Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/683ffb-65eb-4972-997a-5f29c9f549e8/1/4sP8GYx3L1m47eUphWtS6heaTjg.mft
File: 4sP8GYx3L1m47eUphWtS6heaTjg.mft (raw, json)
Hash identifier: gPyAp6Ztzi3z5y/mfWFHI+yQ6GlsJxzNDRuVIwz0czc=
Subject key identifier: 76:6F:96:10:E6:46:23:41:F1:07:BE:EA:3B:BF:C2:D7:48:FE:A6:AD
Authority key identifier: E2:C3:FC:19:8C:77:2F:59:B8:ED:E5:29:85:6B:52:EA:17:9A:4E:38
Certificate issuer: /CN=e2c3fc198c772f59b8ede529856b52ea179a4e38
Certificate serial: 01976BBD41471F6C90B9DB8B34D6C8755CBB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4sP8GYx3L1m47eUphWtS6heaTjg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/683ffb-65eb-4972-997a-5f29c9f549e8/1/4sP8GYx3L1m47eUphWtS6heaTjg.mft
Manifest number: 158E
Signing time: Sat 14 Jun 2025 00:00:54 +0000
Manifest this update: Sat 14 Jun 2025 00:00:54 +0000
Manifest next update: Sun 15 Jun 2025 00:00:54 +0000
Files and hashes: 1: 4sP8GYx3L1m47eUphWtS6heaTjg.crl (hash: 7niWNlHy1PxfjvcCtR8R4MmAqFaULb9QDQDGJ77Qsgs=)
2: psTRvusZFk5Ps_Sd4pnp1hlanU8.roa (hash: 2FkietEjo3H8sm7po2MUV7JtW5puIthhRvn1WmaMes0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/683ffb-65eb-4972-997a-5f29c9f549e8/1/4sP8GYx3L1m47eUphWtS6heaTjg.crl
rsync://rpki.ripe.net/repository/DEFAULT/dc/683ffb-65eb-4972-997a-5f29c9f549e8/1/4sP8GYx3L1m47eUphWtS6heaTjg.mft
rsync://rpki.ripe.net/repository/DEFAULT/4sP8GYx3L1m47eUphWtS6heaTjg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 00:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6b:bd:41:47:1f:6c:90:b9:db:8b:34:d6:c8:75:5c:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e2c3fc198c772f59b8ede529856b52ea179a4e38
Validity
Not Before: Jun 14 00:00:54 2025 GMT
Not After : Jun 15 00:00:54 2025 GMT
Subject: CN=766f9610e6462341f107beea3bbfc2d748fea6ad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:ec:d4:7f:f3:4a:d2:85:56:5f:10:0f:b1:bb:
ba:6d:51:93:5d:5d:03:c6:08:b9:52:5c:43:7f:cd:
0d:dc:15:04:6d:fe:dd:b9:6e:bd:a6:2c:ea:82:ee:
7b:15:24:c4:f1:3d:07:cb:b0:1d:4a:76:88:ce:f3:
aa:6a:03:7d:66:d4:b2:1d:cb:82:73:8e:f9:2c:b8:
b7:b4:6f:cc:68:7b:40:30:33:4f:74:25:29:84:b9:
35:54:0e:1a:4f:35:0c:94:18:0d:30:27:0e:af:44:
3d:2c:11:c5:8b:b2:79:08:bd:5d:e5:38:95:a4:d4:
dc:10:77:30:be:a2:75:81:84:c9:83:42:51:bc:d8:
de:e5:0b:cb:83:f4:a8:98:7e:77:fd:4e:6a:ac:11:
9b:da:17:77:40:ba:6f:3c:74:82:ff:ad:d7:4e:b6:
54:ce:4a:ec:25:75:da:d8:fb:ba:a4:e8:1b:df:60:
55:41:06:3b:64:7f:07:cc:88:9e:02:fe:5c:93:2e:
c9:ab:40:b7:04:2f:24:fe:55:06:fb:2a:ba:7b:17:
05:b9:1b:dc:35:9f:aa:c8:08:58:e4:b3:c9:95:24:
f0:4a:91:61:66:09:e9:b5:76:d6:32:67:70:ed:f7:
73:4d:3b:a9:44:6c:20:dc:82:c8:a7:f0:93:8f:34:
1b:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:6F:96:10:E6:46:23:41:F1:07:BE:EA:3B:BF:C2:D7:48:FE:A6:AD
X509v3 Authority Key Identifier:
keyid:E2:C3:FC:19:8C:77:2F:59:B8:ED:E5:29:85:6B:52:EA:17:9A:4E:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4sP8GYx3L1m47eUphWtS6heaTjg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/683ffb-65eb-4972-997a-5f29c9f549e8/1/4sP8GYx3L1m47eUphWtS6heaTjg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/683ffb-65eb-4972-997a-5f29c9f549e8/1/4sP8GYx3L1m47eUphWtS6heaTjg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:23:56:a0:53:7e:e5:78:10:75:63:c3:54:41:22:71:41:be:
fd:cc:0a:14:22:5c:d6:c2:9e:46:42:89:52:66:2a:d4:cc:b5:
8f:f6:00:61:2a:46:1a:38:63:42:ea:dc:7c:e6:dc:1d:e4:e1:
b6:8d:86:69:f7:2e:b5:6f:48:a0:b7:11:eb:0d:35:7e:e5:dd:
5d:23:4d:b9:c8:5c:7e:d5:d0:57:4d:9f:5b:32:dd:71:9c:a8:
32:75:22:65:44:1b:96:38:fc:2b:23:f2:11:29:05:64:f3:bd:
6e:95:e8:9d:44:cf:fd:3e:b2:51:eb:2f:db:23:e6:cb:9f:21:
2a:89:b5:7e:fa:cf:62:43:25:50:b7:a0:35:94:84:9e:4f:68:
19:fa:82:30:d7:3a:93:24:45:31:f5:9c:a5:57:00:8b:f6:46:
34:a5:02:93:ce:cb:cc:bc:3e:3e:59:35:75:3d:04:60:95:ff:
5c:f4:21:98:59:e3:dd:6f:6c:2e:cf:0f:d5:0e:d4:96:c5:5b:
e0:c5:60:30:d6:88:fa:1f:d5:3f:b2:fd:04:2a:a2:ef:d2:85:
ab:3b:8b:12:d6:24:3f:de:ee:32:97:93:4e:aa:0b:5f:f4:35:
b5:99:92:15:2f:d3:60:43:72:49:3a:16:ae:95:74:46:4f:5e:
c8:f0:aa:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 09:54:56 2025 by rpki-client