Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/53208d-6c31-4e12-aa25-862684eceb46/1/4aIfhfm_F8AgmH6hMg09Y8Va5Ik.mft
File: 4aIfhfm_F8AgmH6hMg09Y8Va5Ik.mft (raw, json)
Hash identifier: SApcGaWiIAWSC6Ps+27Cm1Wx/jX9c/c6lET5B1ateS0=
Subject key identifier: 2A:9A:2D:FB:C3:F4:9C:8F:B6:21:6C:AD:85:8D:A3:D5:E5:02:E6:5C
Authority key identifier: E1:A2:1F:85:F9:BF:17:C0:20:98:7E:A1:32:0D:3D:63:C5:5A:E4:89
Certificate issuer: /CN=e1a21f85f9bf17c020987ea1320d3d63c55ae489
Certificate serial: 0197B70F411462C3B02A4697468C9BDD14EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4aIfhfm_F8AgmH6hMg09Y8Va5Ik.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/53208d-6c31-4e12-aa25-862684eceb46/1/4aIfhfm_F8AgmH6hMg09Y8Va5Ik.mft
Manifest number: 0289
Signing time: Sat 28 Jun 2025 15:01:59 +0000
Manifest this update: Sat 28 Jun 2025 15:01:59 +0000
Manifest next update: Sun 29 Jun 2025 15:01:59 +0000
Files and hashes: 1: 4aIfhfm_F8AgmH6hMg09Y8Va5Ik.crl (hash: A37nH0MVjRGX+GWnPd3N3Xtp++ZEm1UaqdI58hYLWgw=)
2: sQlDLD71rwuQKEk9z1_BmhFOeQE.roa (hash: nNqb64nCN8cpCLQ5+ALkkO+gwOA+NXq21TqlMFS9bWU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/53208d-6c31-4e12-aa25-862684eceb46/1/4aIfhfm_F8AgmH6hMg09Y8Va5Ik.crl
rsync://rpki.ripe.net/repository/DEFAULT/e2/53208d-6c31-4e12-aa25-862684eceb46/1/4aIfhfm_F8AgmH6hMg09Y8Va5Ik.mft
rsync://rpki.ripe.net/repository/DEFAULT/4aIfhfm_F8AgmH6hMg09Y8Va5Ik.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:0f:41:14:62:c3:b0:2a:46:97:46:8c:9b:dd:14:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e1a21f85f9bf17c020987ea1320d3d63c55ae489
Validity
Not Before: Jun 28 15:01:59 2025 GMT
Not After : Jun 29 15:01:59 2025 GMT
Subject: CN=2a9a2dfbc3f49c8fb6216cad858da3d5e502e65c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:0f:88:6d:fa:36:58:af:78:e5:ed:60:b1:21:
74:5f:5c:00:4e:8d:0d:6d:35:cc:2a:d8:35:ca:84:
8d:26:2e:e0:73:7e:f2:c2:4a:62:c7:97:d1:aa:77:
44:9b:8a:47:8b:1e:f0:21:36:94:f2:1e:b9:ac:d4:
f5:90:e3:08:15:38:ab:77:19:5f:1b:7d:84:30:46:
7e:ab:bb:d7:fa:9e:73:19:fb:68:38:53:c1:1b:86:
60:c3:5c:ae:a7:a6:56:c5:36:9b:9e:e4:cb:b3:69:
ac:ca:ee:48:f5:63:ce:c8:4a:57:27:9c:14:94:8a:
14:5e:be:39:26:1f:70:e9:db:7e:c0:52:f3:ef:b2:
b1:6e:14:12:ff:34:4b:93:d2:90:b5:b3:ca:4d:ac:
b1:b8:a7:ff:ea:7c:22:88:98:be:49:6f:d1:a1:4c:
4a:f2:0a:b5:2b:4b:77:81:49:74:63:09:a0:ed:cd:
73:4d:28:f5:d1:22:b5:43:bc:79:7e:93:fe:c8:6f:
cb:13:49:8c:6b:0d:79:af:c0:85:20:f1:b0:b1:0a:
49:d5:d7:fa:0d:bb:b7:4d:1f:d7:11:f7:30:41:e5:
6c:92:58:d7:f6:a1:a2:01:d2:04:99:6e:68:06:d9:
a1:7e:55:99:be:68:f3:51:69:b5:cf:b7:61:d5:64:
bf:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:9A:2D:FB:C3:F4:9C:8F:B6:21:6C:AD:85:8D:A3:D5:E5:02:E6:5C
X509v3 Authority Key Identifier:
keyid:E1:A2:1F:85:F9:BF:17:C0:20:98:7E:A1:32:0D:3D:63:C5:5A:E4:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4aIfhfm_F8AgmH6hMg09Y8Va5Ik.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/53208d-6c31-4e12-aa25-862684eceb46/1/4aIfhfm_F8AgmH6hMg09Y8Va5Ik.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/53208d-6c31-4e12-aa25-862684eceb46/1/4aIfhfm_F8AgmH6hMg09Y8Va5Ik.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:b6:71:fe:89:2b:17:47:71:68:25:31:c5:79:bd:7b:82:78:
54:2e:25:af:e8:89:29:ec:11:93:c0:6e:4c:b9:27:b7:7e:2f:
dc:83:b1:19:d4:80:09:32:47:fa:82:7c:2d:c4:c1:c7:4f:37:
d5:1d:b7:d9:a5:5a:36:3a:f3:80:a4:91:43:d7:d6:4a:3f:d7:
da:07:f3:61:81:52:fe:90:34:65:be:e8:59:ce:af:07:7a:b4:
0c:17:06:53:f1:68:48:2e:80:b4:3a:2b:f9:f0:3e:73:3d:24:
08:6b:39:42:66:28:4e:0f:c4:84:f0:28:7d:16:a3:53:cb:42:
da:7e:28:34:0c:e9:ef:fa:6b:44:45:f4:38:58:3d:e9:cc:05:
83:b7:d7:70:e1:fd:4e:f3:dc:46:4e:6f:24:2c:b6:f2:77:58:
76:ff:a5:74:4a:5a:c9:02:b0:8c:36:d7:64:c7:a2:80:34:96:
28:dc:bb:a1:f7:6c:58:93:3d:fa:99:27:6f:49:89:2c:a9:5e:
b3:f8:4d:5b:95:bb:72:a8:72:d9:a5:06:04:d8:37:e4:f6:d7:
55:cf:4a:df:b9:1b:c4:30:34:ab:50:71:9f:06:6c:d1:0e:2e:
07:00:1f:79:01:5b:1c:db:10:e1:11:67:19:a6:08:c2:31:a7:
92:e4:1b:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 20:38:59 2025 by rpki-client