Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/659d27-bbb5-49f4-8fd1-c264b75b6b78/1/4rRpKpKR8sZ7VswV2k0xASAjAXc.mft
File: 4rRpKpKR8sZ7VswV2k0xASAjAXc.mft (raw, json)
Hash identifier: MqJlHxQWPiVzHUs6Fz73jtH2d5XABKZptk18aRH4BA0=
Subject key identifier: F7:1E:6C:3B:6A:0F:E7:12:2C:73:8E:82:AC:64:DC:F1:8A:E4:44:86
Authority key identifier: E2:B4:69:2A:92:91:F2:C6:7B:56:CC:15:DA:4D:31:01:20:23:01:77
Certificate issuer: /CN=e2b4692a9291f2c67b56cc15da4d310120230177
Certificate serial: 01976F2C5B135EC92F96B25638F44A8B3D01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4rRpKpKR8sZ7VswV2k0xASAjAXc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/659d27-bbb5-49f4-8fd1-c264b75b6b78/1/4rRpKpKR8sZ7VswV2k0xASAjAXc.mft
Manifest number: 01F3
Signing time: Sat 14 Jun 2025 16:01:07 +0000
Manifest this update: Sat 14 Jun 2025 16:01:07 +0000
Manifest next update: Sun 15 Jun 2025 16:01:07 +0000
Files and hashes: 1: 4NCyaBU3y3IsV-tIz8ykBHkjQrA.roa (hash: 6MR/wTh/d3g4brX5BBFxl1tdarfWH7geP5gRFSxNByI=)
2: 4rRpKpKR8sZ7VswV2k0xASAjAXc.crl (hash: Jj4WwD9kcpdwS8spaxv49d1uA6fV2KSGRbYp/qQZ2WY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/659d27-bbb5-49f4-8fd1-c264b75b6b78/1/4rRpKpKR8sZ7VswV2k0xASAjAXc.crl
rsync://rpki.ripe.net/repository/DEFAULT/cd/659d27-bbb5-49f4-8fd1-c264b75b6b78/1/4rRpKpKR8sZ7VswV2k0xASAjAXc.mft
rsync://rpki.ripe.net/repository/DEFAULT/4rRpKpKR8sZ7VswV2k0xASAjAXc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 10:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6f:2c:5b:13:5e:c9:2f:96:b2:56:38:f4:4a:8b:3d:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e2b4692a9291f2c67b56cc15da4d310120230177
Validity
Not Before: Jun 14 16:01:07 2025 GMT
Not After : Jun 15 16:01:07 2025 GMT
Subject: CN=f71e6c3b6a0fe7122c738e82ac64dcf18ae44486
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:0f:64:8d:d9:46:bc:4d:47:8b:21:53:38:b2:
fc:5b:4d:ec:01:14:f2:b6:f5:8a:31:cd:e1:65:3a:
5c:53:94:a8:c9:5f:f6:a7:ae:88:52:10:b3:93:33:
3d:cb:5d:6a:93:57:35:a3:04:ab:96:11:bf:0a:69:
54:a7:27:0f:f9:fb:3d:f2:9b:0c:55:ce:8f:a4:2e:
fe:b7:fc:e3:1c:f6:15:d0:ec:b6:39:36:ca:29:29:
19:1f:7c:e0:b7:96:60:6d:20:a4:1b:fc:2c:0c:d8:
95:35:0a:2e:49:2e:1d:83:f4:99:39:15:73:23:5d:
47:11:d3:9f:b1:df:b1:1a:3a:18:97:c9:84:70:51:
43:07:79:f9:74:aa:22:56:ea:7b:0c:49:3c:3b:5a:
be:2c:76:28:e0:f9:84:f1:90:80:d6:23:55:0a:f4:
e2:2f:2c:7c:1d:3f:0f:4e:c5:f5:74:8f:c3:63:36:
62:d0:b9:b6:9f:fe:91:2c:cc:1b:6b:8a:9d:8f:c6:
d7:4b:14:2f:8f:52:9d:ff:28:3e:86:b1:8d:0e:ba:
5c:45:88:eb:a0:97:a9:9c:22:b4:0e:99:83:76:35:
07:fc:80:de:9d:32:6d:bb:54:fe:44:7b:f9:c8:b9:
b5:de:9c:40:1e:a8:74:fc:2f:6b:6d:b6:1a:c3:b7:
0a:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:1E:6C:3B:6A:0F:E7:12:2C:73:8E:82:AC:64:DC:F1:8A:E4:44:86
X509v3 Authority Key Identifier:
keyid:E2:B4:69:2A:92:91:F2:C6:7B:56:CC:15:DA:4D:31:01:20:23:01:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4rRpKpKR8sZ7VswV2k0xASAjAXc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/659d27-bbb5-49f4-8fd1-c264b75b6b78/1/4rRpKpKR8sZ7VswV2k0xASAjAXc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/659d27-bbb5-49f4-8fd1-c264b75b6b78/1/4rRpKpKR8sZ7VswV2k0xASAjAXc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c4:40:5b:db:c6:32:ed:51:bc:7f:7a:9b:c7:65:dc:77:86:ae:
a3:9c:90:f5:c5:a5:d5:26:e3:55:41:4e:c3:df:b5:49:d8:5d:
bb:50:4c:e2:b9:a5:1a:62:4a:13:d0:84:ec:12:57:e3:82:b9:
88:87:e8:68:d4:a2:cd:19:03:67:c9:a9:2c:35:77:a6:2e:2c:
28:4c:4a:6e:1e:82:7b:96:77:71:ab:c3:11:f3:16:73:6d:ba:
25:4b:86:ba:86:18:49:0b:09:b8:e4:a2:8a:f1:cc:66:8a:88:
68:08:bf:75:c0:1a:9c:90:a4:ea:4f:9a:56:83:0d:c8:6b:6a:
3c:1a:9e:7b:b1:c7:cc:ef:03:43:e3:30:ea:6a:9b:af:02:27:
18:c2:c2:2c:e8:2f:13:5b:1d:11:ba:15:45:0e:bc:02:13:6a:
2c:e8:ae:c7:4b:9b:7e:b0:59:8d:1c:43:51:cf:8a:72:45:8e:
9e:83:e2:df:f4:94:4a:f0:e9:75:60:80:92:06:a9:fa:3b:8e:
36:21:3f:5e:42:4a:a3:73:fe:4e:a8:a3:b4:c3:55:9e:77:b2:
9e:1a:1f:2c:21:52:96:6d:5a:b4:ee:23:47:7e:e8:0b:21:5c:
e2:a6:ab:c5:2e:55:00:ba:c0:03:1f:81:5a:85:c4:49:ed:f7:
b3:2a:7f:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 19:47:24 2025 by rpki-client