Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/4291a2-03a9-4195-b1a7-3f40547e52d1/1/s4slrXyWWJ5KjKpfpIksxN_Me1M.mft
File: s4slrXyWWJ5KjKpfpIksxN_Me1M.mft (raw, json)
Hash identifier: IFRRSAsqnjQzA4A2Nugud9bl/eqTR7T30jFssgIlsM4=
Subject key identifier: 1C:6D:B5:AC:3D:35:91:67:41:4D:50:E3:4D:6D:7E:1D:E7:74:26:D4
Authority key identifier: B3:8B:25:AD:7C:96:58:9E:4A:8C:AA:5F:A4:89:2C:C4:DF:CC:7B:53
Certificate issuer: /CN=b38b25ad7c96589e4a8caa5fa4892cc4dfcc7b53
Certificate serial: 0197C3B77D305F2817F3E1635ADC409D92BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s4slrXyWWJ5KjKpfpIksxN_Me1M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/4291a2-03a9-4195-b1a7-3f40547e52d1/1/s4slrXyWWJ5KjKpfpIksxN_Me1M.mft
Manifest number: 15BC
Signing time: Tue 01 Jul 2025 02:01:11 +0000
Manifest this update: Tue 01 Jul 2025 02:01:11 +0000
Manifest next update: Wed 02 Jul 2025 02:01:11 +0000
Files and hashes: 1: JJG6lSZApZVFWCoCMzoaHnqrdjA.roa (hash: /ZXBf7GoIevwDbia6b3jjdIqB98IB5pgV+PKh4AI8CE=)
2: s4slrXyWWJ5KjKpfpIksxN_Me1M.crl (hash: nFjZd0jveV3Fsn0Z64PLBkWY1VEzQQSfctT+yqeuf/g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/4291a2-03a9-4195-b1a7-3f40547e52d1/1/s4slrXyWWJ5KjKpfpIksxN_Me1M.crl
rsync://rpki.ripe.net/repository/DEFAULT/e7/4291a2-03a9-4195-b1a7-3f40547e52d1/1/s4slrXyWWJ5KjKpfpIksxN_Me1M.mft
rsync://rpki.ripe.net/repository/DEFAULT/s4slrXyWWJ5KjKpfpIksxN_Me1M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 01 Jul 2025 23:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:c3:b7:7d:30:5f:28:17:f3:e1:63:5a:dc:40:9d:92:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b38b25ad7c96589e4a8caa5fa4892cc4dfcc7b53
Validity
Not Before: Jul 1 02:01:11 2025 GMT
Not After : Jul 2 02:01:11 2025 GMT
Subject: CN=1c6db5ac3d359167414d50e34d6d7e1de77426d4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:0e:92:d9:07:95:23:fc:81:33:40:be:78:9d:
d5:02:9b:5f:e4:03:5d:8d:ed:a7:63:ff:3c:63:0d:
07:83:eb:8d:f7:31:f9:d2:6f:70:af:d5:8d:ac:6d:
55:98:27:b5:7f:a8:1a:e8:56:38:3d:3d:c6:85:5c:
eb:a2:24:47:d4:6a:58:35:11:d9:60:8e:13:3a:11:
57:0f:4e:57:38:e1:17:9f:61:fa:0f:0d:d5:4b:9c:
30:9d:73:84:43:0d:40:9d:5a:4e:99:c3:14:5b:58:
f2:62:4a:00:47:c5:7a:82:1e:26:75:61:5b:11:53:
96:77:8b:da:a7:5a:33:65:28:81:94:ab:f1:08:55:
43:6c:d9:6d:bc:ee:df:25:53:c1:d5:b1:12:be:c8:
82:09:ad:64:c9:81:c8:ca:ce:f9:0c:6a:d1:71:3d:
44:e1:53:ad:17:60:ed:cc:5c:71:18:0e:f3:b4:1c:
28:99:3f:fe:77:21:a3:3d:b5:28:a5:c3:59:e1:2d:
51:28:9a:92:5d:93:7a:ec:8e:64:53:39:5d:48:f2:
ef:f1:84:64:1e:64:91:ec:05:81:3d:81:1f:af:9d:
3d:7f:b6:d1:52:31:54:b1:2d:5e:32:1c:6a:34:5f:
18:7c:46:12:80:01:24:10:5b:60:44:01:66:6b:dc:
81:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:6D:B5:AC:3D:35:91:67:41:4D:50:E3:4D:6D:7E:1D:E7:74:26:D4
X509v3 Authority Key Identifier:
keyid:B3:8B:25:AD:7C:96:58:9E:4A:8C:AA:5F:A4:89:2C:C4:DF:CC:7B:53
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s4slrXyWWJ5KjKpfpIksxN_Me1M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/4291a2-03a9-4195-b1a7-3f40547e52d1/1/s4slrXyWWJ5KjKpfpIksxN_Me1M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/4291a2-03a9-4195-b1a7-3f40547e52d1/1/s4slrXyWWJ5KjKpfpIksxN_Me1M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:1d:73:88:df:09:bf:4c:39:3c:32:fd:30:da:39:84:c2:d1:
42:58:bd:80:34:f0:b1:7f:08:f3:e3:34:00:00:1a:c8:84:83:
2f:bf:ec:77:42:d5:bd:ac:b7:fd:54:86:5d:13:56:d2:f9:a2:
9f:e9:be:7e:23:5c:25:3f:5c:04:4f:f2:91:db:58:11:13:de:
48:b0:4f:55:ea:41:71:c7:1e:a6:47:e1:9f:b6:a9:85:1a:ef:
09:fa:26:ce:6b:21:76:00:14:d6:06:27:44:1a:4a:c3:08:15:
08:f3:0b:d1:06:31:c2:de:be:11:c5:48:57:74:dd:60:3d:51:
01:82:c6:cd:99:2c:a3:16:2e:75:8e:88:54:ef:78:f3:07:c3:
91:4f:a2:ec:60:1c:9e:d5:1c:d5:98:9d:2b:43:a7:ff:5f:ea:
53:7a:ce:1f:23:dc:20:07:f2:d9:8c:59:d8:b4:02:95:a6:10:
6b:95:c4:7d:60:f2:9d:83:7e:bc:20:16:1a:37:7b:49:8c:d7:
5b:9f:91:87:53:45:53:c4:16:7e:59:8a:28:5f:c1:83:03:a9:
bb:06:00:3e:48:18:d2:03:ac:9a:3f:56:d5:c0:44:fa:e2:80:
28:15:fb:fa:39:d9:ee:98:94:93:16:ba:ed:15:a8:db:55:c8:
53:df:1b:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 06:50:40 2025 by rpki-client