Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/96/c4e7e9-f6be-41a3-a459-195389330edf/1/v4F9yFUt82EP_EVEGz-BRk5Incg.mft
File: v4F9yFUt82EP_EVEGz-BRk5Incg.mft (raw, json)
Hash identifier: oeu7302ZY9/dn4tejihbuasMhwSbZJJGSueuRxGQ47c=
Subject key identifier: 47:06:6C:9B:AC:5E:93:D9:B7:38:8D:69:A8:6C:ED:BC:E2:14:A2:73
Authority key identifier: BF:81:7D:C8:55:2D:F3:61:0F:FC:45:44:1B:3F:81:46:4E:48:9D:C8
Certificate issuer: /CN=bf817dc8552df3610ffc45441b3f81464e489dc8
Certificate serial: 0197B6D7B8844AF5F45FFE770E1A4CC73114
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v4F9yFUt82EP_EVEGz-BRk5Incg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/96/c4e7e9-f6be-41a3-a459-195389330edf/1/v4F9yFUt82EP_EVEGz-BRk5Incg.mft
Manifest number: 0785
Signing time: Sat 28 Jun 2025 14:01:20 +0000
Manifest this update: Sat 28 Jun 2025 14:01:20 +0000
Manifest next update: Sun 29 Jun 2025 14:01:20 +0000
Files and hashes: 1: 36ETTT31Rv9Wj7u6PqyJTy0CjDw.roa (hash: tx94g3vqrXkgyvU4ElzQ7jsADUb8XlCc6Q0poIVPLl8=)
2: v4F9yFUt82EP_EVEGz-BRk5Incg.crl (hash: vD+SMLCm6zK2HjakjysqtFhFHyOX+jNh9UMz+tEosvw=)
3: w6CIFsXhe3gJ8pF9EHg-adXDS5c.roa (hash: G5Kk3492Lln+8yGKEbYcF38b0XZXBFYUAf9aIet6yWo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/96/c4e7e9-f6be-41a3-a459-195389330edf/1/v4F9yFUt82EP_EVEGz-BRk5Incg.crl
rsync://rpki.ripe.net/repository/DEFAULT/96/c4e7e9-f6be-41a3-a459-195389330edf/1/v4F9yFUt82EP_EVEGz-BRk5Incg.mft
rsync://rpki.ripe.net/repository/DEFAULT/v4F9yFUt82EP_EVEGz-BRk5Incg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 14:01:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:d7:b8:84:4a:f5:f4:5f:fe:77:0e:1a:4c:c7:31:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bf817dc8552df3610ffc45441b3f81464e489dc8
Validity
Not Before: Jun 28 14:01:20 2025 GMT
Not After : Jun 29 14:01:20 2025 GMT
Subject: CN=47066c9bac5e93d9b7388d69a86cedbce214a273
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:e6:27:fc:a9:e7:2b:87:4b:d2:a9:33:b2:60:
81:ec:16:d0:7a:69:4f:88:07:95:77:32:8c:38:ae:
d8:e5:25:0d:0e:3d:d8:18:cd:de:7d:ed:89:f1:61:
86:84:53:96:14:46:e7:98:49:22:d5:ad:5b:40:a2:
b5:25:41:b4:6a:e8:45:b5:8e:d3:15:78:7e:0d:33:
13:26:4a:4e:7a:ea:22:b9:7d:12:da:93:6e:b3:b8:
32:0f:9d:70:60:6d:cd:97:43:03:41:94:e4:7b:38:
79:e8:da:60:51:3a:82:be:eb:ea:e8:e0:96:7a:4d:
9e:bb:1a:38:21:4c:6b:92:99:a9:6c:bb:74:27:ab:
61:65:e9:9a:71:57:7a:df:a2:cc:e1:d5:81:d2:e9:
2e:dc:3f:76:f7:4a:8a:ba:14:09:72:03:17:0f:68:
09:62:de:62:91:95:56:f2:ea:67:13:aa:16:0b:a5:
d7:80:09:ca:59:aa:b7:66:58:13:07:d6:5e:aa:29:
ba:0f:86:62:21:b4:9c:1c:3c:71:76:55:eb:7a:fe:
7f:4c:ac:87:02:8c:a5:57:3d:9a:c5:8f:74:94:8c:
03:3d:a6:2b:46:e4:5f:c9:e8:10:9a:51:f0:87:05:
fe:e9:59:10:6e:89:d6:24:b6:63:4c:b5:28:b0:66:
6c:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:06:6C:9B:AC:5E:93:D9:B7:38:8D:69:A8:6C:ED:BC:E2:14:A2:73
X509v3 Authority Key Identifier:
keyid:BF:81:7D:C8:55:2D:F3:61:0F:FC:45:44:1B:3F:81:46:4E:48:9D:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v4F9yFUt82EP_EVEGz-BRk5Incg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/c4e7e9-f6be-41a3-a459-195389330edf/1/v4F9yFUt82EP_EVEGz-BRk5Incg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/96/c4e7e9-f6be-41a3-a459-195389330edf/1/v4F9yFUt82EP_EVEGz-BRk5Incg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:f1:e5:05:da:ac:6e:7b:27:ce:98:95:7d:65:80:bb:0b:a5:
56:fa:a3:0e:ce:bd:0a:25:f5:09:95:d5:3b:6c:03:f9:7d:ab:
a4:93:b4:b2:49:cd:7e:2c:c1:56:c6:18:fb:52:29:25:43:26:
f0:31:46:ab:44:fe:f0:4f:2c:88:e1:66:14:bd:2e:29:1b:ba:
ee:df:1e:a8:0b:28:9b:28:a9:4f:87:f8:4d:97:e8:71:f0:ea:
a0:fa:40:9a:5f:01:32:97:66:5a:08:af:32:9a:9c:18:d5:24:
4c:71:6d:4b:4b:8e:82:de:4d:89:09:9c:2e:46:40:2e:1d:c6:
76:43:82:84:4c:ca:fb:63:48:fc:43:3d:00:ee:1e:d5:20:c4:
dc:b5:84:03:ea:f6:4e:9d:9b:8c:a8:87:43:2c:65:1c:6a:05:
cf:61:53:9a:5c:4b:d2:2f:4d:ab:07:4f:be:d4:db:28:36:85:
fb:c3:95:be:42:cd:6a:47:23:a0:c5:d3:b3:43:97:f2:08:30:
1d:35:09:72:25:11:88:f0:e7:34:f9:da:90:c1:9a:49:f2:11:
cc:50:59:17:aa:5d:fd:44:7b:69:98:2c:8e:36:01:60:27:d5:
6f:57:00:d1:a7:73:a0:cf:ef:98:f8:57:e7:ca:7b:d8:8d:b7:
ec:25:b7:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 21:40:29 2025 by rpki-client