Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/6b41f5-b7c5-4334-9fbf-b38a6f220e63/1/dB4rNVUHc-BTeX92TS4h1l5kKMc.mft
File: dB4rNVUHc-BTeX92TS4h1l5kKMc.mft (raw, json)
Hash identifier: K4kpuHsDcvsbUd8zXWS/2qdGsJRSqgoqHpXeMWDlzSs=
Subject key identifier: AC:82:37:54:5B:76:DC:4B:12:51:D1:6C:24:F1:4A:85:F4:E2:3A:C2
Authority key identifier: 74:1E:2B:35:55:07:73:E0:53:79:7F:76:4D:2E:21:D6:5E:64:28:C7
Certificate issuer: /CN=741e2b35550773e053797f764d2e21d65e6428c7
Certificate serial: 0197BAB43AEC1B0514973D3E120AAA508958
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dB4rNVUHc-BTeX92TS4h1l5kKMc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/6b41f5-b7c5-4334-9fbf-b38a6f220e63/1/dB4rNVUHc-BTeX92TS4h1l5kKMc.mft
Manifest number: 0117
Signing time: Sun 29 Jun 2025 08:01:03 +0000
Manifest this update: Sun 29 Jun 2025 08:01:03 +0000
Manifest next update: Mon 30 Jun 2025 08:01:03 +0000
Files and hashes: 1: F9mCTEFo2VHLyLNCvGdkZm7NM54.roa (hash: 0GDWpQx7XDKg8YLSvTng54oqtSqIqPi0Fb+po6xzWT8=)
2: dB4rNVUHc-BTeX92TS4h1l5kKMc.crl (hash: JZ0qIQoC1bnW6EEFBtd1njZXwlLYazvcJGq5XCrgNDA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/6b41f5-b7c5-4334-9fbf-b38a6f220e63/1/dB4rNVUHc-BTeX92TS4h1l5kKMc.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/6b41f5-b7c5-4334-9fbf-b38a6f220e63/1/dB4rNVUHc-BTeX92TS4h1l5kKMc.mft
rsync://rpki.ripe.net/repository/DEFAULT/dB4rNVUHc-BTeX92TS4h1l5kKMc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Jun 2025 04:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:ba:b4:3a:ec:1b:05:14:97:3d:3e:12:0a:aa:50:89:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=741e2b35550773e053797f764d2e21d65e6428c7
Validity
Not Before: Jun 29 08:01:03 2025 GMT
Not After : Jun 30 08:01:03 2025 GMT
Subject: CN=ac8237545b76dc4b1251d16c24f14a85f4e23ac2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:d6:17:56:3b:da:c3:67:1f:67:31:d1:b3:b3:
d4:27:ef:ae:d3:4c:67:44:f2:ea:5a:02:2c:e5:0d:
2f:3e:06:49:be:98:60:0b:08:5f:8e:49:9b:7e:1d:
c3:97:f6:bb:ec:e2:c0:ef:a5:07:f9:9f:f1:85:b8:
ea:43:8e:2a:b7:ae:dc:e0:4d:64:a9:6a:46:a1:7b:
95:8c:27:ea:70:b9:da:d1:c5:a6:8e:64:89:99:63:
d9:5a:1d:30:c9:e6:59:ac:0c:80:02:43:21:51:ba:
c6:d1:c9:60:75:27:f9:5a:7c:2a:b8:c2:fd:92:51:
b1:39:e1:9d:c0:61:c2:7e:3a:3f:4d:d2:6e:08:30:
71:d2:6c:75:9b:a7:ef:ad:4e:16:ae:5c:9f:fc:ec:
5c:5d:29:4d:e2:7a:0d:47:82:c3:6b:e3:11:29:0c:
c0:e4:2a:58:fc:a7:ec:76:09:ca:53:25:22:60:cb:
86:f1:80:80:10:30:35:54:01:35:01:69:e9:da:4e:
a4:00:cb:c3:84:8c:59:d6:a1:91:f9:8a:84:7a:20:
00:6a:f2:c8:c0:43:97:66:61:5f:59:df:0e:f7:0f:
d6:4e:51:d6:9c:34:ea:82:11:62:69:d5:6a:36:58:
39:91:6d:e0:2c:df:ad:bf:fd:ea:31:b8:9e:7e:0f:
43:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:82:37:54:5B:76:DC:4B:12:51:D1:6C:24:F1:4A:85:F4:E2:3A:C2
X509v3 Authority Key Identifier:
keyid:74:1E:2B:35:55:07:73:E0:53:79:7F:76:4D:2E:21:D6:5E:64:28:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dB4rNVUHc-BTeX92TS4h1l5kKMc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/6b41f5-b7c5-4334-9fbf-b38a6f220e63/1/dB4rNVUHc-BTeX92TS4h1l5kKMc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/6b41f5-b7c5-4334-9fbf-b38a6f220e63/1/dB4rNVUHc-BTeX92TS4h1l5kKMc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:53:a8:f2:d4:bb:da:5d:48:ba:15:c8:49:ce:28:12:9e:9f:
83:f4:32:a2:09:9a:8d:07:8c:78:0f:81:1e:0b:0f:b7:3c:8c:
44:80:f6:5d:ba:76:69:ab:99:56:1b:8d:be:ed:c0:68:db:ac:
0c:c2:7f:3a:26:7b:8c:ac:53:ab:58:b8:dd:83:5f:ed:31:6b:
c7:ab:8b:d0:b2:59:67:26:ca:ad:c3:88:29:88:46:d2:8a:8c:
d6:ad:6f:97:3b:f8:f9:96:78:b3:c2:99:f6:24:fd:fd:ca:46:
e7:e2:85:a1:fc:ca:42:b7:92:d4:09:19:a0:f8:f7:56:8c:c8:
35:d2:e1:eb:1b:26:ab:de:bd:19:d8:f5:ea:54:48:74:d6:43:
47:5c:eb:4e:6f:6e:52:67:a0:d9:1d:7d:04:08:e6:04:1f:2a:
ab:a2:14:61:1b:89:df:5f:7d:35:6c:69:f9:7d:55:5a:57:4c:
d2:77:78:64:9f:7f:f9:b7:9a:17:c2:7e:22:03:36:1b:81:ed:
81:96:bc:1c:66:18:b7:4d:29:3e:21:f8:59:61:e8:eb:1d:ba:
35:f9:ef:26:7c:3f:cf:78:15:1b:3a:4e:76:50:01:60:f6:30:
ed:af:57:a7:ed:ea:8c:29:76:1e:bc:bf:19:82:a9:26:a6:e9:
fb:34:75:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 11:34:14 2025 by rpki-client