Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/7c9bb7-268a-4362-bd08-901a373df080/1/4oTj0vGiHIK7s9ZvdvC9kzNRPJo.mft
File: 4oTj0vGiHIK7s9ZvdvC9kzNRPJo.mft (raw, json)
Hash identifier: MjhjJ4Bkxt+IpfbOzBQBgyQeWyQPsfTnkqP6vXiLbc0=
Subject key identifier: 23:1F:C0:3D:88:19:C8:30:5D:1E:51:77:40:B4:60:D2:0A:FB:91:2D
Authority key identifier: E2:84:E3:D2:F1:A2:1C:82:BB:B3:D6:6F:76:F0:BD:93:33:51:3C:9A
Certificate issuer: /CN=e284e3d2f1a21c82bbb3d66f76f0bd9333513c9a
Certificate serial: 0197B82102FB5F91E7AAFDD281A8C2F39E3B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4oTj0vGiHIK7s9ZvdvC9kzNRPJo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/7c9bb7-268a-4362-bd08-901a373df080/1/4oTj0vGiHIK7s9ZvdvC9kzNRPJo.mft
Manifest number: 10B4
Signing time: Sat 28 Jun 2025 20:01:00 +0000
Manifest this update: Sat 28 Jun 2025 20:01:00 +0000
Manifest next update: Sun 29 Jun 2025 20:01:00 +0000
Files and hashes: 1: 4oTj0vGiHIK7s9ZvdvC9kzNRPJo.crl (hash: /SZq0lBs7+IUTucEu682mLbBaJlNtviwJ1D4lutK/M0=)
2: q2EHI1QqAri510M2ZcKkjLI2cEU.roa (hash: 404e8//wzDitUa6OCGaYRBgvvc05hb46lBTtLtVyVk8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/7c9bb7-268a-4362-bd08-901a373df080/1/4oTj0vGiHIK7s9ZvdvC9kzNRPJo.crl
rsync://rpki.ripe.net/repository/DEFAULT/d7/7c9bb7-268a-4362-bd08-901a373df080/1/4oTj0vGiHIK7s9ZvdvC9kzNRPJo.mft
rsync://rpki.ripe.net/repository/DEFAULT/4oTj0vGiHIK7s9ZvdvC9kzNRPJo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b8:21:02:fb:5f:91:e7:aa:fd:d2:81:a8:c2:f3:9e:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e284e3d2f1a21c82bbb3d66f76f0bd9333513c9a
Validity
Not Before: Jun 28 20:01:00 2025 GMT
Not After : Jun 29 20:01:00 2025 GMT
Subject: CN=231fc03d8819c8305d1e517740b460d20afb912d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:ac:9b:0c:6e:bc:d1:a8:60:bd:43:6a:d1:23:
9d:02:29:7f:76:98:9e:3b:2d:03:16:8e:38:b0:b7:
05:d7:29:3f:0f:b9:d7:91:b1:6b:c2:f5:de:49:9a:
1f:fa:6c:4e:fd:2d:ff:d8:89:84:79:58:af:f3:10:
f8:57:1e:32:71:7a:59:31:e7:c5:3f:8d:ff:13:b0:
58:b7:64:6f:eb:f2:05:53:a0:04:9d:ea:26:5d:cf:
6c:fb:e6:1f:0d:29:6f:90:91:19:0f:d4:e0:83:b7:
64:da:bf:d6:6e:93:cd:3d:3c:88:ad:d5:ec:97:c3:
d6:ea:74:7a:77:28:7e:50:40:f1:e7:a8:c6:08:07:
5c:c7:e8:96:0a:74:2b:e3:fc:38:43:65:df:78:52:
66:b6:e4:8f:52:c4:3d:46:28:f7:c7:78:ec:91:05:
1c:1d:9f:aa:67:bc:19:b1:cf:ee:77:b9:dd:48:ce:
ad:2e:97:26:7b:68:c6:89:ba:50:15:15:c0:ad:e4:
80:ca:fe:f4:27:85:b5:fc:eb:9b:03:77:3f:26:e6:
c7:01:1b:ee:ae:ea:46:80:5a:c1:81:34:a3:fd:a7:
3f:a9:98:fe:e5:75:6b:57:e5:8b:ff:23:c9:de:f1:
a0:84:85:0f:dd:7a:d8:f1:b6:3c:17:36:07:68:45:
23:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:1F:C0:3D:88:19:C8:30:5D:1E:51:77:40:B4:60:D2:0A:FB:91:2D
X509v3 Authority Key Identifier:
keyid:E2:84:E3:D2:F1:A2:1C:82:BB:B3:D6:6F:76:F0:BD:93:33:51:3C:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4oTj0vGiHIK7s9ZvdvC9kzNRPJo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/7c9bb7-268a-4362-bd08-901a373df080/1/4oTj0vGiHIK7s9ZvdvC9kzNRPJo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/7c9bb7-268a-4362-bd08-901a373df080/1/4oTj0vGiHIK7s9ZvdvC9kzNRPJo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:a3:68:9c:6f:ad:8f:de:a3:8a:fb:c7:7b:8b:1a:e8:71:a3:
25:04:37:37:4d:79:91:b4:7d:1c:69:e5:48:57:ec:5a:e3:c1:
23:3c:e6:37:2e:e2:9e:48:c9:a9:81:dd:4c:18:6f:5d:fb:12:
74:35:c7:43:c7:2d:2a:32:c3:a8:63:67:86:06:d4:ca:3f:18:
af:fd:8f:ea:bd:37:96:b2:8f:6e:6c:a9:32:36:e2:af:4d:93:
1f:5a:49:49:52:88:5f:2a:55:6b:72:c3:ff:f4:80:1b:85:23:
4c:32:38:07:5f:26:f6:f1:f2:b0:87:4b:08:86:13:24:36:0f:
c1:cd:07:80:4c:69:32:1e:6c:67:40:0b:bd:74:5a:fc:88:30:
21:90:b6:1f:ae:6e:ad:ab:86:c3:00:e0:a0:9b:39:67:e2:17:
fd:3c:09:c8:6b:58:d1:44:15:4f:88:07:ca:a0:d9:a7:70:54:
12:59:a1:d0:fc:5a:68:8b:d9:4c:ea:e2:fa:52:44:61:02:d2:
13:88:3a:46:13:f7:72:24:eb:27:6c:40:74:f1:ea:7b:b0:8c:
39:1f:fd:a7:7a:0c:42:1c:af:33:bf:a7:0b:c4:22:fb:0e:47:
cf:c0:33:b0:6c:13:67:f6:0c:e4:b8:55:bf:79:43:e7:63:44:
a1:39:29:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 22:52:20 2025 by rpki-client