Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/0fc7e5-b1f6-474e-99a7-eda23f2f17e9/1/4YdKiHqiiNq3LGWOk2lO1dr9ICY.mft
File: 4YdKiHqiiNq3LGWOk2lO1dr9ICY.mft (raw, json)
Hash identifier: rsxZ7NkZBCoEN5lI2ijRpAoUoFVVo6MOP4MEAPgQ7I8=
Subject key identifier: 98:E2:E4:55:0C:7C:D2:D8:AB:9A:F7:D4:EB:72:DC:58:9C:62:5D:3D
Authority key identifier: E1:87:4A:88:7A:A2:88:DA:B7:2C:65:8E:93:69:4E:D5:DA:FD:20:26
Certificate issuer: /CN=e1874a887aa288dab72c658e93694ed5dafd2026
Certificate serial: 0197CBDEFCAFC201153A2EB690E43AA26908
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4YdKiHqiiNq3LGWOk2lO1dr9ICY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/0fc7e5-b1f6-474e-99a7-eda23f2f17e9/1/4YdKiHqiiNq3LGWOk2lO1dr9ICY.mft
Manifest number: 111B
Signing time: Wed 02 Jul 2025 16:01:17 +0000
Manifest this update: Wed 02 Jul 2025 16:01:17 +0000
Manifest next update: Thu 03 Jul 2025 16:01:17 +0000
Files and hashes: 1: 4YdKiHqiiNq3LGWOk2lO1dr9ICY.crl (hash: JeWAcxLFQfNmrdEKraoxD680W9Se1ndovXAfai5w0/g=)
2: jnxiRSp6LL1UuZSH55PRoBU9Uug.roa (hash: EzydjgFzmvXFQDadZtYOhUDG1+kFGRWU2sNIMDhFrQ0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/0fc7e5-b1f6-474e-99a7-eda23f2f17e9/1/4YdKiHqiiNq3LGWOk2lO1dr9ICY.crl
rsync://rpki.ripe.net/repository/DEFAULT/24/0fc7e5-b1f6-474e-99a7-eda23f2f17e9/1/4YdKiHqiiNq3LGWOk2lO1dr9ICY.mft
rsync://rpki.ripe.net/repository/DEFAULT/4YdKiHqiiNq3LGWOk2lO1dr9ICY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 03 Jul 2025 16:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:cb:de:fc:af:c2:01:15:3a:2e:b6:90:e4:3a:a2:69:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e1874a887aa288dab72c658e93694ed5dafd2026
Validity
Not Before: Jul 2 16:01:17 2025 GMT
Not After : Jul 3 16:01:17 2025 GMT
Subject: CN=98e2e4550c7cd2d8ab9af7d4eb72dc589c625d3d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:c3:87:94:e4:21:ee:5e:51:a8:71:16:11:f1:
cd:ac:19:09:76:31:a5:64:af:de:1b:0a:72:71:06:
0b:00:bf:39:47:1e:a2:e8:0a:f8:54:de:a6:f8:ff:
3b:8f:98:86:0e:b0:7a:33:e7:00:1f:df:ee:26:e0:
1d:06:b3:97:bc:45:c6:83:82:15:6d:65:1b:74:15:
58:32:13:47:03:fb:36:52:bc:b5:de:82:b1:c6:61:
7b:af:a7:00:ff:6c:d6:25:1f:cd:86:e0:fb:21:07:
fa:79:ae:5a:63:64:e9:d3:f1:34:7d:8c:d1:c4:8a:
67:28:87:96:cb:23:ba:27:7c:e1:f7:2b:39:eb:0f:
6a:00:da:a5:a1:b5:44:43:5c:f8:3d:88:a9:85:91:
28:d7:23:2b:4e:1b:39:78:9e:3d:e8:d7:eb:fc:02:
61:74:04:5b:ad:d7:3f:c4:d6:7d:f2:9a:27:3d:c7:
47:39:cc:27:76:da:f7:5e:df:8d:f7:c5:e5:c2:91:
c0:fe:8d:7a:f8:91:08:c6:5f:b3:48:a7:c0:af:3a:
01:dc:81:85:e5:82:70:f9:d7:d8:cc:a2:4b:5e:72:
39:ed:82:86:f7:81:34:9d:ed:e6:f4:3f:df:e5:4b:
4b:7f:1c:d4:ac:29:f2:0c:5c:84:43:2a:c1:54:59:
a8:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:E2:E4:55:0C:7C:D2:D8:AB:9A:F7:D4:EB:72:DC:58:9C:62:5D:3D
X509v3 Authority Key Identifier:
keyid:E1:87:4A:88:7A:A2:88:DA:B7:2C:65:8E:93:69:4E:D5:DA:FD:20:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4YdKiHqiiNq3LGWOk2lO1dr9ICY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/0fc7e5-b1f6-474e-99a7-eda23f2f17e9/1/4YdKiHqiiNq3LGWOk2lO1dr9ICY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/0fc7e5-b1f6-474e-99a7-eda23f2f17e9/1/4YdKiHqiiNq3LGWOk2lO1dr9ICY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c2:0b:4b:01:4d:1c:07:da:ca:90:66:87:d5:70:ba:53:5c:a7:
97:70:67:86:04:49:71:db:2b:2b:ca:54:08:b4:ee:84:d9:01:
36:69:44:e4:cf:5e:0b:8c:14:c1:89:a1:89:4a:55:c3:22:c3:
68:40:37:e5:59:65:2a:3b:46:6d:f9:b1:7a:63:ac:07:92:19:
4c:46:63:3a:a3:a8:44:b6:af:c6:cb:e9:1d:6a:25:bb:03:ca:
ec:67:75:74:7c:ec:15:a3:f7:d4:c8:28:e1:e8:57:a6:96:f2:
e1:e1:23:d9:7e:d6:cc:d7:56:80:84:95:ef:f4:58:d3:d7:59:
4b:40:19:88:16:7f:d0:70:7e:37:98:f4:dd:82:db:5e:75:12:
14:28:45:3c:cb:3e:a6:26:5e:d9:a0:62:d2:b8:04:07:e5:e9:
af:fc:d5:e5:4f:76:f5:59:cd:56:47:87:9a:36:b9:ec:29:b6:
3b:a4:bf:75:c8:30:79:15:ff:1c:79:7c:fa:fb:63:1f:b5:27:
f8:a6:e2:80:35:22:2c:aa:16:3b:ed:51:3c:1c:a4:f4:78:d4:
d6:51:ae:86:b7:d4:02:fe:bd:c6:e7:e1:cc:e4:fd:4f:46:d4:
b0:2c:1e:4d:14:9f:76:86:92:97:25:49:a8:aa:8b:92:9c:09:
43:b5:af:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 3 01:00:48 2025 by rpki-client