Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/b906c9-2b3d-437c-a3cd-5d92cef23c5a/1/b4CWRAfF2qRAiKz-leZIi4APreU.mft
File: b4CWRAfF2qRAiKz-leZIi4APreU.mft (raw, json)
Hash identifier: SrLjzzv7Xs4J9U8TM+mVzlP7faxvsASN+0ZNWRtIho8=
Subject key identifier: C8:57:AA:74:96:29:95:9F:B4:F3:E3:5E:D0:56:5D:6F:98:67:4B:21
Authority key identifier: 6F:80:96:44:07:C5:DA:A4:40:88:AC:FE:95:E6:48:8B:80:0F:AD:E5
Certificate issuer: /CN=6f80964407c5daa44088acfe95e6488b800fade5
Certificate serial: 01974AB1D475632C4510BDFD1FBD211BF16B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b4CWRAfF2qRAiKz-leZIi4APreU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/b906c9-2b3d-437c-a3cd-5d92cef23c5a/1/b4CWRAfF2qRAiKz-leZIi4APreU.mft
Manifest number: 0D79
Signing time: Sat 07 Jun 2025 14:00:57 +0000
Manifest this update: Sat 07 Jun 2025 14:00:57 +0000
Manifest next update: Sun 08 Jun 2025 14:00:57 +0000
Files and hashes: 1: F1clSCHfCrBchpNItB3_ECdQ4G0.roa (hash: UEaaY9HoQsqjcDAMUvi86kguZEF+pqvnu6gxjIkAd84=)
2: UvaL6VYsICABr4f2mztYJpGnmok.roa (hash: sDs2WTxe4PeqzEe78b/roJLSHAUp5tH9OZKXA5ved2I=)
3: b4CWRAfF2qRAiKz-leZIi4APreU.crl (hash: DkaZBCWz2Y9VoHVlMDpseM7tgQf8DeT7zREt+t14+dA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3e/b906c9-2b3d-437c-a3cd-5d92cef23c5a/1/b4CWRAfF2qRAiKz-leZIi4APreU.crl
rsync://rpki.ripe.net/repository/DEFAULT/3e/b906c9-2b3d-437c-a3cd-5d92cef23c5a/1/b4CWRAfF2qRAiKz-leZIi4APreU.mft
rsync://rpki.ripe.net/repository/DEFAULT/b4CWRAfF2qRAiKz-leZIi4APreU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 14:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4a:b1:d4:75:63:2c:45:10:bd:fd:1f:bd:21:1b:f1:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f80964407c5daa44088acfe95e6488b800fade5
Validity
Not Before: Jun 7 14:00:57 2025 GMT
Not After : Jun 8 14:00:57 2025 GMT
Subject: CN=c857aa749629959fb4f3e35ed0565d6f98674b21
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:d6:da:99:2f:7b:08:4e:a1:17:cf:55:cf:ae:
0d:82:e7:8f:77:5d:2c:16:a3:b2:ce:8f:1e:26:d4:
fd:4b:a2:f3:a5:73:8a:99:1f:e9:41:ac:6b:99:93:
55:81:d3:40:60:75:a1:61:21:a3:97:a2:57:33:a4:
10:cd:f6:22:dd:28:a6:c7:3f:16:99:11:f7:6f:a3:
21:ba:77:82:70:05:0f:65:88:b7:8d:58:ab:ac:d9:
dd:a5:b6:a3:fb:a9:ad:df:32:53:6a:40:58:46:95:
17:b3:a2:20:93:ca:89:cf:2b:9c:74:13:6e:db:51:
d2:2f:d6:29:23:42:da:03:be:9e:a4:bd:40:2f:7d:
45:6a:ea:8f:44:fe:27:f8:75:6c:53:41:fd:92:9e:
fd:a9:8e:c7:c8:63:3b:f2:b2:52:23:a2:94:4a:ef:
b4:c5:52:ec:50:43:18:9a:8a:4a:db:0c:d4:de:8e:
d9:0a:31:33:c0:a3:82:ee:e5:36:ac:6a:78:0e:8a:
7b:1f:05:8b:e6:53:22:da:20:1e:10:42:36:26:41:
e2:df:20:f3:d6:70:f7:ad:4c:e0:04:ed:b3:6d:e2:
57:12:03:91:9d:1a:31:0f:76:1e:12:5f:45:1c:84:
0a:ac:7e:15:63:9f:a4:da:84:14:d3:23:dc:8d:79:
86:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:57:AA:74:96:29:95:9F:B4:F3:E3:5E:D0:56:5D:6F:98:67:4B:21
X509v3 Authority Key Identifier:
keyid:6F:80:96:44:07:C5:DA:A4:40:88:AC:FE:95:E6:48:8B:80:0F:AD:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4CWRAfF2qRAiKz-leZIi4APreU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/b906c9-2b3d-437c-a3cd-5d92cef23c5a/1/b4CWRAfF2qRAiKz-leZIi4APreU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/b906c9-2b3d-437c-a3cd-5d92cef23c5a/1/b4CWRAfF2qRAiKz-leZIi4APreU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:bc:89:8f:ad:22:3f:66:5d:70:e1:c2:c7:da:b9:a7:aa:7a:
68:23:01:da:6b:c1:3a:79:70:19:3c:e7:4c:1e:21:f7:93:e3:
2b:3b:ef:6b:d2:0f:2e:94:f0:17:b1:bf:0b:34:e6:cf:e2:9e:
80:28:a3:6d:df:68:4f:36:73:fe:65:8b:16:3b:a0:8e:b7:e4:
3e:83:38:93:91:83:4f:cb:bd:b8:b0:47:81:9b:81:13:b4:04:
ad:b6:6c:36:3d:0e:48:4d:93:37:a4:b0:32:20:99:da:07:67:
8a:77:88:49:31:76:9e:d4:5e:37:0c:ae:dc:a1:2d:be:56:0c:
c6:25:b9:15:bf:8a:47:cc:0b:f4:26:d0:84:4d:37:c4:76:db:
b5:0d:92:5d:6d:78:6a:b2:df:7a:80:7a:da:eb:7c:a5:b5:e1:
5a:cc:e3:ea:c8:96:17:af:dc:c0:59:98:a5:46:a7:6f:a9:4f:
0d:fa:bb:9f:5e:7a:c4:34:20:fe:f2:b2:76:f7:a6:ec:b8:9d:
d9:06:75:a5:11:e2:28:a5:6b:43:a9:5c:a9:0e:e6:31:f9:95:
d5:9b:85:2e:e0:c7:46:0f:ae:0d:8c:bc:91:17:47:9d:de:d9:
ab:66:73:dc:73:af:e2:9f:13:45:df:7b:fc:24:e3:65:e6:a5:
86:eb:1b:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 22:52:28 2025 by rpki-client