Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/02fdfd-7ac8-4321-b930-8fa551e6ae75/1/tR4_a-vNBSkdxSZeCLHNbEAbnP0.mft
File: tR4_a-vNBSkdxSZeCLHNbEAbnP0.mft (raw, json)
Hash identifier: AaAcmjxeVJz65KS+3TMC0QsdZsXT5ViXWTFdJLTd4d4=
Subject key identifier: 65:C1:CC:9B:59:62:B6:6A:44:A2:FC:5B:D4:AB:29:91:22:D6:73:AA
Authority key identifier: B5:1E:3F:6B:EB:CD:05:29:1D:C5:26:5E:08:B1:CD:6C:40:1B:9C:FD
Certificate issuer: /CN=b51e3f6bebcd05291dc5265e08b1cd6c401b9cfd
Certificate serial: 0197B8C5EF4D8975A28A29BEC56933077504
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tR4_a-vNBSkdxSZeCLHNbEAbnP0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/02fdfd-7ac8-4321-b930-8fa551e6ae75/1/tR4_a-vNBSkdxSZeCLHNbEAbnP0.mft
Manifest number: 15BA
Signing time: Sat 28 Jun 2025 23:01:08 +0000
Manifest this update: Sat 28 Jun 2025 23:01:08 +0000
Manifest next update: Sun 29 Jun 2025 23:01:08 +0000
Files and hashes: 1: XhX8A-oz684Iwe53pFqloQYS-kU.roa (hash: Mq5uGJtvZYMl6nllrQZDhX8D38boD4gAAjpBeZPZFnU=)
2: tR4_a-vNBSkdxSZeCLHNbEAbnP0.crl (hash: Gyc7CYLFngUYD0FbjIiEIhnLFfO3B3L4GjO1bqVvrQY=)
3: xq7eF4vg8c3V2xQvveah7LJZv-A.roa (hash: atQkAxpvj5iGJRjdwa/1uBWThI8y8UsCB5Ad2gGNyxg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/02fdfd-7ac8-4321-b930-8fa551e6ae75/1/tR4_a-vNBSkdxSZeCLHNbEAbnP0.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/02fdfd-7ac8-4321-b930-8fa551e6ae75/1/tR4_a-vNBSkdxSZeCLHNbEAbnP0.mft
rsync://rpki.ripe.net/repository/DEFAULT/tR4_a-vNBSkdxSZeCLHNbEAbnP0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 19:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b8:c5:ef:4d:89:75:a2:8a:29:be:c5:69:33:07:75:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b51e3f6bebcd05291dc5265e08b1cd6c401b9cfd
Validity
Not Before: Jun 28 23:01:08 2025 GMT
Not After : Jun 29 23:01:08 2025 GMT
Subject: CN=65c1cc9b5962b66a44a2fc5bd4ab299122d673aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:54:65:a0:20:ca:11:3f:3a:0e:07:c0:34:10:
63:7c:25:6d:1d:70:90:22:a2:89:e3:08:d9:91:55:
ce:95:c1:f2:7a:e5:2e:11:32:f4:41:ac:5c:45:3f:
3b:ca:40:16:ab:a5:2d:bc:f3:91:c3:f8:e5:a1:53:
19:f0:89:ce:40:c2:05:ec:84:56:8f:fe:ee:99:87:
4d:40:0b:49:0c:05:c7:10:68:0f:f0:f2:6d:fa:bd:
70:31:7c:44:18:e3:f6:72:3f:4a:92:a8:4d:6f:a1:
ce:89:12:1c:c3:d5:a9:fc:d6:cd:a4:35:5a:29:b5:
3b:4f:b7:0a:85:a4:79:84:07:de:2d:59:2d:a0:42:
1c:5a:32:d9:a9:83:d7:b3:f6:91:3b:88:8d:02:9a:
62:09:5c:08:99:f7:59:3a:50:08:e2:ff:0a:6a:2a:
57:5f:c8:38:57:27:8f:24:a9:65:83:b2:c1:fb:88:
ed:49:55:f9:d8:ba:e3:78:cf:8c:b6:25:ac:d1:45:
d0:d0:6e:64:b8:29:29:92:d5:1f:89:0a:8f:3d:7b:
67:f5:98:82:91:43:de:28:c9:7d:89:b9:d9:b9:d3:
8c:ac:80:f8:91:57:d4:20:8e:f2:08:cb:ea:4a:5e:
30:3e:70:63:c5:e5:5e:f5:2c:2f:fd:49:82:7d:a3:
d9:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:C1:CC:9B:59:62:B6:6A:44:A2:FC:5B:D4:AB:29:91:22:D6:73:AA
X509v3 Authority Key Identifier:
keyid:B5:1E:3F:6B:EB:CD:05:29:1D:C5:26:5E:08:B1:CD:6C:40:1B:9C:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tR4_a-vNBSkdxSZeCLHNbEAbnP0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/02fdfd-7ac8-4321-b930-8fa551e6ae75/1/tR4_a-vNBSkdxSZeCLHNbEAbnP0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/02fdfd-7ac8-4321-b930-8fa551e6ae75/1/tR4_a-vNBSkdxSZeCLHNbEAbnP0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:be:fa:07:30:a5:c2:91:e0:74:5a:69:cc:02:f2:87:6c:bd:
f1:8d:3d:05:05:3c:d1:00:6d:ff:08:7f:64:0c:b3:b3:66:fc:
6f:60:f8:c8:2e:5b:cb:d4:b8:d7:ab:0a:d1:0f:29:df:89:ea:
48:fa:81:27:97:f0:23:a7:99:b1:90:83:c0:5e:a5:da:4e:55:
58:78:42:72:13:9d:0d:57:e3:35:ac:d2:3b:78:3e:a4:8e:60:
30:0e:a1:5d:28:53:a3:60:87:09:f0:28:3a:96:42:58:56:b0:
70:28:1a:78:71:e6:b2:25:b2:e7:55:96:84:ad:3d:d1:9b:6a:
5a:3a:6f:38:05:b1:e8:b2:da:5e:0c:0e:c7:33:41:8b:ff:ae:
f8:07:b2:95:15:a2:44:96:aa:cb:53:0c:f5:9c:14:d9:f1:b4:
14:cf:10:eb:00:45:45:59:e2:71:bd:4d:50:59:56:db:7d:c5:
1e:70:cb:51:c1:16:12:0a:87:a2:8c:49:ca:9d:1d:0c:de:d1:
8f:07:f7:48:41:e0:f6:ec:2c:25:e7:1d:76:0c:ab:ec:a9:af:
2b:1d:b1:1a:c1:89:5d:e8:f5:97:66:77:76:d5:77:56:aa:7d:
49:b0:ac:f2:f9:6c:19:6a:03:f8:f1:af:62:64:14:3a:9c:a6:
e9:e0:22:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 04:05:22 2025 by rpki-client