Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/280ca9-f7d8-4ffa-ba34-a13f4481bc6c/1/u4K408Gw94w6GfYWTrKCHiMM_k4.mft
File: u4K408Gw94w6GfYWTrKCHiMM_k4.mft (raw, json)
Hash identifier: aUfDYbn8pFFQ1SmSwGwOr0ZtgdXWTqn93XMh44KN+54=
Subject key identifier: 30:24:E7:25:F5:F7:3F:05:5E:30:0B:9E:F9:64:FA:EC:51:E2:88:EC
Authority key identifier: BB:82:B8:D3:C1:B0:F7:8C:3A:19:F6:16:4E:B2:82:1E:23:0C:FE:4E
Certificate issuer: /CN=bb82b8d3c1b0f78c3a19f6164eb2821e230cfe4e
Certificate serial: 01974F6A35D958774D67DE9EA8CE5F2A72F3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u4K408Gw94w6GfYWTrKCHiMM_k4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/280ca9-f7d8-4ffa-ba34-a13f4481bc6c/1/u4K408Gw94w6GfYWTrKCHiMM_k4.mft
Manifest number: 0F79
Signing time: Sun 08 Jun 2025 12:00:49 +0000
Manifest this update: Sun 08 Jun 2025 12:00:49 +0000
Manifest next update: Mon 09 Jun 2025 12:00:49 +0000
Files and hashes: 1: sZvwZMkTNt-iUTiQmQ2RW61JCrY.roa (hash: ILtUTNlj+OmXDu1giFXN+JTJafdCM0FAh4hCT6vGfZc=)
2: u4K408Gw94w6GfYWTrKCHiMM_k4.crl (hash: oN/7eJ3y5xUr/VZT13rAlDggvih1xlyLrDjSWHHpL9w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/280ca9-f7d8-4ffa-ba34-a13f4481bc6c/1/u4K408Gw94w6GfYWTrKCHiMM_k4.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/280ca9-f7d8-4ffa-ba34-a13f4481bc6c/1/u4K408Gw94w6GfYWTrKCHiMM_k4.mft
rsync://rpki.ripe.net/repository/DEFAULT/u4K408Gw94w6GfYWTrKCHiMM_k4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 11:44:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4f:6a:35:d9:58:77:4d:67:de:9e:a8:ce:5f:2a:72:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bb82b8d3c1b0f78c3a19f6164eb2821e230cfe4e
Validity
Not Before: Jun 8 12:00:49 2025 GMT
Not After : Jun 9 12:00:49 2025 GMT
Subject: CN=3024e725f5f73f055e300b9ef964faec51e288ec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:c2:79:6f:4e:3b:53:b7:1a:98:62:7a:4c:16:
32:a8:84:fb:8b:72:c0:39:b4:5a:c0:7d:5a:3a:73:
a3:10:9e:f1:2f:47:05:5c:0a:25:a4:24:b2:e2:80:
4a:58:00:e1:3a:4c:3a:8a:73:95:88:6e:56:96:6b:
1d:2b:78:b2:2c:69:23:a2:e6:b1:5e:51:5c:ba:96:
dd:ff:0b:6e:8f:10:58:d8:68:4c:e9:c3:d1:19:21:
f9:fc:9d:8a:82:00:21:65:49:4b:fe:74:28:38:c0:
83:1c:49:f7:3f:5f:5b:ae:ad:26:67:4d:11:78:bb:
70:4f:65:e2:9c:a4:93:15:98:43:58:0e:8d:81:ff:
41:3e:ad:d7:76:05:91:cf:c5:b8:d6:3f:cd:51:63:
50:d1:3d:8e:75:78:8b:7b:b1:9c:1d:4c:f7:e9:29:
b2:58:c0:64:9c:e3:06:21:1c:1a:84:44:9b:72:cb:
55:3e:63:c1:3f:eb:8b:3f:1b:25:24:ae:02:d2:6b:
4a:bd:22:be:c6:d0:89:83:e1:db:12:bf:2a:79:b7:
07:e5:95:0e:d6:c0:bd:df:a0:41:cf:6f:f2:73:7a:
24:0d:9f:ba:e7:21:f1:56:aa:6f:e3:3c:b1:f8:29:
2c:5d:ab:8c:3a:55:ae:58:3f:b4:41:e6:34:2e:98:
c8:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:24:E7:25:F5:F7:3F:05:5E:30:0B:9E:F9:64:FA:EC:51:E2:88:EC
X509v3 Authority Key Identifier:
keyid:BB:82:B8:D3:C1:B0:F7:8C:3A:19:F6:16:4E:B2:82:1E:23:0C:FE:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u4K408Gw94w6GfYWTrKCHiMM_k4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/280ca9-f7d8-4ffa-ba34-a13f4481bc6c/1/u4K408Gw94w6GfYWTrKCHiMM_k4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/280ca9-f7d8-4ffa-ba34-a13f4481bc6c/1/u4K408Gw94w6GfYWTrKCHiMM_k4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:07:ca:da:29:63:a5:c3:2a:2e:76:d3:d8:73:ab:50:f5:7c:
fd:71:9b:a4:eb:ef:01:9d:1d:b7:a3:96:60:1b:29:e8:22:1a:
fd:47:0c:1a:f2:68:20:82:76:6a:74:44:41:07:b9:e4:37:4f:
2f:1e:7e:d2:62:c3:19:ba:c9:31:60:38:ff:4e:f5:ac:09:20:
38:51:26:da:fc:f7:49:4a:c2:98:fe:88:e9:44:cc:64:fd:b9:
44:b6:6f:f4:8c:6c:68:08:db:32:25:95:f0:18:38:ce:b4:bc:
80:dc:7e:9f:aa:fc:35:de:0e:6c:d0:9c:4e:fd:e6:3a:49:5c:
7a:f1:a2:28:96:a9:ec:98:b1:85:bf:2b:2e:c2:a5:f8:cc:f5:
2d:ed:0b:58:49:98:d2:f6:9f:e9:6b:d4:ac:91:84:72:90:46:
6d:ec:21:c1:a4:7a:dd:48:b7:51:c0:8d:1a:43:d0:d1:f0:ff:
6e:ea:5b:51:d1:ce:26:cd:f6:0d:66:75:7c:07:3d:fe:ba:bc:
5a:7a:f0:11:28:28:fe:5b:7d:86:d6:54:26:aa:84:05:a0:87:
28:c3:51:30:00:0c:97:b3:8e:0b:38:74:d2:e0:f0:c5:7c:e3:
34:71:b3:d3:9e:83:56:42:ed:94:ed:56:87:f2:f3:55:8d:75:
91:19:d6:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 18:52:15 2025 by rpki-client