Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/7215e0-9ab8-4a13-a605-31ab32ff7c68/1/4VhJEBJK93bjDlrPBV1rrhdhpTY.mft
File: 4VhJEBJK93bjDlrPBV1rrhdhpTY.mft (raw, json)
Hash identifier: 2523NwWBmlH2Jo19pC0bvuwVXQiv9qVJDJ2TDDDaygQ=
Subject key identifier: 68:99:1A:73:97:3C:24:11:A1:D8:72:16:33:2B:8D:63:68:E9:82:E8
Authority key identifier: E1:58:49:10:12:4A:F7:76:E3:0E:5A:CF:05:5D:6B:AE:17:61:A5:36
Certificate issuer: /CN=e1584910124af776e30e5acf055d6bae1761a536
Certificate serial: 0197B77CA37F32EED142D1DEBE2301D10FFC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4VhJEBJK93bjDlrPBV1rrhdhpTY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/7215e0-9ab8-4a13-a605-31ab32ff7c68/1/4VhJEBJK93bjDlrPBV1rrhdhpTY.mft
Manifest number: 0AA2
Signing time: Sat 28 Jun 2025 17:01:28 +0000
Manifest this update: Sat 28 Jun 2025 17:01:28 +0000
Manifest next update: Sun 29 Jun 2025 17:01:28 +0000
Files and hashes: 1: 4VhJEBJK93bjDlrPBV1rrhdhpTY.crl (hash: qEq4P2OoogdW/VPE0EH5wfH5Y9R/9n7UHr3EBGwzE7c=)
2: FYVKqcf4TLt5l_nECN8Q3YrnHV8.roa (hash: wVS2RJnxIK54lkzq6flASzNiEFd2go/wiBjtoCVLPnw=)
3: pV9NJLxdi4jqw_UmIw3qNFIfWPE.roa (hash: JcjmMNBvioeNG+wkxM3r1KDyWfSA64pDYh6jv6Qb2JI=)
4: zTNz5q56WyGtwKzYlcHUYQPhEqU.roa (hash: KL+PDxc9WFQD8wrSMYnMHzYnKzeF40iSXkJ1EtPgaHE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/7215e0-9ab8-4a13-a605-31ab32ff7c68/1/4VhJEBJK93bjDlrPBV1rrhdhpTY.crl
rsync://rpki.ripe.net/repository/DEFAULT/fb/7215e0-9ab8-4a13-a605-31ab32ff7c68/1/4VhJEBJK93bjDlrPBV1rrhdhpTY.mft
rsync://rpki.ripe.net/repository/DEFAULT/4VhJEBJK93bjDlrPBV1rrhdhpTY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:7c:a3:7f:32:ee:d1:42:d1:de:be:23:01:d1:0f:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e1584910124af776e30e5acf055d6bae1761a536
Validity
Not Before: Jun 28 17:01:28 2025 GMT
Not After : Jun 29 17:01:28 2025 GMT
Subject: CN=68991a73973c2411a1d87216332b8d6368e982e8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:b9:73:b1:a3:c9:56:b9:1e:77:39:61:cf:73:
97:94:d4:a9:7c:83:de:6a:a9:75:4e:d8:87:39:ec:
d9:35:9e:7f:bd:5d:4b:6d:c1:1d:70:bc:27:fb:b3:
c7:ae:d3:2e:29:19:d0:ff:14:74:f0:44:e6:93:ad:
2f:70:5d:13:94:43:a7:47:3b:93:75:7b:b5:21:56:
5d:99:11:2e:44:f5:a1:fd:bf:f7:dd:82:87:c3:01:
43:7a:9a:7f:16:ba:e3:42:de:80:31:4b:cd:1c:ab:
41:fc:3c:73:5d:d8:cb:95:60:1e:48:d3:8b:a2:77:
e6:e8:7a:b6:61:88:ec:e5:d0:15:31:24:91:f7:00:
cd:7a:84:dd:c4:b9:7d:4f:fd:aa:d0:ce:0f:50:0a:
75:6c:51:92:a0:10:99:54:ba:dc:40:fc:32:43:30:
84:c4:ad:ec:90:96:4f:bb:39:33:6d:9b:eb:80:a8:
5e:83:26:d7:7c:29:72:66:40:2d:9c:cc:01:f7:e3:
a9:2e:04:5d:88:25:bb:a3:d9:0c:38:b0:33:ff:de:
4f:0f:4a:0d:f8:15:87:38:a4:2f:56:b9:32:88:8b:
0e:41:3c:b2:f5:9d:ed:25:4d:10:9d:77:b2:28:d1:
8c:23:14:02:28:a1:95:8a:fa:f6:8f:7e:d8:17:cd:
f1:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:99:1A:73:97:3C:24:11:A1:D8:72:16:33:2B:8D:63:68:E9:82:E8
X509v3 Authority Key Identifier:
keyid:E1:58:49:10:12:4A:F7:76:E3:0E:5A:CF:05:5D:6B:AE:17:61:A5:36
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4VhJEBJK93bjDlrPBV1rrhdhpTY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/7215e0-9ab8-4a13-a605-31ab32ff7c68/1/4VhJEBJK93bjDlrPBV1rrhdhpTY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/7215e0-9ab8-4a13-a605-31ab32ff7c68/1/4VhJEBJK93bjDlrPBV1rrhdhpTY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:cd:62:4b:76:64:33:dc:a0:0a:2c:92:56:a4:ef:8a:0a:df:
5b:27:7d:6c:b1:d0:84:09:17:5b:7f:cf:d2:ea:c3:1f:30:bf:
e3:32:bd:a1:c4:9a:00:d5:24:e4:57:2d:64:11:b1:a2:7c:13:
10:bc:e0:da:3c:10:16:52:5d:bf:7f:f3:a6:0c:8d:46:49:f4:
f2:84:54:cf:75:2c:1e:31:66:f8:fd:fe:e3:6c:dd:9b:b1:80:
a4:8d:f1:86:36:6e:da:c5:78:ce:c8:dd:27:23:12:67:f8:dc:
09:63:98:13:57:89:25:c4:2a:2c:7f:a9:59:a5:15:52:36:fd:
7b:fc:66:04:3f:54:00:32:eb:df:7f:71:46:75:83:bb:70:bf:
bc:31:28:99:0f:29:1e:75:e9:54:74:4c:8c:eb:64:a0:07:3f:
9b:f9:66:2a:b3:1c:0e:89:20:25:3d:ec:34:66:06:e3:25:c1:
b4:bb:b9:40:57:4a:28:b6:7e:87:e1:d7:9d:a0:78:81:cf:63:
1d:93:90:0c:54:9e:09:cc:44:76:b6:26:0d:5f:f7:d8:65:e2:
5c:8e:4c:fe:5a:6f:59:d8:f5:79:fd:6a:f4:e8:da:b8:30:45:
a6:89:49:70:0b:52:ee:1f:93:d4:0e:36:0d:4d:4a:8f:00:a7:
5c:96:a5:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:25:23 2025 by rpki-client