Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/57e419-42f4-4d8c-b6b4-431f27a62ed8/1/A4r4Z5VBejWE1hY3UgmnLv7iRis.mft
File: A4r4Z5VBejWE1hY3UgmnLv7iRis.mft (raw, json)
Hash identifier: okvnrm+UHCrTC29ZFTH7l//DjRIBAW6yuN/ogPuQDcQ=
Subject key identifier: 87:9B:FF:DA:CB:01:10:2E:6D:5D:2D:88:32:87:24:A7:15:20:D9:B7
Authority key identifier: 03:8A:F8:67:95:41:7A:35:84:D6:16:37:52:09:A7:2E:FE:E2:46:2B
Certificate issuer: /CN=038af86795417a3584d616375209a72efee2462b
Certificate serial: 01974967CE59033F313406959AB59EFA9FE9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A4r4Z5VBejWE1hY3UgmnLv7iRis.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/57e419-42f4-4d8c-b6b4-431f27a62ed8/1/A4r4Z5VBejWE1hY3UgmnLv7iRis.mft
Manifest number: 0D03
Signing time: Sat 07 Jun 2025 08:00:29 +0000
Manifest this update: Sat 07 Jun 2025 08:00:29 +0000
Manifest next update: Sun 08 Jun 2025 08:00:29 +0000
Files and hashes: 1: 1-ojoRJbswRkkiGkqXab5Mi6LHY.roa (hash: 60oY4GGKsVQvbVXZplutdFLjGZggdXVeIQnzzP1SLeY=)
2: A4r4Z5VBejWE1hY3UgmnLv7iRis.crl (hash: fEp0FckdwjOuKN5E62DPy57sHfVPOeGOrW4NXkVXlFU=)
3: WIaOGWdkdCPNTnZSI-W-XTK4te4.roa (hash: jVJuCp2YFk4DEa8ZbdmENwzLLMmsULw4LDZkckWi3gI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/57e419-42f4-4d8c-b6b4-431f27a62ed8/1/A4r4Z5VBejWE1hY3UgmnLv7iRis.crl
rsync://rpki.ripe.net/repository/DEFAULT/7b/57e419-42f4-4d8c-b6b4-431f27a62ed8/1/A4r4Z5VBejWE1hY3UgmnLv7iRis.mft
rsync://rpki.ripe.net/repository/DEFAULT/A4r4Z5VBejWE1hY3UgmnLv7iRis.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 00:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:49:67:ce:59:03:3f:31:34:06:95:9a:b5:9e:fa:9f:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=038af86795417a3584d616375209a72efee2462b
Validity
Not Before: Jun 7 08:00:29 2025 GMT
Not After : Jun 8 08:00:29 2025 GMT
Subject: CN=879bffdacb01102e6d5d2d88328724a71520d9b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:bb:7b:6c:40:29:ca:5c:b8:8b:f3:de:fb:6e:
50:18:b6:ec:af:c1:e6:89:85:7a:e3:25:f2:e9:50:
2d:4e:f1:2e:7c:fe:e7:52:a6:12:a8:e3:b2:81:84:
1a:21:99:0e:e6:d9:4a:e1:65:1c:e8:9d:db:70:7c:
bc:d3:91:a4:04:5a:00:aa:45:e5:81:d6:19:f1:76:
f7:cb:35:d8:bb:80:ae:53:ab:6b:7a:40:c0:be:47:
bc:04:fe:ac:05:36:85:e6:e1:05:b0:57:9d:2b:e7:
5c:24:bd:77:5d:1f:c2:94:6c:24:91:87:83:a9:e8:
64:11:0e:57:0e:fe:4d:4b:79:a0:15:84:67:4f:92:
37:f0:c2:f5:7b:c6:ce:51:14:23:b5:56:cd:3b:f9:
46:5b:f5:a2:c9:6b:e3:04:0e:d2:71:8e:c4:86:8a:
55:b0:c2:4c:98:36:3c:77:89:df:2b:c4:90:77:5b:
c3:d5:91:5f:21:69:62:b3:dd:ba:d7:17:6e:a0:70:
81:31:b1:5b:f9:8f:c4:37:f4:07:f4:f2:a4:96:39:
24:09:d8:77:02:21:10:0a:db:19:c3:fe:8f:42:6f:
ff:7e:dc:f9:41:8c:6c:74:4b:7b:ed:5f:16:d7:15:
a9:53:12:ab:47:e2:29:76:a9:eb:07:c2:56:7a:d1:
5f:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:9B:FF:DA:CB:01:10:2E:6D:5D:2D:88:32:87:24:A7:15:20:D9:B7
X509v3 Authority Key Identifier:
keyid:03:8A:F8:67:95:41:7A:35:84:D6:16:37:52:09:A7:2E:FE:E2:46:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A4r4Z5VBejWE1hY3UgmnLv7iRis.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/57e419-42f4-4d8c-b6b4-431f27a62ed8/1/A4r4Z5VBejWE1hY3UgmnLv7iRis.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/57e419-42f4-4d8c-b6b4-431f27a62ed8/1/A4r4Z5VBejWE1hY3UgmnLv7iRis.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:40:fe:28:ef:f3:64:e7:72:f5:17:ec:40:89:35:3c:aa:54:
bf:8c:18:c0:8f:e8:bf:68:bf:21:1a:9c:78:6c:43:fa:fb:a3:
ef:2a:29:c2:3b:6a:4e:b3:1f:6d:1e:71:3f:c9:bd:dd:cf:59:
2a:74:cb:46:c6:db:54:ff:23:26:f8:a8:0c:a3:af:92:07:ea:
4f:9f:ea:a3:8c:77:05:64:04:29:0a:a2:2d:49:ef:c2:3a:0e:
d8:94:1a:1d:89:a9:1a:65:75:00:dd:0e:94:07:d6:6f:84:e1:
a3:8c:20:26:ab:74:fd:85:a5:75:ff:04:12:08:11:7e:82:b1:
af:d2:be:c4:cd:b2:29:90:b0:15:7d:c8:36:67:78:32:d8:f5:
fc:b3:75:48:e8:0c:ca:c7:21:b5:a7:fd:ed:90:e1:50:b6:0c:
32:ce:4e:49:03:4c:f2:e0:89:c4:7b:2e:e6:98:32:11:3a:00:
18:36:73:e1:8e:24:d7:57:c7:e3:91:a5:60:b2:67:c2:01:24:
e4:ba:68:28:b7:e2:5f:a2:92:7f:d3:5c:2a:74:ea:f0:ec:e1:
6f:55:9d:9a:30:7e:f9:a7:0c:38:f4:ca:9d:45:40:44:64:63:
e5:0f:78:07:4a:ea:11:c4:00:8f:2f:c1:e9:0d:f2:5b:ad:0a:
a1:eb:c6:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 10:36:09 2025 by rpki-client