Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/df719a-492f-47cb-9212-644bd0fc7f80/1/r_b4Wq0QHEVsGsmgGnGS_FeI6Sw.mft
File: r_b4Wq0QHEVsGsmgGnGS_FeI6Sw.mft (raw, json)
Hash identifier: PXDjJlEBTaNypNlPYp61pxmo8cmqfcH2HWxOAhFwluM=
Subject key identifier: A3:71:DD:77:E4:45:0C:83:85:1D:EB:E2:3B:14:80:EC:17:8A:14:72
Authority key identifier: AF:F6:F8:5A:AD:10:1C:45:6C:1A:C9:A0:1A:71:92:FC:57:88:E9:2C
Certificate issuer: /CN=aff6f85aad101c456c1ac9a01a7192fc5788e92c
Certificate serial: 0197B9337E180A971C8AAE5F9296E1C36159
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r_b4Wq0QHEVsGsmgGnGS_FeI6Sw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/df719a-492f-47cb-9212-644bd0fc7f80/1/r_b4Wq0QHEVsGsmgGnGS_FeI6Sw.mft
Manifest number: 0F8F
Signing time: Sun 29 Jun 2025 01:00:48 +0000
Manifest this update: Sun 29 Jun 2025 01:00:48 +0000
Manifest next update: Mon 30 Jun 2025 01:00:48 +0000
Files and hashes: 1: 4fpK3rH7dDsLZcwC8fv__9MCBNk.roa (hash: H+mNwrXZUXB3OGGb/VrqoSQBBpWlzYIXILfgLQd6xuU=)
2: 4niQy2euydDFq7GTJuaxJySkYgE.roa (hash: lEIj5wjui/e5DTBCiecGhk5U5JYfLtQIN+3o7VCLqqU=)
3: 5XUzA9Cm_VS0l_J-BI180iVrsSQ.roa (hash: dTmUbt8r9KTK4oCfqPnmc0NkXc8ljy+XbX2k8rf1LxQ=)
4: DWF9Jo3FImxKenqMCCuMh99Ds_I.roa (hash: VPrgFeIcUkZV1CVnwsWbonO9j9PHcQRDHPIETmI4o3E=)
5: UNKbAcEAJHWJC-HG72D-vYqbVfQ.roa (hash: m35AjrcjrDzhORVJU0fjE54zFfVUjrq+cuZi9udA0+8=)
6: cLFAPtOqlcUfpbbbNNENVqdfu8I.roa (hash: fE/OxbEqrhzEaEBEiWo6VY8shfzEaI5zfx5000I8b5Q=)
7: hgq-3QFFzN187B-65tYpaJQwwz8.roa (hash: l85+PXj1Myvhf7HIXT0WO1F3ljNUQ844ImZJ7Pq6XL8=)
8: r_b4Wq0QHEVsGsmgGnGS_FeI6Sw.crl (hash: 67OSchXcC0lPEslOfySKxeW5+NdqlR6gNeoz6FxX0t8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9f/df719a-492f-47cb-9212-644bd0fc7f80/1/r_b4Wq0QHEVsGsmgGnGS_FeI6Sw.crl
rsync://rpki.ripe.net/repository/DEFAULT/9f/df719a-492f-47cb-9212-644bd0fc7f80/1/r_b4Wq0QHEVsGsmgGnGS_FeI6Sw.mft
rsync://rpki.ripe.net/repository/DEFAULT/r_b4Wq0QHEVsGsmgGnGS_FeI6Sw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Jun 2025 01:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b9:33:7e:18:0a:97:1c:8a:ae:5f:92:96:e1:c3:61:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aff6f85aad101c456c1ac9a01a7192fc5788e92c
Validity
Not Before: Jun 29 01:00:48 2025 GMT
Not After : Jun 30 01:00:48 2025 GMT
