Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/3df0b6-47c9-40fe-8358-fdebbc927d40/1/r4W7ilBEPlBMSFPM4CXvWDQcHVA.mft
File: r4W7ilBEPlBMSFPM4CXvWDQcHVA.mft (raw, json)
Hash identifier: 1z5r/mfJZ2cutXS+NUEeigFAveeQy+5QiJEG1PKAi4M=
Subject key identifier: 58:7E:3D:9E:B8:73:F3:F6:30:74:36:AD:A1:1B:C7:F6:FC:6C:42:F2
Authority key identifier: AF:85:BB:8A:50:44:3E:50:4C:48:53:CC:E0:25:EF:58:34:1C:1D:50
Certificate issuer: /CN=af85bb8a50443e504c4853cce025ef58341c1d50
Certificate serial: 0197B6A06692C1029E2E2EA4A19F9B9DA802
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r4W7ilBEPlBMSFPM4CXvWDQcHVA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/3df0b6-47c9-40fe-8358-fdebbc927d40/1/r4W7ilBEPlBMSFPM4CXvWDQcHVA.mft
Manifest number: 0A2C
Signing time: Sat 28 Jun 2025 13:00:54 +0000
Manifest this update: Sat 28 Jun 2025 13:00:54 +0000
Manifest next update: Sun 29 Jun 2025 13:00:54 +0000
Files and hashes: 1: r4W7ilBEPlBMSFPM4CXvWDQcHVA.crl (hash: V+c6bOwy/uMGMc4UE1u6aIrrI31Cu3pkE6hkxg+htjo=)
2: toLcHJuza0nk_rSiToUi8cqjpA8.roa (hash: kRROIdBqbwyv0kgRq3rS5l7ig0u7UsDgEiLSwPvEVgQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/3df0b6-47c9-40fe-8358-fdebbc927d40/1/r4W7ilBEPlBMSFPM4CXvWDQcHVA.crl
rsync://rpki.ripe.net/repository/DEFAULT/cc/3df0b6-47c9-40fe-8358-fdebbc927d40/1/r4W7ilBEPlBMSFPM4CXvWDQcHVA.mft
rsync://rpki.ripe.net/repository/DEFAULT/r4W7ilBEPlBMSFPM4CXvWDQcHVA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 13:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a0:66:92:c1:02:9e:2e:2e:a4:a1:9f:9b:9d:a8:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=af85bb8a50443e504c4853cce025ef58341c1d50
Validity
Not Before: Jun 28 13:00:54 2025 GMT
Not After : Jun 29 13:00:54 2025 GMT
Subject: CN=587e3d9eb873f3f6307436ada11bc7f6fc6c42f2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:80:a6:bd:c7:a9:0f:14:7a:43:0e:14:d6:a3:
c2:27:72:6d:43:91:40:b2:44:e3:c3:48:60:cc:31:
dd:64:00:44:bd:44:66:f1:91:f7:27:0f:54:12:50:
41:85:7d:21:1d:fa:3a:dd:88:33:64:1f:45:9c:ec:
f9:a7:ab:80:65:82:6a:6e:95:c5:ae:b1:87:98:28:
7d:4d:53:3c:a7:4a:7d:8c:1b:75:c3:19:1f:57:92:
24:2f:95:53:17:cc:cd:6c:42:f2:1c:65:0e:5c:0c:
e9:76:7b:8f:65:4b:53:99:04:1c:7c:7d:77:76:b7:
f3:74:3b:9c:9f:a3:35:3e:02:b1:d5:91:e4:f6:0d:
43:24:2d:84:2b:fe:c3:b3:d1:f2:98:c4:40:5c:20:
a5:c3:c0:6e:c9:5e:08:33:23:4e:71:b5:57:30:ca:
40:90:4a:4d:39:39:fb:04:b8:a9:cd:39:59:cb:ea:
ed:69:4f:31:25:4b:0c:27:4f:d0:91:71:9f:17:e3:
27:c1:b8:2f:80:dd:e6:6d:27:c7:fa:be:5d:01:b8:
e8:14:b0:ab:87:4d:6b:e9:78:14:41:41:aa:75:51:
7a:5c:3f:5c:b9:10:dd:db:89:ea:73:6d:bf:a9:2d:
47:02:78:33:58:63:cd:70:e2:63:89:86:0d:b9:63:
53:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:7E:3D:9E:B8:73:F3:F6:30:74:36:AD:A1:1B:C7:F6:FC:6C:42:F2
X509v3 Authority Key Identifier:
keyid:AF:85:BB:8A:50:44:3E:50:4C:48:53:CC:E0:25:EF:58:34:1C:1D:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r4W7ilBEPlBMSFPM4CXvWDQcHVA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/3df0b6-47c9-40fe-8358-fdebbc927d40/1/r4W7ilBEPlBMSFPM4CXvWDQcHVA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/3df0b6-47c9-40fe-8358-fdebbc927d40/1/r4W7ilBEPlBMSFPM4CXvWDQcHVA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:ec:34:be:0f:c3:8f:36:07:10:2b:a7:ce:4d:9e:0e:24:10:
ed:9c:5e:72:f1:e4:b6:f9:e8:03:bf:3a:54:b8:bb:ec:22:8e:
08:ac:53:ac:36:ac:47:4c:6b:da:5a:b3:77:df:93:ce:d2:e7:
3f:5a:62:c1:59:66:6c:7f:28:b2:cb:f0:5b:5c:4e:56:17:44:
a2:ae:68:9b:4a:07:df:70:17:71:49:22:55:6f:2f:1e:db:da:
6d:23:d2:9c:b4:7f:54:97:77:ee:f9:6b:09:ea:97:ca:99:5c:
83:7f:38:f2:66:de:97:c8:27:7a:b1:fc:c3:7b:d8:19:c1:5c:
08:89:7a:b1:a0:f1:02:92:2d:44:c1:69:2b:b9:20:58:54:4b:
67:08:7e:6d:2a:03:f5:8a:aa:eb:26:86:13:f0:dd:57:9a:6c:
24:b2:9d:2e:13:60:40:38:f9:67:7c:17:79:64:50:eb:e2:84:
f2:0b:51:09:68:6f:36:f6:e8:84:79:c9:de:d4:87:cb:0d:ea:
9a:ea:a8:bd:2c:ce:0c:48:24:87:d5:cf:0c:e4:a2:04:cc:66:
81:f2:32:17:31:8c:12:99:f1:5e:14:c9:57:43:d4:4e:f4:7a:
a1:82:ae:0f:9f:d0:fd:1e:be:9d:9d:66:88:c8:67:5c:28:c0:
55:45:ad:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 22:41:29 2025 by rpki-client