Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/4b9a4c-802d-4b1e-94fe-c8f56c122fec/1/I4RnTqAHoSAwrI0r5WDbIfT8C5k.mft
File: I4RnTqAHoSAwrI0r5WDbIfT8C5k.mft (raw, json)
Hash identifier: W9w2KMZLzH1gu6yMu8VXrANxcePkiLgcnoFgKrg2kRI=
Subject key identifier: BA:9D:05:57:2D:EE:90:93:1C:E9:00:49:19:46:24:CA:75:AA:7C:51
Authority key identifier: 23:84:67:4E:A0:07:A1:20:30:AC:8D:2B:E5:60:DB:21:F4:FC:0B:99
Certificate issuer: /CN=2384674ea007a12030ac8d2be560db21f4fc0b99
Certificate serial: 019746301E8BF2784B3981F8193BCC6AD9EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I4RnTqAHoSAwrI0r5WDbIfT8C5k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/4b9a4c-802d-4b1e-94fe-c8f56c122fec/1/I4RnTqAHoSAwrI0r5WDbIfT8C5k.mft
Manifest number: C5
Signing time: Fri 06 Jun 2025 17:00:47 +0000
Manifest this update: Fri 06 Jun 2025 17:00:47 +0000
Manifest next update: Sat 07 Jun 2025 17:00:47 +0000
Files and hashes: 1: I4RnTqAHoSAwrI0r5WDbIfT8C5k.crl (hash: +1dWH2N4WJo6bpDRuavGatp36ETX2VXGEAeFtqlwS2g=)
2: b-r28Bu4MGj-UsbsE6JV2xkR_Kg.roa (hash: CYtDxQh2JoY//+IHHkS7DA+4Jm80AdOA6Xho21YVow0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/4b9a4c-802d-4b1e-94fe-c8f56c122fec/1/I4RnTqAHoSAwrI0r5WDbIfT8C5k.crl
rsync://rpki.ripe.net/repository/DEFAULT/b0/4b9a4c-802d-4b1e-94fe-c8f56c122fec/1/I4RnTqAHoSAwrI0r5WDbIfT8C5k.mft
rsync://rpki.ripe.net/repository/DEFAULT/I4RnTqAHoSAwrI0r5WDbIfT8C5k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 15:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:46:30:1e:8b:f2:78:4b:39:81:f8:19:3b:cc:6a:d9:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2384674ea007a12030ac8d2be560db21f4fc0b99
Validity
Not Before: Jun 6 17:00:47 2025 GMT
Not After : Jun 7 17:00:47 2025 GMT
Subject: CN=ba9d05572dee90931ce90049194624ca75aa7c51
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:08:63:3c:3f:c1:65:5a:9b:4e:dc:9d:05:21:
25:c4:a3:86:78:84:ff:54:8a:ed:f1:18:7e:08:3a:
b5:1e:5b:74:1a:54:85:8a:99:75:eb:1b:cb:31:d1:
d9:bb:1a:cb:96:75:9f:c2:52:71:6e:2c:d9:d1:75:
5a:b5:46:ca:1b:96:7e:26:8a:3a:34:69:58:00:9c:
16:1e:11:09:2c:ce:7c:59:f9:69:0e:5b:e8:70:a0:
84:e6:0e:cc:8c:f5:4f:8e:82:26:57:0d:a3:de:7f:
88:dc:31:7f:ac:63:54:2f:6c:7a:ab:a0:9b:4d:89:
de:f9:44:d4:87:ac:2a:df:f0:5b:8f:a8:03:dc:33:
d3:50:2f:a6:cb:96:b8:e4:03:84:16:ee:d4:da:b7:
cb:0a:cd:f5:c6:36:26:05:e8:dd:96:80:c0:0f:ea:
08:20:c2:ac:02:fe:92:cd:52:8b:f9:e2:2c:78:2a:
2b:44:62:00:83:8a:02:36:ef:df:76:57:c4:77:13:
97:4a:c5:7c:c5:71:dd:86:3d:b8:e1:08:e7:97:ee:
aa:20:3b:a9:a0:6b:3a:7c:81:70:38:db:55:2a:fa:
8a:1c:37:11:cd:be:e3:3f:73:9a:15:b5:d7:c0:f3:
fc:fd:39:6a:ab:35:a6:7c:f1:10:65:bb:25:ad:ca:
19:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:9D:05:57:2D:EE:90:93:1C:E9:00:49:19:46:24:CA:75:AA:7C:51
X509v3 Authority Key Identifier:
keyid:23:84:67:4E:A0:07:A1:20:30:AC:8D:2B:E5:60:DB:21:F4:FC:0B:99
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I4RnTqAHoSAwrI0r5WDbIfT8C5k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/4b9a4c-802d-4b1e-94fe-c8f56c122fec/1/I4RnTqAHoSAwrI0r5WDbIfT8C5k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/4b9a4c-802d-4b1e-94fe-c8f56c122fec/1/I4RnTqAHoSAwrI0r5WDbIfT8C5k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:74:c0:c2:b1:25:2e:ce:ac:0f:e3:0c:82:5e:5a:b4:bb:87:
30:ff:2a:c6:10:97:71:0e:ac:fc:20:59:f5:95:94:d6:2e:b1:
b7:8f:20:c6:9b:2f:03:b7:54:d6:56:69:ee:05:d0:24:06:81:
db:f8:0f:87:ae:66:d0:67:37:c4:84:90:b8:e8:c0:51:98:f5:
92:72:f8:75:2e:b5:7f:40:df:9a:62:07:11:53:aa:fc:9b:45:
0c:3b:b1:eb:10:6d:8b:4c:00:20:3e:3c:8f:92:8b:55:ef:4b:
19:e5:5e:9e:2d:9f:f1:1c:c1:54:4a:1f:8d:ed:5b:3c:52:52:
59:dd:56:14:ba:bd:b5:3e:aa:f5:61:76:76:d9:fb:c9:93:a3:
2e:20:db:a1:e5:79:0c:2d:41:a0:82:95:ec:0b:ef:2f:3b:96:
50:29:fc:93:7c:cd:b5:c5:1e:fa:2d:5e:09:a8:a4:eb:1e:a2:
db:da:f9:81:fc:c4:7a:e0:1a:4a:af:6d:07:82:e7:e2:69:06:
d7:a0:02:73:8d:51:5d:c2:38:b8:86:3c:99:b9:66:7d:4d:47:
31:5a:24:93:46:f4:92:29:bc:a6:6d:90:02:36:f0:1f:37:7c:
11:d4:3d:60:57:3f:83:72:bf:11:93:8a:ad:58:42:9e:fd:b9:
15:d8:57:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 00:59:11 2025 by rpki-client