Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/28d600-a869-4ab1-9b2e-446019966a19/1/4FdMKHjWtTYTm4lfCMnG2xjhKps.mft
File: 4FdMKHjWtTYTm4lfCMnG2xjhKps.mft (raw, json)
Hash identifier: 6/gOvlkDqRJWW8uA0T2prsXS4Zl0sOGgfhzAFPPFKF8=
Subject key identifier: BF:75:B4:B1:0C:26:73:CE:E0:01:01:B7:C3:D5:FA:3C:B8:5C:39:50
Authority key identifier: E0:57:4C:28:78:D6:B5:36:13:9B:89:5F:08:C9:C6:DB:18:E1:2A:9B
Certificate issuer: /CN=e0574c2878d6b536139b895f08c9c6db18e12a9b
Certificate serial: 0197B7EA653F303E799D3C4D17D0FEDDBD3B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4FdMKHjWtTYTm4lfCMnG2xjhKps.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/28d600-a869-4ab1-9b2e-446019966a19/1/4FdMKHjWtTYTm4lfCMnG2xjhKps.mft
Manifest number: 15BD
Signing time: Sat 28 Jun 2025 19:01:21 +0000
Manifest this update: Sat 28 Jun 2025 19:01:21 +0000
Manifest next update: Sun 29 Jun 2025 19:01:21 +0000
Files and hashes: 1: 4FdMKHjWtTYTm4lfCMnG2xjhKps.crl (hash: t05ld3fg/T/BIfwBHxTD70FW2TUnB4dho/Y1CsA/9cI=)
2: F5_lNgEgzfWoE5_Cqsta810GUD8.roa (hash: iFMsbMYL1gucfU8DYPuCeVZjMtj1pfRR/WALBk/WmbI=)
3: GPk2iBuHJkhE3vpf7v6PEKywv7w.roa (hash: GWqOVJmjwk1Pn1GbnWABjMV1e5ehhhP81Lyr4q/ji2E=)
4: LNUfeHuP7gnY_85aOJlr0qSJEMQ.roa (hash: YoOtP+EHXOmT+ABly+3o3H4KeOBEs5xmQuWc5ATMUTk=)
5: OflCzXga8ucfjVqp9uUhh7zK_qM.roa (hash: tJ4j/9WnUQafTpRcoYrdjgTWc0yGFpsicsnou7Bw3VU=)
6: SwP1NYlZc5jbDBXXeMNl1hjy1LA.roa (hash: DMSgzACIbB/JZuNfMaMP2kCv3jA/gmECBXJyT4DQzwk=)
7: W6KxeoLPp69-NZgXYljCkgfMzmI.roa (hash: WWTdkNcNGcm7BbXaoCx/steftEF6zzmySvzLX5r6lpM=)
8: aAP3usYXoFfJgmCfE8_VSaJGbTU.roa (hash: x6wsw/R7hONUKg46ARfXmJgysd6wAhjXDI0EDejXv3A=)
9: uGW4wsIIh4UfRdPgdZPrknwT0_s.roa (hash: DewiqU6mTjj3HeFVXlyQsAjNkoAtpsCRp10m8FffrLA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/28d600-a869-4ab1-9b2e-446019966a19/1/4FdMKHjWtTYTm4lfCMnG2xjhKps.crl
rsync://rpki.ripe.net/repository/DEFAULT/e4/28d600-a869-4ab1-9b2e-446019966a19/1/4FdMKHjWtTYTm4lfCMnG2xjhKps.mft
rsync://rpki.ripe.net/repository/DEFAULT/4FdMKHjWtTYTm4lfCMnG2xjhKps.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:ea:65:3f:30:3e:79:9d:3c:4d:17:d0:fe:dd:bd:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e0574c2878d6b536139b895f08c9c6db18e12a9b
Validity
Not Before: Jun 28 19:01:21 2025 GMT
Not After : Jun 29 19:01:21 2025 GMT
