Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/0b58ab-f707-4ab6-9ae8-0240e74476a7/1/S4x70MRIa6Bzzi3lO6B01w5Ftec.mft
File: S4x70MRIa6Bzzi3lO6B01w5Ftec.mft (raw, json)
Hash identifier: RGuhcx4X+tcQsN8LdGM0ncBDIfAdaPDyCprIpNMZPWc=
Subject key identifier: 32:28:18:72:93:D0:2B:19:C5:E7:FC:FD:2D:40:68:30:3F:6D:17:EE
Authority key identifier: 4B:8C:7B:D0:C4:48:6B:A0:73:CE:2D:E5:3B:A0:74:D7:0E:45:B5:E7
Certificate issuer: /CN=4b8c7bd0c4486ba073ce2de53ba074d70e45b5e7
Certificate serial: 0197B70F264B0EF6BBCACCA41E6641FBB404
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S4x70MRIa6Bzzi3lO6B01w5Ftec.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/0b58ab-f707-4ab6-9ae8-0240e74476a7/1/S4x70MRIa6Bzzi3lO6B01w5Ftec.mft
Manifest number: 15B3
Signing time: Sat 28 Jun 2025 15:01:52 +0000
Manifest this update: Sat 28 Jun 2025 15:01:52 +0000
Manifest next update: Sun 29 Jun 2025 15:01:52 +0000
Files and hashes: 1: 3JM1DqiUyjfx5MdpsDwZLHS0SmA.roa (hash: q6Ea605SgtRXxY5NI/ZcpQt4PK8j0Kx+z2u5Y/QaL0k=)
2: S4x70MRIa6Bzzi3lO6B01w5Ftec.crl (hash: 5cuhC/mDAU4wxQFm/5RR0/MXVXuvedXxbbvAZg/Dd9Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/0b58ab-f707-4ab6-9ae8-0240e74476a7/1/S4x70MRIa6Bzzi3lO6B01w5Ftec.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/0b58ab-f707-4ab6-9ae8-0240e74476a7/1/S4x70MRIa6Bzzi3lO6B01w5Ftec.mft
rsync://rpki.ripe.net/repository/DEFAULT/S4x70MRIa6Bzzi3lO6B01w5Ftec.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:0f:26:4b:0e:f6:bb:ca:cc:a4:1e:66:41:fb:b4:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b8c7bd0c4486ba073ce2de53ba074d70e45b5e7
Validity
Not Before: Jun 28 15:01:52 2025 GMT
Not After : Jun 29 15:01:52 2025 GMT
Subject: CN=3228187293d02b19c5e7fcfd2d4068303f6d17ee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:07:b2:22:c2:b2:0c:fe:b1:46:14:d1:9c:cd:
f4:1c:c5:be:b7:b8:f9:89:e7:7c:9b:f5:8c:79:e0:
95:57:5d:f1:48:67:2a:ba:66:3a:1a:66:fe:b6:f0:
02:d0:37:d0:61:88:5a:57:c2:3d:b1:28:03:6e:29:
17:26:79:a7:1e:08:b7:7a:11:00:15:a4:b9:38:59:
e3:1e:08:1d:a6:d2:53:27:fb:26:f4:ab:14:8f:c2:
6d:f9:e8:f0:bf:b0:43:d0:9e:72:2b:69:3c:12:85:
bb:6c:ae:f3:96:f1:73:e1:ab:c3:7e:40:89:45:8b:
4d:e2:49:5f:e3:ff:ab:d9:9d:e4:90:1f:10:7f:31:
e5:bf:a7:4c:57:f0:e8:17:0b:40:e2:71:9a:c6:0d:
23:a5:1d:68:61:9d:7b:aa:af:13:dc:2f:21:d3:53:
06:ac:b1:a5:82:77:4b:6a:56:10:c0:22:ba:0d:81:
a1:c9:39:0f:ea:de:2b:56:46:61:74:db:23:ed:d4:
57:7a:fb:0a:73:5f:d0:5d:06:67:a2:2c:17:18:86:
fe:d0:ff:e6:28:d5:0c:4d:33:05:ca:b8:c4:b2:cd:
46:ee:c2:fe:6e:4c:3d:ed:ed:c8:ae:87:5a:d1:77:
83:7f:d9:b3:f9:df:1b:8b:08:fd:70:9a:6d:4a:24:
41:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:28:18:72:93:D0:2B:19:C5:E7:FC:FD:2D:40:68:30:3F:6D:17:EE
X509v3 Authority Key Identifier:
keyid:4B:8C:7B:D0:C4:48:6B:A0:73:CE:2D:E5:3B:A0:74:D7:0E:45:B5:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S4x70MRIa6Bzzi3lO6B01w5Ftec.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/0b58ab-f707-4ab6-9ae8-0240e74476a7/1/S4x70MRIa6Bzzi3lO6B01w5Ftec.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/0b58ab-f707-4ab6-9ae8-0240e74476a7/1/S4x70MRIa6Bzzi3lO6B01w5Ftec.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:ef:b8:2e:c8:86:9b:70:cd:1a:08:ec:56:3e:49:cd:08:db:
8e:a2:6c:89:0a:db:e9:ea:c0:f2:cf:ab:19:f0:f8:0c:42:30:
9b:9c:2d:4f:14:dd:8f:bd:fe:95:b8:2d:9b:c6:ff:4e:89:60:
2d:29:cf:40:ce:32:4d:df:e7:79:8c:96:0f:0f:19:c4:f0:0b:
0f:18:bb:43:3c:07:94:79:ab:3e:57:b3:6b:f3:ab:ec:d6:20:
cd:d7:03:b0:88:5f:b1:e1:75:63:d6:4e:d6:7e:df:62:f1:d6:
69:0f:2b:ab:27:64:2c:9d:d9:57:94:74:8f:ff:3d:83:14:04:
63:9c:7d:3a:ec:70:f5:f0:f8:d7:da:40:06:9c:0f:64:12:19:
98:34:0d:58:fa:2b:06:2e:c8:31:29:67:df:6e:bb:96:4c:2d:
ac:3c:5e:80:c7:a3:72:2a:22:52:7e:3c:38:4b:b8:21:33:51:
23:a2:2f:27:f9:e0:9b:ee:63:64:34:9b:18:e1:27:df:ea:c2:
46:19:66:a5:21:09:74:b4:19:e3:39:20:ad:43:21:2d:58:38:
99:7a:b6:c4:6f:79:83:e8:4b:63:e6:5f:0c:a9:38:7b:27:fa:
84:f6:5b:9a:a1:94:c9:22:50:d7:2c:99:50:c5:07:5c:4e:6c:
d3:b2:b7:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 19:55:41 2025 by rpki-client