Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/91402e-ed28-4a21-84e2-e4d64dca67ac/1/4xbAPPr_4TTHvtpIhquLCc9F-8Q.mft
File: 4xbAPPr_4TTHvtpIhquLCc9F-8Q.mft (raw, json)
Hash identifier: lUkF1TJyECaMs9VRIgsWa6Do86HtVUbuViSbW4sOJIs=
Subject key identifier: 1D:57:4C:1E:F5:2C:F7:7B:11:3C:EE:25:DA:EB:D8:9E:5F:51:1F:55
Authority key identifier: E3:16:C0:3C:FA:FF:E1:34:C7:BE:DA:48:86:AB:8B:09:CF:45:FB:C4
Certificate issuer: /CN=e316c03cfaffe134c7beda4886ab8b09cf45fbc4
Certificate serial: 0197B74542882D23D95E8359B06D25679232
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4xbAPPr_4TTHvtpIhquLCc9F-8Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/91402e-ed28-4a21-84e2-e4d64dca67ac/1/4xbAPPr_4TTHvtpIhquLCc9F-8Q.mft
Manifest number: 092B
Signing time: Sat 28 Jun 2025 16:00:58 +0000
Manifest this update: Sat 28 Jun 2025 16:00:58 +0000
Manifest next update: Sun 29 Jun 2025 16:00:58 +0000
Files and hashes: 1: 26-qfn9ODUHJpEH89Qt0MRaUhuA.roa (hash: 2YdYGfBZn6lY/AbZT0o2XAew8LsHFvDqQ6x2hV85Y5I=)
2: 4xbAPPr_4TTHvtpIhquLCc9F-8Q.crl (hash: 0D+qOqOLcO3a2sQMZe9GHm3zU6RypzPef4RFzgdrkLk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/63/91402e-ed28-4a21-84e2-e4d64dca67ac/1/4xbAPPr_4TTHvtpIhquLCc9F-8Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/63/91402e-ed28-4a21-84e2-e4d64dca67ac/1/4xbAPPr_4TTHvtpIhquLCc9F-8Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/4xbAPPr_4TTHvtpIhquLCc9F-8Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:45:42:88:2d:23:d9:5e:83:59:b0:6d:25:67:92:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e316c03cfaffe134c7beda4886ab8b09cf45fbc4
Validity
Not Before: Jun 28 16:00:58 2025 GMT
Not After : Jun 29 16:00:58 2025 GMT
Subject: CN=1d574c1ef52cf77b113cee25daebd89e5f511f55
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:76:2f:09:ec:aa:98:2a:88:ec:46:ec:5d:c8:
db:36:1f:62:55:54:31:7c:aa:eb:4f:a4:7e:e1:b6:
d3:1f:e3:6c:e1:ee:7d:7a:3a:e3:f4:80:e7:9e:ba:
8e:cc:33:2d:01:85:5a:02:b1:c3:be:51:56:bb:85:
ac:ba:a7:f5:8d:0a:8f:c6:80:13:11:04:dd:20:c9:
ce:4a:62:43:22:42:08:e0:69:ba:73:a6:48:cb:f5:
70:2a:ce:df:17:f3:14:56:fb:f5:b0:7c:07:a3:91:
e8:1f:63:cc:35:86:69:b3:61:3e:14:93:60:e3:41:
2a:d7:b2:98:bf:d1:ce:43:65:c4:7f:4e:ed:81:01:
03:7e:79:44:c6:bd:21:17:22:23:79:86:46:d8:e8:
c8:7e:da:ac:79:fc:04:07:4d:d7:f4:7e:df:56:ee:
e0:7c:54:ed:77:df:c6:23:03:e1:a0:8d:70:19:a0:
53:04:d2:10:e6:50:45:24:30:0a:cf:cf:29:c8:19:
e3:43:94:8d:a9:e0:95:15:86:f7:45:9f:9f:3f:be:
9b:b4:49:32:bb:40:7c:98:a8:34:fb:cb:7f:f2:8c:
6a:3b:eb:68:c8:ee:91:00:93:7e:13:83:93:ef:53:
bd:2c:89:c3:ca:4a:0e:f0:ab:cc:f5:f1:4a:87:27:
6a:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:57:4C:1E:F5:2C:F7:7B:11:3C:EE:25:DA:EB:D8:9E:5F:51:1F:55
X509v3 Authority Key Identifier:
keyid:E3:16:C0:3C:FA:FF:E1:34:C7:BE:DA:48:86:AB:8B:09:CF:45:FB:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4xbAPPr_4TTHvtpIhquLCc9F-8Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/91402e-ed28-4a21-84e2-e4d64dca67ac/1/4xbAPPr_4TTHvtpIhquLCc9F-8Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/63/91402e-ed28-4a21-84e2-e4d64dca67ac/1/4xbAPPr_4TTHvtpIhquLCc9F-8Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b9:04:b4:82:3d:07:43:f1:1a:70:0a:2f:a6:69:0c:de:e1:53:
02:68:9a:2f:fb:eb:cc:87:61:61:3e:d5:ed:f7:9d:4b:71:66:
c7:64:c4:0c:63:f0:a9:50:b3:b9:0d:38:64:91:f7:1a:90:d7:
ef:d5:fd:cb:d0:e2:b2:17:e5:e2:b4:7c:be:f0:37:5f:2d:31:
9e:1e:d1:7c:0c:27:d2:9c:93:dd:f3:15:26:45:79:b6:f3:64:
47:44:9d:72:64:3e:50:37:8b:00:4a:67:c7:f9:f3:c4:48:dd:
0f:74:4f:14:ef:11:56:1a:3d:52:4f:bb:db:d8:f9:1c:96:0b:
88:4b:e1:be:15:a3:c5:74:2f:08:16:92:7d:0c:a1:44:b4:8b:
8f:cc:da:a7:34:d4:04:30:94:81:df:ef:19:d9:75:f6:ad:01:
a2:13:fa:ad:7e:e6:3c:9b:b2:68:f0:1d:a1:19:85:bf:23:f4:
86:de:14:c2:80:24:f2:04:89:ca:be:83:3b:54:d4:2a:71:d0:
79:38:ce:4a:1b:04:bf:82:c2:9b:ec:47:64:37:d3:88:4b:1d:
49:72:a4:ed:4f:24:40:bf:3f:4f:ba:d7:19:fb:29:e2:df:5b:
2d:a9:eb:fb:b4:a9:7a:c0:47:f5:71:53:26:a8:b9:60:06:f8:
67:8e:9b:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 20:27:38 2025 by rpki-client