Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/3a382a-3dda-4796-b320-3fdfb4140f24/1/v4CafmyhTQoal2Zz4DGeNOlW7T0.mft
File: v4CafmyhTQoal2Zz4DGeNOlW7T0.mft (raw, json)
Hash identifier: 7vRpsZZBGuvUWTp2YhBWM9Ee8vj6GAgmrz1DlIG2fRQ=
Subject key identifier: 7B:B1:C6:00:E3:49:DB:45:4F:9A:72:DE:5F:C7:4F:90:AA:3B:8B:CB
Authority key identifier: BF:80:9A:7E:6C:A1:4D:0A:1A:97:66:73:E0:31:9E:34:E9:56:ED:3D
Certificate issuer: /CN=bf809a7e6ca14d0a1a976673e0319e34e956ed3d
Certificate serial: 0197488C83E2E91CA902B114AB66D63A0D43
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v4CafmyhTQoal2Zz4DGeNOlW7T0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/89/3a382a-3dda-4796-b320-3fdfb4140f24/1/v4CafmyhTQoal2Zz4DGeNOlW7T0.mft
Manifest number: 1583
Signing time: Sat 07 Jun 2025 04:00:57 +0000
Manifest this update: Sat 07 Jun 2025 04:00:57 +0000
Manifest next update: Sun 08 Jun 2025 04:00:57 +0000
Files and hashes: 1: R42xE2mJMD9gnW-S_3g2XV8r74E.roa (hash: EXpcy7RAsA9U8XogEzCQScUz5RV6/SXT/hCfZDn3n2Q=)
2: v4CafmyhTQoal2Zz4DGeNOlW7T0.crl (hash: rtn62+xbMmr+Tejmw57crxbVL5GTexD4Q1QrCoVJg6w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/89/3a382a-3dda-4796-b320-3fdfb4140f24/1/v4CafmyhTQoal2Zz4DGeNOlW7T0.crl
rsync://rpki.ripe.net/repository/DEFAULT/89/3a382a-3dda-4796-b320-3fdfb4140f24/1/v4CafmyhTQoal2Zz4DGeNOlW7T0.mft
rsync://rpki.ripe.net/repository/DEFAULT/v4CafmyhTQoal2Zz4DGeNOlW7T0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 04:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:48:8c:83:e2:e9:1c:a9:02:b1:14:ab:66:d6:3a:0d:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bf809a7e6ca14d0a1a976673e0319e34e956ed3d
Validity
Not Before: Jun 7 04:00:57 2025 GMT
Not After : Jun 8 04:00:57 2025 GMT
Subject: CN=7bb1c600e349db454f9a72de5fc74f90aa3b8bcb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:f8:7f:f2:f0:80:8e:ed:40:a0:38:9a:ea:e6:
2d:1d:1b:61:18:fc:e1:08:b0:87:c2:98:d6:3f:10:
97:06:a7:08:91:80:0f:7c:96:a9:1f:d7:b0:b8:c0:
43:e3:97:b4:9d:f3:f0:2d:b5:a3:56:42:93:1a:89:
25:ab:67:e1:00:41:1b:e9:a8:0f:37:02:73:1e:0e:
19:80:76:48:8a:fc:34:d4:f9:b9:53:59:50:ce:f0:
aa:c6:45:27:59:8d:3b:48:e3:28:28:bb:c9:a3:fc:
54:cd:15:f6:af:31:5f:7b:50:3e:76:e6:6d:88:cb:
b2:a3:b5:15:db:73:0d:c8:28:32:ba:c8:37:ed:e9:
c0:1e:dd:c3:3f:63:2c:d7:19:4c:1b:06:2e:f8:3e:
f0:20:36:cc:c5:f5:7b:0a:c7:cd:16:4e:0a:eb:2e:
37:c1:f2:42:20:6d:48:7a:c3:c8:c9:19:d4:aa:44:
84:c5:aa:13:04:cc:57:a2:8e:e0:12:7b:dd:02:a4:
18:35:40:36:46:01:e7:0c:09:e5:f8:41:80:fa:6c:
95:2b:37:16:c3:b0:e9:6f:83:e1:27:f7:d2:f9:c0:
72:db:aa:80:4a:75:e8:31:24:24:2e:f2:6a:3c:a8:
27:69:c7:cf:60:2d:6a:96:97:6b:ff:6c:0b:54:15:
db:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:B1:C6:00:E3:49:DB:45:4F:9A:72:DE:5F:C7:4F:90:AA:3B:8B:CB
X509v3 Authority Key Identifier:
keyid:BF:80:9A:7E:6C:A1:4D:0A:1A:97:66:73:E0:31:9E:34:E9:56:ED:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v4CafmyhTQoal2Zz4DGeNOlW7T0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/3a382a-3dda-4796-b320-3fdfb4140f24/1/v4CafmyhTQoal2Zz4DGeNOlW7T0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/89/3a382a-3dda-4796-b320-3fdfb4140f24/1/v4CafmyhTQoal2Zz4DGeNOlW7T0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:3a:e0:6c:fc:aa:90:c3:9f:65:df:bf:be:17:e5:ef:28:42:
fa:cd:32:8b:bd:66:6b:a0:f7:7f:26:5e:20:c3:5d:48:5c:f5:
8e:84:7a:79:b3:f7:c0:8d:a9:07:fd:37:c3:a5:61:b4:0c:aa:
07:39:8e:4f:db:cc:1b:bc:23:72:57:7c:62:6c:f8:aa:2a:60:
30:83:97:90:8f:3f:ba:86:a5:62:fc:8d:4c:0d:22:3e:57:3b:
9a:9f:e4:37:f1:0e:ca:19:42:97:3a:ea:5b:e4:e1:20:04:d0:
53:fa:f8:3f:f3:93:55:35:9c:3b:09:08:0e:89:d7:bb:68:d9:
f8:9a:c6:6f:51:95:66:a9:fd:08:01:a9:44:7a:f6:67:10:93:
84:d3:d0:55:c6:3c:88:db:9f:70:c5:3f:97:13:34:a2:7a:6c:
0b:0d:b0:22:d9:cc:94:1a:2d:76:a1:e5:b2:8d:85:0e:10:dd:
9b:13:a1:56:14:7f:e5:7b:42:18:08:92:c2:dc:2d:83:35:7c:
cc:97:19:e4:70:de:66:04:aa:8b:7b:de:cb:0e:34:95:e5:05:
76:c7:30:27:e7:21:af:97:46:36:5d:9e:0a:b9:55:4c:d6:a6:
b8:2d:1f:f6:b4:3b:32:59:1e:b9:25:1e:e3:88:cd:78:1d:8b:
02:e7:3c:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 12:00:47 2025 by rpki-client