Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/869b30-fcd6-48df-8d25-bef3ba21c715/1/4MijkN3l4VGaS9PadUqT6YhJLWc.mft
File: 4MijkN3l4VGaS9PadUqT6YhJLWc.mft (raw, json)
Hash identifier: YtmlWYdYYogXD3vPTa+L/X/UFjRfN4QvB3fmiMvIW+k=
Subject key identifier: BB:04:C2:05:75:69:B9:BD:72:CB:97:10:80:66:B8:BB:DD:01:3E:55
Authority key identifier: E0:C8:A3:90:DD:E5:E1:51:9A:4B:D3:DA:75:4A:93:E9:88:49:2D:67
Certificate issuer: /CN=e0c8a390dde5e1519a4bd3da754a93e988492d67
Certificate serial: 0197B88EB44122B9F06D484110AC63318FEE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4MijkN3l4VGaS9PadUqT6YhJLWc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/71/869b30-fcd6-48df-8d25-bef3ba21c715/1/4MijkN3l4VGaS9PadUqT6YhJLWc.mft
Manifest number: 15C2
Signing time: Sat 28 Jun 2025 22:00:49 +0000
Manifest this update: Sat 28 Jun 2025 22:00:49 +0000
Manifest next update: Sun 29 Jun 2025 22:00:49 +0000
Files and hashes: 1: 4MijkN3l4VGaS9PadUqT6YhJLWc.crl (hash: tajaQvqbX/LdIIlbXfxqF6g2Ltcg9a3B/LKnIEZsm1U=)
2: YqwVujDHhfLEawoR2PJTNXDGOkQ.roa (hash: HReVdGArp33wnWKEmG0bJpK865E8KNNuSsxXzjPZYbc=)
3: vkyQ9sRT6gVwv-_r5Hxs_vmkNXI.roa (hash: GjybPH2LVIWOFxXMsKltGKhDG48Wj0AmaSelmA4NfrM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/71/869b30-fcd6-48df-8d25-bef3ba21c715/1/4MijkN3l4VGaS9PadUqT6YhJLWc.crl
rsync://rpki.ripe.net/repository/DEFAULT/71/869b30-fcd6-48df-8d25-bef3ba21c715/1/4MijkN3l4VGaS9PadUqT6YhJLWc.mft
rsync://rpki.ripe.net/repository/DEFAULT/4MijkN3l4VGaS9PadUqT6YhJLWc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 19:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b8:8e:b4:41:22:b9:f0:6d:48:41:10:ac:63:31:8f:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e0c8a390dde5e1519a4bd3da754a93e988492d67
Validity
Not Before: Jun 28 22:00:49 2025 GMT
Not After : Jun 29 22:00:49 2025 GMT
Subject: CN=bb04c2057569b9bd72cb97108066b8bbdd013e55
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:83:e1:28:2d:66:e5:67:ee:45:39:b1:40:78:
8e:1a:0b:83:9f:c2:bf:34:ff:47:ca:83:82:c2:76:
a3:ff:c1:83:e0:73:20:ac:5f:b4:82:aa:6a:35:78:
94:bf:1d:8e:9f:38:9d:61:fe:62:ce:83:03:97:0d:
fd:5d:92:e8:ce:c4:44:ce:27:d7:3c:55:12:fe:11:
87:f0:d7:a1:90:db:55:da:f4:92:c2:41:b9:b9:c2:
1b:23:4d:36:73:4d:59:02:a1:0d:d8:33:09:be:99:
29:66:ee:90:76:7e:60:55:93:d2:e4:7a:60:74:4a:
78:05:88:33:58:d2:4a:64:29:5b:50:11:79:52:a8:
ea:c3:b8:18:c3:6b:41:90:cf:9f:1b:9b:4f:3e:6b:
d1:30:10:2e:da:c0:f3:61:e1:bc:a2:22:f1:1d:e8:
e5:b5:71:2a:15:b1:8f:a5:c7:9d:3c:af:54:5d:1f:
fd:53:88:ae:d6:01:3a:65:57:9e:4e:e4:46:6b:2c:
18:05:8d:78:1f:dc:cc:c4:fc:06:85:80:9d:f6:d0:
a3:54:51:f3:4a:f7:39:c4:56:a7:ec:80:67:76:41:
3c:22:15:24:a1:1b:a9:44:eb:5f:11:02:74:95:71:
fc:94:61:98:5e:49:63:e0:d7:37:ac:28:94:b2:f4:
0b:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:04:C2:05:75:69:B9:BD:72:CB:97:10:80:66:B8:BB:DD:01:3E:55
X509v3 Authority Key Identifier:
keyid:E0:C8:A3:90:DD:E5:E1:51:9A:4B:D3:DA:75:4A:93:E9:88:49:2D:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4MijkN3l4VGaS9PadUqT6YhJLWc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/869b30-fcd6-48df-8d25-bef3ba21c715/1/4MijkN3l4VGaS9PadUqT6YhJLWc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/71/869b30-fcd6-48df-8d25-bef3ba21c715/1/4MijkN3l4VGaS9PadUqT6YhJLWc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
76:23:31:f4:7f:f1:69:0f:a2:4d:e7:1c:b8:e6:f9:b1:84:ab:
a4:d7:16:2a:18:53:49:a8:d5:60:0f:ea:36:0b:6c:e7:26:8a:
fc:a0:20:4e:f8:ed:26:ea:79:e1:73:e2:81:6b:a0:02:bb:80:
91:0a:86:e5:15:04:04:65:54:c0:28:71:9d:df:29:08:a6:58:
4c:31:2d:66:c4:4d:8f:97:08:1e:bb:ba:69:4d:2c:5e:2d:76:
2c:68:31:0d:19:03:6b:a7:ba:f9:f2:1d:22:8e:5e:4a:fd:0a:
b7:d5:56:00:9a:7a:e9:14:01:40:f4:09:83:b0:8a:c3:af:bd:
e5:c2:bc:c0:27:67:59:c0:a4:e8:4a:26:e2:ef:99:48:50:f9:
1d:d9:ea:80:70:c1:b5:04:7d:0f:39:ba:0a:7f:ee:ec:11:2d:
cb:24:0c:69:d0:a8:fd:76:01:cb:5d:10:d8:a7:cc:f4:ab:70:
54:eb:92:1f:83:43:ed:4e:bf:08:61:f9:6c:25:32:b7:a0:39:
bc:c9:e9:06:d3:d0:46:ce:40:a4:f2:c4:a9:76:9e:f3:8c:25:
05:6a:f3:e5:f3:89:b2:f7:8b:b2:47:17:62:9d:cd:dc:47:22:
ec:98:59:28:05:c5:80:fb:8c:94:47:0e:37:21:90:ff:42:da:
89:fd:0f:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 02:07:22 2025 by rpki-client