Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/2e82cb-4a6e-408f-af20-843154a80b72/1/4iqTzrgrZ1qEsNeOea5KeXypgjE.mft
File: 4iqTzrgrZ1qEsNeOea5KeXypgjE.mft (raw, json)
Hash identifier: 3xtwcVjcupOcA1yGLK+3U1GSZpAcIR5hXkG5uEAX0BM=
Subject key identifier: 01:77:B8:42:BE:AA:42:9C:22:A7:BA:9F:C2:7C:38:C7:42:1A:05:55
Authority key identifier: E2:2A:93:CE:B8:2B:67:5A:84:B0:D7:8E:79:AE:4A:79:7C:A9:82:31
Certificate issuer: /CN=e22a93ceb82b675a84b0d78e79ae4a797ca98231
Certificate serial: 01978244E7DF37929B8E7B8D8FD4F40BC225
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4iqTzrgrZ1qEsNeOea5KeXypgjE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/2e82cb-4a6e-408f-af20-843154a80b72/1/4iqTzrgrZ1qEsNeOea5KeXypgjE.mft
Manifest number: 1131
Signing time: Wed 18 Jun 2025 09:00:43 +0000
Manifest this update: Wed 18 Jun 2025 09:00:43 +0000
Manifest next update: Thu 19 Jun 2025 09:00:43 +0000
Files and hashes: 1: 4iqTzrgrZ1qEsNeOea5KeXypgjE.crl (hash: caXqyZ461Xv9wHyhEWzhqIKcCA0jgW9kOt9Vuy63Djk=)
2: yB2qv2hArqh8Rg0DZ4yGfxQJ57I.roa (hash: b+3wO516colETH6Q8Hnf3dC3oM2heED/4qOLBklRlP8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/af/2e82cb-4a6e-408f-af20-843154a80b72/1/4iqTzrgrZ1qEsNeOea5KeXypgjE.crl
rsync://rpki.ripe.net/repository/DEFAULT/af/2e82cb-4a6e-408f-af20-843154a80b72/1/4iqTzrgrZ1qEsNeOea5KeXypgjE.mft
rsync://rpki.ripe.net/repository/DEFAULT/4iqTzrgrZ1qEsNeOea5KeXypgjE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 19 Jun 2025 09:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:82:44:e7:df:37:92:9b:8e:7b:8d:8f:d4:f4:0b:c2:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e22a93ceb82b675a84b0d78e79ae4a797ca98231
Validity
Not Before: Jun 18 09:00:43 2025 GMT
Not After : Jun 19 09:00:43 2025 GMT
Subject: CN=0177b842beaa429c22a7ba9fc27c38c7421a0555
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:a6:cb:9b:25:b4:13:0c:d6:51:a1:da:82:c7:
1b:51:9f:8b:9a:45:e2:9f:74:13:b6:09:47:ff:d9:
21:23:d8:87:e1:92:a7:e2:83:75:77:c0:f6:d9:d1:
09:1f:a3:bc:1b:a5:a7:4d:70:60:6a:83:c3:dd:5e:
51:f7:fd:1b:44:ff:38:df:98:55:6c:76:12:0a:52:
18:8e:17:02:a3:be:44:1b:49:26:df:8e:4b:9e:ec:
bd:e6:59:fb:bb:d7:d5:86:0d:57:31:ce:b4:4d:a9:
68:2f:df:a8:92:99:ee:55:c1:ae:12:88:9a:e3:a2:
21:9a:88:47:29:8f:80:f6:ed:75:40:bf:39:98:66:
d4:18:b0:ae:06:db:5b:cd:fa:5e:2d:e5:0f:3c:b7:
38:41:f7:e9:bc:f2:d0:bd:b3:47:6b:96:0d:1c:73:
25:2e:64:5e:a7:f3:74:fe:e4:55:10:2a:fe:a3:36:
8e:c6:24:74:a3:46:39:64:59:e4:3d:e7:5b:1f:0b:
7e:f8:53:8d:bb:a1:ef:72:eb:26:4e:88:c3:1b:e4:
b0:94:dd:a4:67:6d:98:3c:51:c0:74:0b:31:84:9f:
2d:dd:7a:8e:68:a6:4e:97:7d:54:2d:5e:71:4c:d4:
e8:8e:c2:65:81:3c:50:65:db:5b:ed:b2:35:50:4e:
8d:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:77:B8:42:BE:AA:42:9C:22:A7:BA:9F:C2:7C:38:C7:42:1A:05:55
X509v3 Authority Key Identifier:
keyid:E2:2A:93:CE:B8:2B:67:5A:84:B0:D7:8E:79:AE:4A:79:7C:A9:82:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4iqTzrgrZ1qEsNeOea5KeXypgjE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/2e82cb-4a6e-408f-af20-843154a80b72/1/4iqTzrgrZ1qEsNeOea5KeXypgjE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/2e82cb-4a6e-408f-af20-843154a80b72/1/4iqTzrgrZ1qEsNeOea5KeXypgjE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:92:bd:13:c5:c1:ff:cf:c6:88:7a:9a:1a:9c:2a:f1:22:bd:
8a:be:cb:74:27:e6:27:4d:ee:19:a9:e7:6a:0a:4e:e8:ab:3f:
8a:18:3e:f8:8d:e6:18:23:5e:21:31:d0:65:c1:1a:fb:73:09:
b4:4f:04:f2:60:bc:b9:8b:24:5b:58:14:c9:df:17:26:49:7c:
ec:4c:00:aa:ed:f1:1a:d3:40:c5:f2:13:93:86:06:38:e7:43:
6c:04:a8:0f:1d:d6:5e:f2:43:e4:0c:1f:e6:98:09:e8:4a:c4:
ad:8a:67:38:6f:32:7c:14:49:b8:47:77:60:00:b8:54:85:7c:
8e:ca:97:a2:df:91:ad:92:cc:92:f3:cb:73:3f:ea:95:fa:f5:
f7:22:1c:a0:c4:35:57:76:84:6a:3e:fe:e1:8c:96:2d:a8:06:
6a:c3:2e:00:90:43:d2:47:ab:a2:65:f0:7f:f3:18:93:32:16:
c3:36:da:d1:7a:37:91:e0:6f:97:03:f3:1f:7d:51:e7:18:0e:
a8:d1:5b:e1:2d:f8:25:df:48:20:05:32:78:19:87:e9:a3:fd:
03:30:f8:61:ee:17:1f:d8:e4:37:0b:bd:1a:30:78:6b:13:10:
2e:47:bd:4f:25:05:29:e2:8b:2b:c7:6f:18:2c:24:27:aa:a0:
ca:e1:0e:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 18 18:11:07 2025 by rpki-client