Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/587460-eab7-40d9-a512-3e660d0252db/1/4w-IlPMIFyrOkvvmBS7sI4U-ra0.mft
File: 4w-IlPMIFyrOkvvmBS7sI4U-ra0.mft (raw, json)
Hash identifier: O9g/QQ/QsnwabxVI+1ra6RVY19w4/84Cr7AxMQqbARc=
Subject key identifier: 26:D3:43:74:B8:88:66:A5:5A:6C:FB:30:33:56:07:B5:03:95:EC:78
Authority key identifier: E3:0F:88:94:F3:08:17:2A:CE:92:FB:E6:05:2E:EC:23:85:3E:AD:AD
Certificate issuer: /CN=e30f8894f308172ace92fbe6052eec23853eadad
Certificate serial: 0197B7453BF96ACE8B7BB262BD0901437EAA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4w-IlPMIFyrOkvvmBS7sI4U-ra0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/587460-eab7-40d9-a512-3e660d0252db/1/4w-IlPMIFyrOkvvmBS7sI4U-ra0.mft
Manifest number: 06B1
Signing time: Sat 28 Jun 2025 16:00:56 +0000
Manifest this update: Sat 28 Jun 2025 16:00:56 +0000
Manifest next update: Sun 29 Jun 2025 16:00:56 +0000
Files and hashes: 1: 4w-IlPMIFyrOkvvmBS7sI4U-ra0.crl (hash: m4UUI9hJZbEY7oBSbQvO/dxTRkqDK81YkaH+Mf9kkcc=)
2: c0fBmj5scO5bGyjJUPNEWoiJiz8.roa (hash: ysAxrF+4k0JvJ+yBQRYBZ/441fP/ZB0AQyNUuEBiB+Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/75/587460-eab7-40d9-a512-3e660d0252db/1/4w-IlPMIFyrOkvvmBS7sI4U-ra0.crl
rsync://rpki.ripe.net/repository/DEFAULT/75/587460-eab7-40d9-a512-3e660d0252db/1/4w-IlPMIFyrOkvvmBS7sI4U-ra0.mft
rsync://rpki.ripe.net/repository/DEFAULT/4w-IlPMIFyrOkvvmBS7sI4U-ra0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:45:3b:f9:6a:ce:8b:7b:b2:62:bd:09:01:43:7e:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e30f8894f308172ace92fbe6052eec23853eadad
Validity
Not Before: Jun 28 16:00:56 2025 GMT
Not After : Jun 29 16:00:56 2025 GMT
Subject: CN=26d34374b88866a55a6cfb30335607b50395ec78
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:b9:75:0d:c9:8f:c3:81:00:0a:92:21:4f:86:
9b:ae:af:15:f6:65:66:5e:fb:95:06:15:06:90:70:
12:7b:7c:ba:c1:e4:c3:04:58:b2:56:78:3b:0f:8b:
6c:7f:47:79:ef:69:a9:67:3e:07:3d:b1:79:3b:33:
5d:bd:8d:f5:17:8f:49:60:ac:2a:85:b1:f8:c6:48:
80:9b:ce:6b:3d:5a:3b:80:eb:07:7e:3e:1f:0a:75:
e0:9d:7a:22:d8:4e:a9:63:3a:ec:d3:d2:a0:8f:e0:
ed:60:22:67:42:94:b3:70:03:da:d1:90:87:30:3c:
b7:9c:32:f4:81:a3:fa:f1:55:d5:a2:82:1b:01:33:
f8:c3:44:b8:5f:37:c2:2c:aa:6e:c6:cd:8e:d8:0b:
95:9e:fa:fa:60:00:85:44:81:0b:20:0f:f3:69:86:
cd:0b:e8:af:18:b0:e1:47:3e:5b:60:de:d2:ec:f3:
e7:c3:fa:68:91:de:46:ca:4a:18:b4:21:5e:0c:9f:
cb:88:65:62:4c:64:34:9b:35:f6:90:a7:06:e3:61:
0e:45:10:1c:00:3c:50:a2:a8:70:ad:77:78:14:40:
4d:c4:0d:8a:63:e5:98:bb:83:a2:e2:84:e2:ae:a7:
8b:eb:2b:45:d5:a4:f1:c6:0a:8c:6c:14:ac:cf:80:
35:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:D3:43:74:B8:88:66:A5:5A:6C:FB:30:33:56:07:B5:03:95:EC:78
X509v3 Authority Key Identifier:
keyid:E3:0F:88:94:F3:08:17:2A:CE:92:FB:E6:05:2E:EC:23:85:3E:AD:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4w-IlPMIFyrOkvvmBS7sI4U-ra0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/587460-eab7-40d9-a512-3e660d0252db/1/4w-IlPMIFyrOkvvmBS7sI4U-ra0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/75/587460-eab7-40d9-a512-3e660d0252db/1/4w-IlPMIFyrOkvvmBS7sI4U-ra0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:51:b3:29:03:64:e5:05:08:10:65:aa:bd:6f:2c:fe:1c:5b:
55:b5:ef:bd:40:06:a1:be:2f:1c:7c:62:41:d0:b8:b2:d6:6f:
59:69:5f:82:2b:df:2d:89:ae:91:85:5d:c4:6c:0d:e1:d1:56:
4f:9a:d6:8d:80:dd:04:2d:76:a7:87:7b:01:bb:b6:ec:d1:40:
ec:52:e0:29:17:56:66:0d:c2:ea:38:b5:d0:e1:bf:bb:08:37:
4d:f7:89:50:e3:44:78:9a:43:b2:d5:34:b6:54:3c:31:6b:5b:
ea:98:82:2f:cd:e2:b9:92:c0:05:a9:d8:4e:8e:c9:a7:59:de:
13:4f:3c:40:44:da:92:f0:22:e9:00:54:33:ca:5b:fc:f2:08:
da:52:62:10:eb:1f:b1:4c:ea:12:3c:b9:36:f9:55:37:97:4f:
d5:ed:e7:f5:49:b4:3c:80:57:f0:6a:21:a9:4c:5e:9f:8a:eb:
d3:50:23:e1:f4:76:5e:4d:18:ab:76:07:de:53:9f:79:c8:30:
e0:61:f7:5d:34:42:5d:3e:03:47:c1:07:ac:5f:2b:34:07:bb:
2e:82:4b:7c:ca:87:a3:ca:92:37:1c:18:e7:da:7d:65:b9:47:
ac:78:a5:1e:65:49:1a:d9:8b:01:22:70:c5:c6:45:9b:18:5f:
ff:94:13:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 20:16:15 2025 by rpki-client