Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/bef6e8-8873-4529-8e72-238c6d8a4c17/1/pId4Lj9wxc0nsy9SdNDlvGLpXK8.mft
File: pId4Lj9wxc0nsy9SdNDlvGLpXK8.mft (raw, json)
Hash identifier: dBrWk9dMi+HHxUjD/AGHNBMgo7Qth36IhJ8ElkwttDI=
Subject key identifier: 25:4B:CE:EF:DE:9A:76:AD:67:57:37:65:C8:11:6A:15:5E:14:F3:35
Authority key identifier: A4:87:78:2E:3F:70:C5:CD:27:B3:2F:52:74:D0:E5:BC:62:E9:5C:AF
Certificate issuer: /CN=a487782e3f70c5cd27b32f5274d0e5bc62e95caf
Certificate serial: 01974D7BFEA71B33D007EDA96FCC578C4FC4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pId4Lj9wxc0nsy9SdNDlvGLpXK8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/bef6e8-8873-4529-8e72-238c6d8a4c17/1/pId4Lj9wxc0nsy9SdNDlvGLpXK8.mft
Manifest number: 0F6E
Signing time: Sun 08 Jun 2025 03:01:01 +0000
Manifest this update: Sun 08 Jun 2025 03:01:01 +0000
Manifest next update: Mon 09 Jun 2025 03:01:01 +0000
Files and hashes: 1: 03LlpQC3OthhaMKAkoHkTsK5DvM.roa (hash: MXfk52dc+50VpTuEktAwLc5jK+27W4bau786/NbUnKQ=)
2: FDaJnwtdKIaCGJVg6QNctNX3wpA.roa (hash: nG1/6+0MejULa30YNNdRkzBTjiM/zpm9raBFToCey7o=)
3: pId4Lj9wxc0nsy9SdNDlvGLpXK8.crl (hash: mAwdhzpHKN52MXe9OwOAga/wgQxs9x2hZALfnLH42Iw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/bef6e8-8873-4529-8e72-238c6d8a4c17/1/pId4Lj9wxc0nsy9SdNDlvGLpXK8.crl
rsync://rpki.ripe.net/repository/DEFAULT/4f/bef6e8-8873-4529-8e72-238c6d8a4c17/1/pId4Lj9wxc0nsy9SdNDlvGLpXK8.mft
rsync://rpki.ripe.net/repository/DEFAULT/pId4Lj9wxc0nsy9SdNDlvGLpXK8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 03:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4d:7b:fe:a7:1b:33:d0:07:ed:a9:6f:cc:57:8c:4f:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a487782e3f70c5cd27b32f5274d0e5bc62e95caf
Validity
Not Before: Jun 8 03:01:01 2025 GMT
Not After : Jun 9 03:01:01 2025 GMT
Subject: CN=254bceefde9a76ad67573765c8116a155e14f335
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:70:40:5d:99:4e:5d:2f:70:61:3c:ee:67:e1:
eb:a6:ea:77:cd:49:8a:10:e8:b2:f4:26:ce:7a:42:
14:f3:6c:d5:97:8b:08:4d:69:f5:2f:9f:08:14:7d:
07:d9:78:74:d5:16:4e:4a:67:bc:4b:4c:d9:75:87:
a6:fc:8f:bc:a3:93:15:c6:1f:7d:36:0c:cf:57:41:
44:a6:65:1d:3a:6c:74:83:69:31:c5:4d:0e:78:c9:
42:43:ba:29:62:f8:af:06:dc:a0:b6:87:b7:e2:92:
82:8a:a6:ee:19:c4:e7:fe:31:76:f3:08:c1:38:b8:
10:cc:44:f5:76:74:50:25:b5:c8:02:08:3a:58:5a:
61:86:fa:a7:e2:9b:6b:e6:20:4f:2b:f2:96:c4:8a:
28:fb:b4:7e:57:96:0c:86:1a:6a:4c:72:59:16:8a:
6f:c1:9d:a5:21:34:3f:32:66:6e:66:cf:e9:c5:3d:
45:68:ae:9e:36:7b:2c:a8:03:0f:82:49:9e:6b:7a:
19:5f:81:7d:ce:24:02:ae:45:28:c3:ac:ad:9d:e3:
e5:80:e4:b8:49:39:fa:dd:19:00:ac:c6:b4:e0:bc:
15:c3:16:ad:c6:42:6e:43:42:47:07:82:17:45:dd:
16:ea:8c:80:00:67:5a:dd:27:02:5f:c7:67:d1:ef:
f2:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:4B:CE:EF:DE:9A:76:AD:67:57:37:65:C8:11:6A:15:5E:14:F3:35
X509v3 Authority Key Identifier:
keyid:A4:87:78:2E:3F:70:C5:CD:27:B3:2F:52:74:D0:E5:BC:62:E9:5C:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pId4Lj9wxc0nsy9SdNDlvGLpXK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/bef6e8-8873-4529-8e72-238c6d8a4c17/1/pId4Lj9wxc0nsy9SdNDlvGLpXK8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/bef6e8-8873-4529-8e72-238c6d8a4c17/1/pId4Lj9wxc0nsy9SdNDlvGLpXK8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:84:60:1f:2c:69:0a:17:ba:23:b9:a5:6b:5e:60:a4:c1:2d:
61:11:4f:b7:57:06:06:59:64:bc:b1:4a:ac:95:42:bd:a7:60:
0e:b0:02:8c:38:eb:e7:67:81:9e:80:5c:90:3f:83:72:7c:da:
a1:fe:6a:74:eb:68:5d:8a:95:08:91:c0:b5:a2:ed:f3:02:79:
dc:1b:df:cf:68:e6:f9:42:be:90:8e:2d:81:c8:c8:d7:45:9c:
04:33:53:f5:96:b5:b1:3b:6a:e9:c6:30:55:0d:cb:d5:96:9c:
d0:46:c1:16:77:a4:c7:75:65:4a:e7:56:c2:da:f7:5e:27:08:
9c:a7:ae:d8:ec:a2:51:df:e9:e7:94:ad:7f:6a:8c:57:bb:4e:
6c:ad:c9:e4:6c:06:0e:3b:e0:d7:90:77:cf:06:f0:92:9e:5b:
74:98:15:c2:15:8b:1c:3b:dc:d2:f0:7b:ba:15:49:d7:32:f5:
de:fd:85:6c:c5:cf:c5:31:65:31:8f:04:43:69:2f:ec:02:c7:
8b:01:b5:a7:c9:b0:1f:d4:77:21:9c:a0:51:c8:4e:4d:42:1d:
1b:ab:e6:f9:56:f0:ef:1c:cf:fd:6e:0a:66:1b:d7:a6:b1:61:
15:3b:5b:1c:2a:27:aa:c7:38:86:3f:e5:a0:9d:48:42:1c:34:
c4:96:a4:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 13:44:00 2025 by rpki-client