Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/bef6e8-8873-4529-8e72-238c6d8a4c17/1/pId4Lj9wxc0nsy9SdNDlvGLpXK8.mft
File: pId4Lj9wxc0nsy9SdNDlvGLpXK8.mft (raw, json)
Hash identifier: xlRCk4pMa9hMWFDXGHdZcCjoh93o0G0paHSoGjyFt7I=
Subject key identifier: 6C:66:DB:66:D5:75:EF:DF:C4:D4:40:93:50:C4:D8:F4:17:42:1A:8F
Authority key identifier: A4:87:78:2E:3F:70:C5:CD:27:B3:2F:52:74:D0:E5:BC:62:E9:5C:AF
Certificate issuer: /CN=a487782e3f70c5cd27b32f5274d0e5bc62e95caf
Certificate serial: 0197C5383FD479F161308FE02896750C3BDA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pId4Lj9wxc0nsy9SdNDlvGLpXK8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/bef6e8-8873-4529-8e72-238c6d8a4c17/1/pId4Lj9wxc0nsy9SdNDlvGLpXK8.mft
Manifest number: 0FAC
Signing time: Tue 01 Jul 2025 09:01:26 +0000
Manifest this update: Tue 01 Jul 2025 09:01:26 +0000
Manifest next update: Wed 02 Jul 2025 09:01:26 +0000
Files and hashes: 1: 03LlpQC3OthhaMKAkoHkTsK5DvM.roa (hash: MXfk52dc+50VpTuEktAwLc5jK+27W4bau786/NbUnKQ=)
2: FDaJnwtdKIaCGJVg6QNctNX3wpA.roa (hash: nG1/6+0MejULa30YNNdRkzBTjiM/zpm9raBFToCey7o=)
3: pId4Lj9wxc0nsy9SdNDlvGLpXK8.crl (hash: g56M43DYfutxv7v6YOSE6cRGchN81YtNKwDpFxL275Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/bef6e8-8873-4529-8e72-238c6d8a4c17/1/pId4Lj9wxc0nsy9SdNDlvGLpXK8.crl
rsync://rpki.ripe.net/repository/DEFAULT/4f/bef6e8-8873-4529-8e72-238c6d8a4c17/1/pId4Lj9wxc0nsy9SdNDlvGLpXK8.mft
rsync://rpki.ripe.net/repository/DEFAULT/pId4Lj9wxc0nsy9SdNDlvGLpXK8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 02 Jul 2025 08:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:c5:38:3f:d4:79:f1:61:30:8f:e0:28:96:75:0c:3b:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a487782e3f70c5cd27b32f5274d0e5bc62e95caf
Validity
Not Before: Jul 1 09:01:26 2025 GMT
Not After : Jul 2 09:01:26 2025 GMT
Subject: CN=6c66db66d575efdfc4d4409350c4d8f417421a8f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:28:36:9a:28:dd:07:d7:36:02:8b:86:ed:03:
0c:5f:55:32:db:7e:ae:07:7d:68:82:f9:b5:fa:17:
e1:8b:12:bb:24:54:43:3c:41:2a:43:29:2f:57:a3:
52:8c:ec:c9:87:0c:31:13:c1:61:eb:89:ad:73:da:
43:a2:51:70:4d:86:17:c6:d3:e9:e1:71:91:79:eb:
26:ab:2e:4c:1e:4a:57:9a:12:76:04:20:f8:39:71:
d9:cc:a6:50:34:cf:e2:d7:5d:fb:5a:38:f6:10:b5:
46:48:8f:4b:09:60:1f:c3:7a:e7:ac:21:5e:cf:29:
13:be:9f:c3:aa:15:92:ca:1a:f9:8d:83:65:48:fb:
5e:3d:dd:38:de:92:6a:23:b0:ef:ca:e6:fc:79:67:
be:c9:29:33:82:f3:b8:4c:41:e0:13:41:64:55:5e:
38:af:27:53:f1:18:1b:cc:b6:37:73:ce:bc:9e:d9:
24:2e:bb:00:ce:a0:f9:bb:40:95:65:0b:ec:da:51:
2a:39:3d:4e:9c:70:40:b7:bc:7d:7a:7c:53:91:77:
63:dd:be:39:2d:82:74:88:3a:f0:6c:0b:4c:12:62:
c3:7f:44:b3:ff:a9:98:09:b9:af:89:c5:60:f3:5a:
a4:63:70:8d:9a:82:be:39:33:27:d5:f4:bc:8f:8b:
b9:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:66:DB:66:D5:75:EF:DF:C4:D4:40:93:50:C4:D8:F4:17:42:1A:8F
X509v3 Authority Key Identifier:
keyid:A4:87:78:2E:3F:70:C5:CD:27:B3:2F:52:74:D0:E5:BC:62:E9:5C:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pId4Lj9wxc0nsy9SdNDlvGLpXK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/bef6e8-8873-4529-8e72-238c6d8a4c17/1/pId4Lj9wxc0nsy9SdNDlvGLpXK8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/bef6e8-8873-4529-8e72-238c6d8a4c17/1/pId4Lj9wxc0nsy9SdNDlvGLpXK8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:06:cf:63:93:24:ee:66:ff:22:ab:cd:fa:79:de:38:e0:a9:
08:77:07:c4:9f:00:83:91:f0:bf:87:67:7a:34:99:75:2e:c9:
36:f2:59:b7:71:a1:71:dd:fa:90:90:09:ad:61:be:2c:42:15:
2b:d6:f8:b6:4f:8d:d4:68:2b:dd:58:96:71:98:4b:4d:b9:4d:
b6:df:8e:8e:0e:da:0e:3e:6d:2e:83:cb:f2:82:47:11:f8:ad:
dc:28:16:45:77:68:f8:e1:08:c1:4a:32:b3:f6:fb:4d:bd:ef:
b7:50:19:74:fb:2a:2e:b8:21:73:84:88:24:a1:d5:8d:39:54:
c7:24:62:e2:ed:ea:99:f5:69:5d:88:d5:2c:2a:70:58:5d:e7:
aa:0d:43:7c:78:73:17:ad:f4:7b:01:23:e0:a8:2f:90:69:b9:
38:a2:08:6d:b7:90:c5:e1:99:ac:27:ab:60:3c:6b:30:9d:b5:
35:51:47:f7:83:16:dc:d1:47:8d:4f:d0:14:63:07:44:99:39:
ab:35:2b:e7:92:91:13:b2:dd:3e:71:f3:2b:c6:83:9b:02:8c:
b0:4e:81:3d:1c:f4:c2:75:e5:d1:1b:e9:ff:e8:43:12:6a:16:
e2:d6:aa:6f:3f:55:7f:df:2d:94:fa:3b:69:66:b6:fd:52:e7:
17:c7:58:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 18:28:03 2025 by rpki-client