Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/a14020-1bfb-4133-afce-d5e45f2ca879/1/4I4Xp4G2QRmjpjVwACVPW3lbDag.mft
File: 4I4Xp4G2QRmjpjVwACVPW3lbDag.mft (raw, json)
Hash identifier: Ilq0V8M+T5rSIVAXpKxhI6wcY6ku1DoLqTk39fQjobA=
Subject key identifier: 45:27:2D:E9:3B:B1:FB:4C:10:D5:A2:66:B4:E0:EB:F7:75:9E:4D:26
Authority key identifier: E0:8E:17:A7:81:B6:41:19:A3:A6:35:70:00:25:4F:5B:79:5B:0D:A8
Certificate issuer: /CN=e08e17a781b64119a3a6357000254f5b795b0da8
Certificate serial: 0197B77C5AA9E80716959699953B2A53A14A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4I4Xp4G2QRmjpjVwACVPW3lbDag.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/a14020-1bfb-4133-afce-d5e45f2ca879/1/4I4Xp4G2QRmjpjVwACVPW3lbDag.mft
Manifest number: 15B4
Signing time: Sat 28 Jun 2025 17:01:09 +0000
Manifest this update: Sat 28 Jun 2025 17:01:09 +0000
Manifest next update: Sun 29 Jun 2025 17:01:09 +0000
Files and hashes: 1: 4I4Xp4G2QRmjpjVwACVPW3lbDag.crl (hash: XsmhGrlgwMCNWW7u7mXSQaNb2AnXP6eqxNLBTTmb6bo=)
2: pJOGzrT_mgxPYsaglIaSM0kIw4Y.roa (hash: Ut0Tk0l/Yu9pyhP6CIl9TJN11JVJBhwd7Wz1zOCHBnA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/a14020-1bfb-4133-afce-d5e45f2ca879/1/4I4Xp4G2QRmjpjVwACVPW3lbDag.crl
rsync://rpki.ripe.net/repository/DEFAULT/55/a14020-1bfb-4133-afce-d5e45f2ca879/1/4I4Xp4G2QRmjpjVwACVPW3lbDag.mft
rsync://rpki.ripe.net/repository/DEFAULT/4I4Xp4G2QRmjpjVwACVPW3lbDag.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:7c:5a:a9:e8:07:16:95:96:99:95:3b:2a:53:a1:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e08e17a781b64119a3a6357000254f5b795b0da8
Validity
Not Before: Jun 28 17:01:09 2025 GMT
Not After : Jun 29 17:01:09 2025 GMT
Subject: CN=45272de93bb1fb4c10d5a266b4e0ebf7759e4d26
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:dc:8c:87:33:3c:9d:48:e5:8c:61:0d:4a:e2:
9f:9d:72:d6:bc:0d:48:c0:84:db:9b:d8:0e:23:dd:
28:b6:ee:ec:5d:56:3e:d7:e1:65:97:15:b4:0e:93:
4c:b0:bb:20:78:36:67:ac:97:80:94:8d:f5:08:77:
f2:f8:fa:72:3e:c2:91:e4:57:b4:83:9e:ba:3f:c3:
7f:38:d9:06:92:79:26:e1:62:86:c5:22:ef:2a:d4:
8a:87:37:cc:65:99:f7:07:c6:b1:7a:72:f1:e1:cf:
61:c7:71:90:64:1e:68:7d:fe:eb:84:80:9c:a9:6a:
a0:17:e7:d0:4b:9c:b0:7c:e8:d7:b4:52:b3:0e:01:
42:3a:ca:cd:68:87:42:8f:83:67:3c:68:02:32:c0:
cf:4a:88:d1:44:32:d7:f1:9c:a8:5a:45:17:36:e4:
47:13:fb:6e:c2:ed:36:02:ca:dc:57:84:11:97:da:
10:b0:10:88:9a:5d:b6:db:41:f6:7a:08:91:e3:14:
56:5f:f3:1c:49:b1:ea:38:2a:54:19:b4:99:6f:e2:
f6:e7:fe:f9:fe:4b:68:22:36:e9:b2:dd:f9:d2:ea:
df:bd:d8:4a:dd:e2:5c:20:72:ff:8a:e3:ef:13:fd:
8b:97:fe:05:fb:64:e3:90:0a:0d:f1:5c:32:57:f7:
7b:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:27:2D:E9:3B:B1:FB:4C:10:D5:A2:66:B4:E0:EB:F7:75:9E:4D:26
X509v3 Authority Key Identifier:
keyid:E0:8E:17:A7:81:B6:41:19:A3:A6:35:70:00:25:4F:5B:79:5B:0D:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4I4Xp4G2QRmjpjVwACVPW3lbDag.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/a14020-1bfb-4133-afce-d5e45f2ca879/1/4I4Xp4G2QRmjpjVwACVPW3lbDag.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/a14020-1bfb-4133-afce-d5e45f2ca879/1/4I4Xp4G2QRmjpjVwACVPW3lbDag.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:cb:61:ad:91:f3:12:4b:97:21:6f:3c:ab:24:16:68:e3:54:
f1:d7:d8:48:91:67:d6:6b:37:1b:3c:3b:13:56:8a:1e:29:18:
30:93:6b:75:11:09:5c:b7:0a:97:b7:44:aa:15:c4:26:5e:95:
ea:2b:18:2d:be:53:90:c0:35:60:33:7e:fd:7f:bd:ee:23:0b:
c1:2b:7d:b2:a4:44:9e:44:57:c6:18:59:57:a1:e7:54:2b:50:
49:db:23:a6:83:c5:29:65:4c:4d:c7:bd:78:2c:39:cd:f8:86:
b1:03:a8:e1:f4:14:ca:9f:ff:59:5e:4e:98:0c:9c:9f:ae:fc:
42:5d:2c:f5:75:a3:d8:f5:b8:61:97:ca:3b:24:61:f2:56:b5:
18:44:de:d8:dc:40:ae:cc:32:71:51:84:bd:47:42:65:02:77:
81:c5:9e:49:1d:9d:2e:e6:de:ad:92:7d:1a:41:ef:da:99:e1:
db:5b:a1:ac:5b:91:e2:35:1e:fa:9c:cc:f1:7e:47:5d:37:44:
f2:5b:2b:91:0a:34:56:59:db:5a:d4:32:8f:2d:cc:5b:5a:c5:
07:b2:e0:83:34:aa:22:04:f1:58:05:d6:ef:bf:1d:a0:05:a0:
21:89:9c:f5:28:94:d3:21:1e:bb:65:c9:2b:53:13:51:ba:17:
8e:6b:7b:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 19:47:31 2025 by rpki-client