Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/2dac8b-76cd-40f0-854e-1da2acc76e11/1/4rvHBn-KfFfWhtZ160aOmbhr1i0.mft
File: 4rvHBn-KfFfWhtZ160aOmbhr1i0.mft (raw, json)
Hash identifier: 0KSYDUmepV/tOsD12Zm/2PbjCqreep0AqQlV5IPkkhI=
Subject key identifier: 69:D8:70:FD:E1:BD:1F:90:D8:94:26:34:3B:CD:29:AC:49:58:46:18
Authority key identifier: E2:BB:C7:06:7F:8A:7C:57:D6:86:D6:75:EB:46:8E:99:B8:6B:D6:2D
Certificate issuer: /CN=e2bbc7067f8a7c57d686d675eb468e99b86bd62d
Certificate serial: 0197B6A193565863C7859949A8FE2059BB85
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4rvHBn-KfFfWhtZ160aOmbhr1i0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/2dac8b-76cd-40f0-854e-1da2acc76e11/1/4rvHBn-KfFfWhtZ160aOmbhr1i0.mft
Manifest number: 1588
Signing time: Sat 28 Jun 2025 13:02:11 +0000
Manifest this update: Sat 28 Jun 2025 13:02:11 +0000
Manifest next update: Sun 29 Jun 2025 13:02:11 +0000
Files and hashes: 1: 4rvHBn-KfFfWhtZ160aOmbhr1i0.crl (hash: gGrqwku90lehI6t+gJo5wQWI7ZsXgaD1J9/qeE5oNN8=)
2: S9IbEuckGJ-9L5NueHluP1etdYo.roa (hash: 3hI+07Eg5raje1kn4kUfDxud5d5a2unK+1/vO0g99aY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b7/2dac8b-76cd-40f0-854e-1da2acc76e11/1/4rvHBn-KfFfWhtZ160aOmbhr1i0.crl
rsync://rpki.ripe.net/repository/DEFAULT/b7/2dac8b-76cd-40f0-854e-1da2acc76e11/1/4rvHBn-KfFfWhtZ160aOmbhr1i0.mft
rsync://rpki.ripe.net/repository/DEFAULT/4rvHBn-KfFfWhtZ160aOmbhr1i0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 13:02:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a1:93:56:58:63:c7:85:99:49:a8:fe:20:59:bb:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e2bbc7067f8a7c57d686d675eb468e99b86bd62d
Validity
Not Before: Jun 28 13:02:11 2025 GMT
Not After : Jun 29 13:02:11 2025 GMT
Subject: CN=69d870fde1bd1f90d89426343bcd29ac49584618
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:13:1d:bd:2a:ff:2c:31:a0:25:93:1f:58:f0:
a1:6b:73:b9:40:d0:8d:90:41:94:e8:42:dd:3b:2a:
88:33:7f:75:ae:6b:fd:bc:30:5d:17:0d:f4:b0:f4:
6b:cf:00:b7:61:cf:98:de:0b:29:4d:ee:53:25:73:
2b:ec:bb:8c:55:16:ba:c9:f5:1b:70:4d:3c:3c:53:
81:c4:fd:d4:74:0e:60:53:68:cf:ee:52:f1:ff:bd:
ee:5e:ae:d5:1e:1c:4c:00:cd:43:39:a7:5b:83:9e:
0c:6d:1b:c5:09:0b:17:7a:4e:d1:fa:d4:46:5d:6e:
e1:a3:c3:eb:0a:2d:2c:e3:d9:20:23:3a:fd:9a:9a:
d7:53:66:4e:4b:3b:59:2a:6c:de:bd:f4:b7:28:d6:
70:c7:45:95:b3:e6:1e:da:56:23:85:91:a0:d1:87:
a4:61:83:53:dd:29:d0:a7:c8:59:07:6a:17:48:56:
42:10:f5:da:00:ea:3c:af:69:57:c4:f0:66:c9:00:
74:91:a3:ea:f3:15:f7:1f:eb:9f:41:d6:c5:85:f8:
73:64:91:92:db:c3:12:6e:da:7c:9f:89:5d:5a:1c:
0a:62:03:44:66:38:75:1c:d6:9c:f6:fe:0a:25:71:
54:57:5c:de:1c:cf:7b:92:01:f9:c5:0b:e8:82:4f:
a7:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:D8:70:FD:E1:BD:1F:90:D8:94:26:34:3B:CD:29:AC:49:58:46:18
X509v3 Authority Key Identifier:
keyid:E2:BB:C7:06:7F:8A:7C:57:D6:86:D6:75:EB:46:8E:99:B8:6B:D6:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4rvHBn-KfFfWhtZ160aOmbhr1i0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/2dac8b-76cd-40f0-854e-1da2acc76e11/1/4rvHBn-KfFfWhtZ160aOmbhr1i0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/2dac8b-76cd-40f0-854e-1da2acc76e11/1/4rvHBn-KfFfWhtZ160aOmbhr1i0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
97:8b:b8:97:8e:e4:25:4b:65:b0:ab:1a:45:f5:32:4b:0e:6e:
8c:99:cd:b2:8f:04:9e:92:b9:6f:af:e5:6d:8e:a3:92:28:11:
7d:99:b3:aa:b7:fe:12:5b:e4:18:28:12:ce:bf:6d:b9:92:19:
cd:bb:90:c0:f6:2d:f7:59:25:4a:1b:9d:1f:08:33:70:f7:fb:
47:5c:71:23:61:3b:7a:71:be:97:0d:bb:69:a2:7d:d2:04:b5:
e7:02:cb:71:dc:98:51:7a:ef:8f:0a:f3:0d:31:04:c2:19:4a:
bd:e6:2a:30:30:40:59:13:a8:ce:06:fe:2b:50:bf:e5:93:a6:
79:3a:49:43:ba:f5:48:49:99:7b:23:c6:3b:4b:87:3e:e7:0c:
89:31:0a:e6:44:06:f2:5a:b9:41:c2:d4:c0:4a:29:c4:17:68:
8f:d7:2b:10:2d:a4:13:b9:8b:3d:98:df:39:41:90:27:f1:4a:
b9:b5:cb:f3:0d:23:cc:cd:12:a2:6e:e7:11:c5:a6:16:73:0e:
cb:44:49:19:49:9f:e7:8b:1a:8f:bf:af:71:17:e3:40:d5:5a:
c1:9a:69:c6:f1:8f:a8:06:39:b0:05:a9:fd:d0:76:58:60:3d:
72:76:22:b1:41:b6:ad:0b:63:19:a4:95:6d:ee:8e:1c:c1:47:
20:21:23:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 22:33:37 2025 by rpki-client