
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/4b9a4c-802d-4b1e-94fe-c8f56c122fec/1/I4RnTqAHoSAwrI0r5WDbIfT8C5k.mft
File: I4RnTqAHoSAwrI0r5WDbIfT8C5k.mft (raw, json)
Hash identifier: JuM6ac3cZCNYcPK4hUdz9KGJmcQh/p6abvHLoX+aRUw=
Subject key identifier: 2F:61:67:4E:D7:47:3F:EB:A2:E2:24:C5:4B:7B:ED:34:D4:3D:9A:C9
Authority key identifier: 23:84:67:4E:A0:07:A1:20:30:AC:8D:2B:E5:60:DB:21:F4:FC:0B:99
Certificate issuer: /CN=2384674ea007a12030ac8d2be560db21f4fc0b99
Certificate serial: 0197B632EBE5160E18FAAF399E31FE6A83CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I4RnTqAHoSAwrI0r5WDbIfT8C5k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/4b9a4c-802d-4b1e-94fe-c8f56c122fec/1/I4RnTqAHoSAwrI0r5WDbIfT8C5k.mft
Manifest number: FF
Signing time: Sat 28 Jun 2025 11:01:19 +0000
Manifest this update: Sat 28 Jun 2025 11:01:19 +0000
Manifest next update: Sun 29 Jun 2025 11:01:19 +0000
Files and hashes: 1: I4RnTqAHoSAwrI0r5WDbIfT8C5k.crl (hash: IFXOrhB7cm/A8m4xBvVY+gPlKYlE2d0pw+AlGAJIJuE=)
2: b-r28Bu4MGj-UsbsE6JV2xkR_Kg.roa (hash: CYtDxQh2JoY//+IHHkS7DA+4Jm80AdOA6Xho21YVow0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/4b9a4c-802d-4b1e-94fe-c8f56c122fec/1/I4RnTqAHoSAwrI0r5WDbIfT8C5k.crl
rsync://rpki.ripe.net/repository/DEFAULT/b0/4b9a4c-802d-4b1e-94fe-c8f56c122fec/1/I4RnTqAHoSAwrI0r5WDbIfT8C5k.mft
rsync://rpki.ripe.net/repository/DEFAULT/I4RnTqAHoSAwrI0r5WDbIfT8C5k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:32:eb:e5:16:0e:18:fa:af:39:9e:31:fe:6a:83:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2384674ea007a12030ac8d2be560db21f4fc0b99
Validity
Not Before: Jun 28 11:01:19 2025 GMT
Not After : Jun 29 11:01:19 2025 GMT
Subject: CN=2f61674ed7473feba2e224c54b7bed34d43d9ac9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:b9:83:9e:c9:82:1c:4e:9f:20:a5:a5:73:93:
61:16:8c:8a:48:5a:c0:77:f2:ac:72:7f:66:0f:67:
d8:6a:02:9f:e7:bd:95:12:36:c8:38:a5:46:e0:61:
9a:e8:ac:7e:a5:11:59:7a:07:18:3e:7e:c8:7d:de:
0b:ee:94:82:2f:d9:91:2d:ff:9f:74:96:4e:74:63:
5d:d8:d8:89:8a:f4:94:1a:29:b9:a4:ad:29:42:8d:
bc:8c:d5:2f:d4:df:e2:8b:01:f9:1d:23:d0:c7:79:
f7:f1:2d:17:e6:f5:ff:48:9b:71:c9:c1:bf:d0:07:
23:6f:14:73:b2:da:dd:7e:0a:bb:c0:52:ec:f5:6c:
67:2c:fe:4b:ea:c7:98:8d:66:8f:37:10:6b:0c:e3:
9d:37:a1:0b:0c:11:a3:de:58:16:01:a6:f2:bb:d4:
93:43:a3:24:25:c4:a0:7f:51:e0:69:b9:c3:82:99:
fd:29:29:81:d3:23:d7:23:ca:40:a2:24:7b:e0:8c:
25:03:f4:4b:3e:09:a2:21:a4:9a:20:80:54:6f:a9:
56:81:fd:80:d6:4e:bd:0e:af:15:ef:1f:93:c7:c3:
7e:2a:ae:79:68:4f:07:34:a5:42:43:ec:a4:4d:f1:
0d:56:c0:7c:fb:e3:10:f2:ea:e0:57:f1:52:c1:94:
a8:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:61:67:4E:D7:47:3F:EB:A2:E2:24:C5:4B:7B:ED:34:D4:3D:9A:C9
X509v3 Authority Key Identifier:
keyid:23:84:67:4E:A0:07:A1:20:30:AC:8D:2B:E5:60:DB:21:F4:FC:0B:99
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I4RnTqAHoSAwrI0r5WDbIfT8C5k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/4b9a4c-802d-4b1e-94fe-c8f56c122fec/1/I4RnTqAHoSAwrI0r5WDbIfT8C5k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/4b9a4c-802d-4b1e-94fe-c8f56c122fec/1/I4RnTqAHoSAwrI0r5WDbIfT8C5k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b3:c7:4b:50:5e:34:87:44:c3:ce:2a:c6:7f:b9:17:de:33:f5:
0c:98:34:8d:88:de:1a:18:99:18:16:57:0a:6b:42:0f:94:fa:
a0:6c:6f:b0:8b:c9:2d:c5:e9:c1:f4:05:62:a4:ba:73:a9:dd:
58:d6:81:95:c5:35:3e:d4:7a:22:7a:57:76:7a:3c:0b:3e:cd:
85:39:c8:6f:5b:75:5b:0c:32:9a:1e:68:60:66:45:8e:f2:78:
e7:d5:12:16:03:27:6b:8e:62:f8:ba:97:b5:de:1b:85:bf:0c:
c8:b1:e2:fb:9a:29:de:ef:73:9c:7c:31:7f:69:82:c2:6b:e7:
d5:30:9f:00:00:ed:80:0d:51:d6:ad:0a:a5:7f:66:0f:9d:e0:
37:22:53:dd:6d:5a:6a:dd:07:0b:30:58:46:78:6f:a7:02:94:
db:bf:19:23:93:77:db:25:8c:d3:16:4a:13:53:66:bf:a3:36:
4d:42:0a:91:67:05:61:d1:d5:63:81:bf:fa:24:b5:10:f6:9a:
61:30:44:3c:22:a6:50:44:75:93:48:34:5a:9a:c5:ae:96:4f:
ee:01:16:4e:d8:29:4f:b0:12:25:48:3e:20:25:09:ec:d2:47:
1f:64:e6:5b:35:3d:9d:21:8d:86:32:0a:f6:c3:96:ae:91:88:
31:2d:b8:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 19:06:31 2025 by rpki-client