Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/4c6cd6-37a9-4115-8366-24a8d9bf37bc/1/RQvGf1SesEkldyCgAOsFtU9dK8A.mft
File: RQvGf1SesEkldyCgAOsFtU9dK8A.mft (raw, json)
Hash identifier: ZRakaWyZFEXGwhT7yE4XrPFcre2m7U0gDVPldl+Rr+A=
Subject key identifier: 0B:EC:A4:D6:D0:D8:18:76:4F:EC:E9:8E:E5:39:D9:18:5F:AF:22:61
Authority key identifier: 45:0B:C6:7F:54:9E:B0:49:25:77:20:A0:00:EB:05:B5:4F:5D:2B:C0
Certificate issuer: /CN=450bc67f549eb049257720a000eb05b54f5d2bc0
Certificate serial: 0197B70E51C411AB0F68BA98E9CE375CDE83
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RQvGf1SesEkldyCgAOsFtU9dK8A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/4c6cd6-37a9-4115-8366-24a8d9bf37bc/1/RQvGf1SesEkldyCgAOsFtU9dK8A.mft
Manifest number: 0DD4
Signing time: Sat 28 Jun 2025 15:00:58 +0000
Manifest this update: Sat 28 Jun 2025 15:00:58 +0000
Manifest next update: Sun 29 Jun 2025 15:00:58 +0000
Files and hashes: 1: RQvGf1SesEkldyCgAOsFtU9dK8A.crl (hash: r2oUsttxYIpFbjZ1fgLf9SE1s47IGcPK9ahCeBJtLPw=)
2: _YMez48AMFaUyWLbfvnH7KldVDE.roa (hash: 3sepWcNFx6BAgV0N0lNe1VjOZzQwmimdc5bBOyxmzz4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/4c6cd6-37a9-4115-8366-24a8d9bf37bc/1/RQvGf1SesEkldyCgAOsFtU9dK8A.crl
rsync://rpki.ripe.net/repository/DEFAULT/fb/4c6cd6-37a9-4115-8366-24a8d9bf37bc/1/RQvGf1SesEkldyCgAOsFtU9dK8A.mft
rsync://rpki.ripe.net/repository/DEFAULT/RQvGf1SesEkldyCgAOsFtU9dK8A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:0e:51:c4:11:ab:0f:68:ba:98:e9:ce:37:5c:de:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=450bc67f549eb049257720a000eb05b54f5d2bc0
Validity
Not Before: Jun 28 15:00:58 2025 GMT
Not After : Jun 29 15:00:58 2025 GMT
Subject: CN=0beca4d6d0d818764fece98ee539d9185faf2261
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:f1:f0:29:aa:de:bf:b4:e8:6c:d6:bc:60:af:
d7:8f:68:91:e3:b2:e5:1a:b5:e3:06:e5:a2:a8:a7:
ef:47:18:9a:ce:eb:2d:49:f4:35:28:dc:b2:bf:8e:
52:a3:9d:f0:6b:d7:d2:e5:3c:58:b8:3e:3f:3a:8f:
bb:67:f2:44:d2:c9:f9:1b:79:54:5d:02:65:56:63:
3a:69:0e:3b:4f:83:30:90:e8:21:72:90:06:15:55:
77:8e:e9:b0:78:f9:a6:32:42:77:ed:64:6c:f9:f4:
72:d8:21:84:14:74:19:28:a8:1c:c6:2e:e4:36:7f:
a5:be:91:20:31:5c:ef:eb:14:43:d3:fc:91:1a:37:
3e:a4:85:3b:b3:00:90:0a:9c:01:e3:a1:a2:80:95:
b5:07:6d:65:28:c0:ef:9b:c4:9b:59:98:6d:39:6f:
2e:64:36:8c:54:6b:af:ef:55:e2:56:e1:22:23:91:
1d:e2:07:2c:79:4a:37:62:85:a1:f1:98:8f:b8:25:
ee:54:77:f2:08:9f:81:b6:94:1a:4e:ce:71:93:10:
39:d5:fb:fc:c6:3f:4b:70:fc:19:38:3e:ed:6c:76:
1d:f4:df:31:5e:c8:1a:76:7b:6f:8a:09:cb:0e:e2:
52:b0:a0:0a:d3:08:f1:b0:ae:b7:ad:64:f7:ce:17:
5f:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:EC:A4:D6:D0:D8:18:76:4F:EC:E9:8E:E5:39:D9:18:5F:AF:22:61
X509v3 Authority Key Identifier:
keyid:45:0B:C6:7F:54:9E:B0:49:25:77:20:A0:00:EB:05:B5:4F:5D:2B:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RQvGf1SesEkldyCgAOsFtU9dK8A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/4c6cd6-37a9-4115-8366-24a8d9bf37bc/1/RQvGf1SesEkldyCgAOsFtU9dK8A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/4c6cd6-37a9-4115-8366-24a8d9bf37bc/1/RQvGf1SesEkldyCgAOsFtU9dK8A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:79:4e:d4:69:bd:d1:29:6a:fd:be:b0:95:10:20:76:53:58:
4d:50:36:97:b7:10:20:83:1d:b5:15:b6:11:4b:71:10:bd:a1:
59:ec:b0:33:8e:29:ea:37:53:a2:2a:df:4a:83:08:66:53:fe:
46:74:8e:35:17:b5:f8:05:d7:6d:bb:70:9c:8c:a7:11:7d:09:
26:7c:c8:ab:3b:bf:12:51:47:01:b3:e0:53:fc:e2:81:cb:b2:
ad:db:ee:53:0e:3f:ca:07:f6:21:8b:a2:54:91:86:c1:f1:91:
bd:e6:eb:e1:3c:c3:1c:68:b8:12:5b:9b:10:70:ce:36:b5:fd:
ed:1b:66:12:20:be:5b:c4:b4:73:0d:fc:87:80:54:4d:8e:07:
c9:7b:2d:bb:d6:d7:10:16:25:b7:ba:48:ad:95:fc:1d:44:2d:
08:81:6a:f9:27:dc:ea:82:1b:97:c9:e7:b0:ea:9f:36:ea:52:
58:02:e6:6b:48:53:99:81:3c:b6:21:ce:21:0a:51:e7:94:4f:
0a:80:5d:44:33:c0:44:ad:c9:70:19:63:e6:ff:d2:0a:e1:fc:
a8:16:4f:12:d3:d2:57:74:e8:81:c6:83:f3:9b:c5:4e:42:10:
d7:a3:13:c8:30:8c:ec:46:1f:8c:e8:e4:2e:14:9d:7b:6c:cc:
5d:8c:55:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 20:52:25 2025 by rpki-client