Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/d2e826-5acb-47d6-92a4-43bb19f2e53b/1/s4WUFGIC4vbDRWsGlv8YVi8bn4E.mft
File: s4WUFGIC4vbDRWsGlv8YVi8bn4E.mft (raw, json)
Hash identifier: a54SxZ2c/azJ1cx84bfr3n7S0NGigUM2lwfebPG0h2o=
Subject key identifier: B8:FE:A6:A6:23:9D:58:42:6D:68:3B:0F:E6:AC:E7:B5:42:01:BC:B6
Authority key identifier: B3:85:94:14:62:02:E2:F6:C3:45:6B:06:96:FF:18:56:2F:1B:9F:81
Certificate issuer: /CN=b38594146202e2f6c3456b0696ff18562f1b9f81
Certificate serial: 0197B6D778AF6BA9C37760CFF090F4AB1C13
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s4WUFGIC4vbDRWsGlv8YVi8bn4E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/d2e826-5acb-47d6-92a4-43bb19f2e53b/1/s4WUFGIC4vbDRWsGlv8YVi8bn4E.mft
Manifest number: 093E
Signing time: Sat 28 Jun 2025 14:01:03 +0000
Manifest this update: Sat 28 Jun 2025 14:01:03 +0000
Manifest next update: Sun 29 Jun 2025 14:01:03 +0000
Files and hashes: 1: IcIyZXTtvGCVT7kmzm3an6XI4Ds.roa (hash: 9+rlboX5YqLY2xGwqsRBQUwcIF0ZyOqFrf8SvNh+rfQ=)
2: s4WUFGIC4vbDRWsGlv8YVi8bn4E.crl (hash: dNNkDfNAQ4tZPNbTs+7yZFUHhnoOPJh7PSP68SOgMyo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/d2e826-5acb-47d6-92a4-43bb19f2e53b/1/s4WUFGIC4vbDRWsGlv8YVi8bn4E.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/d2e826-5acb-47d6-92a4-43bb19f2e53b/1/s4WUFGIC4vbDRWsGlv8YVi8bn4E.mft
rsync://rpki.ripe.net/repository/DEFAULT/s4WUFGIC4vbDRWsGlv8YVi8bn4E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 14:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:d7:78:af:6b:a9:c3:77:60:cf:f0:90:f4:ab:1c:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b38594146202e2f6c3456b0696ff18562f1b9f81
Validity
Not Before: Jun 28 14:01:03 2025 GMT
Not After : Jun 29 14:01:03 2025 GMT
Subject: CN=b8fea6a6239d58426d683b0fe6ace7b54201bcb6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:02:9c:77:eb:d7:fb:73:94:96:0f:21:94:0f:
1a:3f:94:8d:71:19:de:ad:c8:b5:55:5c:94:e5:e4:
48:8e:18:1b:bb:87:4b:79:25:6b:8b:ca:26:9a:02:
34:c7:21:67:c9:a9:85:ef:4a:f9:9a:c1:fb:be:e4:
4f:87:82:ee:e9:e6:a6:53:19:43:eb:1a:67:09:76:
90:4c:68:ab:a7:66:86:cc:50:bd:cf:fd:64:03:33:
73:53:ba:ea:d6:ca:a4:35:46:0e:d6:3d:b8:bb:73:
4a:fc:dd:41:ac:42:a4:67:6d:24:c6:09:86:61:4c:
48:ce:ca:79:c0:d5:3f:ca:17:ee:08:be:72:3c:4f:
de:e8:23:cc:84:11:d9:3a:79:30:2c:ba:fd:b1:83:
20:27:3e:6d:50:4b:b9:d8:94:73:61:96:70:47:6d:
27:f9:dc:43:6b:eb:ea:78:f3:b8:3c:cb:f0:43:88:
7b:91:c0:3b:8b:7b:66:1a:40:2e:08:54:b6:fb:a2:
76:7c:00:17:33:5c:fb:7f:d4:19:c0:3f:29:37:75:
3f:5d:5d:2a:e0:c0:41:1d:20:a0:32:10:6a:e3:5a:
3e:0a:ca:06:c4:ea:35:5e:ba:4d:61:a7:65:07:9d:
d2:d0:50:3f:bc:58:f7:39:df:78:3c:84:11:e4:8e:
cb:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:FE:A6:A6:23:9D:58:42:6D:68:3B:0F:E6:AC:E7:B5:42:01:BC:B6
X509v3 Authority Key Identifier:
keyid:B3:85:94:14:62:02:E2:F6:C3:45:6B:06:96:FF:18:56:2F:1B:9F:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s4WUFGIC4vbDRWsGlv8YVi8bn4E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/d2e826-5acb-47d6-92a4-43bb19f2e53b/1/s4WUFGIC4vbDRWsGlv8YVi8bn4E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/d2e826-5acb-47d6-92a4-43bb19f2e53b/1/s4WUFGIC4vbDRWsGlv8YVi8bn4E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:4f:31:da:5a:ec:67:c3:da:70:64:06:70:70:d0:c6:a8:95:
f5:bb:ed:7b:0b:d9:f1:81:1d:44:10:90:d4:87:ba:d0:97:1c:
6d:ab:9e:c9:e6:45:26:30:22:20:97:56:a7:72:6a:fd:16:b8:
ec:99:0b:e6:cb:50:52:c1:35:7e:a0:d1:21:ee:f0:f7:26:48:
02:b2:eb:46:81:c4:72:11:b3:96:66:32:07:8d:e6:19:54:ba:
33:5b:13:7b:e1:bd:46:3b:48:73:fd:b2:ac:99:72:bf:93:7a:
90:93:ab:75:cc:48:81:0d:2e:5e:4c:e0:3a:c8:3a:3b:60:bb:
d4:28:40:3d:68:8b:23:ba:d5:05:a9:92:20:e2:20:4f:5a:54:
6e:73:61:51:47:51:d7:2b:c9:44:09:ee:f0:bb:4b:19:c5:d4:
42:cb:93:8d:ed:27:81:e1:48:b9:15:f8:0b:06:e8:d0:33:a8:
f7:f1:16:8d:ca:f1:b7:3b:7e:56:bd:59:c7:bb:1f:e2:46:9d:
0c:43:39:c6:66:b9:da:c3:56:23:74:00:3e:0a:12:28:a2:5a:
36:b3:3b:cb:23:1a:05:1d:77:3d:1d:2e:9e:43:44:98:73:e6:
35:5a:8c:2c:8c:5f:75:6c:75:ee:41:a1:55:ac:10:fe:64:f9:
b3:a6:08:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 21:28:04 2025 by rpki-client