Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/ba2391-05a1-4bcb-a61d-e5d8e3750009/1/r4Tj0j_2C4KeFG69q0oK5h3g9Ps.mft
File: r4Tj0j_2C4KeFG69q0oK5h3g9Ps.mft (raw, json)
Hash identifier: XGbX5xuA83ePrs7S5hlTZ1Wh6FshXfiLTf+2Jl6rfrk=
Subject key identifier: BF:B5:50:19:A9:EE:30:D8:A9:CC:5C:60:23:9F:76:36:E0:86:C4:BF
Authority key identifier: AF:84:E3:D2:3F:F6:0B:82:9E:14:6E:BD:AB:4A:0A:E6:1D:E0:F4:FB
Certificate issuer: /CN=af84e3d23ff60b829e146ebdab4a0ae61de0f4fb
Certificate serial: 01976929E372D72EDAD276F3A62CFDA56597
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r4Tj0j_2C4KeFG69q0oK5h3g9Ps.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/ba2391-05a1-4bcb-a61d-e5d8e3750009/1/r4Tj0j_2C4KeFG69q0oK5h3g9Ps.mft
Manifest number: 2D
Signing time: Fri 13 Jun 2025 12:00:42 +0000
Manifest this update: Fri 13 Jun 2025 12:00:42 +0000
Manifest next update: Sat 14 Jun 2025 12:00:42 +0000
Files and hashes: 1: Sj_-Ptmp5l-zNzTgHXDKWr6DNsQ.roa (hash: S/l02EQhWoa3TBsVB+OnLc92uLdAeVgn7Z4178pnmT4=)
2: r4Tj0j_2C4KeFG69q0oK5h3g9Ps.crl (hash: Oxyr6L06OvEEz+zNvqrTcrHia45p1q24VhOzE8ukmvM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/ba2391-05a1-4bcb-a61d-e5d8e3750009/1/r4Tj0j_2C4KeFG69q0oK5h3g9Ps.crl
rsync://rpki.ripe.net/repository/DEFAULT/15/ba2391-05a1-4bcb-a61d-e5d8e3750009/1/r4Tj0j_2C4KeFG69q0oK5h3g9Ps.mft
rsync://rpki.ripe.net/repository/DEFAULT/r4Tj0j_2C4KeFG69q0oK5h3g9Ps.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 12:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:69:29:e3:72:d7:2e:da:d2:76:f3:a6:2c:fd:a5:65:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=af84e3d23ff60b829e146ebdab4a0ae61de0f4fb
Validity
Not Before: Jun 13 12:00:42 2025 GMT
Not After : Jun 14 12:00:42 2025 GMT
Subject: CN=bfb55019a9ee30d8a9cc5c60239f7636e086c4bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:0a:8d:9c:71:77:ba:26:c3:17:3a:f1:66:16:
cc:b1:31:4b:06:c0:ef:af:71:0c:43:ee:c8:f6:fa:
e2:8b:a8:d5:f3:21:18:f7:a8:97:87:8f:d7:c3:62:
55:48:bb:f5:d9:d7:81:ef:7e:75:16:41:13:41:ea:
f1:b2:13:87:07:8b:ef:ee:02:7c:9f:d7:ae:73:f4:
33:18:4a:88:61:41:ff:24:6a:92:e5:6f:bc:32:3f:
6b:60:7c:05:ca:6c:30:b4:ab:4f:68:39:15:9d:3a:
25:26:6e:01:03:2f:47:e2:39:50:1c:1c:e9:53:3a:
fb:0b:d1:0a:64:49:f7:7d:e7:11:a0:6c:cf:fa:2b:
43:42:5a:84:7c:80:1c:59:eb:55:b1:f7:ff:ac:51:
6f:7f:80:98:ac:76:b2:4f:46:10:ab:9e:00:67:20:
c1:dd:12:13:30:c8:5d:21:5f:ab:24:2f:87:70:73:
0d:82:ab:95:60:b2:e6:ae:86:25:c3:a6:c0:89:05:
e7:e2:dc:19:11:76:77:19:01:76:b9:fe:76:27:a3:
9b:55:42:38:ef:e0:ba:8a:92:ce:3e:7d:3a:26:bf:
20:49:a7:df:ef:cc:6f:71:35:fd:c5:20:ce:fd:22:
4e:25:7e:46:86:ce:63:d6:0d:8e:8b:6b:ad:14:d2:
18:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:B5:50:19:A9:EE:30:D8:A9:CC:5C:60:23:9F:76:36:E0:86:C4:BF
X509v3 Authority Key Identifier:
keyid:AF:84:E3:D2:3F:F6:0B:82:9E:14:6E:BD:AB:4A:0A:E6:1D:E0:F4:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r4Tj0j_2C4KeFG69q0oK5h3g9Ps.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/ba2391-05a1-4bcb-a61d-e5d8e3750009/1/r4Tj0j_2C4KeFG69q0oK5h3g9Ps.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/ba2391-05a1-4bcb-a61d-e5d8e3750009/1/r4Tj0j_2C4KeFG69q0oK5h3g9Ps.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:31:16:47:59:a1:e1:4d:77:d7:03:dc:bc:0e:e5:a5:b7:6f:
e7:a0:24:30:6e:1d:e1:86:fa:fa:a9:d6:07:92:2d:61:ba:03:
46:cd:ea:ea:9e:df:50:c4:b5:37:48:a7:a2:01:f7:c5:59:31:
e8:a2:2b:83:5f:d2:1e:15:31:56:b5:3f:f5:36:90:88:24:98:
30:5f:36:d1:ff:b4:3d:0b:2e:65:88:0b:d0:71:d6:de:c0:0d:
0e:ae:a2:c1:70:08:7e:89:5b:42:ed:98:e9:cb:e5:29:45:f2:
b7:28:96:27:01:b4:a0:ca:c2:5b:fe:cd:5c:16:57:6d:53:ba:
87:c2:23:e5:e8:16:a7:b8:7b:aa:7a:04:33:23:6b:f3:31:a6:
e9:9f:11:d5:3c:63:f9:a5:89:50:58:83:02:53:de:1a:25:b1:
27:f5:7a:40:78:66:38:9b:4e:59:c9:62:65:59:aa:1b:75:79:
91:f9:22:a5:82:4a:90:d2:e3:eb:ad:30:0b:bd:a1:a0:e7:f2:
05:13:f1:ef:be:f2:3c:49:90:d4:3f:06:8f:d7:69:b1:d0:c2:
59:94:08:c2:a5:4d:7e:9b:20:82:36:fa:91:06:c1:fa:b9:f1:
f2:2f:1f:ea:e3:9b:90:28:a9:0c:58:f5:f9:1d:90:67:32:a9:
74:f2:f5:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 20:01:11 2025 by rpki-client