Subject: CN=a371dd77e4450c83851debe23b1480ec178a1472
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:cd:c8:1a:57:92:66:23:b0:24:12:0f:2e:3f:
ae:41:48:a4:d5:53:6f:93:f2:8d:ee:11:72:0c:5e:
17:06:a0:0b:a2:1a:26:d5:fb:56:5d:54:53:8e:0d:
3c:cd:2a:2e:29:e5:9f:c0:6b:bc:3c:fb:8d:93:92:
23:03:03:d3:ce:ab:de:86:7e:f7:ee:96:2f:e8:3e:
57:ac:28:df:7c:6b:7d:e5:80:4f:02:77:36:70:50:
50:d5:05:1e:47:0c:84:3e:c7:cc:39:3c:3d:38:b7:
c8:22:9b:84:07:af:a8:c2:58:a6:07:de:de:56:04:
53:30:5a:1d:d1:97:0c:e3:06:05:bc:a7:e1:8e:49:
1b:84:a8:2b:0a:8d:06:bb:f6:ae:86:2c:b2:d8:31:
30:79:d0:f1:1a:41:38:46:9b:de:4c:01:69:0a:ea:
61:08:58:1d:43:1f:03:c0:9a:ca:bc:27:98:0c:68:
e9:f1:6d:c0:39:25:a4:24:aa:57:04:f0:87:27:a7:
79:f3:ec:c1:c1:b4:c6:57:71:91:ab:f2:42:94:31:
15:fa:6b:49:3c:c4:0e:6a:0e:cd:4c:1c:a3:1c:6f:
29:08:da:95:bc:56:2c:50:3c:a6:fc:35:a9:4f:97:
d7:7a:ae:30:e0:24:7a:98:43:5d:8d:3d:aa:ff:bc:
c1:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:71:DD:77:E4:45:0C:83:85:1D:EB:E2:3B:14:80:EC:17:8A:14:72
X509v3 Authority Key Identifier:
keyid:AF:F6:F8:5A:AD:10:1C:45:6C:1A:C9:A0:1A:71:92:FC:57:88:E9:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r_b4Wq0QHEVsGsmgGnGS_FeI6Sw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/df719a-492f-47cb-9212-644bd0fc7f80/1/r_b4Wq0QHEVsGsmgGnGS_FeI6Sw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/df719a-492f-47cb-9212-644bd0fc7f80/1/r_b4Wq0QHEVsGsmgGnGS_FeI6Sw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:12:8d:a1:6e:23:ea:4f:c7:7f:24:ef:95:35:c3:b5:8e:fa:
b7:40:a6:3c:7a:eb:80:68:b3:13:f2:d8:85:66:dc:97:a4:d7:
d8:ca:2b:3b:5b:48:a8:17:8f:84:83:1a:00:0d:12:0a:77:5c:
b3:5d:bf:c7:30:e4:6f:f9:50:72:fd:0a:27:ca:ae:51:8a:f2:
85:5f:4a:9e:c9:0e:91:92:3f:eb:10:27:89:9a:e3:be:e4:a0:
c4:19:c0:20:f8:d0:c1:97:b1:b4:db:15:bc:47:c5:c3:90:17:
a4:18:14:7b:19:fe:1e:1c:b9:dd:a4:51:af:db:00:b2:de:a0:
dd:04:3f:87:6a:a0:4f:bc:f9:c3:cc:38:d4:4e:cb:4c:a9:1f:
45:9e:56:5b:19:27:28:9f:01:1b:fe:97:7d:75:2a:a3:06:98:
32:7e:26:ce:c6:c0:e0:f6:0a:84:c9:a6:c1:63:2b:07:ee:ea:
89:db:69:67:48:b5:b2:97:b2:f6:dc:cb:90:fa:62:85:36:7d:
97:97:5a:71:df:1d:0d:80:51:b0:2e:22:11:d8:78:d3:11:0c:
44:4b:db:c7:af:1b:1a:48:7b:7d:8f:ce:a2:3d:63:99:a6:1c:
67:3c:aa:00:3a:69:67:dd:27:8d:c8:cf:ae:35:10:a2:49:90:
cd:39:e2:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 08:59:31 2025 by rpki-client