Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9d/968a85-01d3-4b0c-b920-66cbf876ab3e/1/4B8Zbdft0RMdAiD9t3cSJiG7ve8.mft
File: 4B8Zbdft0RMdAiD9t3cSJiG7ve8.mft (raw, json)
Hash identifier: Z2wCBd6wGcuXSeIKMP7UbIviKfJKubtc8orvN9dv3Js=
Subject key identifier: 27:83:08:A5:49:4E:3C:C2:B0:2B:1B:C8:B8:87:F2:52:A5:88:09:1A
Authority key identifier: E0:1F:19:6D:D7:ED:D1:13:1D:02:20:FD:B7:77:12:26:21:BB:BD:EF
Certificate issuer: /CN=e01f196dd7edd1131d0220fdb777122621bbbdef
Certificate serial: 0197B745341FE09EC8CD0AE1F45EAB7C3ED6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4B8Zbdft0RMdAiD9t3cSJiG7ve8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9d/968a85-01d3-4b0c-b920-66cbf876ab3e/1/4B8Zbdft0RMdAiD9t3cSJiG7ve8.mft
Manifest number: 0AC8
Signing time: Sat 28 Jun 2025 16:00:55 +0000
Manifest this update: Sat 28 Jun 2025 16:00:55 +0000
Manifest next update: Sun 29 Jun 2025 16:00:55 +0000
Files and hashes: 1: 4B8Zbdft0RMdAiD9t3cSJiG7ve8.crl (hash: q1xs0qrICZoR0xI7Ug5B9xt9rjcjwKk8JQr4B8IaEC8=)
2: 4ea1dMd4wRgTBo1jIMebmZZJLM4.roa (hash: s7rnybcZ+EzxkGbEPGLzvVlVM7bMx+c1GhcuJyz67VI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9d/968a85-01d3-4b0c-b920-66cbf876ab3e/1/4B8Zbdft0RMdAiD9t3cSJiG7ve8.crl
rsync://rpki.ripe.net/repository/DEFAULT/9d/968a85-01d3-4b0c-b920-66cbf876ab3e/1/4B8Zbdft0RMdAiD9t3cSJiG7ve8.mft
rsync://rpki.ripe.net/repository/DEFAULT/4B8Zbdft0RMdAiD9t3cSJiG7ve8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:45:34:1f:e0:9e:c8:cd:0a:e1:f4:5e:ab:7c:3e:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e01f196dd7edd1131d0220fdb777122621bbbdef
Validity
Not Before: Jun 28 16:00:55 2025 GMT
Not After : Jun 29 16:00:55 2025 GMT
Subject: CN=278308a5494e3cc2b02b1bc8b887f252a588091a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:a5:92:6a:20:8f:69:36:fb:d1:b2:d0:6f:86:
f5:6a:a4:37:b0:28:de:49:40:b4:48:d2:f3:6a:75:
43:88:9d:c0:85:04:0f:a7:df:c1:32:79:9f:3c:28:
17:5a:af:5c:a6:63:58:69:5f:06:d9:b6:98:be:47:
98:70:8b:5f:fd:91:28:2b:fd:ba:6e:33:5a:9d:58:
bd:37:b9:30:9f:7d:c4:5c:7c:f5:03:4a:15:7f:a5:
be:3b:48:00:2f:f1:73:dc:19:d4:73:b0:c8:e5:95:
4d:db:c8:90:74:a4:1b:a2:e8:ab:a8:a2:f9:a2:ad:
57:f3:5f:3d:69:6b:99:0f:da:df:c2:f9:06:4e:c3:
08:39:d5:ec:0e:b3:fb:6b:97:47:b3:67:20:5d:8e:
e3:e4:85:7b:11:03:55:7f:92:ed:f0:88:09:43:b4:
ce:b5:89:2a:a3:21:17:fe:28:50:b5:d1:84:b5:2f:
d0:9e:dd:6a:74:bc:99:7a:d3:18:b4:5d:c2:56:25:
3f:16:87:7c:30:dd:ed:61:b2:65:15:b6:f1:90:e1:
64:25:45:51:37:34:c0:9a:98:25:79:ea:6a:46:c7:
77:a1:db:bf:75:0c:09:16:d5:7a:d7:55:c2:f6:de:
b5:9a:a0:a1:89:ec:3c:dd:33:48:53:84:66:e6:e6:
bd:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:83:08:A5:49:4E:3C:C2:B0:2B:1B:C8:B8:87:F2:52:A5:88:09:1A
X509v3 Authority Key Identifier:
keyid:E0:1F:19:6D:D7:ED:D1:13:1D:02:20:FD:B7:77:12:26:21:BB:BD:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4B8Zbdft0RMdAiD9t3cSJiG7ve8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/968a85-01d3-4b0c-b920-66cbf876ab3e/1/4B8Zbdft0RMdAiD9t3cSJiG7ve8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/968a85-01d3-4b0c-b920-66cbf876ab3e/1/4B8Zbdft0RMdAiD9t3cSJiG7ve8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
08:4d:ca:8f:8b:bd:7c:39:2d:fd:1c:2c:55:5c:33:9d:5b:89:
26:f0:4f:65:dc:93:98:9b:8c:f5:a8:85:f1:71:c7:4e:1f:cb:
70:9a:f2:f8:4c:c8:d1:e5:ef:61:b6:db:1a:be:ad:53:53:83:
9f:05:48:25:be:8c:ab:d9:b0:90:7d:39:a4:7e:d2:63:7e:a6:
b7:c9:54:29:f4:95:90:aa:5d:be:a5:2d:70:36:0d:dc:d4:9d:
b0:ef:b1:0a:9d:d4:5a:ad:96:75:56:93:a4:89:1e:d6:85:83:
7f:84:2c:0a:33:ef:2c:1a:1a:a2:23:9c:6d:81:38:40:73:e9:
9d:d2:79:5e:36:ae:fa:96:df:17:c3:f9:46:49:b8:96:9d:9e:
c8:43:57:39:94:e6:51:e2:d3:9c:1b:33:cb:a7:cd:05:03:07:
88:25:0e:76:48:d9:96:1e:94:1d:82:f3:8d:1f:a7:c3:01:18:
17:87:95:09:73:82:3d:48:35:58:53:cb:9a:f4:35:30:46:12:
08:9f:82:44:5a:97:82:16:50:14:ed:ee:df:21:5a:c3:fd:b8:
a0:2a:83:74:db:42:42:03:4c:d8:a6:cd:6d:f9:be:ef:12:69:
13:e7:ea:11:f4:8e:af:8f:a2:af:7d:61:05:97:8c:f0:16:17:
70:81:74:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 19:24:48 2025 by rpki-client