Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/659d27-bbb5-49f4-8fd1-c264b75b6b78/1/4rRpKpKR8sZ7VswV2k0xASAjAXc.mft
File: 4rRpKpKR8sZ7VswV2k0xASAjAXc.mft (raw, json)
Hash identifier: Krl1YPd0cyTTTCj6gs09i2+O6Bj1rp1hBv98ATKfWkk=
Subject key identifier: 2D:A7:68:36:A0:63:DE:AA:6B:85:81:98:56:6D:E4:39:8C:F4:94:E3
Authority key identifier: E2:B4:69:2A:92:91:F2:C6:7B:56:CC:15:DA:4D:31:01:20:23:01:77
Certificate issuer: /CN=e2b4692a9291f2c67b56cc15da4d310120230177
Certificate serial: 0197B6A045E66BC606880E78C65829FDE260
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4rRpKpKR8sZ7VswV2k0xASAjAXc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/659d27-bbb5-49f4-8fd1-c264b75b6b78/1/4rRpKpKR8sZ7VswV2k0xASAjAXc.mft
Manifest number: 0218
Signing time: Sat 28 Jun 2025 13:00:46 +0000
Manifest this update: Sat 28 Jun 2025 13:00:46 +0000
Manifest next update: Sun 29 Jun 2025 13:00:46 +0000
Files and hashes: 1: 4NCyaBU3y3IsV-tIz8ykBHkjQrA.roa (hash: 6MR/wTh/d3g4brX5BBFxl1tdarfWH7geP5gRFSxNByI=)
2: 4rRpKpKR8sZ7VswV2k0xASAjAXc.crl (hash: doOPMt1kaMMVKSzGrv2xR2W/to2W/RwtT1hqVIwiQ3Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/659d27-bbb5-49f4-8fd1-c264b75b6b78/1/4rRpKpKR8sZ7VswV2k0xASAjAXc.crl
rsync://rpki.ripe.net/repository/DEFAULT/cd/659d27-bbb5-49f4-8fd1-c264b75b6b78/1/4rRpKpKR8sZ7VswV2k0xASAjAXc.mft
rsync://rpki.ripe.net/repository/DEFAULT/4rRpKpKR8sZ7VswV2k0xASAjAXc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a0:45:e6:6b:c6:06:88:0e:78:c6:58:29:fd:e2:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e2b4692a9291f2c67b56cc15da4d310120230177
Validity
Not Before: Jun 28 13:00:46 2025 GMT
Not After : Jun 29 13:00:46 2025 GMT
Subject: CN=2da76836a063deaa6b858198566de4398cf494e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:62:07:e4:be:9b:5a:68:e4:31:f6:68:15:35:
39:be:44:5c:98:7e:ba:82:0c:bf:81:76:d7:b0:87:
36:5b:35:10:35:c4:4b:42:c0:a5:0a:a4:b2:f1:93:
5c:5b:de:b9:0f:e3:a6:15:f8:2b:76:d3:c6:75:08:
73:fe:b1:6c:96:fa:e6:6b:4f:da:c8:b9:a9:3e:43:
bc:4e:27:5e:a5:04:9e:4f:43:fa:bf:7b:eb:46:ad:
7d:a1:32:47:37:5f:24:98:01:5c:d0:57:80:37:b9:
c6:b8:b1:32:92:b9:9e:44:a0:58:70:6a:20:bf:50:
a3:b8:b0:72:3b:84:30:05:de:fd:87:63:ea:65:4d:
ee:04:01:bf:1e:80:ad:d3:26:66:c4:81:c0:91:cf:
5a:6a:30:bb:43:1a:41:af:28:75:9b:6c:16:fd:d4:
2e:65:97:ab:d4:a9:a1:51:fe:c7:57:ce:19:69:56:
e4:42:d2:d0:0d:df:5f:eb:d7:8d:c8:e7:4c:e6:7e:
0c:2c:e9:3b:fa:fd:4f:28:c1:d6:4b:78:cd:0d:bb:
82:f4:8e:64:f3:56:b8:2d:af:d1:f6:21:cf:2f:4e:
d1:af:d0:a8:c0:74:1b:d7:50:18:62:55:f9:31:38:
b6:22:9e:d4:c5:48:35:2d:04:b4:bb:ee:2f:f7:8c:
ac:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:A7:68:36:A0:63:DE:AA:6B:85:81:98:56:6D:E4:39:8C:F4:94:E3
X509v3 Authority Key Identifier:
keyid:E2:B4:69:2A:92:91:F2:C6:7B:56:CC:15:DA:4D:31:01:20:23:01:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4rRpKpKR8sZ7VswV2k0xASAjAXc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/659d27-bbb5-49f4-8fd1-c264b75b6b78/1/4rRpKpKR8sZ7VswV2k0xASAjAXc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/659d27-bbb5-49f4-8fd1-c264b75b6b78/1/4rRpKpKR8sZ7VswV2k0xASAjAXc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b5:ba:e9:4e:47:5c:89:32:24:63:04:f7:70:3d:81:d3:39:29:
79:8d:a7:a3:d3:e3:a2:31:b6:9e:31:1e:92:8f:92:6b:de:7c:
f2:aa:72:ca:a0:50:77:f4:9b:ea:6f:d9:b3:be:b1:ee:e4:b2:
f4:89:46:0f:d5:b3:03:66:77:89:d0:e0:4d:26:b7:6c:fd:5d:
5b:94:d7:be:d6:a2:46:85:93:6f:7b:7f:bd:c9:85:a2:17:9d:
63:7d:c0:1d:8f:df:98:5a:b6:4f:3e:4b:08:52:c6:d3:61:f0:
59:17:3b:0a:f7:8a:70:f3:4b:20:98:04:c7:63:cc:0f:d8:50:
e3:0f:5e:08:6a:2e:28:d4:92:e4:93:11:75:42:fa:a1:bf:8a:
83:e4:d5:44:a2:85:bd:4f:50:f5:f6:2d:33:96:4d:a4:90:69:
b2:f8:35:cd:5a:56:b8:78:fa:20:f3:ea:a2:cb:d1:ae:cc:9c:
33:83:bd:ec:89:38:23:3b:4a:dd:51:69:9c:0e:bc:b3:fb:5a:
b5:f6:4e:8b:8d:82:0b:50:5c:60:ed:00:9c:cf:51:8a:49:08:
aa:ba:10:47:37:83:e5:8a:2f:0c:33:27:7c:27:ab:50:8c:52:
e7:1a:c4:a9:40:06:97:e2:40:96:16:bd:28:45:f2:53:56:de:
88:33:50:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 18:52:52 2025 by rpki-client