Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/a52ceb-c8c8-4236-a037-60a5743e6e1f/1/704eplKHok4gxmO1FhwVE_AMio0.mft
File: 704eplKHok4gxmO1FhwVE_AMio0.mft (raw, json)
Hash identifier: udOk051Pp5cItl/9inVGCYpsgW3SDMHBFfyfRKhdVIE=
Subject key identifier: B3:AA:CA:03:49:8E:A0:AC:12:D0:41:E7:E9:88:CD:ED:91:EB:5B:5E
Authority key identifier: EF:4E:1E:A6:52:87:A2:4E:20:C6:63:B5:16:1C:15:13:F0:0C:8A:8D
Certificate issuer: /CN=ef4e1ea65287a24e20c663b5161c1513f00c8a8d
Certificate serial: 0197B7453FE678D9E5BE7E23F423D9E6DE86
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/704eplKHok4gxmO1FhwVE_AMio0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/a52ceb-c8c8-4236-a037-60a5743e6e1f/1/704eplKHok4gxmO1FhwVE_AMio0.mft
Manifest number: 04CB
Signing time: Sat 28 Jun 2025 16:00:58 +0000
Manifest this update: Sat 28 Jun 2025 16:00:58 +0000
Manifest next update: Sun 29 Jun 2025 16:00:58 +0000
Files and hashes: 1: 1-x-3ccNzP71eAFgXPav3YRKbPc0.roa (hash: gcNVzNBHfGC67t/xgrOBlYz2dVPSnS4yGm9+O2azC54=)
2: 704eplKHok4gxmO1FhwVE_AMio0.crl (hash: 3XaNmvfc1qfWwSMhaaNtklU7c0S0CShQUZ1I0OIk2iY=)
3: J5QgCxKNKik7O15LPyeeQADYm_g.roa (hash: R0sIPZo3mElg4IM+t4du68+jxxhuTbAlvWncgQxpH3k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/a52ceb-c8c8-4236-a037-60a5743e6e1f/1/704eplKHok4gxmO1FhwVE_AMio0.crl
rsync://rpki.ripe.net/repository/DEFAULT/98/a52ceb-c8c8-4236-a037-60a5743e6e1f/1/704eplKHok4gxmO1FhwVE_AMio0.mft
rsync://rpki.ripe.net/repository/DEFAULT/704eplKHok4gxmO1FhwVE_AMio0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:45:3f:e6:78:d9:e5:be:7e:23:f4:23:d9:e6:de:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ef4e1ea65287a24e20c663b5161c1513f00c8a8d
Validity
Not Before: Jun 28 16:00:58 2025 GMT
Not After : Jun 29 16:00:58 2025 GMT
Subject: CN=b3aaca03498ea0ac12d041e7e988cded91eb5b5e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:55:05:ad:02:38:67:f6:1c:c4:ae:74:af:03:
9e:3f:7f:13:ef:0d:e9:00:68:c1:d2:e1:4f:81:3d:
86:4c:5b:92:4d:e4:3e:68:3c:19:0f:02:38:74:c2:
7d:c8:5b:4a:91:2b:38:dc:c9:94:37:0a:ef:51:d8:
26:15:cd:8a:09:68:04:d0:12:30:97:59:54:96:34:
b0:1d:d9:1e:56:3d:38:f2:89:ce:22:21:e4:3f:c0:
97:af:8a:5f:d4:ae:93:b8:66:b6:5b:18:40:fa:c5:
5d:1b:5b:db:b1:5f:dc:6f:e6:d9:ba:05:24:4d:59:
19:b8:e8:1f:57:68:8b:2f:a2:0a:0f:71:08:e3:b1:
4a:eb:83:b1:c4:7a:3d:59:14:7e:cf:91:2c:e3:af:
71:05:fc:16:a1:d5:09:23:85:3d:96:b0:9e:05:c2:
3e:35:79:ac:31:e9:70:15:8a:82:8e:9a:4c:ab:09:
7f:85:d6:7b:0b:1a:e7:88:ec:60:28:09:01:b9:a3:
17:c8:6c:db:99:01:15:bd:df:ad:2c:43:d7:e8:da:
4b:3b:5b:0f:79:cf:d0:f5:9b:34:48:05:f7:cc:cf:
ec:d3:2d:c6:b1:50:7d:43:31:92:40:50:40:99:76:
1c:3e:48:a3:b9:e2:65:22:97:a8:3a:19:5c:ae:8a:
78:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:AA:CA:03:49:8E:A0:AC:12:D0:41:E7:E9:88:CD:ED:91:EB:5B:5E
X509v3 Authority Key Identifier:
keyid:EF:4E:1E:A6:52:87:A2:4E:20:C6:63:B5:16:1C:15:13:F0:0C:8A:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/704eplKHok4gxmO1FhwVE_AMio0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/a52ceb-c8c8-4236-a037-60a5743e6e1f/1/704eplKHok4gxmO1FhwVE_AMio0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/a52ceb-c8c8-4236-a037-60a5743e6e1f/1/704eplKHok4gxmO1FhwVE_AMio0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:bd:49:5b:d5:84:ab:6a:7b:92:7b:95:e8:74:7f:2f:26:33:
e8:12:f5:33:a4:c3:69:a5:97:66:ef:33:89:7c:f9:7d:5f:e5:
97:8a:3c:af:1f:fd:01:54:e8:bb:a7:27:4e:0c:f7:96:7f:70:
03:d2:8d:a4:77:c4:1f:be:b6:5e:36:91:18:5b:ae:e9:8d:3b:
39:ab:6a:3a:cf:86:1d:4f:78:df:3a:51:80:0a:4a:85:c0:80:
a8:6d:5c:be:b5:db:81:5f:65:d8:65:67:ac:ad:e6:b3:db:37:
57:b7:31:e8:14:0b:d9:dc:d5:e4:85:d1:44:cb:86:24:6c:2f:
2a:a7:df:9c:74:10:71:90:93:61:ad:5d:1f:66:13:4a:26:2b:
62:07:42:5a:11:b3:fb:11:d0:ec:b8:64:88:4b:c7:ec:46:9f:
03:84:38:7b:56:e0:6b:52:47:21:4b:24:47:2b:b5:20:a1:24:
50:cd:e0:ca:bd:7f:4a:ad:cb:80:5f:37:d1:2d:b8:d9:0a:d3:
89:30:2e:04:0e:60:ba:06:3b:f2:a5:e5:72:43:96:e6:c4:8a:
83:80:df:39:fa:c6:62:ed:68:92:39:e8:9d:a7:89:92:01:9d:
87:37:2d:79:62:5c:e9:c4:a0:64:61:59:4e:b5:76:51:f3:d1:
33:0c:78:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 18:55:52 2025 by rpki-client