Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/54be58-4175-407a-bc37-cc26d4316142/1/4hTrNaNf1IiGBwO3mQuBcK8XkS8.mft
File: 4hTrNaNf1IiGBwO3mQuBcK8XkS8.mft (raw, json)
Hash identifier: kwRgoqeLOX91Ht0Bmig4skvZjXEN99qCVjmYVXn8ZMM=
Subject key identifier: B7:A2:B3:33:DF:31:22:94:A1:A0:09:AD:13:92:6D:AF:CE:F9:6D:9F
Authority key identifier: E2:14:EB:35:A3:5F:D4:88:86:07:03:B7:99:0B:81:70:AF:17:91:2F
Certificate issuer: /CN=e214eb35a35fd488860703b7990b8170af17912f
Certificate serial: 0197481E3A1A3038E52C55CEAA20C073CDF7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4hTrNaNf1IiGBwO3mQuBcK8XkS8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/54be58-4175-407a-bc37-cc26d4316142/1/4hTrNaNf1IiGBwO3mQuBcK8XkS8.mft
Manifest number: 07BA
Signing time: Sat 07 Jun 2025 02:00:29 +0000
Manifest this update: Sat 07 Jun 2025 02:00:29 +0000
Manifest next update: Sun 08 Jun 2025 02:00:29 +0000
Files and hashes: 1: 4hTrNaNf1IiGBwO3mQuBcK8XkS8.crl (hash: ixcfGtMlhohU8zo+tYLFfoKWuqMhVjPRkcteg0/UItY=)
2: wxwsQanfQy5790A813fRANF-qCc.roa (hash: bJCA9RXeZ9EZ2+fSpx3hkdts4SbbKPXcBRLWj1SMUSM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0a/54be58-4175-407a-bc37-cc26d4316142/1/4hTrNaNf1IiGBwO3mQuBcK8XkS8.crl
rsync://rpki.ripe.net/repository/DEFAULT/0a/54be58-4175-407a-bc37-cc26d4316142/1/4hTrNaNf1IiGBwO3mQuBcK8XkS8.mft
rsync://rpki.ripe.net/repository/DEFAULT/4hTrNaNf1IiGBwO3mQuBcK8XkS8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 02:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:48:1e:3a:1a:30:38:e5:2c:55:ce:aa:20:c0:73:cd:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e214eb35a35fd488860703b7990b8170af17912f
Validity
Not Before: Jun 7 02:00:29 2025 GMT
Not After : Jun 8 02:00:29 2025 GMT
Subject: CN=b7a2b333df312294a1a009ad13926dafcef96d9f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:8c:12:44:0d:2a:5c:98:49:dc:6e:7a:62:eb:
45:44:f2:f8:16:dd:4b:08:f9:70:fa:30:23:1a:bf:
6c:69:76:f0:06:d7:e0:f5:f0:ce:00:f2:31:2e:7d:
d1:f0:c4:21:ef:c3:6d:d5:03:da:e8:3e:43:86:a3:
fd:a3:58:6b:fe:5c:7c:3e:b8:43:db:e3:2d:44:98:
1a:ac:75:bb:af:92:0c:09:3a:68:d8:46:4f:d0:e5:
c7:da:80:de:88:af:8c:75:15:57:8c:35:20:2e:cc:
61:1c:82:4e:cc:61:58:67:be:4e:df:42:dc:f4:6f:
0b:b4:ad:f4:70:b7:72:44:19:f7:51:ea:f2:ee:1c:
a4:f2:f5:af:77:c6:55:08:d9:e4:7c:a5:b0:7d:63:
1e:54:5f:b1:ba:73:0e:d9:8c:3b:b9:a7:7d:af:db:
47:88:e4:48:ea:0d:5c:5f:05:fc:cf:c1:3c:10:b2:
c2:71:2a:21:e9:66:12:3b:9e:8d:6a:f3:9f:4b:fe:
33:60:01:f0:bd:48:66:49:1c:bf:d2:7d:e6:b3:15:
af:fd:16:5a:30:3d:99:8c:e6:ae:46:5f:31:e6:44:
45:e2:66:3d:61:d7:d9:98:ca:90:b4:e1:ed:e5:5c:
78:c6:82:ab:50:76:8d:79:91:05:3c:be:34:47:e4:
f2:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:A2:B3:33:DF:31:22:94:A1:A0:09:AD:13:92:6D:AF:CE:F9:6D:9F
X509v3 Authority Key Identifier:
keyid:E2:14:EB:35:A3:5F:D4:88:86:07:03:B7:99:0B:81:70:AF:17:91:2F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4hTrNaNf1IiGBwO3mQuBcK8XkS8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/54be58-4175-407a-bc37-cc26d4316142/1/4hTrNaNf1IiGBwO3mQuBcK8XkS8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/54be58-4175-407a-bc37-cc26d4316142/1/4hTrNaNf1IiGBwO3mQuBcK8XkS8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
95:69:e1:ba:1e:bd:b5:4c:b7:61:b9:8e:2d:ba:a3:88:bf:25:
2b:d4:c7:99:6a:b9:66:ae:2b:79:45:85:85:f1:af:1c:ac:d8:
54:a2:36:e0:a2:69:12:fa:b0:14:72:57:3f:0c:bb:e1:f4:83:
57:47:1c:8c:15:73:4a:47:d4:72:cf:e8:90:12:53:31:9e:a6:
21:18:66:c4:9a:5f:5e:d3:38:6f:40:37:15:b8:1f:8e:c7:56:
d8:4c:3d:a6:69:47:b4:b2:70:71:44:ff:9a:0f:93:fd:ea:24:
86:34:c1:1a:ee:0a:cd:ed:48:49:a8:2b:ec:29:f1:24:62:f7:
37:de:02:78:9b:9f:51:fb:db:e0:5e:fb:b8:37:61:d4:ca:f8:
5b:38:3c:3b:03:50:44:cc:04:8f:ad:08:86:86:27:81:44:e3:
34:9a:72:2a:48:9a:53:f4:91:bf:25:2e:e1:60:84:29:1e:00:
d2:c3:f4:d4:93:11:17:c6:17:ba:52:03:53:4c:0c:29:ab:e2:
9c:2b:4c:52:5d:ee:3b:de:42:3c:50:4a:26:2a:9f:04:9e:36:
f0:d5:02:43:9e:6b:5f:8a:70:b5:50:68:66:07:d1:f7:da:09:
08:3a:4b:5a:c6:6f:56:ef:6f:f6:7b:c5:bd:18:29:8a:85:2a:
ae:3e:48:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 13:07:49 2025 by rpki-client