Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/a91afe-9651-4de3-ad88-d8393e185732/1/4rRFsAqGALgzTB06rfHvcZFOaMk.mft
File: 4rRFsAqGALgzTB06rfHvcZFOaMk.mft (raw, json)
Hash identifier: UQ5KXfjTJB5H9U0eWqSwcSvhnYMr1pwoSeoGt2qfGgk=
Subject key identifier: BF:72:D9:A3:45:7C:8B:98:7A:52:CC:AF:5F:17:3A:5A:73:F7:4D:F2
Authority key identifier: E2:B4:45:B0:0A:86:00:B8:33:4C:1D:3A:AD:F1:EF:71:91:4E:68:C9
Certificate issuer: /CN=e2b445b00a8600b8334c1d3aadf1ef71914e68c9
Certificate serial: 0197B6D72BCDEFC49661A2DF5AC6E36B63F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4rRFsAqGALgzTB06rfHvcZFOaMk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/a91afe-9651-4de3-ad88-d8393e185732/1/4rRFsAqGALgzTB06rfHvcZFOaMk.mft
Manifest number: 15B4
Signing time: Sat 28 Jun 2025 14:00:44 +0000
Manifest this update: Sat 28 Jun 2025 14:00:44 +0000
Manifest next update: Sun 29 Jun 2025 14:00:44 +0000
Files and hashes: 1: 4rRFsAqGALgzTB06rfHvcZFOaMk.crl (hash: pbWRR9twekxpK/MXZ2MvqLDFV47Db+Z0kDMwBI+yEf8=)
2: 8LUgcOoiwyxAy7v4r-Iu6BnRjQM.roa (hash: bhDJBeMXd7WyfIdgyXkUTipM9MJXycedE6ysXMdh0sE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/79/a91afe-9651-4de3-ad88-d8393e185732/1/4rRFsAqGALgzTB06rfHvcZFOaMk.crl
rsync://rpki.ripe.net/repository/DEFAULT/79/a91afe-9651-4de3-ad88-d8393e185732/1/4rRFsAqGALgzTB06rfHvcZFOaMk.mft
rsync://rpki.ripe.net/repository/DEFAULT/4rRFsAqGALgzTB06rfHvcZFOaMk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 14:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:d7:2b:cd:ef:c4:96:61:a2:df:5a:c6:e3:6b:63:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e2b445b00a8600b8334c1d3aadf1ef71914e68c9
Validity
Not Before: Jun 28 14:00:44 2025 GMT
Not After : Jun 29 14:00:44 2025 GMT
Subject: CN=bf72d9a3457c8b987a52ccaf5f173a5a73f74df2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:c7:93:99:db:0b:a6:e3:8b:2a:c9:8a:50:90:
7c:ad:2f:fd:88:4e:8f:47:e2:1a:b1:48:24:61:eb:
8c:7d:43:c4:c3:12:de:3f:27:4f:2a:0a:10:88:3d:
e0:ba:65:e4:f0:51:a7:9c:6d:65:d5:39:01:11:72:
77:4d:5e:24:0e:f1:f6:47:c3:19:ab:33:09:46:06:
4c:0e:7e:98:df:5d:cc:76:b8:ec:f4:39:5d:24:64:
bd:03:68:b8:c4:8e:a9:7c:4e:1f:de:ba:f0:9e:50:
70:49:f4:31:09:b7:c8:6a:ca:42:5a:c0:82:69:58:
14:4d:91:5f:e0:d6:77:e8:f5:61:44:9f:a7:d0:a0:
c9:73:06:f1:34:77:a4:a9:e5:ee:6f:6c:05:27:c3:
97:58:19:4e:6c:5f:b9:f3:0d:48:a8:34:db:06:25:
f8:a6:8f:31:89:ac:8a:44:4f:bd:5a:f9:cd:ea:21:
51:bc:62:8b:76:67:2d:40:f5:a3:16:8f:dc:c6:74:
c1:1c:ae:1c:3a:57:8e:63:57:88:fd:d4:9a:41:10:
7b:9f:83:d8:e4:93:c8:7d:54:a9:fe:54:54:62:95:
5e:5c:de:27:5e:96:dd:dd:18:bd:4e:ba:4b:ce:7b:
30:f1:05:33:e1:2d:71:4d:72:42:9e:4b:ef:5a:0e:
dc:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:72:D9:A3:45:7C:8B:98:7A:52:CC:AF:5F:17:3A:5A:73:F7:4D:F2
X509v3 Authority Key Identifier:
keyid:E2:B4:45:B0:0A:86:00:B8:33:4C:1D:3A:AD:F1:EF:71:91:4E:68:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4rRFsAqGALgzTB06rfHvcZFOaMk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/a91afe-9651-4de3-ad88-d8393e185732/1/4rRFsAqGALgzTB06rfHvcZFOaMk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/79/a91afe-9651-4de3-ad88-d8393e185732/1/4rRFsAqGALgzTB06rfHvcZFOaMk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:75:a5:41:1a:cb:23:6c:39:90:c5:b3:23:e7:8e:d8:3e:ca:
1d:81:a3:37:87:a7:ca:e1:de:04:e5:3f:bc:d4:25:02:92:23:
c0:79:2e:e4:39:2d:18:b0:0f:25:50:07:7d:02:f5:f7:05:37:
ef:68:ed:14:90:d0:d4:b9:3c:b5:2d:b7:88:89:c7:2a:f9:5d:
a7:7d:dc:cd:c8:5a:be:8a:77:86:f5:ce:3d:2b:51:b9:4d:a7:
ac:45:36:c1:51:32:89:40:14:e7:be:9c:fa:c3:74:dd:03:ce:
a1:4e:49:e7:cd:a1:10:61:ec:92:4e:66:0b:5e:86:53:cb:a0:
9e:d2:92:e4:fa:80:b7:8a:10:fb:92:de:ed:cd:1f:0e:66:4c:
57:44:fe:1b:26:04:bc:53:92:45:fd:3a:1a:e3:f5:aa:d1:3c:
ca:fb:77:b4:15:d5:f4:2d:44:99:bc:d3:3b:00:c9:70:5b:fa:
d7:9d:de:26:b4:a7:c3:3f:51:5a:28:6f:3d:16:3b:bb:5d:d2:
a4:40:b4:d2:36:8c:31:48:92:f9:e6:4d:c5:58:bd:a7:0a:7b:
71:b0:60:1a:3d:7e:ba:cd:d1:4a:48:50:ae:4e:bb:5a:10:c8:
5f:c9:5a:bc:f4:29:a6:f5:63:9f:a0:13:62:4b:12:64:d1:d5:
e0:c4:b8:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:34:57 2025 by rpki-client