Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/fd596a-3f54-4e06-8620-6e0d213f484a/1/r4j95vrbtrLB22_kH4KdHyAVvgs.mft
File: r4j95vrbtrLB22_kH4KdHyAVvgs.mft (raw, json)
Hash identifier: Ji+yfjE3NAYyWyc9t8PYTJ/N6PDIZcupb1ZUQTHeLd4=
Subject key identifier: 40:8C:84:BF:00:42:CD:46:24:F1:5A:30:F2:DB:E8:B7:54:58:91:03
Authority key identifier: AF:88:FD:E6:FA:DB:B6:B2:C1:DB:6F:E4:1F:82:9D:1F:20:15:BE:0B
Certificate issuer: /CN=af88fde6fadbb6b2c1db6fe41f829d1f2015be0b
Certificate serial: 01976C2B261C880E66B54E761EF3327B0571
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r4j95vrbtrLB22_kH4KdHyAVvgs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/fd596a-3f54-4e06-8620-6e0d213f484a/1/r4j95vrbtrLB22_kH4KdHyAVvgs.mft
Manifest number: 0C28
Signing time: Sat 14 Jun 2025 02:00:56 +0000
Manifest this update: Sat 14 Jun 2025 02:00:56 +0000
Manifest next update: Sun 15 Jun 2025 02:00:56 +0000
Files and hashes: 1: RHreYh0WmNugHNPOVP5GHBEiSQE.roa (hash: lDEy9crc1E/w31v0jSsa/vEhnHdpcWtnPtxtDbNUjjc=)
2: r4j95vrbtrLB22_kH4KdHyAVvgs.crl (hash: LnHVzgadB+wlvKO9bYlBxEmePfGOAwJG9GM/CDZ54v4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/fd596a-3f54-4e06-8620-6e0d213f484a/1/r4j95vrbtrLB22_kH4KdHyAVvgs.crl
rsync://rpki.ripe.net/repository/DEFAULT/64/fd596a-3f54-4e06-8620-6e0d213f484a/1/r4j95vrbtrLB22_kH4KdHyAVvgs.mft
rsync://rpki.ripe.net/repository/DEFAULT/r4j95vrbtrLB22_kH4KdHyAVvgs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6c:2b:26:1c:88:0e:66:b5:4e:76:1e:f3:32:7b:05:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=af88fde6fadbb6b2c1db6fe41f829d1f2015be0b
Validity
Not Before: Jun 14 02:00:56 2025 GMT
Not After : Jun 15 02:00:56 2025 GMT
Subject: CN=408c84bf0042cd4624f15a30f2dbe8b754589103
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:b8:17:c7:d4:e9:8f:1a:d0:aa:c4:cf:0d:22:
ad:34:02:f8:df:5c:cd:40:14:2e:53:1a:9d:57:6e:
af:7d:07:ed:a3:2b:c4:cc:e7:c6:89:04:8a:de:85:
ee:e5:45:ca:1d:16:2d:14:1a:ba:7b:56:dd:f2:05:
28:98:65:a5:09:af:42:72:cd:0c:27:41:1a:73:5f:
8c:d0:17:d3:e3:7f:1e:bf:26:b5:16:76:c5:e3:f4:
a9:93:89:e7:92:3f:39:4c:71:a1:5d:65:89:06:61:
99:0c:1b:63:1a:39:b9:c5:7f:ff:1d:c0:53:00:7c:
39:c2:11:39:46:7d:1f:66:a6:6c:63:ce:77:04:33:
6a:b3:64:c2:61:db:ae:fc:a2:a8:81:8e:5b:b3:f2:
96:62:20:e1:ab:18:3b:ec:4d:f8:97:08:d7:66:ee:
7d:1d:7e:89:62:ad:ca:8a:e1:dd:90:ec:a7:ee:30:
b5:41:c8:1b:1b:8b:d8:76:bd:1f:1f:5a:bb:c9:b8:
72:7f:06:57:6b:f7:aa:be:a9:87:8f:3c:42:02:a6:
7a:5a:fa:1e:a4:c8:7b:91:37:f9:84:88:25:47:6b:
02:a4:d2:98:7f:d4:87:94:4c:46:3c:02:b2:80:5d:
f0:e2:25:65:be:a1:77:0f:76:1a:a9:71:3d:ed:0a:
de:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:8C:84:BF:00:42:CD:46:24:F1:5A:30:F2:DB:E8:B7:54:58:91:03
X509v3 Authority Key Identifier:
keyid:AF:88:FD:E6:FA:DB:B6:B2:C1:DB:6F:E4:1F:82:9D:1F:20:15:BE:0B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r4j95vrbtrLB22_kH4KdHyAVvgs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/fd596a-3f54-4e06-8620-6e0d213f484a/1/r4j95vrbtrLB22_kH4KdHyAVvgs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/fd596a-3f54-4e06-8620-6e0d213f484a/1/r4j95vrbtrLB22_kH4KdHyAVvgs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:1a:f0:4c:e9:d5:f9:89:d2:19:90:4b:4f:26:17:f5:22:2f:
1e:97:e2:ec:87:0c:2a:59:fa:f2:a6:a1:a8:5e:60:a5:98:2c:
73:f7:6d:fc:e1:54:7c:9b:5b:67:9c:e0:ef:ff:40:34:70:3d:
38:12:1e:b9:b9:49:47:8b:18:86:dd:25:c7:6e:a8:bb:b6:5c:
f7:9e:a8:d7:14:9c:ee:ff:18:41:d7:92:ac:98:8f:b4:d1:33:
f4:c2:8f:f4:ff:11:9c:a2:a8:5d:1c:95:27:15:d9:2c:62:08:
6f:8f:b2:21:7a:e1:90:74:1c:3c:09:1d:e1:f4:33:b8:23:64:
31:8e:95:ca:19:e6:b0:5f:a0:25:cd:f9:1e:69:16:45:3b:a3:
60:a4:3e:b3:c2:09:02:06:b3:43:98:c3:cf:b1:4f:55:19:ef:
94:cf:f9:d2:c0:82:3d:fc:04:90:5b:ab:35:4c:5b:53:27:c6:
1b:4d:d3:aa:78:b6:7d:05:85:9f:e0:bb:e6:1f:84:25:38:43:
ec:f0:89:78:3d:db:6b:bb:51:7e:b1:bb:39:85:f0:cc:dc:76:
a7:5a:75:45:56:01:e5:7f:01:8f:af:ec:3f:64:0c:ed:ef:8e:
6b:56:4b:b2:15:70:39:01:04:32:83:e0:c1:ba:7a:68:4e:12:
6f:f2:11:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 10:01:16 2025 by rpki-client