Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/aa7922-c2c0-47ae-9108-6030a9da3b89/1/4dfp_xJ4oU3CbvM_n_Ux2G7_XQM.mft
File: 4dfp_xJ4oU3CbvM_n_Ux2G7_XQM.mft (raw, json)
Hash identifier: CY+6h5HGZU7wBdjQmI7bb//zHhLm5idZaeSvYjJrz4E=
Subject key identifier: D8:D6:E0:5E:35:33:BA:11:96:48:DB:F9:54:F9:1E:1A:59:BB:63:9B
Authority key identifier: E1:D7:E9:FF:12:78:A1:4D:C2:6E:F3:3F:9F:F5:31:D8:6E:FF:5D:03
Certificate issuer: /CN=e1d7e9ff1278a14dc26ef33f9ff531d86eff5d03
Certificate serial: 0197B7B334A57A9E6B9D19BB6DC2195E7A5D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4dfp_xJ4oU3CbvM_n_Ux2G7_XQM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/aa7922-c2c0-47ae-9108-6030a9da3b89/1/4dfp_xJ4oU3CbvM_n_Ux2G7_XQM.mft
Manifest number: 12F0
Signing time: Sat 28 Jun 2025 18:01:04 +0000
Manifest this update: Sat 28 Jun 2025 18:01:04 +0000
Manifest next update: Sun 29 Jun 2025 18:01:04 +0000
Files and hashes: 1: 4dfp_xJ4oU3CbvM_n_Ux2G7_XQM.crl (hash: cmGk51j9xcypzZgUig+FCPYBVtYgNg+CgsnKSbGCiPg=)
2: yfb_qPLjpTR6E53AWD8zAEu3mD8.roa (hash: ewXjqJ1u8QGc/DB2xhFt7iKmK54tjMWGPVl8lml9NyI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/50/aa7922-c2c0-47ae-9108-6030a9da3b89/1/4dfp_xJ4oU3CbvM_n_Ux2G7_XQM.crl
rsync://rpki.ripe.net/repository/DEFAULT/50/aa7922-c2c0-47ae-9108-6030a9da3b89/1/4dfp_xJ4oU3CbvM_n_Ux2G7_XQM.mft
rsync://rpki.ripe.net/repository/DEFAULT/4dfp_xJ4oU3CbvM_n_Ux2G7_XQM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:b3:34:a5:7a:9e:6b:9d:19:bb:6d:c2:19:5e:7a:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e1d7e9ff1278a14dc26ef33f9ff531d86eff5d03
Validity
Not Before: Jun 28 18:01:04 2025 GMT
Not After : Jun 29 18:01:04 2025 GMT
Subject: CN=d8d6e05e3533ba119648dbf954f91e1a59bb639b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:16:9b:8e:ce:88:22:87:31:2d:e4:e7:fe:82:
5a:b9:4e:8e:9b:5d:fd:d8:1d:93:ba:11:b3:5c:ae:
8c:91:79:ed:da:1d:e3:4a:c1:e1:27:44:1b:30:90:
9c:6d:71:fa:62:f5:ab:5e:91:64:a1:fa:19:14:37:
eb:eb:68:b0:39:76:8a:80:c6:da:5b:c0:16:ed:2e:
2d:0a:f6:61:f5:6e:54:b8:4e:cd:ce:76:51:cd:c1:
16:09:41:b3:cc:9d:ff:1c:d3:c1:8b:c7:17:28:45:
ed:d1:ef:34:ba:18:ea:5f:6e:80:74:f0:a1:a8:82:
70:cb:06:1f:e0:7e:47:7a:fe:04:11:93:6e:f4:76:
5a:c0:76:f7:97:63:37:ec:82:6d:77:19:e8:5a:50:
b5:73:e3:64:9b:e9:40:f2:f0:8d:d8:a5:94:93:56:
98:20:da:fb:f9:e7:52:b6:26:d8:bd:54:f3:0b:f6:
48:39:71:32:38:5f:9d:53:ae:57:89:a4:16:b5:f7:
93:89:14:f0:cc:df:ea:00:2d:cb:99:88:b7:e6:4f:
06:d0:f5:76:07:96:4d:18:5c:dd:3d:59:9b:36:3e:
b6:56:c0:19:2a:ed:1e:bc:8c:ee:a7:fd:b9:2c:f5:
b1:16:e3:c4:2a:7f:39:23:05:79:cc:21:a2:71:30:
e3:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:D6:E0:5E:35:33:BA:11:96:48:DB:F9:54:F9:1E:1A:59:BB:63:9B
X509v3 Authority Key Identifier:
keyid:E1:D7:E9:FF:12:78:A1:4D:C2:6E:F3:3F:9F:F5:31:D8:6E:FF:5D:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4dfp_xJ4oU3CbvM_n_Ux2G7_XQM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/aa7922-c2c0-47ae-9108-6030a9da3b89/1/4dfp_xJ4oU3CbvM_n_Ux2G7_XQM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/50/aa7922-c2c0-47ae-9108-6030a9da3b89/1/4dfp_xJ4oU3CbvM_n_Ux2G7_XQM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:7a:69:be:f4:fd:fd:da:03:06:43:3f:d6:52:7d:cb:47:22:
62:97:01:57:58:ed:94:05:08:a5:0c:c4:7d:58:9e:37:7e:00:
0e:67:d2:59:89:82:05:36:a2:d0:d3:d6:be:62:97:e9:43:eb:
ac:84:57:84:42:90:53:bb:b4:7d:e4:e4:72:c9:cc:da:64:c1:
e1:0a:d1:68:e8:cb:e0:fb:cf:ef:8e:4a:a0:20:98:ec:e5:5b:
d0:dd:5d:a1:1e:84:cc:84:af:5d:1e:94:1b:d3:ca:01:32:8d:
27:2c:1c:ae:a7:d9:70:ff:71:2f:60:01:aa:e0:f8:d9:b8:2d:
5a:c7:98:ce:73:42:34:91:22:e3:f5:95:99:8f:07:77:c0:6a:
12:f8:5c:db:4c:05:12:df:6c:99:39:ca:3a:9f:66:37:7a:72:
9d:a3:3c:38:8b:cf:53:5c:8b:69:83:b1:2e:92:c4:d7:2e:64:
52:35:76:2e:63:68:a5:c1:65:66:f8:49:e6:91:94:77:86:31:
19:1b:eb:03:a3:0f:c1:e1:ff:38:bd:8c:23:22:b5:4e:2d:64:
3c:ee:9d:c9:7d:2b:3a:a8:63:98:b1:b7:66:fb:54:7e:60:17:
30:a2:11:a8:2d:c4:39:11:f9:26:4b:4a:d8:16:17:96:5b:8d:
87:e9:ae:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 21:50:20 2025 by rpki-client