Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/03a3bf-0cfc-430a-985d-28e773db91c2/1/4IlF0fx7Rw5oc2VfdVkwDgl6Zeg.mft
File: 4IlF0fx7Rw5oc2VfdVkwDgl6Zeg.mft (raw, json)
Hash identifier: 9PlCExY2mxcwXTEV/cWpkrDMZP819uie5rT1eyT6ns0=
Subject key identifier: BE:54:BC:32:93:B8:7B:B5:10:06:88:29:F4:5D:D7:0B:6D:C6:A8:76
Authority key identifier: E0:89:45:D1:FC:7B:47:0E:68:73:65:5F:75:59:30:0E:09:7A:65:E8
Certificate issuer: /CN=e08945d1fc7b470e6873655f7559300e097a65e8
Certificate serial: 0197B77C0C0178DE50F0CADAF3F8B2A525F0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4IlF0fx7Rw5oc2VfdVkwDgl6Zeg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/03a3bf-0cfc-430a-985d-28e773db91c2/1/4IlF0fx7Rw5oc2VfdVkwDgl6Zeg.mft
Manifest number: 15B7
Signing time: Sat 28 Jun 2025 17:00:49 +0000
Manifest this update: Sat 28 Jun 2025 17:00:49 +0000
Manifest next update: Sun 29 Jun 2025 17:00:49 +0000
Files and hashes: 1: 4IlF0fx7Rw5oc2VfdVkwDgl6Zeg.crl (hash: wi+LMskJNWLGpPq8ts8RugIn+aFezmlP4CTjEhTTvb8=)
2: v8biWOV_nsNX1ilIaxvt6SJe6Ow.roa (hash: ncGnxGmhlyRE3Vp5tuC1OddbegBnGSDwDfQcrYZJehw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/03a3bf-0cfc-430a-985d-28e773db91c2/1/4IlF0fx7Rw5oc2VfdVkwDgl6Zeg.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/03a3bf-0cfc-430a-985d-28e773db91c2/1/4IlF0fx7Rw5oc2VfdVkwDgl6Zeg.mft
rsync://rpki.ripe.net/repository/DEFAULT/4IlF0fx7Rw5oc2VfdVkwDgl6Zeg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:7c:0c:01:78:de:50:f0:ca:da:f3:f8:b2:a5:25:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e08945d1fc7b470e6873655f7559300e097a65e8
Validity
Not Before: Jun 28 17:00:49 2025 GMT
Not After : Jun 29 17:00:49 2025 GMT
Subject: CN=be54bc3293b87bb510068829f45dd70b6dc6a876
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:63:c9:b4:1d:2e:c4:85:6e:b1:2e:06:89:1d:
79:dd:9d:9f:09:dc:13:23:ce:1d:14:3f:9a:b6:c7:
f7:50:ba:3e:5c:4f:51:a3:10:8a:99:a9:45:ca:67:
ff:f9:4e:ea:19:10:1e:12:e8:74:ba:97:53:df:98:
85:e4:e6:e9:5f:5b:e3:41:25:4f:0a:8b:14:fd:65:
a7:5b:4c:5a:23:d7:27:12:a2:40:78:86:ba:8e:b3:
d2:29:54:57:cd:25:66:bb:a3:f3:d6:80:4a:bb:bd:
9d:32:45:1a:87:8b:88:7d:2a:57:0c:b1:e9:98:df:
b6:77:ab:b4:a7:31:8e:b1:c4:82:ea:81:7c:39:0d:
3f:27:e2:e5:05:6b:b6:d5:41:14:4d:e2:e5:e9:3a:
16:27:4e:f6:b7:c5:5e:b1:5f:bc:b6:0f:d3:b7:2c:
02:a3:92:8f:69:78:3c:16:bb:f9:7a:d9:2b:7d:f2:
9e:45:19:09:7c:56:99:74:9c:6e:e5:de:cb:56:c7:
44:f9:05:94:9f:e7:4e:59:6b:35:03:9f:85:da:e3:
7b:57:72:f7:82:a3:f1:5c:19:2c:c1:51:b2:db:59:
97:6f:6d:5c:92:7c:c2:20:90:fd:2e:38:9b:12:af:
2e:e7:71:ef:e2:d1:3e:b9:7a:2d:0b:73:00:b2:a1:
17:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:54:BC:32:93:B8:7B:B5:10:06:88:29:F4:5D:D7:0B:6D:C6:A8:76
X509v3 Authority Key Identifier:
keyid:E0:89:45:D1:FC:7B:47:0E:68:73:65:5F:75:59:30:0E:09:7A:65:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4IlF0fx7Rw5oc2VfdVkwDgl6Zeg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/03a3bf-0cfc-430a-985d-28e773db91c2/1/4IlF0fx7Rw5oc2VfdVkwDgl6Zeg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/03a3bf-0cfc-430a-985d-28e773db91c2/1/4IlF0fx7Rw5oc2VfdVkwDgl6Zeg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:a4:0f:50:3c:d2:24:1c:3c:2b:96:87:d5:15:02:f6:e3:ee:
13:53:34:53:a5:a2:64:dd:85:ed:6d:d3:a3:3f:4d:6d:f6:62:
5e:19:81:9f:56:4a:68:1d:2a:f1:c1:5b:88:1f:27:b3:c0:00:
32:c3:c9:37:86:e0:c3:28:c3:b8:75:e0:3d:14:c6:ff:9a:ba:
3f:21:33:67:20:b8:f0:a8:58:17:a2:20:9a:f1:b2:59:69:69:
92:0a:f6:27:27:c4:35:8b:0f:90:a3:97:8c:54:59:d7:75:7c:
71:55:e0:13:82:ed:43:84:3b:4e:f7:2a:e2:4f:04:1e:83:7b:
de:86:fa:89:bc:9d:0d:ad:d9:60:cd:18:ab:0d:bb:1b:72:ce:
73:43:96:61:a0:fa:53:ba:69:15:f5:0c:a0:3f:b0:27:95:ac:
69:fc:1e:90:c2:0c:65:35:ac:a6:00:e2:0f:56:8e:5e:14:b2:
67:71:93:ac:4f:71:c5:f2:29:0a:48:dc:93:9f:c4:97:e9:e9:
21:05:c0:d6:7c:9a:d0:ef:04:bb:1b:29:eb:4e:c7:cd:55:b1:
4d:e6:19:f5:c0:9e:ba:83:b7:e4:d3:c0:f9:22:35:50:00:64:
80:8f:1a:d4:24:fc:42:33:b9:c3:56:78:84:11:fd:37:1a:de:
8e:41:38:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 22:54:25 2025 by rpki-client