Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/d479cc-a712-4bc3-832d-2727247af210/1/4H4AjW7SOIrTG3QiQjFSqSpU3nE.mft
File: 4H4AjW7SOIrTG3QiQjFSqSpU3nE.mft (raw, json)
Hash identifier: dJyfb3ubxV9yS3Zr4hkBOpo+zlgd0G5fvY+rXU/umMQ=
Subject key identifier: 15:0A:81:98:18:A3:43:FC:60:FF:54:CB:FF:6A:B8:31:32:44:41:D1
Authority key identifier: E0:7E:00:8D:6E:D2:38:8A:D3:1B:74:22:42:31:52:A9:2A:54:DE:71
Certificate issuer: /CN=e07e008d6ed2388ad31b7422423152a92a54de71
Certificate serial: 0197BAB41120F9E544716E4EECBEA0C64984
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4H4AjW7SOIrTG3QiQjFSqSpU3nE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/d479cc-a712-4bc3-832d-2727247af210/1/4H4AjW7SOIrTG3QiQjFSqSpU3nE.mft
Manifest number: 15B9
Signing time: Sun 29 Jun 2025 08:00:52 +0000
Manifest this update: Sun 29 Jun 2025 08:00:52 +0000
Manifest next update: Mon 30 Jun 2025 08:00:52 +0000
Files and hashes: 1: 4H4AjW7SOIrTG3QiQjFSqSpU3nE.crl (hash: KrU7WMOoQHRPQpdVPUh/PHflKyUAKgtOQz6fVDlypE8=)
2: DRmZJybrlbdXMMtCv-LzVRORQZk.roa (hash: 5OPrd1Swg2Ws5p7BB56DIY7Qpw55Ar+XvquToD8doCY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/d479cc-a712-4bc3-832d-2727247af210/1/4H4AjW7SOIrTG3QiQjFSqSpU3nE.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/d479cc-a712-4bc3-832d-2727247af210/1/4H4AjW7SOIrTG3QiQjFSqSpU3nE.mft
rsync://rpki.ripe.net/repository/DEFAULT/4H4AjW7SOIrTG3QiQjFSqSpU3nE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Jun 2025 04:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:ba:b4:11:20:f9:e5:44:71:6e:4e:ec:be:a0:c6:49:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e07e008d6ed2388ad31b7422423152a92a54de71
Validity
Not Before: Jun 29 08:00:52 2025 GMT
Not After : Jun 30 08:00:52 2025 GMT
Subject: CN=150a819818a343fc60ff54cbff6ab831324441d1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:bb:7c:8c:74:8a:aa:86:7a:a5:6e:6f:fd:12:
ad:af:91:d1:2c:60:89:20:bd:f1:e8:d9:40:e4:5b:
ad:2b:80:7d:78:87:f5:39:0f:b3:54:95:6e:5c:66:
ac:6b:23:1b:b1:19:4e:d9:2f:20:c3:40:e0:c3:e4:
3d:8d:f1:06:bd:0f:7b:fc:b7:d3:be:24:dd:ff:d4:
f5:72:2d:36:25:73:07:26:a2:f1:7e:6b:78:30:d9:
9f:4e:9f:cb:49:62:d8:e7:18:69:4c:4b:96:59:62:
10:cc:f0:b3:e0:c4:0b:28:31:ba:a1:8a:5c:e3:3f:
41:5b:86:15:d6:8a:16:63:c3:06:68:90:77:aa:99:
29:4f:06:aa:04:27:23:ca:50:d3:14:91:77:21:66:
fc:61:25:3a:b1:2d:93:ab:c7:06:e4:bf:18:a8:24:
3e:df:45:09:db:f1:86:b8:95:1e:6c:01:df:af:8c:
e1:c0:dd:35:dc:d5:79:af:ec:0e:67:af:48:f0:43:
9b:eb:50:6f:af:b8:a4:54:a4:4e:45:03:a8:a8:cf:
a8:c9:1b:99:18:a1:47:a1:4d:66:ac:33:cb:09:a4:
99:be:bb:24:64:e8:85:51:1c:11:c0:60:24:40:f1:
06:ea:bd:10:5f:61:77:b8:92:45:05:0e:fc:b2:3b:
c5:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:0A:81:98:18:A3:43:FC:60:FF:54:CB:FF:6A:B8:31:32:44:41:D1
X509v3 Authority Key Identifier:
keyid:E0:7E:00:8D:6E:D2:38:8A:D3:1B:74:22:42:31:52:A9:2A:54:DE:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4H4AjW7SOIrTG3QiQjFSqSpU3nE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/d479cc-a712-4bc3-832d-2727247af210/1/4H4AjW7SOIrTG3QiQjFSqSpU3nE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/d479cc-a712-4bc3-832d-2727247af210/1/4H4AjW7SOIrTG3QiQjFSqSpU3nE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:2a:c8:77:e8:21:62:26:37:95:5c:2b:ae:d5:3f:d2:fa:3e:
e3:63:63:d6:b0:fb:39:1e:68:cf:7e:f3:bc:25:3e:61:35:5f:
41:b5:ed:35:d7:04:18:be:3e:2b:15:58:a4:7b:5f:07:88:ad:
56:c0:a0:8d:e1:d5:2e:01:1b:c2:c1:98:48:d3:4e:35:61:d8:
3f:5c:4e:06:cb:d3:fb:26:2e:ed:59:c4:22:6b:bd:c7:f5:e3:
62:da:63:da:d7:b7:d8:bf:3c:db:b8:24:74:5e:58:db:94:2a:
b7:ae:a3:74:47:33:b1:fe:03:8a:6a:74:95:ac:66:5d:bd:8e:
0b:a5:45:c4:dd:ed:f6:a9:06:93:d5:6c:f4:56:6e:73:ee:fb:
a9:58:a4:6b:90:ff:8f:a0:79:6b:f0:2b:27:8f:a6:cd:05:95:
3f:2f:83:d5:89:cf:90:f8:68:e5:c2:83:ce:c2:5b:8f:e6:6e:
78:68:5f:e4:d8:9d:c0:ab:9a:c4:43:40:8e:53:d1:7a:ec:64:
71:9d:c9:c0:99:1b:3b:05:aa:ec:00:5b:30:1e:68:a3:2e:ee:
79:f0:b7:fd:31:59:dd:09:e1:58:3d:c3:bd:dd:8e:d3:d3:3c:
46:bf:9f:b1:0c:65:70:06:e4:1d:ae:ee:af:8a:2d:46:17:1c:
56:b0:09:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 14:26:10 2025 by rpki-client