Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/546a55-ddaa-4341-b8f9-3ec522771f40/1/4bUJZyudmYtGScw3aoKYeeb-rKc.mft
File: 4bUJZyudmYtGScw3aoKYeeb-rKc.mft (raw, json)
Hash identifier: HYdiCQfGe5VQWpNkIeVcyQYBvB9DqUOoT2cwYtnl6C0=
Subject key identifier: 71:AD:BF:28:44:88:E9:DF:45:22:CC:73:9B:0D:EF:30:2E:E7:62:4A
Authority key identifier: E1:B5:09:67:2B:9D:99:8B:46:49:CC:37:6A:82:98:79:E6:FE:AC:A7
Certificate issuer: /CN=e1b509672b9d998b4649cc376a829879e6feaca7
Certificate serial: 0197BA7EE6BF869B66473E3A59E0A7D04D90
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4bUJZyudmYtGScw3aoKYeeb-rKc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/546a55-ddaa-4341-b8f9-3ec522771f40/1/4bUJZyudmYtGScw3aoKYeeb-rKc.mft
Manifest number: 04B3
Signing time: Sun 29 Jun 2025 07:02:48 +0000
Manifest this update: Sun 29 Jun 2025 07:02:48 +0000
Manifest next update: Mon 30 Jun 2025 07:02:48 +0000
Files and hashes: 1: 4bUJZyudmYtGScw3aoKYeeb-rKc.crl (hash: ERxrJgLLCUstg8SAVmNfPM51C8a32BYXIp1wT4TYm6Q=)
2: OQo7GpnulSOExhIEm_K7r3ad-fY.roa (hash: Ps91P3w11BS7K9Fm7RIorSRMZXeRo1jCwYGqQnSXpfM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/546a55-ddaa-4341-b8f9-3ec522771f40/1/4bUJZyudmYtGScw3aoKYeeb-rKc.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/546a55-ddaa-4341-b8f9-3ec522771f40/1/4bUJZyudmYtGScw3aoKYeeb-rKc.mft
rsync://rpki.ripe.net/repository/DEFAULT/4bUJZyudmYtGScw3aoKYeeb-rKc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Jun 2025 04:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:ba:7e:e6:bf:86:9b:66:47:3e:3a:59:e0:a7:d0:4d:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e1b509672b9d998b4649cc376a829879e6feaca7
Validity
Not Before: Jun 29 07:02:48 2025 GMT
Not After : Jun 30 07:02:48 2025 GMT
Subject: CN=71adbf284488e9df4522cc739b0def302ee7624a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:df:b7:d7:5d:04:34:86:a2:cb:df:61:e6:c9:
bb:c7:dd:1b:f8:df:ea:26:25:45:ef:ca:ac:d5:71:
b5:0e:fc:8d:b8:a1:e1:33:3a:5e:16:9a:2c:0e:5a:
51:1e:8c:2f:c9:e9:20:1c:90:ed:f6:e3:4a:19:94:
1c:af:67:02:d6:ec:d7:db:d5:c2:54:a4:eb:36:41:
bd:00:f9:09:73:70:64:d7:26:44:22:5b:69:02:79:
f6:7b:6a:7d:b4:34:f7:99:98:bc:16:8f:d1:ba:9b:
af:c3:7b:d2:0e:23:f7:13:d5:b7:40:a1:9d:88:bf:
5e:1d:9b:79:8a:ec:52:c2:98:e0:af:50:76:fa:91:
79:45:37:ff:1f:95:df:f5:af:71:38:ed:10:67:06:
38:6b:ce:95:47:dc:97:5c:25:3c:52:fb:61:bf:43:
97:c9:87:6a:2c:92:b2:b5:a2:6d:49:b2:53:e4:1b:
10:bc:9c:82:52:63:58:8b:d0:8e:f2:a5:86:98:a5:
85:95:9f:62:ec:7b:e6:93:23:28:11:ce:8d:6c:c3:
0f:14:c5:95:0e:76:13:2c:d3:6e:75:81:37:7c:ca:
b0:fe:2b:97:bd:3f:74:59:ef:22:83:1e:7e:b1:33:
58:a4:04:a1:1d:02:9a:df:76:f4:f3:10:1c:f3:4e:
27:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:AD:BF:28:44:88:E9:DF:45:22:CC:73:9B:0D:EF:30:2E:E7:62:4A
X509v3 Authority Key Identifier:
keyid:E1:B5:09:67:2B:9D:99:8B:46:49:CC:37:6A:82:98:79:E6:FE:AC:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4bUJZyudmYtGScw3aoKYeeb-rKc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/546a55-ddaa-4341-b8f9-3ec522771f40/1/4bUJZyudmYtGScw3aoKYeeb-rKc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/546a55-ddaa-4341-b8f9-3ec522771f40/1/4bUJZyudmYtGScw3aoKYeeb-rKc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:68:97:92:db:d9:1d:7a:93:6d:8d:aa:13:b8:45:6c:e2:d8:
82:46:2b:e1:3b:a7:b4:16:6f:23:da:3a:ab:8d:dd:93:2c:a0:
55:99:b8:a6:3e:cb:87:5c:2d:af:6c:0b:01:e8:8e:79:24:50:
bd:99:f9:05:27:95:0d:a0:74:5a:56:88:c8:62:5c:20:89:d5:
07:0f:c0:d1:13:09:5d:bd:a5:6b:5e:77:2e:9d:d0:b5:d7:12:
f2:85:08:32:42:61:a8:dd:ce:f3:a4:c1:bd:7d:c5:a2:13:45:
8f:d2:24:d5:01:33:27:9e:04:75:9d:6e:a4:9d:77:3d:fa:21:
a5:9f:1d:7c:3b:0c:11:26:b9:6e:a5:94:4b:3c:56:70:ed:82:
a0:b0:66:e3:0c:39:ce:9f:b2:3a:38:da:5f:4b:5b:db:5f:78:
8d:d3:82:3b:ab:ec:4c:7b:44:7a:d9:5f:0e:8f:e1:b2:a9:c8:
f6:3e:04:4a:14:20:89:02:13:fb:4f:0d:11:46:86:56:c7:b6:
f1:58:d5:9c:19:c4:5c:22:56:00:e7:a2:be:5c:34:c7:06:84:
b6:c1:fb:a2:08:c0:33:38:06:85:d0:e5:1d:6c:78:8e:dc:69:
b4:2e:e5:bb:8a:97:c9:78:34:9d:e4:f7:c1:cc:40:52:35:e2:
2a:5f:47:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 14:34:21 2025 by rpki-client