Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/cbd4a7-394d-4c03-bed5-d6b96e88a611/1/C_K7rLR03WED6JEXpjZ0VpZN8xk.mft
File: C_K7rLR03WED6JEXpjZ0VpZN8xk.mft (raw, json)
Hash identifier: CGPGUdY8KHeBzjR6zCy3ehy1rRfOWOWUGxjAvAbvmlQ=
Subject key identifier: 4E:FF:86:23:20:1A:27:A6:AD:4D:C6:06:77:96:01:BE:6D:1D:DB:E5
Authority key identifier: 0B:F2:BB:AC:B4:74:DD:61:03:E8:91:17:A6:36:74:56:96:4D:F3:19
Certificate issuer: /CN=0bf2bbacb474dd6103e89117a6367456964df319
Certificate serial: 0197B70EB0DBFF2D45AB5CCDFDE7DD312BCD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C_K7rLR03WED6JEXpjZ0VpZN8xk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/cbd4a7-394d-4c03-bed5-d6b96e88a611/1/C_K7rLR03WED6JEXpjZ0VpZN8xk.mft
Manifest number: 15B4
Signing time: Sat 28 Jun 2025 15:01:22 +0000
Manifest this update: Sat 28 Jun 2025 15:01:22 +0000
Manifest next update: Sun 29 Jun 2025 15:01:22 +0000
Files and hashes: 1: C_K7rLR03WED6JEXpjZ0VpZN8xk.crl (hash: 5ssjwEjR7qdA9tyr5weln8Bbm9b6mwNtSRTsvQD2EDY=)
2: h4zrMqfOoefngHFo_c_Z31Wn-uw.roa (hash: rUimB7Pd+YTy8jaYyx7sVXzcYUcWrZdClxDPlBTFsaU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/cbd4a7-394d-4c03-bed5-d6b96e88a611/1/C_K7rLR03WED6JEXpjZ0VpZN8xk.crl
rsync://rpki.ripe.net/repository/DEFAULT/dd/cbd4a7-394d-4c03-bed5-d6b96e88a611/1/C_K7rLR03WED6JEXpjZ0VpZN8xk.mft
rsync://rpki.ripe.net/repository/DEFAULT/C_K7rLR03WED6JEXpjZ0VpZN8xk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:0e:b0:db:ff:2d:45:ab:5c:cd:fd:e7:dd:31:2b:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0bf2bbacb474dd6103e89117a6367456964df319
Validity
Not Before: Jun 28 15:01:22 2025 GMT
Not After : Jun 29 15:01:22 2025 GMT
Subject: CN=4eff8623201a27a6ad4dc606779601be6d1ddbe5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:a5:e1:2b:34:43:05:13:bb:e9:01:d0:ec:42:
bd:66:8f:09:18:e3:a8:ec:f4:73:24:4f:01:9d:27:
c0:e5:5d:5d:3d:d1:20:f8:cc:e6:6f:fa:af:45:3e:
9c:ec:c8:0c:a2:48:84:77:a7:d7:02:e9:05:f4:95:
92:48:db:f8:ca:ac:e7:c2:8e:60:b9:b8:df:5e:58:
c2:62:4c:52:68:a4:58:8c:d2:75:04:8f:13:d0:bc:
81:d1:c7:4b:fa:0e:23:22:64:66:b4:49:9a:62:26:
2a:84:44:d8:29:f2:ed:b5:90:ec:3e:34:5a:16:d3:
1c:33:ed:bd:03:39:3e:78:db:2e:70:ca:90:21:da:
89:5a:6b:ec:dd:ec:9d:53:00:10:e8:a7:59:31:80:
2d:82:24:66:1f:85:f3:9b:3c:e1:fa:ab:b3:42:20:
8f:25:30:a2:a0:cc:49:1c:5e:c3:3e:1c:5e:03:c3:
08:a9:31:49:c0:94:56:7c:96:ac:45:2f:91:4a:85:
fb:82:c3:c9:bc:7f:88:0b:cf:52:6c:1d:68:73:04:
d0:c4:0f:fd:0c:53:16:31:ff:38:26:f2:97:73:73:
dc:c2:5c:58:49:cc:90:a9:38:a3:ca:1b:12:0c:ca:
c5:9f:96:07:c6:e2:68:a2:81:87:8b:ac:33:36:ed:
de:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:FF:86:23:20:1A:27:A6:AD:4D:C6:06:77:96:01:BE:6D:1D:DB:E5
X509v3 Authority Key Identifier:
keyid:0B:F2:BB:AC:B4:74:DD:61:03:E8:91:17:A6:36:74:56:96:4D:F3:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C_K7rLR03WED6JEXpjZ0VpZN8xk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/cbd4a7-394d-4c03-bed5-d6b96e88a611/1/C_K7rLR03WED6JEXpjZ0VpZN8xk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/cbd4a7-394d-4c03-bed5-d6b96e88a611/1/C_K7rLR03WED6JEXpjZ0VpZN8xk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:ce:8a:7f:1a:00:0d:14:7d:18:68:69:4e:80:00:91:ac:14:
4e:e7:34:3d:9e:10:87:70:56:d4:95:d4:e0:0a:4f:2c:d6:83:
29:15:0b:65:b6:06:e9:89:4b:c0:84:6c:8f:8a:c7:98:a1:b3:
88:4c:5d:a8:ec:75:c1:e6:ee:67:c7:c2:54:3e:5c:f9:fa:d6:
64:15:13:ad:c7:15:26:4d:a2:fc:fe:53:95:61:f5:f8:bf:96:
82:8d:5b:69:47:06:74:c1:b9:d8:41:92:3e:fe:da:b4:c1:b3:
b3:eb:d9:54:83:d4:28:4b:83:8d:a9:5d:22:24:6c:ba:d2:ab:
62:b4:ac:cb:4c:ef:96:0c:04:ab:2c:b0:de:05:41:87:e2:cf:
8f:09:b2:b0:43:61:c0:bd:c1:a5:4f:dd:da:29:45:8d:b7:36:
60:62:44:5e:fe:d3:48:68:55:b4:db:bf:06:ec:e1:4f:96:e6:
8e:92:bd:0f:a9:f5:71:7d:dc:d7:7a:f0:ea:bd:38:73:e3:62:
d4:e4:05:21:5e:c8:20:6b:51:f8:80:b7:01:b9:70:a4:3d:39:
dc:58:4c:61:7b:27:0a:51:59:df:b9:22:a9:b5:77:b1:26:fe:
26:88:ec:30:4e:28:59:01:ad:f6:6a:09:a7:9d:47:37:a0:55:
49:b3:94:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 19:07:19 2025 by rpki-client