Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/1a3f91-15bc-4eb8-97dd-58f1cbf3cac3/1/BdTUnaPhSFWnuINgP_FIwbsh9pA.mft
File: BdTUnaPhSFWnuINgP_FIwbsh9pA.mft (raw, json)
Hash identifier: iP/iwc1bALEBF/qExhYRav3JwBnZx7f3/nIgDT0kFRY=
Subject key identifier: E2:0B:E6:94:B1:A2:32:A3:9E:1D:3C:D0:53:F7:A1:A3:16:A1:C1:E2
Authority key identifier: 05:D4:D4:9D:A3:E1:48:55:A7:B8:83:60:3F:F1:48:C1:BB:21:F6:90
Certificate issuer: /CN=05d4d49da3e14855a7b883603ff148c1bb21f690
Certificate serial: 0197CDCDE3CB79CD28228FEBA3F14EF8739C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BdTUnaPhSFWnuINgP_FIwbsh9pA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/1a3f91-15bc-4eb8-97dd-58f1cbf3cac3/1/BdTUnaPhSFWnuINgP_FIwbsh9pA.mft
Manifest number: A4
Signing time: Thu 03 Jul 2025 01:01:51 +0000
Manifest this update: Thu 03 Jul 2025 01:01:51 +0000
Manifest next update: Fri 04 Jul 2025 01:01:51 +0000
Files and hashes: 1: BdTUnaPhSFWnuINgP_FIwbsh9pA.crl (hash: HUkinB1UVeTesGdEPECsiaCQMu07EVV0X5/st6tMsyY=)
2: ET1qcB4V98A_IKXLYXraZJzJShg.roa (hash: tEszrUqZF8KTNTKLbhCoEtjCpoq/ERwnRwZKBj0QR6s=)
3: ij-O7AdiYdBUQgOhr854Jg9r6xA.roa (hash: 8QQHxWCaPsLceWMr2Zl437NuUFHDph6KXoLneDzaOuU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/1a3f91-15bc-4eb8-97dd-58f1cbf3cac3/1/BdTUnaPhSFWnuINgP_FIwbsh9pA.crl
rsync://rpki.ripe.net/repository/DEFAULT/54/1a3f91-15bc-4eb8-97dd-58f1cbf3cac3/1/BdTUnaPhSFWnuINgP_FIwbsh9pA.mft
rsync://rpki.ripe.net/repository/DEFAULT/BdTUnaPhSFWnuINgP_FIwbsh9pA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 04 Jul 2025 01:01:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:cd:cd:e3:cb:79:cd:28:22:8f:eb:a3:f1:4e:f8:73:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05d4d49da3e14855a7b883603ff148c1bb21f690
Validity
Not Before: Jul 3 01:01:51 2025 GMT
Not After : Jul 4 01:01:51 2025 GMT
Subject: CN=e20be694b1a232a39e1d3cd053f7a1a316a1c1e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:ce:c7:11:b8:3e:ad:5d:04:25:ac:71:f5:d0:
a8:2a:dc:d3:42:15:25:69:d8:7a:61:86:ea:e2:45:
3f:af:0e:9d:fc:b8:57:85:df:b6:7c:cd:80:14:eb:
e0:f0:d8:7c:43:80:a6:a0:1d:c1:9f:31:1b:45:69:
ab:f7:71:c2:ba:bd:b0:4b:87:fe:02:30:f9:0a:d1:
af:41:15:6e:20:56:71:25:ea:d6:1a:fc:57:c7:37:
6e:1e:38:e1:16:5c:33:f4:87:40:bd:9d:9c:81:1d:
d0:dd:00:c2:0c:28:d3:71:ab:6c:09:5a:2a:f4:6a:
64:d0:01:ee:0b:77:09:9f:f2:0c:94:6d:1d:7e:82:
c9:25:28:92:03:b3:48:c3:30:ae:3a:3b:cf:4a:e8:
9c:a7:48:12:36:73:81:98:bb:ea:db:6f:81:3b:c7:
8e:61:10:37:09:71:a9:ee:7a:93:a2:25:a2:a4:9c:
21:8e:5f:f7:db:6e:38:63:66:80:0b:28:a6:af:60:
48:4c:f2:fe:9c:10:5a:65:e6:14:d6:8b:a3:91:90:
b2:12:62:b7:7b:e7:fd:f6:19:b0:fc:15:ab:a4:2e:
8e:1a:d3:6a:d5:5f:6d:81:0f:cb:29:b6:c7:bd:1f:
5b:39:64:88:b9:7a:6d:0d:60:81:10:01:36:b7:c8:
68:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:0B:E6:94:B1:A2:32:A3:9E:1D:3C:D0:53:F7:A1:A3:16:A1:C1:E2
X509v3 Authority Key Identifier:
keyid:05:D4:D4:9D:A3:E1:48:55:A7:B8:83:60:3F:F1:48:C1:BB:21:F6:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BdTUnaPhSFWnuINgP_FIwbsh9pA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/1a3f91-15bc-4eb8-97dd-58f1cbf3cac3/1/BdTUnaPhSFWnuINgP_FIwbsh9pA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/1a3f91-15bc-4eb8-97dd-58f1cbf3cac3/1/BdTUnaPhSFWnuINgP_FIwbsh9pA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:15:2b:e9:b6:f4:af:eb:1a:5f:bf:7f:f3:b0:24:b1:83:41:
1c:a4:71:34:ce:7e:9a:ad:fc:12:fa:bc:8a:1a:90:8b:82:f8:
de:75:7d:be:b6:c0:ae:55:af:d2:0a:90:f4:3e:f9:29:44:65:
45:13:f3:e9:51:93:c7:e6:79:30:5c:eb:3c:ed:09:7d:62:23:
79:6b:b2:2f:55:6c:06:6f:b8:2c:c9:13:82:b7:36:e2:5e:37:
43:0b:07:6c:47:6d:f0:57:52:72:e7:d0:32:65:57:98:72:97:
46:30:ee:ac:3f:f1:46:84:72:31:2b:62:03:e4:b1:cb:8b:3c:
e4:7a:ea:d5:56:38:d1:6e:2c:f2:2f:f7:5e:3e:2e:c4:8e:03:
ed:e7:ec:ba:36:8e:91:69:d3:cf:0d:e3:8c:d3:de:ca:f8:e9:
e3:1f:f8:bc:f2:2c:bb:78:49:76:e7:ac:5a:ab:a8:de:a9:25:
2c:f0:c5:63:81:57:5a:b5:f4:2d:3c:c3:7f:d2:4a:b9:05:86:
9b:d4:da:ec:76:0e:68:30:03:3b:2d:4b:04:7f:ad:5c:a7:97:
1f:74:7b:18:35:f3:74:e0:a4:6c:83:fe:83:9f:c0:08:7a:c0:
c5:00:56:ba:08:2e:fb:3e:a5:e5:f6:39:d6:64:4a:a9:82:e8:
82:27:90:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 3 10:23:04 2025 by rpki-client