Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/3dc879-11b9-4fa6-841d-906a91ee9fe4/1/4gRJ_n9LLPH3_WcOWC68yX5F9_8.mft
File: 4gRJ_n9LLPH3_WcOWC68yX5F9_8.mft (raw, json)
Hash identifier: BmsxO5B/fg+GBksBk0dtngfY9hrf4y6emPeCtH9If4k=
Subject key identifier: 32:74:97:17:6A:E9:9F:F5:8E:0F:35:7F:E2:83:18:23:2E:71:07:FB
Authority key identifier: E2:04:49:FE:7F:4B:2C:F1:F7:FD:67:0E:58:2E:BC:C9:7E:45:F7:FF
Certificate issuer: /CN=e20449fe7f4b2cf1f7fd670e582ebcc97e45f7ff
Certificate serial: 0197B7EA6E28FC248DE05BC1960E43E04CAA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4gRJ_n9LLPH3_WcOWC68yX5F9_8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/3dc879-11b9-4fa6-841d-906a91ee9fe4/1/4gRJ_n9LLPH3_WcOWC68yX5F9_8.mft
Manifest number: 15B7
Signing time: Sat 28 Jun 2025 19:01:23 +0000
Manifest this update: Sat 28 Jun 2025 19:01:23 +0000
Manifest next update: Sun 29 Jun 2025 19:01:23 +0000
Files and hashes: 1: 4gRJ_n9LLPH3_WcOWC68yX5F9_8.crl (hash: JIsWqd3A/UabSnCLUZYhc6PxNCoGJuoWo1vlK8wQdRw=)
2: GfCJvI9nayXOG-c9-kNZYMtGvRY.roa (hash: iErUIkofrDIWovm2VEktlTu0LGFlXqiT+Jb2IEFCjN4=)
3: b6PxSRMMpYMDelZhlHVJswnGzlY.roa (hash: 2hbPovorwIzKGKG+8Z0PbXVcSz91V4CX1uoPUPOxcMk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/3dc879-11b9-4fa6-841d-906a91ee9fe4/1/4gRJ_n9LLPH3_WcOWC68yX5F9_8.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/3dc879-11b9-4fa6-841d-906a91ee9fe4/1/4gRJ_n9LLPH3_WcOWC68yX5F9_8.mft
rsync://rpki.ripe.net/repository/DEFAULT/4gRJ_n9LLPH3_WcOWC68yX5F9_8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:ea:6e:28:fc:24:8d:e0:5b:c1:96:0e:43:e0:4c:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e20449fe7f4b2cf1f7fd670e582ebcc97e45f7ff
Validity
Not Before: Jun 28 19:01:23 2025 GMT
Not After : Jun 29 19:01:23 2025 GMT
Subject: CN=327497176ae99ff58e0f357fe28318232e7107fb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:6f:d1:2f:3e:06:5e:12:45:01:c6:35:f1:06:
e3:81:8b:6b:8e:c2:49:06:8a:6d:1a:ac:d8:70:5c:
ad:da:a1:9f:59:48:6d:bf:38:8d:f5:99:34:e3:67:
f0:6a:b2:4a:0c:18:9a:d4:c6:85:ec:9d:ac:ca:f3:
33:ef:df:12:02:64:2f:0d:b8:d2:04:1d:28:ab:f9:
5a:7c:74:36:74:36:63:6f:21:13:c7:54:aa:43:70:
64:2e:24:44:22:9d:bc:e2:6f:da:14:e8:15:b8:8e:
e8:44:25:53:d4:35:d8:23:fb:f3:ed:54:be:ae:ac:
cd:1b:f5:61:1e:07:e5:e3:f6:20:41:cd:4b:e2:2a:
e6:fd:16:55:f3:0c:0d:eb:73:a9:1c:07:a6:2b:c2:
67:e9:a4:e4:06:82:a8:6b:69:b4:1c:c7:92:93:26:
32:28:35:ab:ba:e1:5b:83:bc:a6:e1:df:05:6d:9a:
95:7d:f2:f3:27:b3:1c:5b:64:8d:10:ba:6c:3b:36:
c8:d8:3c:5f:7d:3b:1f:13:03:93:81:4e:7a:dd:60:
0a:84:ff:49:21:6c:bc:4a:1a:74:03:66:1d:15:b0:
e4:20:f8:c3:b3:7b:39:c0:af:e2:e4:0e:3e:28:b7:
a4:8a:5a:3b:2a:53:f5:ad:6b:86:1a:c4:a6:02:33:
14:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:74:97:17:6A:E9:9F:F5:8E:0F:35:7F:E2:83:18:23:2E:71:07:FB
X509v3 Authority Key Identifier:
keyid:E2:04:49:FE:7F:4B:2C:F1:F7:FD:67:0E:58:2E:BC:C9:7E:45:F7:FF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4gRJ_n9LLPH3_WcOWC68yX5F9_8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/3dc879-11b9-4fa6-841d-906a91ee9fe4/1/4gRJ_n9LLPH3_WcOWC68yX5F9_8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/3dc879-11b9-4fa6-841d-906a91ee9fe4/1/4gRJ_n9LLPH3_WcOWC68yX5F9_8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:0a:28:10:e3:50:1f:f5:12:ca:98:ec:8f:37:be:1c:89:f9:
f6:02:e2:69:96:7c:24:3b:99:7a:78:07:0d:99:c9:ae:65:6e:
b3:a2:a7:4c:1f:22:c0:8c:3e:03:43:f1:d9:9d:3b:40:9e:06:
c8:3a:40:1c:55:9d:fb:bf:49:0e:0d:6e:5f:e9:4f:a7:34:3d:
2b:36:6c:ec:a6:e1:05:e1:3b:ea:2f:89:98:84:4f:1f:ac:df:
4f:c8:43:af:ba:7e:9f:c1:e4:0a:6c:37:35:e3:fe:eb:80:31:
0b:8b:3b:38:f6:da:72:fb:e5:b8:ff:27:34:7f:3d:a2:59:f4:
a9:71:13:1d:29:25:ec:a7:11:7c:4b:2d:05:29:91:ac:47:4a:
1b:ae:f0:7e:ed:af:fc:3b:f9:5b:b6:0e:9c:6d:48:77:83:dd:
4d:54:6b:5d:b1:4d:1e:ee:e3:e8:92:12:45:0b:12:1f:4c:5d:
1d:e5:16:bf:ff:43:0e:db:9a:db:57:82:f0:41:e9:9e:3e:40:
dd:2c:7c:31:13:06:d8:65:c4:df:37:a7:f5:1c:ca:f3:d9:d2:
4f:b9:0b:1c:eb:fa:be:9c:81:99:21:f1:fd:bf:02:a2:93:be:
31:a0:38:fb:36:77:01:95:de:59:82:f8:fd:46:d8:bf:f7:ac:
eb:21:6d:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 22:39:51 2025 by rpki-client