Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/321889-abc6-43a8-b28a-bb29063f4881/1/t7n8UEpNIXiuT3PId8X5B7tHa_g.mft
File: t7n8UEpNIXiuT3PId8X5B7tHa_g.mft (raw, json)
Hash identifier: 4iZ2Rl4AhQQIajim7Hwn6ZnQ57eNxgpJHdfK2lEI1CY=
Subject key identifier: 4E:CA:35:2B:C5:0D:87:5E:D6:82:7F:F7:E7:C8:D0:29:A4:D3:86:4D
Authority key identifier: B7:B9:FC:50:4A:4D:21:78:AE:4F:73:C8:77:C5:F9:07:BB:47:6B:F8
Certificate issuer: /CN=b7b9fc504a4d2178ae4f73c877c5f907bb476bf8
Certificate serial: 0197488C02ADDE573378957FEC185C0A5C12
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/t7n8UEpNIXiuT3PId8X5B7tHa_g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/321889-abc6-43a8-b28a-bb29063f4881/1/t7n8UEpNIXiuT3PId8X5B7tHa_g.mft
Manifest number: 02DA
Signing time: Sat 07 Jun 2025 04:00:24 +0000
Manifest this update: Sat 07 Jun 2025 04:00:24 +0000
Manifest next update: Sun 08 Jun 2025 04:00:24 +0000
Files and hashes: 1: k9U72mP-Km1xWLf3e9wAtG2m9RI.roa (hash: Pej7Eh2aiqSEO+t6zjd8tEra9H0XG62qu73Vt5mmuqQ=)
2: t7n8UEpNIXiuT3PId8X5B7tHa_g.crl (hash: nMPB3N5u+02wb8nUTAi9t8zw7eqQQ0wASreqqBMdHAQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8d/321889-abc6-43a8-b28a-bb29063f4881/1/t7n8UEpNIXiuT3PId8X5B7tHa_g.crl
rsync://rpki.ripe.net/repository/DEFAULT/8d/321889-abc6-43a8-b28a-bb29063f4881/1/t7n8UEpNIXiuT3PId8X5B7tHa_g.mft
rsync://rpki.ripe.net/repository/DEFAULT/t7n8UEpNIXiuT3PId8X5B7tHa_g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 00:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:48:8c:02:ad:de:57:33:78:95:7f:ec:18:5c:0a:5c:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b7b9fc504a4d2178ae4f73c877c5f907bb476bf8
Validity
Not Before: Jun 7 04:00:24 2025 GMT
Not After : Jun 8 04:00:24 2025 GMT
Subject: CN=4eca352bc50d875ed6827ff7e7c8d029a4d3864d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:f1:e3:3c:39:89:57:73:91:db:54:b1:fa:26:
85:2a:7b:f7:7c:fb:45:76:63:38:7d:53:b5:07:6d:
1f:17:ab:af:e2:7d:1f:a4:8e:3e:6e:c6:f3:f2:bf:
d8:db:0e:16:b2:39:77:3a:1b:dd:5e:16:e2:46:2f:
76:5b:6f:dd:b5:9f:fe:32:78:3f:38:6e:3a:52:37:
9d:98:42:f0:be:de:85:a0:9c:00:ca:ce:4c:df:49:
5f:15:ed:4d:af:9c:8b:ac:fc:fd:c1:ac:60:b5:fd:
dd:33:07:70:b3:90:c7:0b:62:cf:b4:1b:fc:5b:9b:
cc:ff:21:69:78:80:f3:58:04:35:59:9b:7a:c7:f4:
b4:2b:53:e2:18:42:ef:a7:ed:f1:73:58:4e:af:9c:
b6:da:8a:a8:38:ea:5a:db:ff:0d:e4:14:35:e7:79:
f0:03:99:1f:f3:f9:1d:47:c3:10:94:ba:ce:55:5e:
1e:be:37:82:78:af:af:9e:a8:65:69:3b:c0:f9:af:
78:b7:b4:ba:9e:68:56:b0:42:95:39:2e:c8:97:18:
ff:28:0a:b2:fd:66:c7:8d:bd:2c:53:a8:4b:24:ce:
70:a3:e7:17:ed:32:f0:84:d1:af:29:fa:81:b7:12:
20:e8:8d:75:63:c2:85:f8:51:a9:a2:5b:70:a7:8d:
ae:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:CA:35:2B:C5:0D:87:5E:D6:82:7F:F7:E7:C8:D0:29:A4:D3:86:4D
X509v3 Authority Key Identifier:
keyid:B7:B9:FC:50:4A:4D:21:78:AE:4F:73:C8:77:C5:F9:07:BB:47:6B:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t7n8UEpNIXiuT3PId8X5B7tHa_g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/321889-abc6-43a8-b28a-bb29063f4881/1/t7n8UEpNIXiuT3PId8X5B7tHa_g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/321889-abc6-43a8-b28a-bb29063f4881/1/t7n8UEpNIXiuT3PId8X5B7tHa_g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9f:ca:db:9c:27:30:8b:7b:4a:86:5c:4d:c6:f1:fa:13:88:2a:
1a:09:ba:30:36:88:58:12:3a:86:8a:4d:e7:80:d3:3a:2e:17:
2d:8a:58:ca:6b:9c:57:65:ed:6c:49:e5:c7:98:63:c3:f9:f5:
3b:a4:4c:f8:2d:b0:78:1b:b7:ae:71:7a:34:64:96:84:14:f5:
8c:b3:af:a0:99:7b:37:82:30:f6:e4:da:66:98:0e:33:04:cc:
ad:03:c8:b7:0d:03:78:d1:24:d7:05:55:0c:97:21:53:0e:25:
a4:40:93:ea:03:29:b4:d6:0a:cc:bc:09:d7:10:3d:4c:af:41:
e4:f2:25:f6:bc:60:34:37:d6:4a:47:61:28:ee:2e:e4:61:55:
72:d1:2f:13:8b:b0:51:ad:16:ae:d4:de:ab:d8:b1:1e:d4:8e:
6c:4f:49:c8:55:98:48:db:70:dc:d8:ba:82:f6:ac:fc:d0:6f:
f5:a1:2c:96:5d:9b:00:a7:9e:b0:80:80:06:54:f1:6a:73:7a:
cc:b4:fa:51:ec:f7:42:21:50:55:a3:96:35:01:d3:5c:ac:3f:
a0:d8:e4:cd:3e:eb:87:78:39:26:9c:05:d3:04:62:6d:08:92:
ef:8c:95:e9:eb:d8:78:b4:ac:e8:13:99:d6:ec:fa:e4:f4:84:
50:6d:10:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 09:21:55 2025 by rpki-client