Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/73/fc763b-83e6-4bd1-b93a-f8785a58106c/1/C4-x3rCeckJbMJoUFJF9r4k771k.mft
File: C4-x3rCeckJbMJoUFJF9r4k771k.mft (raw, json)
Hash identifier: lR/GQUw7QJj5v1yzH4HtIlRQgla+pXYy2OSfZ/8no7M=
Subject key identifier: 20:E0:88:88:FE:CA:07:63:4A:92:D1:98:B5:0E:26:6B:42:63:6F:F0
Authority key identifier: 0B:8F:B1:DE:B0:9E:72:42:5B:30:9A:14:14:91:7D:AF:89:3B:EF:59
Certificate issuer: /CN=0b8fb1deb09e72425b309a1414917daf893bef59
Certificate serial: 0197DB5351517FA73B512A3BCF0850C11CFF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C4-x3rCeckJbMJoUFJF9r4k771k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/73/fc763b-83e6-4bd1-b93a-f8785a58106c/1/C4-x3rCeckJbMJoUFJF9r4k771k.mft
Manifest number: 15C9
Signing time: Sat 05 Jul 2025 16:02:39 +0000
Manifest this update: Sat 05 Jul 2025 16:02:39 +0000
Manifest next update: Sun 06 Jul 2025 16:02:39 +0000
Files and hashes: 1: C4-x3rCeckJbMJoUFJF9r4k771k.crl (hash: 1OTfXYho1LgC+Kp20Q+D9kL8vcPGaRuV5b+77KEtXuw=)
2: xbK0xWiY34_RomWctzp72CJLeyA.roa (hash: uGlhM5SP1wH5GgbXheJ7ZYAOlhLuCV1Bj19dNLN10ho=)
3: ztCPKk8w1aeaQKuLHJz_e0TSo9Y.roa (hash: eX6lgcMXGHHyxYwjBqAxjQIWBeaf2J3CyUG15tvpJ0o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/73/fc763b-83e6-4bd1-b93a-f8785a58106c/1/C4-x3rCeckJbMJoUFJF9r4k771k.crl
rsync://rpki.ripe.net/repository/DEFAULT/73/fc763b-83e6-4bd1-b93a-f8785a58106c/1/C4-x3rCeckJbMJoUFJF9r4k771k.mft
rsync://rpki.ripe.net/repository/DEFAULT/C4-x3rCeckJbMJoUFJF9r4k771k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Jul 2025 11:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:db:53:51:51:7f:a7:3b:51:2a:3b:cf:08:50:c1:1c:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0b8fb1deb09e72425b309a1414917daf893bef59
Validity
Not Before: Jul 5 16:02:39 2025 GMT
Not After : Jul 6 16:02:39 2025 GMT
Subject: CN=20e08888feca07634a92d198b50e266b42636ff0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:2a:0a:ac:88:79:95:cb:46:f1:6a:4b:b0:4e:
d8:62:d0:56:71:ed:14:d4:d4:ae:d2:85:76:27:4b:
f8:de:e1:00:c4:f8:34:cf:ba:35:6c:64:10:b7:d2:
24:22:8b:56:2e:11:ed:29:b1:6c:32:cf:76:a6:9c:
17:b8:ea:3a:4e:fd:37:22:6c:e8:e1:25:93:84:95:
fb:07:86:3c:0f:9b:ac:20:3d:84:57:a0:fe:41:fd:
5c:65:92:7b:53:55:36:a3:34:2c:e0:19:2b:41:bb:
3e:91:cf:2f:5f:47:88:dc:54:23:84:76:48:38:aa:
1a:80:26:47:e1:13:3f:d4:e8:f7:ab:15:32:5a:75:
f7:4a:14:d3:ac:63:1f:23:fa:74:67:43:fc:35:df:
aa:d0:be:1a:c1:6b:97:19:0f:16:81:89:d8:1c:5b:
ec:48:c2:19:3b:31:a1:f4:84:f7:99:fc:ea:51:cf:
d9:03:ef:a0:37:db:44:a3:43:b8:99:16:75:c9:e0:
5c:47:0c:40:e1:ac:15:b4:7c:3b:8b:c1:2e:41:0f:
e2:86:b4:73:15:4a:b0:ad:4f:9a:2e:3b:96:b3:b2:
a4:06:0f:a0:4b:96:29:0f:b0:a1:b5:c5:6f:fa:05:
f6:97:6b:19:c4:af:09:17:8d:b4:2a:94:21:71:10:
fb:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:E0:88:88:FE:CA:07:63:4A:92:D1:98:B5:0E:26:6B:42:63:6F:F0
X509v3 Authority Key Identifier:
keyid:0B:8F:B1:DE:B0:9E:72:42:5B:30:9A:14:14:91:7D:AF:89:3B:EF:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C4-x3rCeckJbMJoUFJF9r4k771k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/fc763b-83e6-4bd1-b93a-f8785a58106c/1/C4-x3rCeckJbMJoUFJF9r4k771k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/73/fc763b-83e6-4bd1-b93a-f8785a58106c/1/C4-x3rCeckJbMJoUFJF9r4k771k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:1d:c8:74:af:9f:c0:0c:00:e0:87:20:be:77:71:a6:fc:b2:
72:95:8e:b9:c9:1d:71:89:aa:74:32:ea:15:8d:d1:f5:fb:6a:
ea:26:d2:ae:43:f2:18:eb:32:18:d9:b4:87:2b:5d:31:98:03:
6f:7f:08:87:f2:e6:08:61:e4:90:c4:dc:10:e5:a7:d3:43:23:
1e:41:e9:58:1f:a4:23:44:b3:2a:58:ed:80:11:62:fa:b2:b5:
f9:80:61:88:4b:b6:b6:c9:cd:20:2d:42:bc:32:c0:ec:99:d5:
8d:7d:d6:c5:c6:7a:6c:bf:d2:01:71:78:d2:06:b6:1c:69:57:
b8:b2:a2:39:1f:ce:1f:f5:6d:9f:f5:26:4d:1b:a6:ad:98:54:
83:1a:c5:0a:f5:a2:83:69:35:28:a4:3d:2b:7c:4f:58:46:bd:
31:e9:c7:a5:fa:16:af:d0:8b:d8:f6:52:c4:38:e4:26:ff:2a:
94:32:4b:21:4b:77:a0:44:ec:a7:22:53:ff:0a:2a:c0:f8:07:
d6:a2:de:ff:74:c2:88:7e:4c:f2:a7:75:e3:d4:00:72:42:b0:
a2:3c:59:d3:ca:91:96:27:0f:86:96:76:7e:f5:8a:95:39:b3:
d5:28:80:46:5b:6e:2e:88:b8:3b:3a:69:07:67:f2:07:6e:90:
36:bc:bd:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 5 21:10:28 2025 by rpki-client