Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/1f3117-f2a1-4322-b63d-f7edb2688652/1/t4CzueCWIhYp_kfhAqxSLaA5ecQ.mft
File: t4CzueCWIhYp_kfhAqxSLaA5ecQ.mft (raw, json)
Hash identifier: hI+IlCOmhDchn/wFidmbCP/6oVEA7+XNyS5+9vEL8nM=
Subject key identifier: 95:7D:4F:FD:48:AF:20:76:F7:E9:89:7E:A2:60:77:FE:6F:82:15:87
Authority key identifier: B7:80:B3:B9:E0:96:22:16:29:FE:47:E1:02:AC:52:2D:A0:39:79:C4
Certificate issuer: /CN=b780b3b9e096221629fe47e102ac522da03979c4
Certificate serial: 0197BA7DFD8ADDC1CD67887FD660AB8D6277
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/t4CzueCWIhYp_kfhAqxSLaA5ecQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/1f3117-f2a1-4322-b63d-f7edb2688652/1/t4CzueCWIhYp_kfhAqxSLaA5ecQ.mft
Manifest number: 15B5
Signing time: Sun 29 Jun 2025 07:01:48 +0000
Manifest this update: Sun 29 Jun 2025 07:01:48 +0000
Manifest next update: Mon 30 Jun 2025 07:01:48 +0000
Files and hashes: 1: BHkKvb2qZLeD_4QIPrmVYJe4E6w.roa (hash: 4HUs5FjtfJoQCq5RfZkLp2netiRG+jQlol4wXGJfij4=)
2: t4CzueCWIhYp_kfhAqxSLaA5ecQ.crl (hash: J8muWE4jPnJzEVGO4VHR3btLKTyr+UgwkW09D7aLn9U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/1f3117-f2a1-4322-b63d-f7edb2688652/1/t4CzueCWIhYp_kfhAqxSLaA5ecQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/1f3117-f2a1-4322-b63d-f7edb2688652/1/t4CzueCWIhYp_kfhAqxSLaA5ecQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/t4CzueCWIhYp_kfhAqxSLaA5ecQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Jun 2025 04:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:ba:7d:fd:8a:dd:c1:cd:67:88:7f:d6:60:ab:8d:62:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b780b3b9e096221629fe47e102ac522da03979c4
Validity
Not Before: Jun 29 07:01:48 2025 GMT
Not After : Jun 30 07:01:48 2025 GMT
Subject: CN=957d4ffd48af2076f7e9897ea26077fe6f821587
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:0d:f2:c6:c6:bc:29:f8:a8:e9:f8:f1:74:4a:
8c:e7:84:ff:da:49:cc:66:71:a3:23:6b:be:77:71:
d0:8f:f7:15:e3:f9:75:c0:2e:cb:01:81:2e:1d:09:
1a:d7:5e:88:cd:41:6d:d8:be:4a:b4:52:64:68:f3:
e3:3b:09:06:15:36:cc:e1:85:e8:a2:39:96:4b:b6:
8a:77:de:9d:f5:3c:bc:41:a9:c9:b8:4f:43:ad:4a:
db:57:2a:61:38:e6:1a:58:dd:3b:77:0c:7b:a0:36:
76:61:25:93:8d:55:6c:08:76:70:bb:39:47:b2:17:
e2:1f:14:de:0b:94:cb:df:bd:47:45:b0:95:9d:d0:
d3:ec:c1:b4:9b:38:d3:2a:44:00:80:3b:a9:f3:77:
2e:7b:25:54:df:f4:4e:48:45:8f:76:89:55:11:83:
8f:43:06:95:a6:95:cb:c7:8f:eb:c7:97:fd:85:20:
49:2c:ec:b6:d6:13:e7:62:59:85:76:ec:da:d3:8a:
5c:90:58:46:c6:21:a2:25:e4:84:e6:12:30:b0:2b:
6e:bc:23:c2:f0:d5:c7:c0:41:f1:77:00:06:4f:39:
f7:81:0e:c1:06:f5:f0:5e:1a:ff:7b:cf:6e:94:2d:
3e:6f:c6:1f:c6:4e:7b:3e:bd:5f:d8:55:4d:00:16:
f4:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:7D:4F:FD:48:AF:20:76:F7:E9:89:7E:A2:60:77:FE:6F:82:15:87
X509v3 Authority Key Identifier:
keyid:B7:80:B3:B9:E0:96:22:16:29:FE:47:E1:02:AC:52:2D:A0:39:79:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t4CzueCWIhYp_kfhAqxSLaA5ecQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/1f3117-f2a1-4322-b63d-f7edb2688652/1/t4CzueCWIhYp_kfhAqxSLaA5ecQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/1f3117-f2a1-4322-b63d-f7edb2688652/1/t4CzueCWIhYp_kfhAqxSLaA5ecQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b6:ac:ed:24:e5:16:0b:7d:35:62:31:db:e2:e2:9b:9f:93:b9:
2e:26:88:77:b2:6d:52:59:bb:7a:f6:d3:a7:18:d9:d7:bc:5f:
5f:4c:48:b6:b1:81:4e:a3:9f:3b:2e:b0:2b:49:42:1a:6b:b9:
a8:8c:b9:35:32:34:31:7d:ca:db:d4:0a:b6:1c:c8:36:a2:6b:
07:a9:81:64:2a:27:c0:56:73:61:28:c9:08:12:fa:f9:a8:0d:
c5:47:73:15:ba:fd:ba:88:a3:76:ad:8b:4d:98:a7:ac:14:72:
c5:9e:dd:37:ff:be:3c:9c:d4:78:9d:f6:34:57:37:0b:7e:7d:
f8:93:01:a1:e8:de:0e:93:20:16:23:15:43:f3:60:51:53:92:
aa:93:17:ae:c1:94:77:1e:b8:5f:93:3d:18:04:55:fb:97:f3:
67:02:3e:36:e5:da:e8:23:7a:b5:b3:e2:3f:5a:c4:d9:b7:3b:
4a:43:65:d9:b9:9e:5a:13:c2:e3:1f:1a:14:a3:33:40:aa:ce:
22:9d:92:04:0f:90:ab:7d:79:70:3f:d9:ca:cd:0f:36:48:32:
14:ad:9d:f8:06:80:06:bb:75:9e:93:52:12:88:4e:25:1d:f7:
42:05:25:0f:33:30:18:63:3c:c9:06:da:84:64:33:30:26:46:
24:82:48:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 11:18:41 2025 by rpki-client