Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/30b8e9-e7d4-40cc-ad5f-3c741220ea00/1/t4zdv8dr2iagKeqAyJh3mHRfHwI.mft
File: t4zdv8dr2iagKeqAyJh3mHRfHwI.mft (raw, json)
Hash identifier: Pq1u90A88hw5g4utzLzCqdq1b1TQYtxaxs2vo5WTjk0=
Subject key identifier: EC:03:39:7B:A9:48:D5:C1:13:66:A6:25:E5:19:6E:50:71:8D:D6:CD
Authority key identifier: B7:8C:DD:BF:C7:6B:DA:26:A0:29:EA:80:C8:98:77:98:74:5F:1F:02
Certificate issuer: /CN=b78cddbfc76bda26a029ea80c8987798745f1f02
Certificate serial: 01974A43AC735A466AB4EBBADF8CFB7B9920
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/t4zdv8dr2iagKeqAyJh3mHRfHwI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/30b8e9-e7d4-40cc-ad5f-3c741220ea00/1/t4zdv8dr2iagKeqAyJh3mHRfHwI.mft
Manifest number: 1231
Signing time: Sat 07 Jun 2025 12:00:38 +0000
Manifest this update: Sat 07 Jun 2025 12:00:38 +0000
Manifest next update: Sun 08 Jun 2025 12:00:38 +0000
Files and hashes: 1: 4ZMkun0YVKsQhMtugX5PoEy0_rI.roa (hash: fKBmMFAsGdJAHOCtTHbLGukOIg/BNTMMvT6hLSCBWOk=)
2: 9SX4KosI9EGxvqBg-r1JnjKT0ZM.roa (hash: WqcTzSMCYbly9wYW2w55k/ugMgucEMXzGeFeea+G7IU=)
3: t4zdv8dr2iagKeqAyJh3mHRfHwI.crl (hash: /cMnyx+z3k0NjH3M6oCpjac0VlkTO1GUxrKpRNSLsBQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/30b8e9-e7d4-40cc-ad5f-3c741220ea00/1/t4zdv8dr2iagKeqAyJh3mHRfHwI.crl
rsync://rpki.ripe.net/repository/DEFAULT/4a/30b8e9-e7d4-40cc-ad5f-3c741220ea00/1/t4zdv8dr2iagKeqAyJh3mHRfHwI.mft
rsync://rpki.ripe.net/repository/DEFAULT/t4zdv8dr2iagKeqAyJh3mHRfHwI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 11:24:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4a:43:ac:73:5a:46:6a:b4:eb:ba:df:8c:fb:7b:99:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b78cddbfc76bda26a029ea80c8987798745f1f02
Validity
Not Before: Jun 7 12:00:38 2025 GMT
Not After : Jun 8 12:00:38 2025 GMT
Subject: CN=ec03397ba948d5c11366a625e5196e50718dd6cd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:3b:e3:07:78:05:4d:49:05:a3:e4:87:a7:1e:
ef:df:ef:e7:e0:f8:cf:87:6e:2b:d7:85:34:05:29:
1e:9e:b4:f1:43:14:b1:63:29:05:6b:08:0f:a4:cd:
84:e3:1a:c9:1a:b0:88:b8:81:33:e1:76:23:01:f8:
37:10:82:bf:13:75:7d:58:f7:31:06:b2:28:8d:41:
dc:79:e5:8f:0a:4a:51:c0:97:85:62:b4:ca:be:eb:
8e:11:6b:99:c7:db:d7:fa:b0:fe:d1:47:41:78:81:
24:39:8f:0e:f8:45:72:38:eb:28:94:df:3c:fb:ce:
58:a0:55:8d:82:a6:bb:13:b6:4e:52:20:7e:b7:4a:
70:e0:01:db:df:ad:fe:52:e7:76:7a:a0:36:a2:03:
b3:82:73:84:cf:0e:c5:c5:b0:1b:23:b7:d3:24:80:
9e:23:69:45:41:d3:24:ce:13:bc:c1:f3:b2:16:6b:
df:4d:42:b3:e1:be:2e:e1:00:dd:b4:96:f4:1c:d8:
24:b5:89:15:db:58:75:0e:38:7f:42:9c:ce:4d:eb:
3e:c3:b1:b1:36:2e:14:57:b7:59:08:1e:ea:2f:28:
29:c8:18:49:d8:f1:76:fa:ac:2c:5b:4c:6b:91:6c:
7a:d0:b8:b5:68:90:03:d9:90:95:d6:85:5b:45:14:
ea:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:03:39:7B:A9:48:D5:C1:13:66:A6:25:E5:19:6E:50:71:8D:D6:CD
X509v3 Authority Key Identifier:
keyid:B7:8C:DD:BF:C7:6B:DA:26:A0:29:EA:80:C8:98:77:98:74:5F:1F:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t4zdv8dr2iagKeqAyJh3mHRfHwI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/30b8e9-e7d4-40cc-ad5f-3c741220ea00/1/t4zdv8dr2iagKeqAyJh3mHRfHwI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/30b8e9-e7d4-40cc-ad5f-3c741220ea00/1/t4zdv8dr2iagKeqAyJh3mHRfHwI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:a2:f8:ae:a1:09:0b:75:5e:e5:ed:c8:e3:3a:60:42:e1:07:
fa:76:5c:28:90:b7:91:73:22:1b:1a:d1:cf:62:f3:f9:a2:4f:
1a:85:95:c2:21:3a:a0:31:58:16:7a:f5:ba:f2:4f:6f:aa:66:
52:22:9b:84:4c:f2:be:39:45:b4:84:b6:49:32:94:ea:ce:76:
86:3c:25:83:0f:3c:83:36:81:ac:d8:9d:67:6b:0d:41:91:0f:
24:a3:e1:d3:6e:a2:0d:a8:89:ee:55:a4:32:48:bd:27:fa:7b:
23:32:a2:9c:8d:c2:0a:43:18:58:aa:59:ac:b8:50:6b:38:88:
65:7d:7d:f0:fd:3a:2b:0a:f2:42:62:21:75:c0:ce:bf:99:d2:
64:cc:62:1f:27:50:ad:90:21:e6:41:eb:5c:5c:51:05:1a:37:
3e:e4:8f:6e:68:67:06:ac:55:2b:d8:cb:a1:93:49:4e:58:0c:
d4:c1:f7:d1:0a:95:e1:0e:da:59:82:e8:01:83:c9:54:ae:a0:
ac:e6:bd:9b:32:ea:31:70:23:fe:90:3e:4b:a4:66:03:dc:04:
d5:75:bb:34:cf:a9:fa:0c:93:8e:bc:dd:62:e6:ea:21:99:04:
08:96:62:1c:28:11:2d:7b:e1:97:f7:14:86:7f:7a:60:1d:a9:
cd:7a:80:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 21:06:56 2025 by rpki-client