Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/dbc58e-027b-4aac-9de6-23739b5fd84c/1/v4iEmi616d1XGo50O-17lRPXoSE.mft
File: v4iEmi616d1XGo50O-17lRPXoSE.mft (raw, json)
Hash identifier: h9fHMoK4nUXwStymHxnDpwD0zoUBJQ8KrkoV2y2EOyI=
Subject key identifier: FD:9E:C8:DF:B0:03:31:95:71:88:C3:91:94:B8:F7:53:49:DA:8E:62
Authority key identifier: BF:88:84:9A:2E:B5:E9:DD:57:1A:8E:74:3B:ED:7B:95:13:D7:A1:21
Certificate issuer: /CN=bf88849a2eb5e9dd571a8e743bed7b9513d7a121
Certificate serial: 0197439D32D8F20401F9643A74980145ADD3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v4iEmi616d1XGo50O-17lRPXoSE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/dbc58e-027b-4aac-9de6-23739b5fd84c/1/v4iEmi616d1XGo50O-17lRPXoSE.mft
Manifest number: 0143
Signing time: Fri 06 Jun 2025 05:01:05 +0000
Manifest this update: Fri 06 Jun 2025 05:01:05 +0000
Manifest next update: Sat 07 Jun 2025 05:01:05 +0000
Files and hashes: 1: BsVvYEeON_W4W9ZLNqa4GXckg6I.roa (hash: iOxv5V+HpG39JzWV7shdmh0Q2oD1yPq3ovyP8RI1dPM=)
2: PejYz8HPGGclVll9vz9DLWCJzMQ.roa (hash: kVrf6QXYUJflpg6RS9qqGj+K93kGQxvjJpeCSRiFtPk=)
3: v4iEmi616d1XGo50O-17lRPXoSE.crl (hash: sK3pm03Vexathh9lIOKzlnPtbjw/MQODYFwhE9K1rWA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/dbc58e-027b-4aac-9de6-23739b5fd84c/1/v4iEmi616d1XGo50O-17lRPXoSE.crl
rsync://rpki.ripe.net/repository/DEFAULT/7a/dbc58e-027b-4aac-9de6-23739b5fd84c/1/v4iEmi616d1XGo50O-17lRPXoSE.mft
rsync://rpki.ripe.net/repository/DEFAULT/v4iEmi616d1XGo50O-17lRPXoSE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 05:01:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:43:9d:32:d8:f2:04:01:f9:64:3a:74:98:01:45:ad:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bf88849a2eb5e9dd571a8e743bed7b9513d7a121
Validity
Not Before: Jun 6 05:01:05 2025 GMT
Not After : Jun 7 05:01:05 2025 GMT
Subject: CN=fd9ec8dfb00331957188c39194b8f75349da8e62
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:27:62:ce:63:f4:6b:34:5f:47:83:5e:b2:74:
c7:b2:1d:28:5c:dd:e4:0b:e7:58:04:92:8a:de:74:
50:44:07:df:ca:5e:6d:1b:65:d5:88:e0:15:79:1a:
c4:d0:51:76:33:4f:d6:a7:00:c6:28:19:66:4d:49:
83:ac:ba:12:7e:44:53:db:24:34:e5:20:20:3f:79:
02:9a:d5:46:80:b7:c2:d2:31:52:94:65:90:bd:76:
5d:5c:33:4d:b6:ba:29:df:f0:2c:c7:14:9b:3a:3b:
b4:a2:8f:3e:ef:56:f6:39:af:29:2d:e1:2e:b0:06:
fe:d6:d7:80:e7:2d:2e:98:1c:ee:d4:70:db:73:55:
14:34:37:85:a1:22:13:2e:55:a9:c5:64:96:6a:65:
47:41:75:da:e6:25:08:2a:bd:f6:5d:1c:f7:af:6e:
fa:31:41:7a:e1:ae:f8:05:a3:a7:46:44:c1:46:24:
30:ad:6c:36:39:f5:97:78:63:76:ae:9f:e3:fd:d8:
1a:78:fe:b8:5b:e9:61:2a:8b:c0:3d:1e:fd:9e:42:
9f:b0:68:da:84:6d:c1:72:14:59:db:69:a7:3b:a4:
7a:e3:84:a1:f5:90:b4:91:74:0c:a7:88:71:69:5b:
63:76:a1:26:1a:95:d2:f0:02:78:71:ef:24:c2:d9:
4e:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:9E:C8:DF:B0:03:31:95:71:88:C3:91:94:B8:F7:53:49:DA:8E:62
X509v3 Authority Key Identifier:
keyid:BF:88:84:9A:2E:B5:E9:DD:57:1A:8E:74:3B:ED:7B:95:13:D7:A1:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v4iEmi616d1XGo50O-17lRPXoSE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/dbc58e-027b-4aac-9de6-23739b5fd84c/1/v4iEmi616d1XGo50O-17lRPXoSE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/dbc58e-027b-4aac-9de6-23739b5fd84c/1/v4iEmi616d1XGo50O-17lRPXoSE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:08:5a:09:8e:b5:7c:91:dc:f0:24:b0:cb:22:48:09:95:48:
3d:4d:7c:66:a8:9d:0d:0c:91:ae:a9:87:20:8a:19:e8:e2:b5:
e2:01:0d:73:54:3c:a6:c4:69:f5:82:ae:a8:8b:14:f1:fd:e6:
8e:1c:fe:a2:54:3f:91:72:1a:86:a7:e0:6b:62:5b:26:dc:54:
03:3c:e7:22:d8:c9:c5:b6:83:3c:42:c9:f5:83:c5:11:57:37:
54:5f:20:a8:73:11:eb:12:0a:5f:d5:5b:41:08:e3:66:15:f6:
05:99:be:b6:00:f1:ce:c9:b7:e1:3f:ab:86:79:90:09:c9:d8:
3f:1a:4e:d0:2a:9b:35:a5:58:e3:82:a9:33:9a:9e:01:d1:ba:
e9:ff:56:59:14:2a:08:fc:01:be:86:61:e2:51:0f:9d:ad:44:
44:9c:50:97:72:61:65:c2:8c:00:45:39:03:69:66:48:82:75:
81:16:de:d7:98:0d:e1:04:a6:ed:8d:12:40:c5:47:e3:ca:8b:
08:10:b6:aa:1a:15:f1:f4:79:67:af:77:2f:0a:9a:51:64:ff:
b1:4c:8b:b2:bc:3b:7c:c7:ad:08:32:f8:a9:2c:c5:02:40:c5:
22:61:d5:20:ee:72:18:48:54:66:80:c9:9b:8c:2f:b5:c7:10:
b0:b1:fd:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 6 11:01:42 2025 by rpki-client