Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/0b58ab-f707-4ab6-9ae8-0240e74476a7/1/S4x70MRIa6Bzzi3lO6B01w5Ftec.mft
File: S4x70MRIa6Bzzi3lO6B01w5Ftec.mft (raw, json)
Hash identifier: UGK1W42CReDy9TqZJb7DbRZisdqctXlTCn5PgUDc5Yk=
Subject key identifier: 1A:0B:08:7D:CA:A4:23:7B:8E:DB:FC:80:08:CB:43:C8:46:14:E4:16
Authority key identifier: 4B:8C:7B:D0:C4:48:6B:A0:73:CE:2D:E5:3B:A0:74:D7:0E:45:B5:E7
Certificate issuer: /CN=4b8c7bd0c4486ba073ce2de53ba074d70e45b5e7
Certificate serial: 019769CE6FCE367B05254BAD60C0728E4CA1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S4x70MRIa6Bzzi3lO6B01w5Ftec.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/0b58ab-f707-4ab6-9ae8-0240e74476a7/1/S4x70MRIa6Bzzi3lO6B01w5Ftec.mft
Manifest number: 158B
Signing time: Fri 13 Jun 2025 15:00:25 +0000
Manifest this update: Fri 13 Jun 2025 15:00:25 +0000
Manifest next update: Sat 14 Jun 2025 15:00:25 +0000
Files and hashes: 1: 3JM1DqiUyjfx5MdpsDwZLHS0SmA.roa (hash: q6Ea605SgtRXxY5NI/ZcpQt4PK8j0Kx+z2u5Y/QaL0k=)
2: S4x70MRIa6Bzzi3lO6B01w5Ftec.crl (hash: CTvwxkMhsHQmfvnfr+f8t7hqBN4hkqco37LM7pgtVYs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/0b58ab-f707-4ab6-9ae8-0240e74476a7/1/S4x70MRIa6Bzzi3lO6B01w5Ftec.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/0b58ab-f707-4ab6-9ae8-0240e74476a7/1/S4x70MRIa6Bzzi3lO6B01w5Ftec.mft
rsync://rpki.ripe.net/repository/DEFAULT/S4x70MRIa6Bzzi3lO6B01w5Ftec.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 13:55:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:69:ce:6f:ce:36:7b:05:25:4b:ad:60:c0:72:8e:4c:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b8c7bd0c4486ba073ce2de53ba074d70e45b5e7
Validity
Not Before: Jun 13 15:00:25 2025 GMT
Not After : Jun 14 15:00:25 2025 GMT
Subject: CN=1a0b087dcaa4237b8edbfc8008cb43c84614e416
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:f8:2a:af:3f:18:6e:29:02:e9:00:b8:b7:c5:
d7:dd:6b:10:f2:27:fa:67:ba:a9:ce:e4:5b:6c:71:
a5:e4:86:0c:fb:59:01:96:43:31:64:cb:07:28:30:
4b:89:a2:89:f1:27:9c:9c:66:49:d5:bb:eb:3a:fb:
05:b2:e1:f0:55:e7:15:be:45:2c:5d:a5:1c:4a:48:
f0:6e:10:22:48:6e:54:14:ec:06:c2:8a:a2:c1:bb:
f7:5d:43:3c:f3:30:7c:52:47:ea:a5:db:e1:e2:eb:
79:49:e3:0a:ec:1c:3f:b5:80:82:29:4a:9c:db:da:
23:71:e9:2e:31:13:8b:4e:99:78:91:56:42:ff:40:
4f:cf:8b:30:80:62:9f:c2:69:87:0b:08:d3:7f:3d:
16:42:da:ca:79:94:7d:9e:b4:aa:91:14:04:71:89:
14:3b:62:1c:13:5f:c8:5d:8d:28:c9:ef:67:90:6d:
88:2b:85:a1:9e:4f:ba:92:65:75:f2:6e:ea:87:44:
08:c3:2e:a8:f4:2c:6e:be:f2:51:6b:5b:6a:a6:e4:
fe:92:a8:de:ec:90:c3:c7:24:7a:19:a8:52:b9:e9:
0f:3a:02:46:23:fa:9a:b1:f0:83:94:82:66:5e:7a:
f7:6e:fa:7d:8a:02:0b:6c:57:98:8c:e0:64:1e:b6:
c3:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:0B:08:7D:CA:A4:23:7B:8E:DB:FC:80:08:CB:43:C8:46:14:E4:16
X509v3 Authority Key Identifier:
keyid:4B:8C:7B:D0:C4:48:6B:A0:73:CE:2D:E5:3B:A0:74:D7:0E:45:B5:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S4x70MRIa6Bzzi3lO6B01w5Ftec.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/0b58ab-f707-4ab6-9ae8-0240e74476a7/1/S4x70MRIa6Bzzi3lO6B01w5Ftec.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/0b58ab-f707-4ab6-9ae8-0240e74476a7/1/S4x70MRIa6Bzzi3lO6B01w5Ftec.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a2:83:90:0a:82:67:ff:bc:9c:43:ac:49:90:22:6d:4c:85:ee:
98:77:15:97:f5:b2:1c:1d:2d:92:ba:81:e7:f1:7a:4b:e3:b6:
cf:a1:29:82:6b:2b:3a:17:b7:fd:5d:44:e7:06:9e:9e:17:28:
45:a8:17:17:17:1e:7b:40:bc:aa:29:0e:a2:fe:aa:3d:1f:ad:
a9:bf:e3:ae:4c:9a:ee:d7:e2:0e:be:d2:49:e3:3c:84:10:35:
bf:fe:56:82:14:f2:3f:8b:95:20:71:a6:b1:9c:8d:7b:85:20:
50:c2:37:c9:62:48:92:75:05:f0:81:50:e8:62:b2:c6:87:98:
59:30:f2:3f:f9:ba:93:32:06:38:eb:47:b9:00:03:a4:b3:59:
d9:0a:a9:9b:84:04:4c:65:fe:f2:cb:d3:45:4c:db:32:66:2b:
b2:d6:21:bd:f6:48:d2:f6:be:63:57:53:f1:6f:82:29:86:00:
fd:91:5d:5d:a9:5b:e7:fb:e2:40:e0:df:08:44:cc:15:93:c4:
db:b0:08:f2:8d:a5:c9:d0:c2:45:c6:27:b2:28:fe:f5:59:a0:
18:77:a1:af:16:1a:c7:1f:2b:e6:66:a3:70:8c:d0:1e:55:e7:
52:64:cb:cd:d1:fd:0c:39:71:65:83:eb:f2:29:40:7a:07:4d:
e7:a7:a3:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 19:18:06 2025 by rpki-client