6a863ac0fa4d1feefe3aec39ed8d3895c
Validity
Not Before: Jun 28 17:01:31 2025 GMT
Not After : Jun 29 17:01:31 2025 GMT
Subject: CN=09abaca1e404e0f393fcfe8d238f044345384e98
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:41:b4:a3:71:25:aa:82:d7:61:06:74:70:73:
a9:7f:ae:ee:d0:f9:92:9a:69:5c:86:7e:5f:4d:61:
29:8b:57:d2:b4:3e:04:ce:df:ff:ab:8c:d2:de:f5:
a3:40:c9:2c:2e:25:55:06:72:5a:e2:19:6d:df:2c:
d9:89:ff:b2:bd:92:19:ce:c6:84:9e:94:c3:e5:10:
2c:7a:a4:6e:a6:79:99:1c:72:56:a9:69:55:1c:17:
94:e0:c3:33:c0:eb:94:42:29:a7:fd:3b:0e:67:5b:
b6:58:03:ac:a0:cc:39:4b:43:45:4c:61:5f:73:dc:
8f:ce:55:37:9d:75:43:61:80:da:5b:e2:97:df:12:
04:72:55:47:29:77:ea:e8:9e:1d:b9:63:8c:f1:c0:
ad:0a:a9:8f:5f:35:64:e1:fa:b9:38:e1:ce:f9:e3:
dd:26:7e:50:8e:01:2b:35:85:7f:98:0b:47:c6:66:
dd:ea:2b:56:73:0b:21:df:7e:a8:48:20:70:07:02:
80:67:99:a2:84:36:21:bd:31:a8:09:9e:d2:1e:0a:
74:44:74:3d:e9:0b:29:e8:84:76:c2:26:d7:bf:04:
cd:7e:01:ac:b2:70:01:68:81:60:ed:87:ed:bc:1c:
54:ab:66:f6:4d:64:d0:29:ad:aa:59:10:c9:e8:0c:
e1:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:AB:AC:A1:E4:04:E0:F3:93:FC:FE:8D:23:8F:04:43:45:38:4E:98
X509v3 Authority Key Identifier:
keyid:E1:3D:3F:B6:A8:63:AC:0F:A4:D1:FE:EF:E3:AE:C3:9E:D8:D3:89:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4T0_tqhjrA-k0f7v467DntjTiVw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/a5f498-6c76-4230-93d1-a39e009627ef/1/4T0_tqhjrA-k0f7v467DntjTiVw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/a5f498-6c76-4230-93d1-a39e009627ef/1/4T0_tqhjrA-k0f7v467DntjTiVw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:18:86:83:af:cb:54:55:1e:a2:6e:b5:56:69:5c:4b:3a:ea:
37:00:de:b2:67:d5:8d:fb:3f:cb:be:10:c6:e3:52:6d:59:c6:
29:5f:41:ab:b5:c5:41:a9:fd:ae:b6:9e:ae:bb:3a:67:d1:b9:
1c:72:16:9a:11:5e:ea:5d:48:78:c4:3a:69:67:58:36:06:28:
c3:96:28:99:7b:b1:8a:0b:51:94:1e:b1:de:f3:cc:4c:f0:ad:
c3:d7:ee:b1:49:1e:5d:7d:b2:c1:52:95:49:8f:d9:e4:95:55:
7b:47:5a:08:29:0e:e8:01:b2:9a:b1:9a:33:d7:dd:ce:4e:de:
78:ee:38:73:03:03:7c:3f:2f:77:46:a9:a6:25:46:b3:ae:ee:
16:86:89:32:7c:1f:5d:59:28:e5:46:a2:c1:45:44:fe:14:c3:
a1:cf:96:32:b6:2d:8a:3e:8d:98:a8:66:f4:af:eb:14:44:5e:
de:b9:65:10:8d:5b:3c:c2:c9:cd:98:6b:a4:af:e4:98:06:49:
50:66:03:56:82:2b:da:f1:9c:3c:b9:44:df:01:8f:b6:f6:2a:
2c:b6:c0:92:08:fd:65:da:9b:bd:36:10:d4:9e:1f:26:79:29:
6e:95:49:e2:31:d1:96:c4:04:29:9b:8c:25:d1:10:08:bd:32:
44:52:84:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:12:49 2025 by rpki-client