Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/4ae175-55d0-484d-8d11-8c9d5823bad9/1/f4XpkDVDl-NsDKkDoMYgx3Ce_c0.mft
File: f4XpkDVDl-NsDKkDoMYgx3Ce_c0.mft (raw, json)
Hash identifier: bpijLGW0C+nlYMt0+zK/7RQ9iGP8tofZEJNb1CuIIPc=
Subject key identifier: 26:80:4D:32:E5:96:F4:6E:A2:5D:C4:C3:C4:DC:82:86:BA:B7:41:B1
Authority key identifier: 7F:85:E9:90:35:43:97:E3:6C:0C:A9:03:A0:C6:20:C7:70:9E:FD:CD
Certificate issuer: /CN=7f85e990354397e36c0ca903a0c620c7709efdcd
Certificate serial: 0197B70E8BAD05EE0FA8F5A94BA1635DDDC6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/f4XpkDVDl-NsDKkDoMYgx3Ce_c0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/4ae175-55d0-484d-8d11-8c9d5823bad9/1/f4XpkDVDl-NsDKkDoMYgx3Ce_c0.mft
Manifest number: 01E3
Signing time: Sat 28 Jun 2025 15:01:13 +0000
Manifest this update: Sat 28 Jun 2025 15:01:13 +0000
Manifest next update: Sun 29 Jun 2025 15:01:13 +0000
Files and hashes: 1: XIAriGwKiXIV89XyokuVSU6ok94.roa (hash: hF3zC1oiW03gwgTs9lo/n7vUmEiv8dfR/NI1cnnwuzk=)
2: f4XpkDVDl-NsDKkDoMYgx3Ce_c0.crl (hash: fEHVimcYsFrOt/vn+FSMp2bQVHcrZIrNhVAYZ2ZimIc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/4ae175-55d0-484d-8d11-8c9d5823bad9/1/f4XpkDVDl-NsDKkDoMYgx3Ce_c0.crl
rsync://rpki.ripe.net/repository/DEFAULT/5e/4ae175-55d0-484d-8d11-8c9d5823bad9/1/f4XpkDVDl-NsDKkDoMYgx3Ce_c0.mft
rsync://rpki.ripe.net/repository/DEFAULT/f4XpkDVDl-NsDKkDoMYgx3Ce_c0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:0e:8b:ad:05:ee:0f:a8:f5:a9:4b:a1:63:5d:dd:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7f85e990354397e36c0ca903a0c620c7709efdcd
Validity
Not Before: Jun 28 15:01:13 2025 GMT
Not After : Jun 29 15:01:13 2025 GMT
Subject: CN=26804d32e596f46ea25dc4c3c4dc8286bab741b1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:3e:1a:30:9d:ad:94:32:f9:07:46:e7:18:e6:
4f:41:a6:87:c8:10:b9:1d:b6:d5:2d:2c:27:ad:dd:
33:a6:54:b6:e2:81:6f:d8:21:89:ce:9c:04:69:3f:
ba:9c:26:64:c5:84:75:64:0f:6f:13:bc:91:30:a7:
7f:18:44:ac:be:98:05:e5:60:c2:f3:0c:b4:18:49:
03:d4:78:58:f4:51:0d:7b:cd:c2:cd:5a:4f:37:8a:
97:15:c0:57:f0:b3:7d:75:f0:78:b0:28:7d:f2:f9:
43:f9:8d:bb:65:f2:eb:7e:e7:67:8b:bd:ab:9d:07:
d1:b5:82:f5:f4:aa:b8:9e:ea:33:fb:7a:a7:71:8b:
b7:05:2c:3d:6b:99:59:89:95:b0:23:0f:2b:b6:4d:
78:f6:e8:b1:7c:2b:bf:52:e5:cf:12:c8:52:a3:ec:
99:f2:17:60:8a:da:9a:44:b7:ca:c0:4c:65:b7:bc:
df:7d:44:f0:f4:83:13:56:c7:57:6c:a6:7b:2d:27:
74:f4:3b:90:9b:90:34:2e:5e:13:13:bb:48:ff:85:
17:7d:2e:92:85:92:b8:16:9c:f0:2f:67:93:c9:2b:
60:a7:32:77:76:80:07:72:65:74:cb:fb:50:e6:d1:
e9:c4:be:b7:70:fb:a5:69:26:8f:8f:a5:ce:42:f4:
af:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:80:4D:32:E5:96:F4:6E:A2:5D:C4:C3:C4:DC:82:86:BA:B7:41:B1
X509v3 Authority Key Identifier:
keyid:7F:85:E9:90:35:43:97:E3:6C:0C:A9:03:A0:C6:20:C7:70:9E:FD:CD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4XpkDVDl-NsDKkDoMYgx3Ce_c0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/4ae175-55d0-484d-8d11-8c9d5823bad9/1/f4XpkDVDl-NsDKkDoMYgx3Ce_c0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/4ae175-55d0-484d-8d11-8c9d5823bad9/1/f4XpkDVDl-NsDKkDoMYgx3Ce_c0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:f2:7d:78:eb:06:1e:82:28:48:a0:b9:ea:47:08:d9:d1:f2:
5b:80:30:43:b5:a5:96:ad:8b:6d:77:0b:a8:64:08:6d:68:18:
eb:81:61:17:00:fd:51:af:6f:d9:1c:63:e3:f7:a1:83:83:55:
be:d7:b5:d5:23:c3:3e:9e:28:18:b8:ac:21:d0:4e:b2:73:9b:
f0:ff:c2:fe:14:6b:96:71:88:8f:b2:d8:96:41:cd:55:d0:4e:
d1:55:c9:c0:34:c4:36:48:5a:34:36:02:67:c5:06:42:71:37:
cd:11:66:b2:f3:e9:ca:e7:d2:6e:19:22:10:ad:d6:d0:13:7f:
26:55:05:f6:c2:15:b3:3c:f6:97:f8:18:65:e1:8d:e6:a6:0d:
d0:2c:b8:a8:8d:a4:5a:d2:89:0c:1b:00:56:bc:93:75:3e:3f:
b8:8d:f4:18:9b:0b:e5:bf:63:24:bf:cd:43:8a:61:6b:c8:49:
50:fb:a3:aa:e1:cd:86:fb:65:2d:36:5b:83:0a:e2:9c:98:d4:
13:b1:83:85:53:c3:6b:2f:52:95:2e:e6:8f:9f:c9:2a:b5:e9:
cd:fd:a7:57:03:8f:10:16:e6:6f:f0:8f:78:04:dd:fb:be:0d:
13:84:d3:35:1b:89:94:61:38:29:2d:9a:de:4f:72:d8:c9:9a:
92:59:cf:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 22:32:47 2025 by rpki-client