Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/6b6d1f-5421-48b9-b7eb-da1fe9ebee8e/1/m4FRrhZKW3grED3n98iolIkyrr8.mft
File: m4FRrhZKW3grED3n98iolIkyrr8.mft (raw, json)
Hash identifier: 6j4INAIXySYgEVF7EzdMnjpO+ys8MizlNz+hNmawIVE=
Subject key identifier: E1:A2:92:51:28:E6:9A:5F:69:7F:3C:FF:20:F7:D3:16:5C:AF:C2:62
Authority key identifier: 9B:81:51:AE:16:4A:5B:78:2B:10:3D:E7:F7:C8:A8:94:89:32:AE:BF
Certificate issuer: /CN=9b8151ae164a5b782b103de7f7c8a8948932aebf
Certificate serial: 0197C8A71DE3C03B5A106DF153CBF45B8DE8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m4FRrhZKW3grED3n98iolIkyrr8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/6b6d1f-5421-48b9-b7eb-da1fe9ebee8e/1/m4FRrhZKW3grED3n98iolIkyrr8.mft
Manifest number: 15C0
Signing time: Wed 02 Jul 2025 01:01:24 +0000
Manifest this update: Wed 02 Jul 2025 01:01:24 +0000
Manifest next update: Thu 03 Jul 2025 01:01:24 +0000
Files and hashes: 1: PCeyRcCnkd2jcpnfX_81z2NuiQU.roa (hash: qmuti4n5B4J7jLSHkHP5UysCAPRSd8cLYAhdX4sBlkA=)
2: c483fv6CCn7GnQMtAIF35ot4fxg.roa (hash: FWbPpQL/jtT7J1p5u5ozd8W0n2+YVhQ7GpqajXnuKcE=)
3: m4FRrhZKW3grED3n98iolIkyrr8.crl (hash: 1F9/pfQ0XBp1hTQ2FN2pbGevn/9TIzwq1rjEu8prmIs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/6b6d1f-5421-48b9-b7eb-da1fe9ebee8e/1/m4FRrhZKW3grED3n98iolIkyrr8.crl
rsync://rpki.ripe.net/repository/DEFAULT/98/6b6d1f-5421-48b9-b7eb-da1fe9ebee8e/1/m4FRrhZKW3grED3n98iolIkyrr8.mft
rsync://rpki.ripe.net/repository/DEFAULT/m4FRrhZKW3grED3n98iolIkyrr8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 03 Jul 2025 01:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:c8:a7:1d:e3:c0:3b:5a:10:6d:f1:53:cb:f4:5b:8d:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9b8151ae164a5b782b103de7f7c8a8948932aebf
Validity
Not Before: Jul 2 01:01:24 2025 GMT
Not After : Jul 3 01:01:24 2025 GMT
Subject: CN=e1a2925128e69a5f697f3cff20f7d3165cafc262
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:79:15:65:b4:4d:d1:e2:81:35:f3:98:89:9d:
18:ee:0c:ff:4b:58:e4:df:1a:cd:ca:e0:53:c2:67:
77:06:77:7d:a4:19:38:a1:70:4c:fc:77:70:b4:83:
7e:1a:f6:d9:a3:62:3b:9d:81:2f:cd:5d:47:98:4b:
5a:05:1f:e7:56:1f:f7:c9:e2:2b:33:1f:ac:3b:38:
5a:83:fc:e1:3d:53:af:ec:ed:ac:9d:0a:04:ea:bb:
12:4c:5b:4c:6c:59:3d:c1:31:63:17:a2:6b:ab:55:
6d:49:79:62:d7:7f:da:7c:74:32:04:0a:c0:14:8e:
95:59:12:a2:51:38:de:b7:b4:ea:c4:1f:56:0e:9f:
0a:da:c7:34:ca:f2:ae:ba:92:38:3b:05:65:e4:41:
06:5d:c8:f6:10:e6:15:da:70:c4:64:c3:50:9c:24:
af:39:2c:17:a9:7b:3f:dd:21:c7:27:ec:22:92:5d:
26:2d:7a:a6:00:6c:a4:22:d1:93:90:2d:0d:56:c8:
39:d4:91:96:b6:15:d1:c2:ba:7f:92:30:e7:dd:bb:
da:d9:c7:92:b2:b6:3e:83:c9:5e:30:53:f7:53:a4:
5c:97:f6:a7:92:24:f5:e9:5e:63:ca:49:f7:4e:6c:
b6:28:78:7e:7c:f4:6f:1e:b2:07:b3:d7:50:b5:92:
ff:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:A2:92:51:28:E6:9A:5F:69:7F:3C:FF:20:F7:D3:16:5C:AF:C2:62
X509v3 Authority Key Identifier:
keyid:9B:81:51:AE:16:4A:5B:78:2B:10:3D:E7:F7:C8:A8:94:89:32:AE:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m4FRrhZKW3grED3n98iolIkyrr8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/6b6d1f-5421-48b9-b7eb-da1fe9ebee8e/1/m4FRrhZKW3grED3n98iolIkyrr8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/6b6d1f-5421-48b9-b7eb-da1fe9ebee8e/1/m4FRrhZKW3grED3n98iolIkyrr8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:c8:07:c4:72:c0:6f:b4:f9:b6:5a:4d:eb:bf:a7:ad:a1:18:
5f:52:43:0a:18:7d:22:06:67:f8:7c:ee:d7:4b:11:f3:ef:5e:
5c:40:06:65:96:d3:b7:0e:d8:91:73:8c:83:41:61:ad:21:cb:
33:10:ab:2e:47:7b:96:c6:3b:85:59:cc:2a:3e:60:fb:1b:77:
7d:8e:68:c9:92:5a:34:25:ca:41:cc:dc:34:d4:6f:b6:a9:f3:
bd:d8:ea:4a:17:2a:af:6c:28:14:ac:ee:f2:be:dd:32:c7:89:
10:a5:ec:3f:59:92:26:c5:99:db:85:22:c0:10:fc:51:e8:51:
2d:9d:75:1a:73:14:c9:fa:1e:4c:93:a7:d0:00:72:27:58:d1:
bb:98:8e:e1:cd:dc:50:9b:5b:df:af:d4:f0:e3:89:c0:3e:ec:
a9:11:de:ac:7c:65:dd:29:e1:1d:04:15:f4:17:85:08:b6:ff:
0f:b7:4b:72:b5:1f:0c:0c:91:31:7b:5d:25:c6:6d:03:61:3c:
00:95:9e:99:25:1d:92:35:af:9c:3d:bc:0a:38:d7:71:01:36:
4d:40:9d:2c:f8:bc:c4:ac:49:f1:b1:d4:32:50:59:6a:b5:4b:
6c:eb:71:a8:cc:3d:28:95:a8:c6:3d:83:c9:aa:2e:b2:18:fc:
cc:dd:b8:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 2 03:40:38 2025 by rpki-client