Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/d8c4ba-1c48-480b-bb59-d2310bba0e11/1/4OvbaaM-jzrzY64UT4U1OOgDG2M.mft
File: 4OvbaaM-jzrzY64UT4U1OOgDG2M.mft (raw, json)
Hash identifier: aNqhJGcYCbTOvGUp3P1gsVYhFM1rTnkQsMLPT55gIGY=
Subject key identifier: A7:57:C2:FB:63:F1:5D:E7:37:5B:79:A1:BA:AB:56:35:1D:37:E7:C4
Authority key identifier: E0:EB:DB:69:A3:3E:8F:3A:F3:63:AE:14:4F:85:35:38:E8:03:1B:63
Certificate issuer: /CN=e0ebdb69a33e8f3af363ae144f853538e8031b63
Certificate serial: 01976B863347A5AD1348C15553D3E9FA4C94
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4OvbaaM-jzrzY64UT4U1OOgDG2M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/d8c4ba-1c48-480b-bb59-d2310bba0e11/1/4OvbaaM-jzrzY64UT4U1OOgDG2M.mft
Manifest number: 0865
Signing time: Fri 13 Jun 2025 23:00:46 +0000
Manifest this update: Fri 13 Jun 2025 23:00:46 +0000
Manifest next update: Sat 14 Jun 2025 23:00:46 +0000
Files and hashes: 1: 3eUay2tu69uIVC2ydoh-KNcQB3E.roa (hash: G/dDpLohr3NTC2lM78apSFe1V+YNmYFmlWqkTGl1RZw=)
2: 4OvbaaM-jzrzY64UT4U1OOgDG2M.crl (hash: qSTPQhSiQ7g6BciNQLx0uqmyRkkHupYcXkuhD26SvqY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/78/d8c4ba-1c48-480b-bb59-d2310bba0e11/1/4OvbaaM-jzrzY64UT4U1OOgDG2M.crl
rsync://rpki.ripe.net/repository/DEFAULT/78/d8c4ba-1c48-480b-bb59-d2310bba0e11/1/4OvbaaM-jzrzY64UT4U1OOgDG2M.mft
rsync://rpki.ripe.net/repository/DEFAULT/4OvbaaM-jzrzY64UT4U1OOgDG2M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 23:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6b:86:33:47:a5:ad:13:48:c1:55:53:d3:e9:fa:4c:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e0ebdb69a33e8f3af363ae144f853538e8031b63
Validity
Not Before: Jun 13 23:00:46 2025 GMT
Not After : Jun 14 23:00:46 2025 GMT
Subject: CN=a757c2fb63f15de7375b79a1baab56351d37e7c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:ce:79:02:85:2a:96:44:38:af:68:27:0a:ed:
b2:41:4f:2a:fc:d4:ea:32:46:45:62:21:44:3d:29:
54:48:1c:71:4e:60:81:07:b1:ee:e3:1f:77:2f:6e:
b3:cb:b7:68:b9:01:2c:ed:65:60:45:f8:da:d6:45:
9d:5c:3e:66:90:7c:96:30:1c:c7:4c:2f:99:98:98:
df:07:ee:41:64:dc:c5:3e:3d:f8:80:a6:4c:a1:3d:
9b:d7:96:e4:55:9c:c7:4f:6f:87:c1:af:9f:b5:4d:
a4:1a:3b:b0:cc:57:20:8b:1e:ca:b3:ec:04:ed:11:
45:99:2f:fd:d0:d7:10:11:72:81:b5:e6:ee:98:ee:
dc:c5:78:70:30:5d:28:c5:d0:34:ba:82:6e:67:b4:
e8:f1:22:8c:10:59:60:93:01:f0:b4:0e:88:d7:00:
5c:9c:c4:55:09:64:97:b5:f5:8f:50:af:68:e4:7a:
b8:2c:5a:ed:92:1f:dc:6e:a4:db:b2:b3:7c:aa:c9:
c3:41:73:88:7b:6d:b4:8f:1d:3b:69:df:61:3a:f3:
cd:6e:6a:b4:47:2e:bf:d4:de:2a:b3:41:06:3f:11:
d5:94:73:b4:d7:98:f8:61:3b:94:52:6b:57:2e:af:
90:27:d7:81:33:59:3b:c2:55:a6:c1:e2:62:cc:a2:
09:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:57:C2:FB:63:F1:5D:E7:37:5B:79:A1:BA:AB:56:35:1D:37:E7:C4
X509v3 Authority Key Identifier:
keyid:E0:EB:DB:69:A3:3E:8F:3A:F3:63:AE:14:4F:85:35:38:E8:03:1B:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4OvbaaM-jzrzY64UT4U1OOgDG2M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/d8c4ba-1c48-480b-bb59-d2310bba0e11/1/4OvbaaM-jzrzY64UT4U1OOgDG2M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/d8c4ba-1c48-480b-bb59-d2310bba0e11/1/4OvbaaM-jzrzY64UT4U1OOgDG2M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:0f:7c:d5:45:eb:c4:32:cf:17:e0:7f:14:56:87:ee:2c:73:
81:69:1e:b4:92:b3:a3:93:79:5c:cf:53:04:66:37:4d:95:c1:
f8:53:ec:1a:bf:79:27:dc:54:90:81:db:58:06:e0:b6:c3:41:
8f:68:c6:4b:61:73:24:a7:87:59:42:33:d7:ff:96:f8:d3:d4:
82:a0:f2:20:3f:9b:ae:0b:6b:07:20:1b:c5:ff:f5:93:ab:c8:
e6:e1:39:b9:d9:51:18:d4:44:d7:38:fd:7d:3a:08:8e:79:bd:
bf:e3:3e:d7:00:4d:6f:67:72:d3:78:e0:e1:09:9b:8a:d0:0d:
72:34:f1:e3:c7:26:e9:a7:e1:3a:9b:d4:d6:89:49:e9:84:c6:
9d:dd:47:89:ca:30:fa:2c:7c:73:b5:f6:d6:b9:ac:37:57:9e:
a0:b3:1b:c4:31:9a:d7:f8:53:fe:de:f2:1f:6f:ac:ff:00:d8:
2b:37:4d:db:4e:68:cf:b5:07:3e:ec:d7:ae:6d:a4:37:25:43:
56:e2:a8:84:76:73:58:1a:ef:62:22:94:ba:f1:83:0e:a7:c6:
52:03:b0:5a:3a:f0:de:e1:d3:28:4b:fa:49:ad:52:c1:9b:ec:
dd:2f:af:73:0e:92:72:e6:b9:49:43:65:fe:b3:dd:a4:f9:41:
06:68:c4:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 09:17:18 2025 by rpki-client