Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/deaad8-3113-4512-a9ce-358243c551a2/1/0s3V8WKiZ4AAA88wwY6c684nTsU.mft
File: 0s3V8WKiZ4AAA88wwY6c684nTsU.mft (raw, json)
Hash identifier: kzjgW6tQ2yiPonEyf/idR8lB5q2DVztFU3yuWHly6Mo=
Subject key identifier: AB:4B:42:E0:AE:C3:AF:E0:F5:E6:2F:26:63:DE:DC:E6:2D:46:6E:D5
Authority key identifier: D2:CD:D5:F1:62:A2:67:80:00:03:CF:30:C1:8E:9C:EB:CE:27:4E:C5
Certificate issuer: /CN=d2cdd5f162a267800003cf30c18e9cebce274ec5
Certificate serial: 0197B6D7BA3F7120AA8251B9DC82D7FEF543
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0s3V8WKiZ4AAA88wwY6c684nTsU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/deaad8-3113-4512-a9ce-358243c551a2/1/0s3V8WKiZ4AAA88wwY6c684nTsU.mft
Manifest number: 0848
Signing time: Sat 28 Jun 2025 14:01:20 +0000
Manifest this update: Sat 28 Jun 2025 14:01:20 +0000
Manifest next update: Sun 29 Jun 2025 14:01:20 +0000
Files and hashes: 1: 0s3V8WKiZ4AAA88wwY6c684nTsU.crl (hash: vf774nSxysTQlw1ds4fa2Z+wIZmzhqskkcSVnm1p5Jg=)
2: 4d-M2xoibAEms_RDQ9mCEYeUNpg.roa (hash: wVeVUALjyzMUssmf4Hte549aQq7kwv7Or9f/6VG17Vc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4b/deaad8-3113-4512-a9ce-358243c551a2/1/0s3V8WKiZ4AAA88wwY6c684nTsU.crl
rsync://rpki.ripe.net/repository/DEFAULT/4b/deaad8-3113-4512-a9ce-358243c551a2/1/0s3V8WKiZ4AAA88wwY6c684nTsU.mft
rsync://rpki.ripe.net/repository/DEFAULT/0s3V8WKiZ4AAA88wwY6c684nTsU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:d7:ba:3f:71:20:aa:82:51:b9:dc:82:d7:fe:f5:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d2cdd5f162a267800003cf30c18e9cebce274ec5
Validity
Not Before: Jun 28 14:01:20 2025 GMT
Not After : Jun 29 14:01:20 2025 GMT
Subject: CN=ab4b42e0aec3afe0f5e62f2663dedce62d466ed5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:0d:79:d0:5d:4f:03:39:43:c0:c4:be:81:b4:
6a:df:e1:b1:8a:8d:79:61:0d:3c:dc:48:68:a5:5d:
3d:93:d1:83:97:39:24:47:0d:1e:6e:75:4f:c1:02:
81:5a:96:cc:99:2c:fd:99:8b:83:b1:5b:cc:a7:1e:
ca:b2:7a:0a:31:87:5c:c8:ef:a7:cc:12:06:f2:b3:
ee:c3:46:b5:28:4b:61:ce:c6:b7:4d:88:b4:ae:d7:
9e:72:14:72:8a:bd:28:2a:94:ce:c9:b0:a1:a5:6d:
6d:ae:ea:40:48:07:7d:81:2c:9d:70:6e:f3:f6:d8:
4c:1e:6d:02:71:63:da:08:c7:46:25:a2:08:57:6a:
64:2e:0f:67:c8:e9:5e:d6:ac:7b:6a:d7:3e:8b:ae:
f1:ef:59:1c:20:27:74:d6:d5:67:51:65:7b:d3:38:
7a:d6:cf:67:42:0e:7b:fb:57:a6:80:87:63:fc:85:
fb:77:b8:02:8a:00:55:8c:c2:6a:25:b1:e6:75:92:
c1:21:b4:33:f4:4b:e3:28:b6:74:89:1f:0f:dd:31:
23:c3:72:b6:ca:47:ec:bd:04:52:8a:c1:89:06:f1:
f4:bb:ad:40:36:f2:fc:8e:58:c5:c9:b3:02:ff:2b:
d8:df:7b:68:1d:2a:49:dd:6e:71:4f:02:9f:a7:3a:
cb:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:4B:42:E0:AE:C3:AF:E0:F5:E6:2F:26:63:DE:DC:E6:2D:46:6E:D5
X509v3 Authority Key Identifier:
keyid:D2:CD:D5:F1:62:A2:67:80:00:03:CF:30:C1:8E:9C:EB:CE:27:4E:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0s3V8WKiZ4AAA88wwY6c684nTsU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/deaad8-3113-4512-a9ce-358243c551a2/1/0s3V8WKiZ4AAA88wwY6c684nTsU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/deaad8-3113-4512-a9ce-358243c551a2/1/0s3V8WKiZ4AAA88wwY6c684nTsU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:71:a6:2b:44:53:99:32:d3:58:1a:1b:d6:a5:b8:b8:63:9c:
82:33:73:55:aa:e1:79:62:62:71:2d:51:43:41:ea:60:e1:f0:
89:2d:43:bf:cf:24:d8:ff:b0:2b:79:c6:4d:e5:ef:4a:9f:a2:
01:e1:9e:3a:50:77:6d:b0:ed:b1:db:a2:ed:29:11:76:5f:42:
3c:2c:6a:3f:5d:e0:00:8a:4a:ff:da:fd:7d:ca:84:dc:e6:13:
4a:fb:7b:ca:e9:d1:e0:e2:4d:17:d5:e4:19:b6:90:f0:72:56:
18:e8:50:cb:7f:a7:58:70:67:6e:e7:5b:b6:63:50:c5:32:29:
03:3d:c2:26:49:7c:19:19:12:62:89:63:cb:6e:db:5b:34:37:
c3:64:ee:40:d8:bd:17:ee:4f:5c:46:ee:31:db:82:9c:1b:d8:
05:84:a5:6a:fc:67:9e:23:49:a4:1c:d8:30:0b:72:e5:b7:96:
c2:58:e1:1a:a2:16:df:03:4a:6e:ac:68:d5:8d:39:1d:6e:3c:
ca:07:d5:ae:bc:bc:10:00:18:3a:69:1f:ab:35:f9:4e:3e:4b:
92:eb:1f:66:42:a3:33:bb:39:f4:bf:71:91:ba:94:46:9f:a8:
7d:10:62:5f:27:4c:2e:17:44:08:31:10:26:9c:c2:84:dd:75:
ea:30:c9:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 19:45:10 2025 by rpki-client