Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/f8a0a5-b185-49a5-85ad-133eff78442b/1/_4C3cQsTmEQnXJ3pyOdk62QuGMM.mft
File: _4C3cQsTmEQnXJ3pyOdk62QuGMM.mft (raw, json)
Hash identifier: EY24n/9FyfKZWJM7sAAVYl6paK2s5q1iI44IF1R8qe4=
Subject key identifier: 93:76:03:5F:A8:93:88:E9:DA:15:7A:74:A7:51:C7:09:12:08:EF:3C
Authority key identifier: FF:80:B7:71:0B:13:98:44:27:5C:9D:E9:C8:E7:64:EB:64:2E:18:C3
Certificate issuer: /CN=ff80b7710b139844275c9de9c8e764eb642e18c3
Certificate serial: 01974F32D732D652132A6068D1FB984C1407
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_4C3cQsTmEQnXJ3pyOdk62QuGMM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/f8a0a5-b185-49a5-85ad-133eff78442b/1/_4C3cQsTmEQnXJ3pyOdk62QuGMM.mft
Manifest number: 1166
Signing time: Sun 08 Jun 2025 11:00:21 +0000
Manifest this update: Sun 08 Jun 2025 11:00:21 +0000
Manifest next update: Mon 09 Jun 2025 11:00:21 +0000
Files and hashes: 1: Dx1gAqycGcxk0c3DOzDhmsNycjk.roa (hash: DxcHYS8M2M1yYvT8l/4w2YI9cemThALPivyuAHPlg0M=)
2: _4C3cQsTmEQnXJ3pyOdk62QuGMM.crl (hash: qDxbDpsXVcK3udsuwV1zZzp985EkcOVWTKMzNFNV5Wk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/f8a0a5-b185-49a5-85ad-133eff78442b/1/_4C3cQsTmEQnXJ3pyOdk62QuGMM.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/f8a0a5-b185-49a5-85ad-133eff78442b/1/_4C3cQsTmEQnXJ3pyOdk62QuGMM.mft
rsync://rpki.ripe.net/repository/DEFAULT/_4C3cQsTmEQnXJ3pyOdk62QuGMM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 11:00:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4f:32:d7:32:d6:52:13:2a:60:68:d1:fb:98:4c:14:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ff80b7710b139844275c9de9c8e764eb642e18c3
Validity
Not Before: Jun 8 11:00:21 2025 GMT
Not After : Jun 9 11:00:21 2025 GMT
Subject: CN=9376035fa89388e9da157a74a751c7091208ef3c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:d0:83:9e:16:6f:69:26:51:12:ba:25:60:a3:
07:99:b0:08:1b:7d:96:75:00:13:f2:79:cc:14:a9:
9e:2c:98:05:21:ee:e9:3a:fe:8b:c5:83:02:e2:32:
f9:66:af:d4:87:6c:5d:2e:7f:b4:d0:57:6d:55:78:
65:af:6a:47:77:1e:b4:bb:53:d7:f0:28:e3:8d:da:
f4:14:a9:7e:28:2d:dd:e4:0c:0a:a0:32:b0:04:73:
ca:03:ce:c4:0c:4b:60:b8:50:f9:e4:98:ba:93:8f:
6d:3e:0f:f8:23:14:61:e0:36:8f:0c:f6:85:d1:86:
91:c6:43:e2:c7:f5:37:12:43:78:00:06:e9:b1:02:
99:44:4d:ad:43:97:36:b1:03:fa:30:a9:6b:89:4e:
72:78:b4:74:2b:14:47:c0:d4:91:6f:03:19:51:b9:
14:19:87:10:38:65:68:68:7b:22:95:ca:6b:c0:8f:
32:f9:21:0e:18:42:0f:7e:e7:0b:05:5b:38:03:97:
7b:42:25:01:b4:75:aa:e5:a1:09:9a:c0:e9:83:03:
76:a6:a1:72:9a:32:0f:b8:81:a1:93:76:f3:4c:a7:
df:5d:ba:4d:18:62:cc:d6:99:2d:d3:10:8d:5c:b7:
7b:99:e5:ab:d1:88:7a:2b:6b:3a:0f:0d:8f:3c:55:
4f:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:76:03:5F:A8:93:88:E9:DA:15:7A:74:A7:51:C7:09:12:08:EF:3C
X509v3 Authority Key Identifier:
keyid:FF:80:B7:71:0B:13:98:44:27:5C:9D:E9:C8:E7:64:EB:64:2E:18:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_4C3cQsTmEQnXJ3pyOdk62QuGMM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/f8a0a5-b185-49a5-85ad-133eff78442b/1/_4C3cQsTmEQnXJ3pyOdk62QuGMM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/f8a0a5-b185-49a5-85ad-133eff78442b/1/_4C3cQsTmEQnXJ3pyOdk62QuGMM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:09:af:83:57:e7:70:2d:d7:dd:e5:4b:f7:92:97:81:c0:9f:
6d:3c:e3:27:26:f8:08:72:ac:5d:a2:e9:66:0e:dc:2c:8a:3e:
a0:97:f4:a9:35:3a:35:0e:ff:f8:0c:d6:76:71:fa:94:31:a1:
fb:08:d4:53:9f:11:04:cf:51:74:8a:15:a7:14:90:9f:97:da:
08:37:76:91:26:c7:31:93:74:96:a7:d9:8a:48:76:69:0b:e4:
88:54:fe:d0:63:b6:30:ac:d6:67:b0:d5:66:5c:a6:6f:09:5a:
e8:e6:7b:89:92:96:6a:36:a3:49:b3:11:1d:5d:58:52:0f:c3:
e4:85:b0:9b:0b:42:7e:7c:d6:87:df:41:62:e1:74:b3:0c:21:
cd:ad:3d:b2:31:b2:ba:8b:77:cc:dd:19:d5:38:3d:60:61:c0:
5f:46:ef:c8:b1:9f:29:99:a7:9b:a1:2c:b0:ac:66:e7:c7:6e:
a0:b2:75:59:3b:1b:ad:b4:52:54:a8:a8:45:3f:c1:6e:c7:7d:
bb:b7:9d:99:76:35:85:96:bc:01:3b:11:38:7a:8c:b8:a9:8a:
ad:1f:31:80:a8:84:81:d0:e4:e2:60:72:35:4e:8d:a5:99:7b:
25:43:f2:12:ac:95:87:78:ea:db:8d:88:4a:40:5c:4f:73:db:
3b:4f:30:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 14:36:07 2025 by rpki-client