Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/f8a0a5-b185-49a5-85ad-133eff78442b/1/_4C3cQsTmEQnXJ3pyOdk62QuGMM.mft
File: _4C3cQsTmEQnXJ3pyOdk62QuGMM.mft (raw, json)
Hash identifier: PpTiJcFE2QykUNnZKbIEnBAww+AnSq2Q8yl0WWfIvLA=
Subject key identifier: 9F:9C:B3:73:42:23:BB:96:21:6C:3B:C3:6D:A1:1F:C5:6B:F6:3A:27
Authority key identifier: FF:80:B7:71:0B:13:98:44:27:5C:9D:E9:C8:E7:64:EB:64:2E:18:C3
Certificate issuer: /CN=ff80b7710b139844275c9de9c8e764eb642e18c3
Certificate serial: 0197C1240377CADFE0E147A4CB6220AB80DF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_4C3cQsTmEQnXJ3pyOdk62QuGMM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/f8a0a5-b185-49a5-85ad-133eff78442b/1/_4C3cQsTmEQnXJ3pyOdk62QuGMM.mft
Manifest number: 11A1
Signing time: Mon 30 Jun 2025 14:00:52 +0000
Manifest this update: Mon 30 Jun 2025 14:00:52 +0000
Manifest next update: Tue 01 Jul 2025 14:00:52 +0000
Files and hashes: 1: Dx1gAqycGcxk0c3DOzDhmsNycjk.roa (hash: DxcHYS8M2M1yYvT8l/4w2YI9cemThALPivyuAHPlg0M=)
2: _4C3cQsTmEQnXJ3pyOdk62QuGMM.crl (hash: l81NJl2uGerngkIpFAcxv9p1WlQfgCaCB3DxsJVXk/s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/f8a0a5-b185-49a5-85ad-133eff78442b/1/_4C3cQsTmEQnXJ3pyOdk62QuGMM.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/f8a0a5-b185-49a5-85ad-133eff78442b/1/_4C3cQsTmEQnXJ3pyOdk62QuGMM.mft
rsync://rpki.ripe.net/repository/DEFAULT/_4C3cQsTmEQnXJ3pyOdk62QuGMM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 01 Jul 2025 14:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:c1:24:03:77:ca:df:e0:e1:47:a4:cb:62:20:ab:80:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ff80b7710b139844275c9de9c8e764eb642e18c3
Validity
Not Before: Jun 30 14:00:52 2025 GMT
Not After : Jul 1 14:00:52 2025 GMT
Subject: CN=9f9cb3734223bb96216c3bc36da11fc56bf63a27
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:12:da:f2:70:ac:4e:23:92:fe:f6:f3:7e:f9:
31:3a:03:a7:c1:9d:bd:00:24:0e:4d:f2:d9:56:fb:
94:4a:df:20:7d:c8:e9:4c:e2:8b:a8:fd:5e:a9:1f:
a6:bb:17:71:51:77:f8:a0:1e:97:5d:66:47:e2:8f:
31:86:ad:f1:2f:8d:44:96:38:2f:c0:e8:31:a0:21:
d4:67:27:e1:93:95:61:5a:7a:f7:11:e1:c0:11:4b:
7e:c7:82:75:cf:25:15:ef:5f:f9:20:c6:9f:7c:c9:
84:6d:9b:e5:a3:c3:56:52:e2:c0:b4:3a:f5:e9:53:
ae:40:05:1a:d0:73:bb:99:c7:54:36:56:57:89:21:
08:1d:be:af:11:d8:1e:5a:0f:63:39:d9:5f:6d:ac:
64:2b:9a:4f:95:b7:35:58:2d:74:cc:33:4e:fd:0b:
b9:47:a1:3d:d0:cf:0e:be:2f:cf:3c:e1:37:34:31:
e1:37:ba:df:bc:e2:2b:d7:ce:fd:38:10:6e:3b:57:
5a:61:4a:23:66:a2:9d:e4:fa:78:74:33:3e:c2:78:
65:3a:92:ad:35:c4:81:f4:6a:37:c0:a2:07:71:7c:
b1:dd:1e:ac:98:26:17:72:44:77:3b:cb:ba:1a:d7:
30:41:7b:59:c8:21:7f:c0:a0:1d:e5:0b:a0:55:db:
ca:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:9C:B3:73:42:23:BB:96:21:6C:3B:C3:6D:A1:1F:C5:6B:F6:3A:27
X509v3 Authority Key Identifier:
keyid:FF:80:B7:71:0B:13:98:44:27:5C:9D:E9:C8:E7:64:EB:64:2E:18:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_4C3cQsTmEQnXJ3pyOdk62QuGMM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/f8a0a5-b185-49a5-85ad-133eff78442b/1/_4C3cQsTmEQnXJ3pyOdk62QuGMM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/f8a0a5-b185-49a5-85ad-133eff78442b/1/_4C3cQsTmEQnXJ3pyOdk62QuGMM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:7b:ac:a2:cd:fe:21:33:c7:80:54:a2:c0:46:17:b7:6c:d9:
8f:20:c8:67:a5:b3:b2:ea:ee:71:2c:53:01:70:a3:cb:b0:ec:
5f:b2:ca:4f:ee:41:a5:5d:ae:cc:08:b9:28:96:2f:4a:27:7b:
16:49:03:d7:1d:09:d3:66:f1:6f:21:90:83:5f:a3:e4:69:64:
42:cc:09:08:0b:37:40:51:71:dd:0e:db:12:9d:14:74:e1:79:
89:93:a9:93:c0:fc:31:a1:94:f6:27:ba:f7:e9:a1:ce:18:5e:
22:87:21:6b:64:e3:f2:0f:71:13:ea:a6:a7:52:62:6d:5b:4d:
cd:3c:79:42:fc:34:12:75:93:5f:68:0a:f7:fe:60:30:d3:1b:
05:5e:05:88:f0:f3:ee:e5:7c:f7:3d:19:63:ec:a0:86:85:79:
7e:b8:36:b5:84:23:44:dd:d6:0c:ef:65:49:1b:fb:2a:cf:92:
d8:5a:8b:e9:05:1b:29:a1:2a:21:74:9d:49:3c:fc:3d:87:66:
a6:db:f0:57:f9:2d:d9:a5:3d:61:b8:9f:22:e1:98:c4:75:4e:
ed:26:e6:d3:0b:0e:a4:43:d6:b4:38:fc:22:c9:ff:c8:17:a4:
78:10:4c:24:2c:b0:7e:29:d4:02:6f:fe:a2:bc:60:15:6e:ac:
d9:92:f8:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 30 22:45:48 2025 by rpki-client