Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/0167eb-0d16-4cc1-8047-142fcacd7a49/1/4xVK21ou2ZnPHbnBJxsiCdrTRJ4.mft
File: 4xVK21ou2ZnPHbnBJxsiCdrTRJ4.mft (raw, json)
Hash identifier: TvEJXVx3jL/5J4OLfnEQvX4B49VDudxFcJw6I+3n42M=
Subject key identifier: BB:A4:58:F8:30:46:F1:60:96:1C:3E:F3:F5:C8:51:E5:90:66:D2:F1
Authority key identifier: E3:15:4A:DB:5A:2E:D9:99:CF:1D:B9:C1:27:1B:22:09:DA:D3:44:9E
Certificate issuer: /CN=e3154adb5a2ed999cf1db9c1271b2209dad3449e
Certificate serial: 019771F6404EFF743ABB4F6BEB5696F651D5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4xVK21ou2ZnPHbnBJxsiCdrTRJ4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/0167eb-0d16-4cc1-8047-142fcacd7a49/1/4xVK21ou2ZnPHbnBJxsiCdrTRJ4.mft
Manifest number: 1425
Signing time: Sun 15 Jun 2025 05:00:53 +0000
Manifest this update: Sun 15 Jun 2025 05:00:53 +0000
Manifest next update: Mon 16 Jun 2025 05:00:53 +0000
Files and hashes: 1: 4xVK21ou2ZnPHbnBJxsiCdrTRJ4.crl (hash: Es1aGsVN7+9RhKVHNMOj0ocT9IlT+LVPqHh3d6ltEgs=)
2: YKk_IxXaH7sfK7_gRS3093UyRYo.roa (hash: COs47LOLhU2xn+3tfczoJAT+wVHUvoY7/hZnsmTjtwc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/23/0167eb-0d16-4cc1-8047-142fcacd7a49/1/4xVK21ou2ZnPHbnBJxsiCdrTRJ4.crl
rsync://rpki.ripe.net/repository/DEFAULT/23/0167eb-0d16-4cc1-8047-142fcacd7a49/1/4xVK21ou2ZnPHbnBJxsiCdrTRJ4.mft
rsync://rpki.ripe.net/repository/DEFAULT/4xVK21ou2ZnPHbnBJxsiCdrTRJ4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 22:19:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:71:f6:40:4e:ff:74:3a:bb:4f:6b:eb:56:96:f6:51:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e3154adb5a2ed999cf1db9c1271b2209dad3449e
Validity
Not Before: Jun 15 05:00:53 2025 GMT
Not After : Jun 16 05:00:53 2025 GMT
Subject: CN=bba458f83046f160961c3ef3f5c851e59066d2f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:2d:4f:3c:28:01:c5:7e:f7:ed:1a:c8:b2:76:
b2:9e:1f:ae:a8:1b:0e:a1:bc:f2:b6:90:6c:2a:37:
de:8d:3a:ee:82:49:0a:5b:18:d7:11:87:d8:c1:9f:
13:1d:64:ee:0b:2f:68:68:5c:57:a7:bd:2c:5d:bf:
f8:19:7e:aa:ad:c0:92:b6:ec:5e:cf:c1:f9:b8:ba:
35:40:c5:05:4d:0c:e1:32:bc:cf:aa:92:a5:49:e5:
71:ae:95:9d:98:8b:bb:f3:d0:c9:7b:5a:9c:a4:c8:
e3:49:ce:02:66:b4:6d:d2:b1:b4:18:de:f1:ff:87:
55:64:57:6b:c8:09:43:29:3e:2e:f3:1f:32:c8:00:
09:11:fa:12:98:70:37:68:2a:c3:56:46:77:f3:a2:
5f:54:e7:5a:86:4e:6c:72:f4:e7:74:35:1e:d7:7f:
f2:c5:75:3f:37:30:bf:43:92:26:f8:7f:52:6f:10:
3a:bf:0c:33:1a:3f:3c:0a:f3:ef:da:53:0e:5a:5e:
f1:31:0b:8c:21:0b:95:bf:82:3b:78:ce:08:b6:64:
2d:c5:fb:ee:88:d0:85:c4:c3:e7:1d:7c:dc:bd:0b:
2d:1b:59:be:c6:d0:9f:ee:77:22:80:5c:06:09:f3:
01:4e:53:29:bd:7f:09:6e:a5:f5:74:9b:c8:0f:5e:
9a:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:A4:58:F8:30:46:F1:60:96:1C:3E:F3:F5:C8:51:E5:90:66:D2:F1
X509v3 Authority Key Identifier:
keyid:E3:15:4A:DB:5A:2E:D9:99:CF:1D:B9:C1:27:1B:22:09:DA:D3:44:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4xVK21ou2ZnPHbnBJxsiCdrTRJ4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/0167eb-0d16-4cc1-8047-142fcacd7a49/1/4xVK21ou2ZnPHbnBJxsiCdrTRJ4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/23/0167eb-0d16-4cc1-8047-142fcacd7a49/1/4xVK21ou2ZnPHbnBJxsiCdrTRJ4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:ca:26:a1:e0:b6:af:1b:f7:3e:d7:0d:d5:25:c4:ad:ed:21:
46:0b:b0:62:e5:76:05:4e:fd:39:3c:64:61:24:0c:a7:42:96:
a1:aa:4b:ac:fa:b0:86:94:27:42:a3:cd:49:6e:5b:3a:60:0d:
4a:4e:a0:0e:ac:38:80:a7:d7:02:d6:e1:a8:38:f2:d4:6d:bb:
a2:04:17:37:d9:c8:f1:e6:7d:09:12:73:36:8b:05:89:b0:19:
45:23:c9:49:46:19:b0:d8:69:88:fa:fa:9a:50:56:72:f5:3b:
23:ba:81:30:de:c0:c7:35:1f:eb:61:5d:7e:1b:14:a2:94:52:
ed:22:dc:13:1c:05:cb:27:a4:96:62:b4:54:3f:29:7b:14:9f:
a1:99:37:16:cb:ed:2d:14:72:8b:67:31:63:35:86:82:68:ee:
40:ec:58:23:8a:1d:43:eb:79:b2:9e:57:90:5e:8d:12:30:9f:
a8:85:02:45:67:77:3b:3c:af:2d:b2:7e:bc:d5:f8:7f:2a:4e:
55:07:f9:f1:5a:38:57:a7:8f:8b:76:4d:3c:90:8e:c3:9a:7c:
10:f1:43:5c:46:91:65:72:d4:71:9c:d0:a4:e8:8e:2a:5d:97:
5d:b2:0b:6f:a6:86:a4:99:8a:f8:86:d1:e5:54:c3:58:2f:43:
68:21:e6:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 07:34:10 2025 by rpki-client