Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/be1720-801e-4f9e-a5c1-68a2f0bb5b7a/1/4kvChw3iWZ2vZkl_VynHSzPvmTo.mft
File: 4kvChw3iWZ2vZkl_VynHSzPvmTo.mft (raw, json)
Hash identifier: 40qEhKFGEkStuexUfN7vA5UIsNGE6TtRCUUJEdHOR/I=
Subject key identifier: E8:79:7B:2C:36:C1:FF:02:9B:9E:FE:72:BC:03:69:A6:EE:3C:F6:BA
Authority key identifier: E2:4B:C2:87:0D:E2:59:9D:AF:66:49:7F:57:29:C7:4B:33:EF:99:3A
Certificate issuer: /CN=e24bc2870de2599daf66497f5729c74b33ef993a
Certificate serial: 0197B6A0391370690B6AB6AF98A3FC2FDE87
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4kvChw3iWZ2vZkl_VynHSzPvmTo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/be1720-801e-4f9e-a5c1-68a2f0bb5b7a/1/4kvChw3iWZ2vZkl_VynHSzPvmTo.mft
Manifest number: 15B5
Signing time: Sat 28 Jun 2025 13:00:43 +0000
Manifest this update: Sat 28 Jun 2025 13:00:43 +0000
Manifest next update: Sun 29 Jun 2025 13:00:43 +0000
Files and hashes: 1: 1-rpc7ufolrPPESf1-RPYDxCY_T8.roa (hash: aMrW8McI1AnE66yXNAmSVq0+rlupGq2T5Ly3LIkG59o=)
2: 4kvChw3iWZ2vZkl_VynHSzPvmTo.crl (hash: WKVC2gyE5Aqb0LYY2kbDxrv0v6gfTwxiVH9pWxzBU/A=)
3: fTOQFI1UvSwnT9wznNbLZs3UG2U.roa (hash: L/h45q4tkE5FoRZ0DX9ltIgAYeRk4jVnxVfoOe4XvCw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/be1720-801e-4f9e-a5c1-68a2f0bb5b7a/1/4kvChw3iWZ2vZkl_VynHSzPvmTo.crl
rsync://rpki.ripe.net/repository/DEFAULT/d8/be1720-801e-4f9e-a5c1-68a2f0bb5b7a/1/4kvChw3iWZ2vZkl_VynHSzPvmTo.mft
rsync://rpki.ripe.net/repository/DEFAULT/4kvChw3iWZ2vZkl_VynHSzPvmTo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 13:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a0:39:13:70:69:0b:6a:b6:af:98:a3:fc:2f:de:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e24bc2870de2599daf66497f5729c74b33ef993a
Validity
Not Before: Jun 28 13:00:43 2025 GMT
Not After : Jun 29 13:00:43 2025 GMT
Subject: CN=e8797b2c36c1ff029b9efe72bc0369a6ee3cf6ba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:55:7f:8b:ac:53:0c:e3:01:bb:5d:b4:01:1b:
06:92:75:0f:d4:20:10:1a:d1:15:dc:86:63:b5:26:
99:61:fa:37:16:9a:f2:44:27:88:ba:40:55:ce:a5:
8a:9a:a3:57:b0:2a:32:27:68:01:a9:bc:9e:01:fa:
b9:91:3e:9f:d1:cf:f5:55:a4:ee:59:f9:d8:4b:7e:
94:e4:16:95:58:4f:c0:9c:c8:25:89:76:85:77:79:
23:56:b8:14:db:37:4a:a3:3b:6d:ff:bc:27:36:8c:
34:0c:cb:68:16:e3:43:91:c2:59:86:64:fb:c5:58:
f9:2f:96:31:c7:f6:aa:d3:b4:72:cb:57:c9:e7:66:
4b:bc:6e:83:c8:c4:46:1c:27:bb:8d:c2:08:c9:38:
e9:1a:d5:49:d0:ef:1b:62:a4:d6:f0:0a:0f:8c:f0:
99:28:26:de:e6:29:2f:7f:c6:04:dc:f0:73:54:b8:
4a:d3:f5:17:51:f5:50:37:79:8f:7b:12:12:66:46:
54:cc:bb:ef:01:b9:ee:cf:a8:40:cb:cf:3d:fc:8f:
a3:b6:de:ec:e7:75:d5:7b:ca:63:6d:dd:a8:a1:3d:
85:12:6b:da:83:dd:1c:97:28:aa:dc:53:24:bf:66:
e9:df:25:5e:76:25:58:20:a7:81:55:e7:8c:c1:e6:
3f:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:79:7B:2C:36:C1:FF:02:9B:9E:FE:72:BC:03:69:A6:EE:3C:F6:BA
X509v3 Authority Key Identifier:
keyid:E2:4B:C2:87:0D:E2:59:9D:AF:66:49:7F:57:29:C7:4B:33:EF:99:3A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4kvChw3iWZ2vZkl_VynHSzPvmTo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/be1720-801e-4f9e-a5c1-68a2f0bb5b7a/1/4kvChw3iWZ2vZkl_VynHSzPvmTo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/be1720-801e-4f9e-a5c1-68a2f0bb5b7a/1/4kvChw3iWZ2vZkl_VynHSzPvmTo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ab:bd:05:61:a0:a2:77:58:2f:ab:08:4b:96:5e:e0:a0:24:89:
1e:f4:f5:8e:ca:ff:08:77:3d:6d:3f:9a:f3:f8:84:2e:52:ce:
56:75:d3:cd:2b:43:27:53:2e:49:df:97:3d:ba:52:4b:04:48:
3d:e9:f0:d9:43:8a:52:7e:4a:38:f4:f0:4c:1d:3a:b2:89:bc:
a0:09:78:19:f7:e5:16:3d:c9:ad:bf:f7:cc:af:2f:b2:ca:02:
8c:a2:e1:68:06:b0:ab:61:9a:3e:35:32:95:db:a4:8d:ec:c2:
02:22:41:33:be:81:f5:a3:b9:1a:45:52:d0:cb:61:ca:fb:83:
ca:3d:60:c7:6a:82:0b:1c:55:da:0a:68:0b:92:ae:69:48:3d:
a2:f0:fa:71:b9:ae:69:48:fb:3a:a8:07:1b:46:83:e9:10:3c:
da:2f:cf:ce:31:3d:07:4a:02:9d:a9:e5:59:70:b9:08:f4:03:
9a:87:5e:ac:c2:d5:90:5f:fc:1f:5a:1c:14:9d:c3:a7:50:25:
58:f8:6a:fd:e8:21:f8:3e:ed:cf:dd:37:90:84:7a:2a:07:c3:
e4:89:90:17:de:40:42:3c:24:4b:d5:d8:ee:f2:90:bb:a1:a0:
f6:94:3d:e0:9c:ad:84:9d:3e:39:58:15:bb:e4:0e:bc:b3:b5:
e3:19:f3:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 21:20:18 2025 by rpki-client