Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/ccf444-a22c-4fcd-bf1a-0f937ccf02e0/1/RRi4nH3OK17cBVgVFs_BnXoxdOg.mft
File: RRi4nH3OK17cBVgVFs_BnXoxdOg.mft (raw, json)
Hash identifier: hrpCP5keuDTVkXib5WFfun8SdoGwszscaaHG1d1MSnw=
Subject key identifier: CA:56:DE:C4:AE:E1:FA:A4:EE:53:CF:C6:F3:82:17:E4:E2:F4:4F:8F
Authority key identifier: 45:18:B8:9C:7D:CE:2B:5E:DC:05:58:15:16:CF:C1:9D:7A:31:74:E8
Certificate issuer: /CN=4518b89c7dce2b5edc05581516cfc19d7a3174e8
Certificate serial: 0197B9A1DF45A446FC1E1E003A28AE1113D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RRi4nH3OK17cBVgVFs_BnXoxdOg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/ccf444-a22c-4fcd-bf1a-0f937ccf02e0/1/RRi4nH3OK17cBVgVFs_BnXoxdOg.mft
Manifest number: 13DB
Signing time: Sun 29 Jun 2025 03:01:22 +0000
Manifest this update: Sun 29 Jun 2025 03:01:22 +0000
Manifest next update: Mon 30 Jun 2025 03:01:22 +0000
Files and hashes: 1: RRi4nH3OK17cBVgVFs_BnXoxdOg.crl (hash: qzYNXEt6NzXTdBvdA2+RmXto+WWades0m96iJnfSsQ4=)
2: qkuP3INuoQUlkGzQXsg6hNdv2PE.roa (hash: nbTS8K6lNcxMgwiUyLADYWPREZ9Nv1ZzLCUppLN19Wk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/ccf444-a22c-4fcd-bf1a-0f937ccf02e0/1/RRi4nH3OK17cBVgVFs_BnXoxdOg.crl
rsync://rpki.ripe.net/repository/DEFAULT/df/ccf444-a22c-4fcd-bf1a-0f937ccf02e0/1/RRi4nH3OK17cBVgVFs_BnXoxdOg.mft
rsync://rpki.ripe.net/repository/DEFAULT/RRi4nH3OK17cBVgVFs_BnXoxdOg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 19:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b9:a1:df:45:a4:46:fc:1e:1e:00:3a:28:ae:11:13:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4518b89c7dce2b5edc05581516cfc19d7a3174e8
Validity
Not Before: Jun 29 03:01:22 2025 GMT
Not After : Jun 30 03:01:22 2025 GMT
Subject: CN=ca56dec4aee1faa4ee53cfc6f38217e4e2f44f8f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:b5:f6:87:fa:1f:86:27:c7:7c:a0:c4:0f:cd:
7f:de:d2:fd:ae:d8:d8:65:5b:67:38:c6:39:8b:da:
1f:0b:ac:7a:bf:a4:a7:ce:91:b8:d8:c2:80:be:8d:
a9:83:2f:a2:de:5e:ab:45:3f:82:67:8d:95:5b:36:
a7:91:2d:ac:64:80:66:f7:0a:4b:56:3c:35:3f:f7:
0e:0e:da:97:f7:bb:a5:68:67:bf:d9:97:4d:97:a8:
b2:88:1b:8f:c0:9b:b6:d7:5b:61:90:e1:5c:26:2e:
6b:c9:21:c7:4b:71:d0:2b:76:01:ed:ef:f5:68:34:
f4:dc:ef:71:1d:bc:47:4d:00:87:6d:eb:83:4c:52:
95:ab:6d:81:ec:a4:1d:e4:c8:1a:e7:b5:ff:80:03:
c0:48:70:35:62:ba:52:65:2f:5d:fc:14:f0:2b:0c:
74:4f:5b:6b:16:f4:b3:50:94:22:83:ab:d2:88:a6:
45:28:76:8e:48:07:91:ae:ca:cd:c0:d2:fe:1e:3b:
0d:3a:e5:ab:4e:39:30:6d:85:d8:a2:85:5b:8f:80:
73:bd:67:e3:fd:4a:bf:1b:d4:1c:25:f2:99:31:f0:
0c:11:70:46:b1:a5:79:13:5f:58:b8:68:07:b9:d7:
ee:55:c4:00:20:a7:c5:cf:b7:81:3a:4f:0b:a5:9b:
62:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:56:DE:C4:AE:E1:FA:A4:EE:53:CF:C6:F3:82:17:E4:E2:F4:4F:8F
X509v3 Authority Key Identifier:
keyid:45:18:B8:9C:7D:CE:2B:5E:DC:05:58:15:16:CF:C1:9D:7A:31:74:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RRi4nH3OK17cBVgVFs_BnXoxdOg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/ccf444-a22c-4fcd-bf1a-0f937ccf02e0/1/RRi4nH3OK17cBVgVFs_BnXoxdOg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/ccf444-a22c-4fcd-bf1a-0f937ccf02e0/1/RRi4nH3OK17cBVgVFs_BnXoxdOg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:e8:99:a4:18:53:0e:64:e1:19:56:98:c7:bc:05:54:d7:13:
ab:cc:5c:b2:2e:88:ad:37:58:9c:8f:64:c7:b8:e8:7c:b9:9a:
1c:a8:c3:0d:28:30:b6:90:48:97:3e:2f:03:1c:b8:b1:9e:7a:
e6:4a:5b:96:df:9e:a8:21:31:f7:79:cc:eb:c4:cd:c5:1a:59:
46:35:b9:56:55:39:33:e0:69:95:d6:3d:9c:7b:15:f6:dc:06:
5a:e0:bf:37:07:45:74:51:e3:65:d4:a4:2d:34:47:bb:d6:16:
a3:82:c3:9c:bf:95:94:42:df:a7:74:e0:0a:19:25:cf:d9:94:
7c:ae:c7:ac:a7:97:0c:33:3d:79:d5:63:35:85:32:5f:d6:4e:
93:8b:77:fd:e6:0a:a5:c1:79:4a:97:e8:21:98:a2:62:53:e0:
8a:ff:ec:40:e6:14:b9:02:f9:66:34:6a:18:f4:a6:a3:9a:14:
83:f1:9c:81:90:b0:0a:fc:69:af:87:69:2f:47:75:cd:be:0b:
08:f3:24:f3:04:76:fb:bb:fb:2e:e3:05:24:d2:7e:cb:93:fe:
84:a0:9d:55:78:bf:68:26:4c:57:54:e9:97:35:37:b5:8e:c9:
08:50:8a:8c:3d:6a:09:b4:fc:b9:6a:1a:a8:53:9e:37:a4:36:
9d:04:f7:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 04:31:57 2025 by rpki-client