Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/f2db08-c845-41ab-a08a-3375617d4efd/1/4sWGEhDcOL2660d9bacZZkqEprw.mft
File: 4sWGEhDcOL2660d9bacZZkqEprw.mft (raw, json)
Hash identifier: 2p3mTp2MfvAU+VmnXxFgKxBmIai+RH+drn3b8HKFvCg=
Subject key identifier: 94:1D:BB:37:42:BB:2C:A7:F3:CA:9C:CF:C0:19:74:A2:6E:B5:04:67
Authority key identifier: E2:C5:86:12:10:DC:38:BD:BA:EB:47:7D:6D:A7:19:66:4A:84:A6:BC
Certificate issuer: /CN=e2c5861210dc38bdbaeb477d6da719664a84a6bc
Certificate serial: 0197B6D7B8CEC63DB969E3AED56A8A097012
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4sWGEhDcOL2660d9bacZZkqEprw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/de/f2db08-c845-41ab-a08a-3375617d4efd/1/4sWGEhDcOL2660d9bacZZkqEprw.mft
Manifest number: 15B6
Signing time: Sat 28 Jun 2025 14:01:20 +0000
Manifest this update: Sat 28 Jun 2025 14:01:20 +0000
Manifest next update: Sun 29 Jun 2025 14:01:20 +0000
Files and hashes: 1: 4sWGEhDcOL2660d9bacZZkqEprw.crl (hash: ElgtGbS8bgXRY9GhE5jiOIrHqBU4PgD/EXn/453i+8Y=)
2: MhYnzmLfZDvOOpTx4DJlD8uvHAw.roa (hash: memj1j1yK6z3c51s+6fk9nq4QfCP9UkOHBbx45J56ck=)
3: V1IYhraqy6GtWLev9Eiy1F0cSC0.roa (hash: OXaQyDbPBz9AsW1XM72kAOArg1kTGFWfPBLrTjWDPns=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/de/f2db08-c845-41ab-a08a-3375617d4efd/1/4sWGEhDcOL2660d9bacZZkqEprw.crl
rsync://rpki.ripe.net/repository/DEFAULT/de/f2db08-c845-41ab-a08a-3375617d4efd/1/4sWGEhDcOL2660d9bacZZkqEprw.mft
rsync://rpki.ripe.net/repository/DEFAULT/4sWGEhDcOL2660d9bacZZkqEprw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 14:01:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:d7:b8:ce:c6:3d:b9:69:e3:ae:d5:6a:8a:09:70:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e2c5861210dc38bdbaeb477d6da719664a84a6bc
Validity
Not Before: Jun 28 14:01:20 2025 GMT
Not After : Jun 29 14:01:20 2025 GMT
Subject: CN=941dbb3742bb2ca7f3ca9ccfc01974a26eb50467
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:0a:a0:1b:a3:72:3f:f3:c2:3a:2f:39:56:66:
de:db:57:3f:ed:0c:40:ea:a4:a6:86:bc:13:91:82:
22:10:19:14:71:b0:e2:98:fb:56:e9:4c:19:6c:f8:
1d:14:5f:bc:ad:de:1c:1d:ee:a2:ae:d9:54:7f:39:
e7:7d:dc:65:98:b1:75:eb:a4:3a:42:6e:4f:e7:83:
df:5a:74:42:e4:18:ac:c8:ae:89:ed:8a:ed:b9:e8:
f3:fc:71:51:71:3f:47:f0:b1:46:c3:c8:33:a7:a9:
23:aa:3c:a1:a1:95:06:9c:d3:3d:71:6e:16:95:45:
17:08:37:27:39:2e:92:3e:59:b2:8a:29:c2:6e:75:
b7:cc:a7:fe:c2:e2:24:3a:d5:49:c3:3b:97:09:69:
ba:b2:0b:70:7e:99:8b:1e:f1:87:f5:53:a8:77:eb:
9b:71:74:46:86:73:fe:78:2c:0d:90:c6:8e:27:a8:
82:0e:8a:cd:8c:ae:76:14:25:84:dd:30:d5:98:f1:
da:ac:49:5b:50:17:33:8e:c0:f9:30:3b:b8:9b:e1:
f4:27:7e:7a:80:e6:f5:aa:4b:9c:5a:23:fd:bc:08:
4a:8d:ae:ec:8f:15:5e:f8:ca:26:07:e3:b8:96:72:
ac:be:20:ed:60:61:dc:78:c0:4f:48:35:f0:4f:a4:
5a:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:1D:BB:37:42:BB:2C:A7:F3:CA:9C:CF:C0:19:74:A2:6E:B5:04:67
X509v3 Authority Key Identifier:
keyid:E2:C5:86:12:10:DC:38:BD:BA:EB:47:7D:6D:A7:19:66:4A:84:A6:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4sWGEhDcOL2660d9bacZZkqEprw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/f2db08-c845-41ab-a08a-3375617d4efd/1/4sWGEhDcOL2660d9bacZZkqEprw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/de/f2db08-c845-41ab-a08a-3375617d4efd/1/4sWGEhDcOL2660d9bacZZkqEprw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:be:3b:90:f5:5f:79:23:ef:48:e6:ce:5e:64:65:6c:cb:8d:
36:0f:55:02:80:b2:89:6b:39:93:c8:d1:ad:76:36:15:0d:8c:
28:c5:86:0a:da:c5:f2:b6:9f:7a:08:d1:e7:59:fc:1f:6b:cd:
7f:8e:8a:1e:a4:fc:ab:e0:c8:bb:3c:80:31:e5:2b:56:73:69:
35:9f:f2:f7:3e:bb:9e:30:1a:a6:12:c8:21:fc:2e:78:4a:3f:
07:4c:74:e9:1e:61:95:77:24:fa:ab:89:6b:53:91:07:ce:08:
a3:ea:fd:13:a8:5a:dd:65:a3:2a:9c:73:39:40:ed:24:5b:09:
64:6f:60:b5:71:67:4a:e3:e2:4c:c9:c4:3e:4a:7f:6b:ff:76:
82:e9:f5:c4:74:33:f8:13:b2:d4:26:e0:a9:0b:11:50:be:08:
44:14:dc:a9:fb:db:dc:d1:df:de:42:ff:a7:fc:0e:38:45:7f:
89:88:7b:57:aa:8b:5b:31:c8:9f:3e:bb:7a:dd:12:dc:b1:97:
56:4d:98:b0:03:d3:0e:68:b1:c2:d5:e9:1f:9c:60:ca:a9:35:
1a:b6:bc:82:82:a0:bc:01:b2:3e:29:04:d4:d2:b6:a6:34:08:
fe:ba:cd:95:d4:1f:92:cc:bc:8c:74:ca:2a:90:71:c2:d5:86:
49:e8:03:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:12:43 2025 by rpki-client