Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/c987b6-ef00-4d28-a4ae-6549cd59aa4f/1/r-b4yudJLQZOAwcckUc5Lu3UW8c.mft
File: r-b4yudJLQZOAwcckUc5Lu3UW8c.mft (raw, json)
Hash identifier: e8NvhF+BDtDfPn9zylEHHteHGo9R5UNwZDTb7xPNY4Y=
Subject key identifier: 63:F1:B2:AB:82:77:A9:70:0D:CB:4A:1E:09:25:0E:12:46:19:C3:12
Authority key identifier: AF:E6:F8:CA:E7:49:2D:06:4E:03:07:1C:91:47:39:2E:ED:D4:5B:C7
Certificate issuer: /CN=afe6f8cae7492d064e03071c9147392eedd45bc7
Certificate serial: 0197B6A20BA26C1824A0D766D7193C135092
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r-b4yudJLQZOAwcckUc5Lu3UW8c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/c987b6-ef00-4d28-a4ae-6549cd59aa4f/1/r-b4yudJLQZOAwcckUc5Lu3UW8c.mft
Manifest number: 1076
Signing time: Sat 28 Jun 2025 13:02:42 +0000
Manifest this update: Sat 28 Jun 2025 13:02:42 +0000
Manifest next update: Sun 29 Jun 2025 13:02:42 +0000
Files and hashes: 1: H4Dt1RaXNjrSuf7dIzKd6HI74Xw.roa (hash: 1FMAIN7AWHSRrarcSi8q0q/CcQ+uq+tcfRyHiGa5Hko=)
2: kemSd2KPq5UUT0EZWa92ek2Cwpc.roa (hash: kh0wd5NltixPwrZZXBgelPgGkebz79/WC48Vz4n628s=)
3: r-b4yudJLQZOAwcckUc5Lu3UW8c.crl (hash: XsOFVqvEo1OeNfkitFwatNNahI0CiX/ia42ul6Fpbyc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/c987b6-ef00-4d28-a4ae-6549cd59aa4f/1/r-b4yudJLQZOAwcckUc5Lu3UW8c.crl
rsync://rpki.ripe.net/repository/DEFAULT/ea/c987b6-ef00-4d28-a4ae-6549cd59aa4f/1/r-b4yudJLQZOAwcckUc5Lu3UW8c.mft
rsync://rpki.ripe.net/repository/DEFAULT/r-b4yudJLQZOAwcckUc5Lu3UW8c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 13:02:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a2:0b:a2:6c:18:24:a0:d7:66:d7:19:3c:13:50:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=afe6f8cae7492d064e03071c9147392eedd45bc7
Validity
Not Before: Jun 28 13:02:42 2025 GMT
Not After : Jun 29 13:02:42 2025 GMT
Subject: CN=63f1b2ab8277a9700dcb4a1e09250e124619c312
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:90:cf:2e:03:38:18:27:90:20:04:24:bb:a3:
ee:fe:7e:d0:4d:95:07:63:ac:60:7d:24:09:e0:cb:
ab:1c:3d:cc:11:30:da:a9:0c:b8:c1:4b:5f:71:be:
bc:08:e1:68:fa:1c:71:5a:d5:fd:23:22:3c:b8:f0:
77:2f:3a:5f:97:eb:2e:01:55:0d:53:47:16:8c:2b:
06:9f:ae:ca:4c:8d:e2:64:54:60:e4:89:a9:b0:7d:
ef:20:35:eb:31:da:6a:20:43:55:78:a0:35:0c:95:
96:b6:f2:48:0c:b9:37:af:d4:04:44:c3:bd:b7:9b:
08:69:f9:c2:85:a2:02:81:69:67:9a:50:fe:1b:30:
e7:bc:ce:0c:53:0b:28:b6:a2:08:9a:93:2a:8b:b5:
0b:73:e9:25:3e:96:2f:59:95:8e:5c:9c:6a:2c:bb:
7d:2b:20:25:6c:c0:e9:50:f1:5c:3f:da:11:f3:72:
d1:60:8d:dc:4d:15:15:85:db:22:85:17:ff:3b:1b:
af:2f:83:71:69:8f:77:cb:ec:3e:e3:83:59:0c:d0:
22:ba:e8:6c:98:7c:aa:62:0b:bb:86:d1:0c:5c:85:
b0:4e:de:77:56:71:04:c3:74:32:5a:d4:be:4a:72:
e5:a6:85:0b:b9:41:a9:c5:59:e5:8e:4b:46:b0:31:
e6:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:F1:B2:AB:82:77:A9:70:0D:CB:4A:1E:09:25:0E:12:46:19:C3:12
X509v3 Authority Key Identifier:
keyid:AF:E6:F8:CA:E7:49:2D:06:4E:03:07:1C:91:47:39:2E:ED:D4:5B:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r-b4yudJLQZOAwcckUc5Lu3UW8c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/c987b6-ef00-4d28-a4ae-6549cd59aa4f/1/r-b4yudJLQZOAwcckUc5Lu3UW8c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/c987b6-ef00-4d28-a4ae-6549cd59aa4f/1/r-b4yudJLQZOAwcckUc5Lu3UW8c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
69:07:53:de:e1:eb:07:a7:5d:1e:cf:11:77:05:5b:d1:5b:ea:
af:1d:ee:63:99:f7:11:ca:93:de:b2:86:78:0c:33:5d:77:bf:
0a:da:0b:9f:68:50:5d:48:ee:9f:6d:65:f1:0b:ad:af:9f:3e:
0e:c1:41:e9:d6:f1:63:92:04:68:bd:ae:fb:da:2f:ce:00:79:
f0:39:fa:c4:c7:ec:ed:74:d7:3d:54:01:34:a6:4f:fd:a1:8e:
48:41:a8:b1:68:1a:6e:a7:69:57:ba:f9:b9:c2:14:18:32:ae:
b2:33:0c:87:af:1d:44:e6:5a:88:fd:67:53:04:b5:c3:14:bc:
19:b3:a6:80:66:39:ec:fa:83:fa:7d:1f:77:a1:48:cb:31:f7:
90:03:68:15:90:7e:8d:b6:98:2f:b2:57:0b:2a:b9:cb:fe:b7:
9e:c9:06:d9:48:b0:6f:fc:43:44:59:08:6e:bc:05:2c:e3:a4:
a0:8c:01:06:dc:61:bc:94:87:1a:df:76:c5:f8:5d:da:ab:56:
9f:a8:14:f8:3c:be:3b:4c:8c:c7:dc:ed:83:40:8c:cf:84:28:
fd:56:c7:ac:c1:43:2e:e8:af:e4:cf:b3:5a:66:23:5d:ef:b8:
3f:8c:e5:a6:71:16:43:5d:41:b1:5f:87:9a:33:1d:71:71:63:
d3:8e:82:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 22:45:22 2025 by rpki-client