Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/2dac8b-76cd-40f0-854e-1da2acc76e11/1/4rvHBn-KfFfWhtZ160aOmbhr1i0.mft
File: 4rvHBn-KfFfWhtZ160aOmbhr1i0.mft (raw, json)
Hash identifier: eE3lmojoI7yfdpmxLmXwsgUM7IwLjfSJcdtu+aAgTH4=
Subject key identifier: D8:24:04:41:30:3A:8D:50:24:25:96:E3:94:2C:2B:A9:FB:32:04:C3
Authority key identifier: E2:BB:C7:06:7F:8A:7C:57:D6:86:D6:75:EB:46:8E:99:B8:6B:D6:2D
Certificate issuer: /CN=e2bbc7067f8a7c57d686d675eb468e99b86bd62d
Certificate serial: 0197696178A8225A9BD8D0AAEF307256D2AB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4rvHBn-KfFfWhtZ160aOmbhr1i0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/2dac8b-76cd-40f0-854e-1da2acc76e11/1/4rvHBn-KfFfWhtZ160aOmbhr1i0.mft
Manifest number: 1560
Signing time: Fri 13 Jun 2025 13:01:24 +0000
Manifest this update: Fri 13 Jun 2025 13:01:24 +0000
Manifest next update: Sat 14 Jun 2025 13:01:24 +0000
Files and hashes: 1: 4rvHBn-KfFfWhtZ160aOmbhr1i0.crl (hash: 5aZsejVMLTlL538jr1HSEYWyuja/MkM7PLQfN8c0z7M=)
2: S9IbEuckGJ-9L5NueHluP1etdYo.roa (hash: 3hI+07Eg5raje1kn4kUfDxud5d5a2unK+1/vO0g99aY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b7/2dac8b-76cd-40f0-854e-1da2acc76e11/1/4rvHBn-KfFfWhtZ160aOmbhr1i0.crl
rsync://rpki.ripe.net/repository/DEFAULT/b7/2dac8b-76cd-40f0-854e-1da2acc76e11/1/4rvHBn-KfFfWhtZ160aOmbhr1i0.mft
rsync://rpki.ripe.net/repository/DEFAULT/4rvHBn-KfFfWhtZ160aOmbhr1i0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 13:01:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:69:61:78:a8:22:5a:9b:d8:d0:aa:ef:30:72:56:d2:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e2bbc7067f8a7c57d686d675eb468e99b86bd62d
Validity
Not Before: Jun 13 13:01:24 2025 GMT
Not After : Jun 14 13:01:24 2025 GMT
Subject: CN=d8240441303a8d50242596e3942c2ba9fb3204c3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:60:11:0c:ce:37:05:7d:20:f6:19:a7:81:78:
cf:ed:53:8b:da:8c:d4:ab:2b:88:59:35:ac:29:c8:
d1:39:5e:17:78:56:97:f1:04:0f:b9:5e:41:88:b9:
40:b3:34:0c:26:4a:5b:67:49:82:f3:5e:3c:48:f8:
d5:04:3a:14:c6:65:b4:bf:e6:fe:aa:c8:d7:b1:1f:
cf:48:99:b9:4f:d0:c8:4a:52:93:ca:05:ec:70:f1:
01:c6:6e:d0:c0:83:43:a0:2b:28:b0:81:16:62:ab:
42:3a:c1:40:1c:65:5e:fb:b1:8c:69:b0:e4:b4:e2:
3c:c8:cb:69:b6:17:35:11:fe:bb:a7:b3:15:84:34:
5d:e1:c0:13:fb:e4:f6:68:06:0c:ad:2a:5a:b8:7d:
a3:a2:10:68:06:67:fa:02:7c:90:1e:4a:f1:c4:0b:
ab:7e:fe:d4:2c:f1:18:14:d9:9a:4d:f9:03:aa:f9:
64:ba:2e:a7:89:f8:ef:1a:23:a9:1d:65:85:96:dc:
74:91:c0:04:bf:fc:3d:0c:e0:9f:97:58:d5:14:a4:
4a:9c:d6:c4:86:a3:28:96:e0:34:21:de:b0:a6:f4:
f1:8c:e6:b6:f0:44:cd:a0:62:9a:8e:c3:07:05:1c:
a0:95:cd:b9:68:97:a3:c9:99:c7:93:c8:79:38:3a:
82:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:24:04:41:30:3A:8D:50:24:25:96:E3:94:2C:2B:A9:FB:32:04:C3
X509v3 Authority Key Identifier:
keyid:E2:BB:C7:06:7F:8A:7C:57:D6:86:D6:75:EB:46:8E:99:B8:6B:D6:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4rvHBn-KfFfWhtZ160aOmbhr1i0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/2dac8b-76cd-40f0-854e-1da2acc76e11/1/4rvHBn-KfFfWhtZ160aOmbhr1i0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/2dac8b-76cd-40f0-854e-1da2acc76e11/1/4rvHBn-KfFfWhtZ160aOmbhr1i0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:c8:9e:38:5f:29:b4:13:33:70:80:21:27:32:b0:da:36:50:
ee:a2:39:40:49:1f:d8:6a:81:23:e5:a2:57:bc:dc:ca:0e:9a:
6b:b2:c9:5e:56:d8:38:f5:0e:c5:53:60:72:ed:d1:0b:57:b0:
0e:e0:02:c7:47:d6:b8:27:87:22:7e:35:31:4b:36:83:92:13:
91:b4:a7:e0:6b:82:60:32:f4:6f:fb:71:4b:0b:37:6e:94:76:
8c:26:7d:4d:cc:0c:0e:96:65:f6:db:da:cb:e3:a4:16:da:fc:
9a:89:98:5a:a5:66:3b:d5:b5:ed:bc:49:94:61:94:51:f5:86:
24:39:2e:1e:48:64:38:d2:a4:99:da:b0:ac:f9:b5:6b:f7:c6:
5c:5d:55:a3:6d:00:b7:00:41:1d:d2:40:2e:67:9b:02:83:9e:
2a:31:dd:df:85:59:be:7f:4d:24:60:f3:13:2c:59:da:db:90:
66:03:a2:b8:e1:64:0f:70:0f:9c:10:88:51:c0:44:45:f2:a0:
f4:07:4e:2b:8c:91:81:1f:b9:70:1b:03:94:91:e2:e3:2c:44:
88:59:1a:42:86:b2:b7:95:42:65:11:af:29:23:51:89:e6:d3:
82:5f:83:c4:2f:44:e6:76:eb:ed:71:52:05:d5:6c:b6:fe:46:
06:a8:1b:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 19:22:36 2025 by rpki-client