Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/9d7cd7-ee63-4886-8fe1-b5ce6b6fd4d1/1/4Zd4WdBx9xUIN7KstDU_8z79gxw.mft
File: 4Zd4WdBx9xUIN7KstDU_8z79gxw.mft (raw, json)
Hash identifier: yqLinbSRJD2ONqguDiB889IBi7W3mOBBGeCDkxfyEl8=
Subject key identifier: 2B:A1:20:6B:77:34:47:82:DE:46:E3:1F:22:FF:D5:0B:77:69:43:1F
Authority key identifier: E1:97:78:59:D0:71:F7:15:08:37:B2:AC:B4:35:3F:F3:3E:FD:83:1C
Certificate issuer: /CN=e1977859d071f7150837b2acb4353ff33efd831c
Certificate serial: 0197B632D39B502703CEF55B15D7C995A8F1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4Zd4WdBx9xUIN7KstDU_8z79gxw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/76/9d7cd7-ee63-4886-8fe1-b5ce6b6fd4d1/1/4Zd4WdBx9xUIN7KstDU_8z79gxw.mft
Manifest number: 1385
Signing time: Sat 28 Jun 2025 11:01:13 +0000
Manifest this update: Sat 28 Jun 2025 11:01:13 +0000
Manifest next update: Sun 29 Jun 2025 11:01:13 +0000
Files and hashes: 1: 4Zd4WdBx9xUIN7KstDU_8z79gxw.crl (hash: 0n0IVqCYYFPC3vc2JnDmgKazy3bpIbvqQmuz26akFFY=)
2: yF44GfEIvZjG1b-fqxz7IcsVaik.roa (hash: Nr6aX1S4xhUfVJHe+PzjETZYUXFy6RKCIH4m44as1jw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/76/9d7cd7-ee63-4886-8fe1-b5ce6b6fd4d1/1/4Zd4WdBx9xUIN7KstDU_8z79gxw.crl
rsync://rpki.ripe.net/repository/DEFAULT/76/9d7cd7-ee63-4886-8fe1-b5ce6b6fd4d1/1/4Zd4WdBx9xUIN7KstDU_8z79gxw.mft
rsync://rpki.ripe.net/repository/DEFAULT/4Zd4WdBx9xUIN7KstDU_8z79gxw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:32:d3:9b:50:27:03:ce:f5:5b:15:d7:c9:95:a8:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e1977859d071f7150837b2acb4353ff33efd831c
Validity
Not Before: Jun 28 11:01:13 2025 GMT
Not After : Jun 29 11:01:13 2025 GMT
Subject: CN=2ba1206b77344782de46e31f22ffd50b7769431f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:7b:49:8c:85:77:e3:72:d4:75:d2:d9:e4:aa:
68:31:f1:1f:8e:c0:6f:57:09:a5:36:11:41:d9:6e:
ed:26:6e:f1:ad:b6:a2:10:f5:d2:fb:ae:1b:e4:28:
a0:21:22:83:29:6e:8a:29:0b:7d:20:06:3c:0d:2c:
b7:68:06:d4:0c:4f:f6:b2:d3:19:9d:04:b4:0d:62:
a1:dc:83:8e:3f:83:79:e1:0a:90:fc:58:73:2c:ee:
3f:9b:e4:54:f0:7f:b2:8a:38:58:ed:b0:3e:72:db:
d9:0b:71:1c:ab:9f:0d:d7:61:f3:d8:17:41:12:02:
82:1c:e9:84:5b:02:91:14:25:03:ce:db:9c:25:dc:
34:af:cd:ea:96:aa:40:41:f8:d4:7f:d0:00:c2:29:
e7:d1:64:e4:d4:b2:b8:1a:df:2d:7d:15:e4:df:08:
a5:07:7a:a1:30:f7:d6:6f:ae:00:7a:c1:34:74:94:
ea:01:95:59:24:74:df:80:11:eb:a7:06:75:90:93:
25:b4:01:bc:da:91:bb:91:a8:4a:fd:82:5f:a1:1e:
b2:8c:8a:c5:3d:6b:3b:e6:a7:c9:2d:b9:3e:82:5b:
4b:0e:c0:0b:c3:e5:ef:42:f9:60:c4:90:41:a3:e6:
9d:d7:bc:13:aa:08:10:56:2b:36:33:25:86:35:ad:
b4:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:A1:20:6B:77:34:47:82:DE:46:E3:1F:22:FF:D5:0B:77:69:43:1F
X509v3 Authority Key Identifier:
keyid:E1:97:78:59:D0:71:F7:15:08:37:B2:AC:B4:35:3F:F3:3E:FD:83:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4Zd4WdBx9xUIN7KstDU_8z79gxw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/9d7cd7-ee63-4886-8fe1-b5ce6b6fd4d1/1/4Zd4WdBx9xUIN7KstDU_8z79gxw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/76/9d7cd7-ee63-4886-8fe1-b5ce6b6fd4d1/1/4Zd4WdBx9xUIN7KstDU_8z79gxw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a4:43:21:91:f7:89:1a:ed:69:3e:3a:dd:a0:4e:3b:01:e0:8c:
3e:17:1a:39:a2:74:a7:38:51:84:4e:11:4e:b1:94:01:b9:7b:
da:90:93:97:2a:36:d1:cb:ca:b5:07:b2:0d:70:5e:23:20:1a:
16:5c:e7:f5:95:68:61:09:55:3d:da:1d:7c:0b:7c:ad:4c:c1:
4f:f6:75:1b:5b:8e:51:47:3a:d8:66:d2:d9:e9:76:c6:ae:6c:
98:79:10:48:aa:5b:23:41:93:1c:51:9c:cc:03:49:77:c3:e8:
e6:5a:cd:07:b4:74:4f:b8:89:21:94:c9:92:0b:42:62:c1:d3:
7d:5d:c4:1b:a2:f2:0c:f3:fc:3b:8a:47:23:3d:d1:45:11:c7:
a2:08:f6:68:fc:be:54:d3:8d:37:f3:00:3b:cc:17:71:45:29:
3b:4d:e5:d3:da:dd:80:27:c4:0f:65:9e:83:4a:1e:9d:be:fa:
27:66:8d:b6:3e:86:58:c6:36:2e:b8:6f:60:40:28:c3:7f:fa:
39:d4:7b:af:ae:7e:77:ee:72:f0:a5:c2:f3:fc:de:79:81:8c:
c6:d2:e0:b3:c2:e5:92:d5:ed:56:b5:35:f8:4a:cc:57:2c:7f:
7a:c0:2a:9c:79:b4:92:98:1e:d5:2c:77:ba:94:9e:8f:2e:f0:
a6:fc:65:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 19:46:14 2025 by rpki-client