Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/9445a9-3f7f-4f4a-80b8-5b910157271b/1/DR4_1QQLufuRJuURnl_3wHTaW7w.mft
File: DR4_1QQLufuRJuURnl_3wHTaW7w.mft (raw, json)
Hash identifier: AHIo9CLi10i4kHAPIQ2vuEud00Hv2Fk41DewbtUzV0s=
Subject key identifier: B4:BD:29:EC:14:3C:AD:7E:B6:37:0E:C7:A9:D3:24:96:8F:66:A6:F8
Authority key identifier: 0D:1E:3F:D5:04:0B:B9:FB:91:26:E5:11:9E:5F:F7:C0:74:DA:5B:BC
Certificate issuer: /CN=0d1e3fd5040bb9fb9126e5119e5ff7c074da5bbc
Certificate serial: 0197B96AC79285EF525BF39E34C81C016BB6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DR4_1QQLufuRJuURnl_3wHTaW7w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/9445a9-3f7f-4f4a-80b8-5b910157271b/1/DR4_1QQLufuRJuURnl_3wHTaW7w.mft
Manifest number: 0ABA
Signing time: Sun 29 Jun 2025 02:01:12 +0000
Manifest this update: Sun 29 Jun 2025 02:01:12 +0000
Manifest next update: Mon 30 Jun 2025 02:01:12 +0000
Files and hashes: 1: DR4_1QQLufuRJuURnl_3wHTaW7w.crl (hash: GjKjdjddyt+X2rYTPPsc9xrb8CYM8pi2OFhVMTu4OMM=)
2: tw53VyqONmO9P7i2y6gpvj2fu_U.roa (hash: J066HWT9IQx8ovZiJnDjPDFutWNRHoqwHzDICk2OhO0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/9445a9-3f7f-4f4a-80b8-5b910157271b/1/DR4_1QQLufuRJuURnl_3wHTaW7w.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/9445a9-3f7f-4f4a-80b8-5b910157271b/1/DR4_1QQLufuRJuURnl_3wHTaW7w.mft
rsync://rpki.ripe.net/repository/DEFAULT/DR4_1QQLufuRJuURnl_3wHTaW7w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Jun 2025 02:01:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b9:6a:c7:92:85:ef:52:5b:f3:9e:34:c8:1c:01:6b:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d1e3fd5040bb9fb9126e5119e5ff7c074da5bbc
Validity
Not Before: Jun 29 02:01:12 2025 GMT
Not After : Jun 30 02:01:12 2025 GMT
Subject: CN=b4bd29ec143cad7eb6370ec7a9d324968f66a6f8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:54:06:f6:63:07:98:f3:67:cb:5d:cf:5a:f8:
45:09:52:bd:b7:8b:27:35:4a:62:ef:26:61:cc:7e:
ad:27:1e:0b:e0:f3:e4:34:5e:fe:3c:75:dc:7e:5d:
2f:0c:08:a8:26:de:65:bf:83:d6:e3:bb:17:5f:a6:
7f:f4:f8:50:cc:00:84:4f:80:16:c1:9a:0f:39:0b:
4d:99:57:4d:ed:0d:a7:96:d1:bf:7d:e6:eb:11:ad:
27:d0:d4:47:c0:ea:5f:a8:f3:5f:b6:63:67:e4:89:
c4:99:71:da:92:84:82:e4:ca:92:74:30:a0:69:c4:
47:ba:a2:e4:39:d3:dc:10:2a:5c:b9:52:17:df:9a:
68:54:a4:8d:7f:94:5e:d7:96:76:05:71:14:d6:fd:
65:1b:ff:d6:eb:96:d9:eb:ef:d2:f2:31:19:ed:d8:
a6:de:19:02:2d:88:7d:f1:e8:ee:8b:37:69:f4:7e:
63:83:e4:ad:5c:a8:4d:f7:c6:2c:b1:b0:c8:4f:6f:
60:83:b9:b6:c2:41:d8:36:20:b0:f0:ba:f8:fc:b5:
dc:b7:74:17:8f:8e:11:79:f0:43:f2:3b:4a:a8:2f:
6c:6f:7d:c8:72:a7:7a:09:eb:a5:68:19:38:99:8b:
d5:0b:f0:8e:88:71:27:99:8f:d8:18:96:ab:61:94:
cd:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:BD:29:EC:14:3C:AD:7E:B6:37:0E:C7:A9:D3:24:96:8F:66:A6:F8
X509v3 Authority Key Identifier:
keyid:0D:1E:3F:D5:04:0B:B9:FB:91:26:E5:11:9E:5F:F7:C0:74:DA:5B:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DR4_1QQLufuRJuURnl_3wHTaW7w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/9445a9-3f7f-4f4a-80b8-5b910157271b/1/DR4_1QQLufuRJuURnl_3wHTaW7w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/9445a9-3f7f-4f4a-80b8-5b910157271b/1/DR4_1QQLufuRJuURnl_3wHTaW7w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ad:ab:18:9a:5a:95:50:c5:5c:2a:b8:e3:94:96:a1:86:55:57:
94:2f:90:b1:5c:77:6e:a4:a0:09:80:81:22:86:33:b3:77:58:
5f:83:be:2d:16:19:50:e3:02:48:91:b9:80:21:22:6b:cc:09:
1c:a9:00:36:68:72:2e:49:21:9c:15:91:0f:c3:91:a2:6e:70:
17:29:59:db:cf:c4:58:04:a8:70:12:c2:30:cd:a2:80:f5:78:
41:57:5d:ba:13:b3:a9:00:e4:81:ae:21:35:9c:4f:ff:84:66:
2c:20:35:eb:12:86:62:eb:aa:96:50:46:3b:9d:38:e8:0a:58:
8c:b9:17:f0:ba:51:e9:47:9b:ac:19:a0:c1:6c:bf:05:18:20:
02:1d:21:00:35:48:64:2b:6c:6b:fa:27:23:58:ae:cf:fb:19:
49:42:4f:5d:38:7f:8e:7d:6b:d0:1e:e5:f3:9e:06:30:eb:e7:
a4:f0:98:a4:8b:b7:d6:68:26:fc:f1:97:ab:2f:52:ab:b3:57:
a7:6e:4a:ba:8f:7f:20:f0:94:5c:3b:07:61:d4:0f:30:32:c5:
fe:fd:ae:bb:16:75:0e:4f:4d:19:74:d9:44:48:64:54:3e:a6:
29:e6:4e:92:c6:e0:78:29:32:53:c0:1f:66:e4:68:fd:e2:95:
7e:56:6a:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 08:38:45 2025 by rpki-client