Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/b2698c-6409-459c-b046-ea6f705d2c0d/1/4jy32eUh5kaf1-KtE2A_t-6_4OA.mft
File: 4jy32eUh5kaf1-KtE2A_t-6_4OA.mft (raw, json)
Hash identifier: d1LKa37EgR3plI9YWRXnwzWqP6yafzfU3iiuA93v9Vg=
Subject key identifier: 6A:4E:F7:7A:64:98:01:D8:50:7C:07:09:C5:50:40:74:DA:5F:41:41
Authority key identifier: E2:3C:B7:D9:E5:21:E6:46:9F:D7:E2:AD:13:60:3F:B7:EE:BF:E0:E0
Certificate issuer: /CN=e23cb7d9e521e6469fd7e2ad13603fb7eebfe0e0
Certificate serial: 0197B6A1CC85A15561A023BF825FB2C2A45B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4jy32eUh5kaf1-KtE2A_t-6_4OA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/b2698c-6409-459c-b046-ea6f705d2c0d/1/4jy32eUh5kaf1-KtE2A_t-6_4OA.mft
Manifest number: 08EC
Signing time: Sat 28 Jun 2025 13:02:26 +0000
Manifest this update: Sat 28 Jun 2025 13:02:26 +0000
Manifest next update: Sun 29 Jun 2025 13:02:26 +0000
Files and hashes: 1: 4jy32eUh5kaf1-KtE2A_t-6_4OA.crl (hash: 2gwDuoh1g0T0b2kiXNfXI5QSZPYmKKQjcGZcVY/irfU=)
2: A2XZpMhjoSl2eIpUcSwowos8QQA.roa (hash: 7IQHzb+LeNjLi41+XbYgKffdbEsxRoe4BI+dUjjQXH8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/b2698c-6409-459c-b046-ea6f705d2c0d/1/4jy32eUh5kaf1-KtE2A_t-6_4OA.crl
rsync://rpki.ripe.net/repository/DEFAULT/ba/b2698c-6409-459c-b046-ea6f705d2c0d/1/4jy32eUh5kaf1-KtE2A_t-6_4OA.mft
rsync://rpki.ripe.net/repository/DEFAULT/4jy32eUh5kaf1-KtE2A_t-6_4OA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a1:cc:85:a1:55:61:a0:23:bf:82:5f:b2:c2:a4:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e23cb7d9e521e6469fd7e2ad13603fb7eebfe0e0
Validity
Not Before: Jun 28 13:02:26 2025 GMT
Not After : Jun 29 13:02:26 2025 GMT
Subject: CN=6a4ef77a649801d8507c0709c5504074da5f4141
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:4c:1c:24:f2:a9:d3:ca:85:12:b1:b5:b0:a8:
40:50:a3:f5:ee:e0:7c:f6:8a:01:cc:dc:43:6b:aa:
20:ea:19:66:a9:02:55:ee:5c:26:20:8d:79:f5:ca:
de:01:33:5d:41:f7:34:67:67:e8:fb:04:e4:6d:fb:
9e:70:0c:8e:78:2c:18:b3:ed:3f:5f:f1:d0:8d:4b:
67:5d:30:58:a1:ff:ba:09:2c:fe:7d:bf:30:d0:51:
b3:47:f3:95:87:f3:cd:78:c0:ca:8c:38:73:37:56:
7b:d5:1d:a5:1b:f1:fc:29:2b:2a:5a:ab:e0:d1:94:
70:2e:a1:33:f5:22:cb:d7:ca:39:f8:9a:c8:c4:e9:
73:de:cb:b2:8d:91:1f:3e:f0:b0:36:70:b6:2b:ff:
1a:39:61:95:44:47:ca:c9:75:31:4f:00:40:ca:3c:
7b:fd:9c:6a:1e:90:b3:f2:b7:35:29:8f:97:73:50:
df:b0:71:eb:46:e1:b6:16:da:a2:08:27:32:ba:20:
8c:c9:07:f0:12:36:69:b4:f5:e2:0a:9a:f0:c5:19:
7e:32:70:bb:a3:a2:e4:81:27:40:bb:3c:71:4e:07:
6e:e2:c6:e6:8b:be:2a:82:e8:99:78:6f:b5:27:67:
7c:6b:2f:e2:17:3c:66:7b:0f:4e:73:db:d8:3a:19:
33:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:4E:F7:7A:64:98:01:D8:50:7C:07:09:C5:50:40:74:DA:5F:41:41
X509v3 Authority Key Identifier:
keyid:E2:3C:B7:D9:E5:21:E6:46:9F:D7:E2:AD:13:60:3F:B7:EE:BF:E0:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4jy32eUh5kaf1-KtE2A_t-6_4OA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/b2698c-6409-459c-b046-ea6f705d2c0d/1/4jy32eUh5kaf1-KtE2A_t-6_4OA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/b2698c-6409-459c-b046-ea6f705d2c0d/1/4jy32eUh5kaf1-KtE2A_t-6_4OA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:ed:22:b2:d9:8a:dc:6f:67:ad:ff:a8:68:8d:e5:79:b1:45:
77:d4:84:d4:86:7b:2b:d1:41:d3:fe:ea:60:6e:36:cb:35:fc:
2a:2d:0b:fa:4d:15:3d:f3:88:24:06:ea:64:75:07:45:ef:27:
7b:18:fa:67:e1:d8:79:78:67:03:8c:8d:17:7f:d6:eb:9a:dd:
b1:ed:b4:26:df:55:37:2c:9c:0f:23:5b:48:40:3f:f0:14:a5:
cd:25:77:24:d8:d5:b8:07:6a:39:95:50:bf:9e:f4:3c:a0:94:
fb:0e:9f:29:8d:db:16:10:33:26:fe:58:17:ec:25:fa:2e:bd:
b1:73:7f:01:90:b0:01:ed:33:aa:5e:f7:80:ef:e1:7b:52:f7:
d2:17:f2:69:60:13:6e:86:e8:ce:59:a5:61:3c:19:b7:f8:63:
94:88:b0:d6:5f:25:03:e3:d2:7e:a4:78:67:7c:c7:31:47:f3:
aa:6a:01:eb:43:c3:9d:1d:bd:90:6e:a2:35:4c:f8:c9:6c:03:
35:3d:04:c5:14:d0:51:47:8a:c8:bb:fd:05:72:3e:6d:6d:39:
85:d9:8e:8d:1a:a1:4f:87:68:67:fc:03:98:14:72:a4:11:d1:
cb:61:6a:cc:ca:90:6f:53:3a:14:b6:85:2d:4f:7b:c6:37:d7:
24:68:10:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 19:27:42 2025 by rpki-client