Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/ca13ca-f640-496c-922a-500abd93b9d4/1/4pIlILZ7Gr98QDr6IjVTQyYnIog.mft
File: 4pIlILZ7Gr98QDr6IjVTQyYnIog.mft (raw, json)
Hash identifier: Z2/TiUbGCN8XxXZc+SkXxcSaNgoBjrrvXE8ycbLy838=
Subject key identifier: FB:51:BE:8A:E2:8F:A1:F7:87:C0:DF:BB:E9:11:96:E6:5A:DF:DB:93
Authority key identifier: E2:92:25:20:B6:7B:1A:BF:7C:40:3A:FA:22:35:53:43:26:27:22:88
Certificate issuer: /CN=e2922520b67b1abf7c403afa2235534326272288
Certificate serial: 0197B6D76E7AC1D1C215226DA52D3D66FDD7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4pIlILZ7Gr98QDr6IjVTQyYnIog.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/ca13ca-f640-496c-922a-500abd93b9d4/1/4pIlILZ7Gr98QDr6IjVTQyYnIog.mft
Manifest number: 13D0
Signing time: Sat 28 Jun 2025 14:01:01 +0000
Manifest this update: Sat 28 Jun 2025 14:01:01 +0000
Manifest next update: Sun 29 Jun 2025 14:01:01 +0000
Files and hashes: 1: 4pIlILZ7Gr98QDr6IjVTQyYnIog.crl (hash: o259VdGj82pQ0JW/TwYUkRvYgAbd8evK5Up0xXvHJb8=)
2: sraNB3Tq9hs6fPR3orHTINDfXdM.roa (hash: 5fJUa4xuxE1H1Nc9qB8vUJm4+A17xrBmdzBKBxK5rEM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a4/ca13ca-f640-496c-922a-500abd93b9d4/1/4pIlILZ7Gr98QDr6IjVTQyYnIog.crl
rsync://rpki.ripe.net/repository/DEFAULT/a4/ca13ca-f640-496c-922a-500abd93b9d4/1/4pIlILZ7Gr98QDr6IjVTQyYnIog.mft
rsync://rpki.ripe.net/repository/DEFAULT/4pIlILZ7Gr98QDr6IjVTQyYnIog.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 14:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:d7:6e:7a:c1:d1:c2:15:22:6d:a5:2d:3d:66:fd:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e2922520b67b1abf7c403afa2235534326272288
Validity
Not Before: Jun 28 14:01:01 2025 GMT
Not After : Jun 29 14:01:01 2025 GMT
Subject: CN=fb51be8ae28fa1f787c0dfbbe91196e65adfdb93
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:02:6d:48:46:ca:8f:b4:fb:a7:61:c8:90:ba:
d8:85:16:1d:8e:d2:45:23:1f:14:49:e5:72:70:dd:
93:c2:68:1a:37:62:b9:a1:bd:b2:33:ab:d1:24:92:
02:cf:f2:31:66:55:60:0f:91:2e:c1:7d:e2:9b:42:
ef:b9:57:c8:0c:15:35:cc:3e:ac:5d:ac:8d:9e:f7:
f5:74:27:00:ed:64:cf:95:2c:68:23:40:55:30:b1:
6e:61:38:23:6d:11:26:c5:f0:bb:27:5b:b7:83:68:
da:76:4d:96:cd:dc:a1:21:1c:a5:8e:e1:ec:5f:b8:
31:0e:5c:8c:2a:b3:e9:6e:0a:e3:f4:61:e1:2c:9b:
2f:6a:7f:b8:53:72:ae:27:1a:a0:e5:ca:73:f3:77:
21:ae:cc:e8:44:8a:b1:ed:27:d5:de:3a:8d:f9:41:
3e:c5:29:a3:b4:ec:81:9b:de:d6:fa:b8:8b:87:cb:
1b:44:6d:e9:79:f4:1b:62:b3:35:7e:dd:5f:2e:c1:
db:de:81:ae:b0:83:2b:78:a1:5d:32:83:13:fe:4a:
ac:07:46:ca:9f:8c:f3:a1:fd:36:36:c8:f1:10:62:
c8:ea:89:39:f8:9d:61:28:4d:c1:49:9e:5c:1d:eb:
60:27:f6:9a:f0:9e:5a:77:d1:3e:b8:ab:12:77:32:
96:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:51:BE:8A:E2:8F:A1:F7:87:C0:DF:BB:E9:11:96:E6:5A:DF:DB:93
X509v3 Authority Key Identifier:
keyid:E2:92:25:20:B6:7B:1A:BF:7C:40:3A:FA:22:35:53:43:26:27:22:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4pIlILZ7Gr98QDr6IjVTQyYnIog.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/ca13ca-f640-496c-922a-500abd93b9d4/1/4pIlILZ7Gr98QDr6IjVTQyYnIog.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/ca13ca-f640-496c-922a-500abd93b9d4/1/4pIlILZ7Gr98QDr6IjVTQyYnIog.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:4c:e9:aa:cc:9d:cf:ec:ad:f9:24:94:6d:f5:9d:26:bb:e0:
59:52:1c:34:5b:13:50:c4:4a:02:79:28:f8:79:49:03:49:c1:
4b:e2:c6:5a:64:f2:e0:07:d6:88:d3:d8:73:98:fe:d4:35:a1:
43:7b:14:fd:14:4d:e2:9c:98:3a:90:2a:8b:d8:b0:c5:26:ee:
59:4d:4b:2f:4e:71:f2:37:56:ec:15:a7:f2:99:10:4a:de:ce:
04:32:ac:ae:09:66:c0:59:ab:66:cf:b9:6b:2f:ba:d5:25:7a:
19:5e:07:b1:36:1d:23:4a:ce:20:24:13:fd:c3:c6:fe:9f:a5:
4e:a4:b9:e6:26:60:eb:a5:55:b8:f8:80:08:db:5d:ef:c4:2e:
7c:e2:a8:1b:66:ae:6b:da:06:88:32:aa:68:6a:27:5c:dd:95:
56:fa:09:9a:a1:fe:50:a2:8f:96:7a:5c:00:46:c4:42:d3:d5:
8d:05:0d:87:af:82:c4:0a:f1:cd:5c:15:be:ca:93:18:90:34:
a8:da:b4:33:94:9a:cf:95:6c:d4:aa:82:28:fa:fe:7d:11:ec:
46:e8:ad:0e:1d:5f:0a:d6:47:e8:f0:2b:97:29:e1:74:18:dc:
50:d3:93:0f:ac:60:a2:03:2c:84:1b:b7:fa:33:ce:f5:65:56:
4f:31:a5:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:15:28 2025 by rpki-client