Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/6c0563-6a1c-4432-a58d-3b64cc336c79/1/4KACksKhBiuzKYCjxEP_84OkEAI.mft
File: 4KACksKhBiuzKYCjxEP_84OkEAI.mft (raw, json)
Hash identifier: 3nm9DwGS8h9D/XvYidE5QvVmxWTqPjz4mZsJLI/IVQY=
Subject key identifier: F3:12:9D:40:74:81:BC:4C:3A:79:4E:8F:B1:BE:B6:AC:F9:FE:65:9C
Authority key identifier: E0:A0:02:92:C2:A1:06:2B:B3:29:80:A3:C4:43:FF:F3:83:A4:10:02
Certificate issuer: /CN=e0a00292c2a1062bb32980a3c443fff383a41002
Certificate serial: 0197BFA3B22E643DD817E33E4A355D869882
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4KACksKhBiuzKYCjxEP_84OkEAI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/6c0563-6a1c-4432-a58d-3b64cc336c79/1/4KACksKhBiuzKYCjxEP_84OkEAI.mft
Manifest number: 0979
Signing time: Mon 30 Jun 2025 07:01:05 +0000
Manifest this update: Mon 30 Jun 2025 07:01:05 +0000
Manifest next update: Tue 01 Jul 2025 07:01:05 +0000
Files and hashes: 1: 4KACksKhBiuzKYCjxEP_84OkEAI.crl (hash: a8UAyO6TreskipZNor2rVBcQP2eVWfjBSD209MpgBTs=)
2: mSKL5dZ-DfhQmd3vDgNujHfDeWQ.roa (hash: kM0tftmTBoswJU9/17L/nHsaIm00B47zHx/WZDRsoCQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/6c0563-6a1c-4432-a58d-3b64cc336c79/1/4KACksKhBiuzKYCjxEP_84OkEAI.crl
rsync://rpki.ripe.net/repository/DEFAULT/b3/6c0563-6a1c-4432-a58d-3b64cc336c79/1/4KACksKhBiuzKYCjxEP_84OkEAI.mft
rsync://rpki.ripe.net/repository/DEFAULT/4KACksKhBiuzKYCjxEP_84OkEAI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 01 Jul 2025 07:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:bf:a3:b2:2e:64:3d:d8:17:e3:3e:4a:35:5d:86:98:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e0a00292c2a1062bb32980a3c443fff383a41002
Validity
Not Before: Jun 30 07:01:05 2025 GMT
Not After : Jul 1 07:01:05 2025 GMT
Subject: CN=f3129d407481bc4c3a794e8fb1beb6acf9fe659c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:01:1b:49:6c:91:1a:74:40:61:66:e8:83:7e:
a6:e4:e3:03:0a:c9:02:2c:4d:4c:92:9a:92:a9:b0:
1e:ff:33:7b:fd:df:9a:43:dd:85:28:ce:40:5f:3f:
07:c8:19:f4:66:ec:f4:6b:79:74:66:55:3b:00:ab:
80:db:2b:71:1e:ba:a4:3b:0e:b8:63:4a:4b:02:12:
68:19:b4:ba:39:b1:55:97:de:0e:01:d6:7d:13:28:
4e:2c:bc:71:f0:24:ea:f2:5d:98:0c:c4:ec:e6:87:
86:1e:88:73:40:ec:78:ad:c8:bc:f6:91:42:70:ab:
66:3e:05:dc:52:f6:f0:65:94:1e:31:bd:66:7f:b8:
13:4c:c4:b0:ce:a7:b0:e9:6e:f3:90:1a:a6:2a:15:
0b:da:bb:bd:69:2f:df:a7:04:fa:2e:e5:ef:25:ad:
2a:27:ff:34:91:b2:c2:27:ec:5e:54:8c:09:89:b3:
5a:3c:e4:c0:05:71:4a:9b:00:75:25:82:f0:00:f7:
4c:bc:d9:41:c6:66:b2:90:26:5f:0a:19:28:bd:7e:
ec:c5:02:35:0d:5b:59:d5:29:e5:3e:7e:09:7e:2a:
e6:9b:e0:e0:dd:09:4a:4a:be:2e:27:e0:0a:78:eb:
4d:e6:5f:db:b9:5e:8d:d8:21:9a:1a:ec:a3:04:ea:
74:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:12:9D:40:74:81:BC:4C:3A:79:4E:8F:B1:BE:B6:AC:F9:FE:65:9C
X509v3 Authority Key Identifier:
keyid:E0:A0:02:92:C2:A1:06:2B:B3:29:80:A3:C4:43:FF:F3:83:A4:10:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4KACksKhBiuzKYCjxEP_84OkEAI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/6c0563-6a1c-4432-a58d-3b64cc336c79/1/4KACksKhBiuzKYCjxEP_84OkEAI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/6c0563-6a1c-4432-a58d-3b64cc336c79/1/4KACksKhBiuzKYCjxEP_84OkEAI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
99:a0:0c:0e:6d:59:e4:53:35:d5:52:57:28:1b:b3:72:86:13:
3a:c8:e3:da:74:35:fb:9b:f4:3f:61:73:9d:63:03:28:c6:19:
14:e1:43:8d:ce:d4:3b:01:10:03:7d:5e:29:20:de:b2:10:56:
06:7c:cc:f9:d4:43:ad:8c:69:83:de:1d:1d:ea:ea:0d:7a:36:
1e:b1:42:b9:d0:40:d2:89:ce:dc:db:3b:a0:a0:5f:54:b7:e5:
ee:b6:2c:6d:19:3a:66:a0:c5:0a:03:a0:51:60:23:41:e1:34:
81:a7:0e:c8:9a:a9:f0:9a:65:5c:7b:f7:a3:81:83:88:64:d8:
f7:c8:17:27:53:5b:d9:ab:55:67:7d:fe:fb:27:94:65:36:4d:
83:e5:10:0a:43:4c:25:48:fa:fc:08:e2:bf:d0:37:1d:a5:21:
ad:b4:48:3f:b7:4c:f2:bd:fe:88:98:3b:6e:29:9e:c7:bf:ef:
c2:1c:e4:2f:d6:9e:18:95:58:55:f7:40:6d:48:56:ed:de:5d:
d8:c1:91:28:48:2d:a6:6f:36:26:5a:72:6e:ec:a7:01:f7:11:
35:47:e3:3a:59:fc:69:41:67:2d:42:8c:55:d9:be:fe:f7:d1:
53:89:d4:f6:55:c5:be:06:2e:2f:0b:70:68:47:03:8f:4f:a4:
d6:9c:42:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 30 11:57:21 2025 by rpki-client