Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/683ffb-65eb-4972-997a-5f29c9f549e8/1/4sP8GYx3L1m47eUphWtS6heaTjg.mft
File: 4sP8GYx3L1m47eUphWtS6heaTjg.mft (raw, json)
Hash identifier: QsUf2BUZwbcWRSjTBOcvT9uEvVDkUgklYwJokCKskrs=
Subject key identifier: B7:C6:12:AD:8E:DA:23:42:A3:AF:B8:E4:85:39:74:0C:A9:B1:8C:27
Authority key identifier: E2:C3:FC:19:8C:77:2F:59:B8:ED:E5:29:85:6B:52:EA:17:9A:4E:38
Certificate issuer: /CN=e2c3fc198c772f59b8ede529856b52ea179a4e38
Certificate serial: 0197B70F0892D3F7000A7E1D13ED52D51A19
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4sP8GYx3L1m47eUphWtS6heaTjg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/683ffb-65eb-4972-997a-5f29c9f549e8/1/4sP8GYx3L1m47eUphWtS6heaTjg.mft
Manifest number: 15B5
Signing time: Sat 28 Jun 2025 15:01:45 +0000
Manifest this update: Sat 28 Jun 2025 15:01:45 +0000
Manifest next update: Sun 29 Jun 2025 15:01:45 +0000
Files and hashes: 1: 4sP8GYx3L1m47eUphWtS6heaTjg.crl (hash: bMOGhwx/aM8N2QFpsJAkbiEyfLMcNzsDHpzZjNwDB/0=)
2: psTRvusZFk5Ps_Sd4pnp1hlanU8.roa (hash: 2FkietEjo3H8sm7po2MUV7JtW5puIthhRvn1WmaMes0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/683ffb-65eb-4972-997a-5f29c9f549e8/1/4sP8GYx3L1m47eUphWtS6heaTjg.crl
rsync://rpki.ripe.net/repository/DEFAULT/dc/683ffb-65eb-4972-997a-5f29c9f549e8/1/4sP8GYx3L1m47eUphWtS6heaTjg.mft
rsync://rpki.ripe.net/repository/DEFAULT/4sP8GYx3L1m47eUphWtS6heaTjg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:0f:08:92:d3:f7:00:0a:7e:1d:13:ed:52:d5:1a:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e2c3fc198c772f59b8ede529856b52ea179a4e38
Validity
Not Before: Jun 28 15:01:45 2025 GMT
Not After : Jun 29 15:01:45 2025 GMT
Subject: CN=b7c612ad8eda2342a3afb8e48539740ca9b18c27
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:b0:48:44:27:39:d0:31:ba:7f:ab:97:97:54:
60:77:0d:ac:eb:7d:a4:a6:57:5a:cc:be:5f:45:3f:
52:e1:2f:34:9d:a5:bd:8b:b5:1e:39:91:46:74:3d:
d3:b7:60:34:d2:1c:d6:7b:57:d8:7d:bb:59:1b:bc:
cc:32:78:c8:39:a2:38:96:23:9b:ed:c9:7c:41:97:
77:c7:aa:24:df:50:cb:12:a0:b6:cc:25:25:46:58:
05:49:0e:6b:4c:c6:bc:26:33:c9:48:39:5c:c3:51:
24:3c:bd:20:62:c8:59:fe:2d:d1:34:28:aa:69:77:
84:81:86:9d:13:57:4a:a6:64:22:27:85:2f:38:ac:
5c:f1:83:e2:75:c6:bf:75:9c:1e:91:0a:90:79:da:
5f:45:5a:ee:d0:0d:70:9a:05:ae:e8:1f:1f:d0:45:
75:bc:3b:f5:61:10:1c:2c:a0:c1:26:70:19:c6:60:
1f:30:3a:18:b1:77:b1:eb:31:16:5a:f3:dd:e4:d2:
a7:9b:48:9f:5e:8e:73:83:6e:95:4c:64:bf:5a:6a:
d1:80:a4:36:9a:56:4b:93:79:16:65:ac:53:e7:2b:
08:68:44:d6:86:a6:d2:19:1f:cb:61:6a:c0:a3:a7:
91:f7:6d:9f:90:12:7b:99:8e:c5:40:1d:ca:52:40:
45:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:C6:12:AD:8E:DA:23:42:A3:AF:B8:E4:85:39:74:0C:A9:B1:8C:27
X509v3 Authority Key Identifier:
keyid:E2:C3:FC:19:8C:77:2F:59:B8:ED:E5:29:85:6B:52:EA:17:9A:4E:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4sP8GYx3L1m47eUphWtS6heaTjg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/683ffb-65eb-4972-997a-5f29c9f549e8/1/4sP8GYx3L1m47eUphWtS6heaTjg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/683ffb-65eb-4972-997a-5f29c9f549e8/1/4sP8GYx3L1m47eUphWtS6heaTjg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a3:21:f7:0a:6f:82:7b:87:37:7c:a8:b2:12:1d:d9:e8:0c:46:
12:7d:d9:ba:b4:de:d3:69:f6:be:36:17:13:6f:a0:f8:de:4c:
28:64:2f:f4:50:f4:72:06:8d:fd:c7:93:6f:6d:5b:e6:cc:72:
88:54:cb:53:a2:3c:6e:1d:6a:2d:e0:a2:8b:53:d1:b7:69:8a:
f5:83:de:a0:3f:5f:5c:83:a6:e1:e6:79:87:35:21:3d:4c:29:
d0:f0:c1:dd:41:6f:ad:db:05:45:4b:a5:50:17:bb:ec:51:81:
e7:e2:16:cb:56:ee:03:78:ea:3d:90:75:96:bc:96:eb:2e:5e:
86:5c:17:67:ba:a0:a0:06:f0:0a:4b:e5:34:e2:09:91:89:df:
4b:b2:0a:a8:d6:6d:ac:25:f0:77:37:18:fb:68:24:ca:4f:ba:
0f:f9:ef:92:58:a8:62:f1:95:77:49:b5:6a:35:7b:1d:4e:04:
d7:72:ae:27:46:99:71:74:9a:09:b3:cb:e9:e0:15:05:a4:38:
4d:48:f2:3a:60:f3:66:67:13:b8:7c:6d:c3:b0:93:16:bb:ea:
58:06:4d:4e:08:5b:64:3b:31:f3:30:71:65:84:f8:2c:a2:6f:
e8:0c:9a:48:d2:a0:02:88:e8:e5:04:0b:0a:e6:02:b2:25:a2:
1c:25:a6:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 20:25:17 2025 by rpki-client