Subject: CN=bf75b4b10c2673cee00101b7c3d5fa3cb85c3950
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:3f:52:c1:0a:ec:15:c6:a6:5d:1d:f7:63:34:
aa:10:07:1f:62:38:3e:ef:58:a7:c5:46:ec:bd:a3:
1a:de:0c:7c:92:ca:26:73:2b:60:6c:79:1c:fe:da:
79:0c:3f:02:00:8d:ab:39:a4:e6:63:aa:d5:1d:14:
b6:c2:6b:44:58:a7:4e:8d:03:e2:12:19:fe:5b:d8:
e5:73:ed:6a:ba:cd:ca:8c:06:8d:f4:94:4f:e5:70:
93:0f:5c:99:e5:d3:62:ef:27:aa:01:4a:60:5a:55:
95:a4:b5:a1:d7:19:d5:56:9a:1d:5c:6e:12:46:d0:
40:ec:81:9f:52:84:37:3d:62:65:80:95:84:f7:89:
3a:50:3b:33:00:af:6f:8b:c3:52:85:46:e7:be:63:
69:05:a2:5a:cf:ac:05:5e:4a:e4:45:8d:1f:26:0d:
92:b5:6f:f4:f3:53:60:01:c0:53:cc:64:81:94:1c:
19:25:e9:4d:de:52:5d:e1:35:c2:7a:72:fb:5b:ef:
1e:50:da:e7:ea:76:d0:9d:db:00:ee:6f:1f:d2:25:
7a:d1:b3:4c:37:d0:74:46:1a:cf:3b:a2:b5:c9:ed:
d9:fe:e1:e2:8f:3a:3e:47:e8:52:34:e9:a3:a0:d3:
42:d2:5c:f3:15:a4:9c:8c:6d:d2:58:4f:85:87:00:
bf:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:75:B4:B1:0C:26:73:CE:E0:01:01:B7:C3:D5:FA:3C:B8:5C:39:50
X509v3 Authority Key Identifier:
keyid:E0:57:4C:28:78:D6:B5:36:13:9B:89:5F:08:C9:C6:DB:18:E1:2A:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4FdMKHjWtTYTm4lfCMnG2xjhKps.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/28d600-a869-4ab1-9b2e-446019966a19/1/4FdMKHjWtTYTm4lfCMnG2xjhKps.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/28d600-a869-4ab1-9b2e-446019966a19/1/4FdMKHjWtTYTm4lfCMnG2xjhKps.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:95:08:65:79:3c:1e:e9:45:50:e2:2d:71:03:1a:c1:5d:ba:
a9:b9:34:78:bc:c4:d9:34:1c:21:7c:9d:e4:78:71:c2:98:f1:
9f:1e:b4:a1:5b:6a:3e:fb:6f:15:29:51:4b:3d:c1:9a:22:24:
93:c3:0b:ee:d7:f1:8b:2d:1d:76:21:ec:9a:3e:cb:4f:ea:39:
f3:b5:5b:19:24:83:bc:f8:82:d3:b3:22:3c:3a:91:7f:80:11:
c5:f2:23:eb:fa:68:61:9f:cb:24:af:c1:7a:c1:97:a5:cf:9d:
a6:37:96:f3:bb:3e:56:1e:56:df:1a:40:43:c8:5f:5e:c6:5c:
b9:24:f8:9b:79:59:df:a0:ea:68:8a:c2:bf:13:d3:5d:38:ff:
fe:52:f6:a5:ee:f0:5a:ae:b2:46:47:f4:b2:e5:69:3b:e4:01:
e1:45:3f:8b:7e:7e:5e:9a:f0:1b:7a:a2:22:94:b2:6f:c7:2e:
48:19:b3:18:b6:f4:1d:5d:03:0f:11:67:8d:d4:4f:9b:aa:c5:
5a:c6:d8:17:a0:eb:2a:c2:99:63:6f:f4:dd:95:d6:8a:34:30:
6c:17:a0:2c:23:53:13:1b:55:c0:34:95:c5:04:c4:a0:f7:90:
96:57:27:42:88:30:df:98:ce:35:dd:a5:68:01:fb:68:00:1e:
d2:b6:74:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 22:16:16 2025 by rpki-client