Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/e521bf-f8fd-4e39-b6ea-c9738ce5baef/1/1w4MS0dQEKW0Kt7zM8Ob3BrblhE.mft
File: 1w4MS0dQEKW0Kt7zM8Ob3BrblhE.mft (raw, json)
Hash identifier: NG5qUlf8oN90VPxeqJMmYSWAIgbT9sjTeyfHFlT+HhY=
Subject key identifier: E5:C8:03:40:F9:46:26:9D:12:8A:D2:27:89:E6:BC:8B:35:05:99:D0
Authority key identifier: D7:0E:0C:4B:47:50:10:A5:B4:2A:DE:F3:33:C3:9B:DC:1A:DB:96:11
Certificate issuer: /CN=d70e0c4b475010a5b42adef333c39bdc1adb9611
Certificate serial: 01977677B263EDB5E3176FE54AFFF25039A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1w4MS0dQEKW0Kt7zM8Ob3BrblhE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/e521bf-f8fd-4e39-b6ea-c9738ce5baef/1/1w4MS0dQEKW0Kt7zM8Ob3BrblhE.mft
Manifest number: 0BA4
Signing time: Mon 16 Jun 2025 02:00:45 +0000
Manifest this update: Mon 16 Jun 2025 02:00:45 +0000
Manifest next update: Tue 17 Jun 2025 02:00:45 +0000
Files and hashes: 1: 1w4MS0dQEKW0Kt7zM8Ob3BrblhE.crl (hash: Pumbb6EFFKpctPFfduGCEOCLBsQ1YmsOpBUUxq+URX0=)
2: pW4NhKTVrfPynXbLPF5CI2MPfYk.roa (hash: WbDzY2pHEiq4FLUx3TIlRUMJrlB0Z859NRUEutTDHyI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/e521bf-f8fd-4e39-b6ea-c9738ce5baef/1/1w4MS0dQEKW0Kt7zM8Ob3BrblhE.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/e521bf-f8fd-4e39-b6ea-c9738ce5baef/1/1w4MS0dQEKW0Kt7zM8Ob3BrblhE.mft
rsync://rpki.ripe.net/repository/DEFAULT/1w4MS0dQEKW0Kt7zM8Ob3BrblhE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 17 Jun 2025 02:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:76:77:b2:63:ed:b5:e3:17:6f:e5:4a:ff:f2:50:39:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d70e0c4b475010a5b42adef333c39bdc1adb9611
Validity
Not Before: Jun 16 02:00:45 2025 GMT
Not After : Jun 17 02:00:45 2025 GMT
Subject: CN=e5c80340f946269d128ad22789e6bc8b350599d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:b3:7b:65:16:ae:fd:16:92:16:1e:cb:4f:50:
10:6c:75:46:71:e1:35:09:57:34:cd:05:57:49:c6:
c3:24:ac:d0:46:ee:60:33:71:8b:da:08:4b:96:30:
b3:9f:37:72:3a:a4:eb:57:da:2a:32:e5:43:65:ca:
23:6d:a6:0e:c3:3d:69:0b:f9:e7:a7:91:83:e7:6b:
b5:b3:4c:84:f9:0f:c0:48:ef:f0:3f:0c:15:8e:71:
7d:7e:69:a0:a6:6b:70:eb:67:78:88:15:de:37:65:
7c:e6:ba:67:b6:08:bf:7e:2e:26:51:70:cc:68:61:
3c:e4:b7:d9:a1:4f:5c:28:b4:91:87:4c:7b:58:bb:
51:02:d1:91:92:29:42:f5:75:44:03:4c:98:b5:cf:
04:73:08:ca:60:27:74:5e:90:4a:84:62:58:27:f7:
67:88:1c:0b:57:4f:37:ff:17:26:05:d1:ff:b6:0e:
c0:98:6d:cf:56:3e:f0:d2:61:70:f2:c8:13:98:23:
d6:78:49:e3:92:41:a6:a4:bc:be:79:bf:8a:e2:fa:
b2:74:ce:3d:3c:35:0a:9a:d2:f9:d4:8f:93:4e:78:
7d:19:3a:f1:a7:62:01:69:e9:92:db:67:ee:9d:a0:
bb:1b:76:72:c6:02:c4:c3:d1:8e:ba:cb:2b:94:95:
69:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:C8:03:40:F9:46:26:9D:12:8A:D2:27:89:E6:BC:8B:35:05:99:D0
X509v3 Authority Key Identifier:
keyid:D7:0E:0C:4B:47:50:10:A5:B4:2A:DE:F3:33:C3:9B:DC:1A:DB:96:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1w4MS0dQEKW0Kt7zM8Ob3BrblhE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/e521bf-f8fd-4e39-b6ea-c9738ce5baef/1/1w4MS0dQEKW0Kt7zM8Ob3BrblhE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/e521bf-f8fd-4e39-b6ea-c9738ce5baef/1/1w4MS0dQEKW0Kt7zM8Ob3BrblhE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:94:af:43:e3:d0:fa:9b:1b:34:8b:fa:5b:c7:d3:e4:04:77:
c2:f7:5a:c9:03:76:db:20:e4:a2:29:84:ab:b1:ab:2d:06:a4:
99:45:ad:fa:c7:b5:22:6e:29:5a:ee:f2:dd:9b:31:df:ed:da:
90:cc:ba:02:9c:69:ab:c0:39:a3:5d:4e:d0:cb:b8:b9:e6:9f:
0f:be:7a:03:25:22:b6:9f:b8:a3:1e:22:20:99:bc:52:3f:70:
02:bf:fb:77:49:6e:0c:b1:8d:18:04:01:90:29:bb:7f:68:f6:
4a:79:65:1e:07:c2:2a:c0:1d:5c:85:83:ef:fb:97:d9:08:d4:
0d:19:67:9b:35:ee:f5:a9:95:a7:90:be:3d:85:c2:0b:db:02:
6d:fb:0c:90:79:1f:08:f1:79:40:a0:b0:cd:94:71:a3:6f:57:
1d:ba:de:45:6a:35:eb:a0:f6:d6:d5:f1:b3:94:a3:10:99:73:
e4:ba:a6:c5:d1:be:c0:fc:fd:30:2a:a3:bc:3a:9b:64:4c:89:
2b:e0:de:01:de:71:dd:b0:0f:1e:69:b5:cd:4a:24:a3:d8:e4:
33:18:43:fe:0c:0b:96:1d:8b:73:e5:f4:23:48:29:3a:d1:20:
df:49:04:2e:12:8a:75:eb:5e:e4:45:b8:a0:7c:77:c9:29:b6:
b9:90:58:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 08:51:18 2025 by rpki-client