Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/ab8070-4f58-4634-9a44-387536d03a71/1/4i1-riHYuu6d5pQNjOaynZKpAx4.mft
File: 4i1-riHYuu6d5pQNjOaynZKpAx4.mft (raw, json)
Hash identifier: ziuJwRBG9snQzJfa+w2uvdo9OdeU7YYe/J8fUypGuVI=
Subject key identifier: C4:57:E0:40:2B:D8:8F:95:12:E3:15:37:8C:6C:50:BA:DE:9D:76:39
Authority key identifier: E2:2D:7E:AE:21:D8:BA:EE:9D:E6:94:0D:8C:E6:B2:9D:92:A9:03:1E
Certificate issuer: /CN=e22d7eae21d8baee9de6940d8ce6b29d92a9031e
Certificate serial: 0197B6D7859FCA764D2572DCD8764EF04228
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4i1-riHYuu6d5pQNjOaynZKpAx4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/ab8070-4f58-4634-9a44-387536d03a71/1/4i1-riHYuu6d5pQNjOaynZKpAx4.mft
Manifest number: 04F4
Signing time: Sat 28 Jun 2025 14:01:07 +0000
Manifest this update: Sat 28 Jun 2025 14:01:07 +0000
Manifest next update: Sun 29 Jun 2025 14:01:07 +0000
Files and hashes: 1: 4i1-riHYuu6d5pQNjOaynZKpAx4.crl (hash: 9iJZVpAJmmQRte1+qOZSKMnDuEjtrQXoJlAF6c1L1C0=)
2: Ym4cY_1EuRnkCyF3T4bm70pYxjE.roa (hash: AkplZO86AEiMlgSJVWAGSBviunFDjdLnWUMhCPpbyQE=)
3: iIMfjrcM-EEaIrK48S4AaqdLSDc.roa (hash: kGHhJdo0yzn2T1RMM++JhdnOAbfrtsEDL/H5s4If3hE=)
4: kVLjxhxgFuqXEqXn9rCH2eEb9oA.roa (hash: QbtMbRiPhMHo4O/j41QZux+PuXLhM2M+5dr1jmr3fpA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/ab8070-4f58-4634-9a44-387536d03a71/1/4i1-riHYuu6d5pQNjOaynZKpAx4.crl
rsync://rpki.ripe.net/repository/DEFAULT/ef/ab8070-4f58-4634-9a44-387536d03a71/1/4i1-riHYuu6d5pQNjOaynZKpAx4.mft
rsync://rpki.ripe.net/repository/DEFAULT/4i1-riHYuu6d5pQNjOaynZKpAx4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 14:01:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:d7:85:9f:ca:76:4d:25:72:dc:d8:76:4e:f0:42:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e22d7eae21d8baee9de6940d8ce6b29d92a9031e
Validity
Not Before: Jun 28 14:01:07 2025 GMT
Not After : Jun 29 14:01:07 2025 GMT
Subject: CN=c457e0402bd88f9512e315378c6c50bade9d7639
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:1a:07:e5:1c:03:c1:9a:5e:ba:ff:8f:97:50:
49:2d:06:53:5d:0a:05:fe:5a:14:f5:99:0f:25:a4:
6b:0c:3e:72:50:f0:cd:8a:b6:28:d7:86:d5:57:07:
5b:2d:27:cb:ba:c0:c0:6d:2a:f5:48:0f:c7:5f:f8:
57:04:44:e9:34:02:17:63:c3:63:0e:f2:54:90:ee:
b9:70:15:7f:80:c8:73:d2:69:8c:d4:0b:ff:10:21:
f8:41:19:b9:da:c8:1c:8e:c5:13:c6:ed:9f:00:29:
15:96:24:00:66:84:4c:a0:fd:a8:b0:ad:a0:20:95:
9a:d8:b8:0f:a7:9f:36:21:ed:e2:a9:75:10:cd:fc:
2b:4b:3e:c0:88:cf:29:75:27:74:67:61:7f:e8:b3:
28:24:db:78:7a:82:6c:b5:a9:ae:81:ce:14:c3:7e:
cd:23:e8:2d:39:08:34:9e:af:53:9e:6c:46:be:ad:
42:88:6c:17:0e:8c:02:ab:73:d4:a5:ba:80:49:75:
c2:50:aa:9d:2b:6d:9e:3c:f1:fa:39:db:d5:f0:ef:
7f:6e:6f:27:84:89:d5:db:40:6c:8a:67:74:cd:6f:
06:62:9c:b8:d6:d3:76:47:83:35:fe:8c:6e:32:89:
3d:2f:03:b9:c4:f2:4e:e9:5d:13:c4:e9:86:35:60:
11:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:57:E0:40:2B:D8:8F:95:12:E3:15:37:8C:6C:50:BA:DE:9D:76:39
X509v3 Authority Key Identifier:
keyid:E2:2D:7E:AE:21:D8:BA:EE:9D:E6:94:0D:8C:E6:B2:9D:92:A9:03:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4i1-riHYuu6d5pQNjOaynZKpAx4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/ab8070-4f58-4634-9a44-387536d03a71/1/4i1-riHYuu6d5pQNjOaynZKpAx4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/ab8070-4f58-4634-9a44-387536d03a71/1/4i1-riHYuu6d5pQNjOaynZKpAx4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:b7:52:b1:21:6f:bc:f7:de:83:07:02:0f:01:1c:50:0d:40:
1e:00:ab:10:ea:d2:b2:0c:43:d7:2e:92:32:5d:ea:8e:5d:25:
9a:ec:ed:b6:30:95:0c:00:1c:31:75:a1:98:0e:c1:2f:ac:bb:
4f:81:b4:65:a7:b0:7a:ea:af:33:d3:99:88:24:3e:df:22:1b:
a3:53:e8:c1:f0:51:4d:07:d1:41:59:48:0c:48:b0:81:c8:cc:
f2:bd:f8:19:86:f4:59:af:fd:a2:25:6a:72:2a:48:21:97:5c:
62:06:5a:35:9b:46:d2:87:a0:6c:87:f2:09:24:ab:9c:10:28:
7b:da:d8:86:91:d3:39:63:6e:ab:3a:5d:ea:14:7c:8e:5c:10:
26:cb:b4:a4:ef:2d:84:46:cd:18:af:7f:fe:01:3d:c0:bb:e6:
a4:1f:5b:db:ca:37:2f:a2:86:02:fb:fc:7a:ae:43:04:fa:67:
5d:9d:8c:db:bc:05:da:d7:a7:08:34:7f:ea:61:f5:0f:45:64:
83:72:3f:cc:8d:a1:60:7f:1a:d9:d4:47:34:7c:ce:e1:83:a1:
d0:23:a3:7b:2b:71:5f:33:f7:73:71:8d:88:3d:94:13:4d:da:
63:af:ad:70:9b:18:30:cc:de:2a:73:03:dd:4f:ab:df:00:79:
93:e2:d1:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:35:54 2025 by rpki-client