Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/2fc167-b357-4394-b4e8-c825be2813bc/1/C4TqVJ-IIRBYs0v8qwZAwwMDk8M.mft
File: C4TqVJ-IIRBYs0v8qwZAwwMDk8M.mft (raw, json)
Hash identifier: lesfhOGH55tk0kdGm6ZPct3E7P68AJ720YvEW0YxQys=
Subject key identifier: 9F:3C:3C:15:31:C6:A3:46:F9:1A:35:42:F3:5D:82:27:A8:70:83:69
Authority key identifier: 0B:84:EA:54:9F:88:21:10:58:B3:4B:FC:AB:06:40:C3:03:03:93:C3
Certificate issuer: /CN=0b84ea549f88211058b34bfcab0640c3030393c3
Certificate serial: 01974A43AA06A52D21EFE0A4C0BEB24FD645
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C4TqVJ-IIRBYs0v8qwZAwwMDk8M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/2fc167-b357-4394-b4e8-c825be2813bc/1/C4TqVJ-IIRBYs0v8qwZAwwMDk8M.mft
Manifest number: 157D
Signing time: Sat 07 Jun 2025 12:00:37 +0000
Manifest this update: Sat 07 Jun 2025 12:00:37 +0000
Manifest next update: Sun 08 Jun 2025 12:00:37 +0000
Files and hashes: 1: C4TqVJ-IIRBYs0v8qwZAwwMDk8M.crl (hash: Wt2gaCRzcKhczYcQmp7tEeuSPoBk2mvdWHA6ITgNRG4=)
2: P-Dx0ihfKx4UBeNlSrnWTMyyfvY.roa (hash: viXxvbgM6fcm3+uNTvobtmlKGENasOgtCzi4bFmu9u0=)
3: VjB61y70CykGJrI1joYA_LZs7BQ.roa (hash: 0fdGzWqdSh6FPKMh+lErtdFv9hP3dlRfbAfCokMP6HQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/2fc167-b357-4394-b4e8-c825be2813bc/1/C4TqVJ-IIRBYs0v8qwZAwwMDk8M.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/2fc167-b357-4394-b4e8-c825be2813bc/1/C4TqVJ-IIRBYs0v8qwZAwwMDk8M.mft
rsync://rpki.ripe.net/repository/DEFAULT/C4TqVJ-IIRBYs0v8qwZAwwMDk8M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 11:24:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4a:43:aa:06:a5:2d:21:ef:e0:a4:c0:be:b2:4f:d6:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0b84ea549f88211058b34bfcab0640c3030393c3
Validity
Not Before: Jun 7 12:00:37 2025 GMT
Not After : Jun 8 12:00:37 2025 GMT
Subject: CN=9f3c3c1531c6a346f91a3542f35d8227a8708369
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:44:85:3c:16:f0:6b:d4:45:3a:d2:a4:b3:a0:
10:2c:30:03:10:14:92:0b:58:2a:9c:c1:b7:25:58:
3d:8a:cc:b5:fa:7c:5d:49:8d:62:a9:53:13:ea:8d:
55:ca:16:44:1e:92:d9:bd:a1:62:c6:d7:25:53:67:
11:3d:e3:df:34:9a:c6:cb:9a:5c:ab:a2:ad:a3:e3:
13:ef:50:bf:62:d4:35:fe:0e:c8:41:dd:8f:58:a8:
0e:09:66:4b:ec:4b:31:cf:cc:9d:93:12:ed:c3:d5:
58:7a:40:37:d0:34:f9:0e:68:f9:41:01:15:31:75:
25:d2:ea:91:97:5a:dd:ad:a1:7a:e8:98:7b:41:7f:
2a:dd:50:65:9c:19:26:4b:a9:7c:bf:e3:6e:57:b4:
e5:a4:04:4c:f8:f4:c2:f5:a0:cd:1f:12:03:bb:30:
68:69:8e:f8:cf:e0:86:f4:95:09:f4:0f:24:35:00:
65:55:0e:0e:06:82:d4:a5:9b:e1:22:67:0d:84:c3:
46:45:01:f5:af:f8:66:41:bf:75:d1:94:f0:a6:36:
d6:47:8a:10:10:69:f4:d1:96:0e:25:0a:cd:f5:74:
5e:e8:bd:d1:77:4b:cc:10:72:c9:45:7d:9c:ae:cd:
f3:4f:78:cf:da:51:d7:ae:35:b1:c8:39:44:1a:a0:
1a:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:3C:3C:15:31:C6:A3:46:F9:1A:35:42:F3:5D:82:27:A8:70:83:69
X509v3 Authority Key Identifier:
keyid:0B:84:EA:54:9F:88:21:10:58:B3:4B:FC:AB:06:40:C3:03:03:93:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C4TqVJ-IIRBYs0v8qwZAwwMDk8M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/2fc167-b357-4394-b4e8-c825be2813bc/1/C4TqVJ-IIRBYs0v8qwZAwwMDk8M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/2fc167-b357-4394-b4e8-c825be2813bc/1/C4TqVJ-IIRBYs0v8qwZAwwMDk8M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:8e:4c:bd:28:d3:8c:99:24:5d:b9:3a:48:8c:64:c1:6b:81:
c0:af:82:2c:97:bb:32:a0:bc:12:03:92:e5:18:18:a7:d5:81:
67:c7:bc:10:56:67:ed:f9:c5:20:36:42:17:7a:4b:a8:da:cd:
e3:06:f7:a5:4b:9a:e5:22:8b:13:e2:d7:5c:bd:7c:2f:57:10:
2d:77:58:d9:6b:c5:87:3a:f0:79:ca:22:8a:6e:27:39:7e:10:
e0:15:0d:9f:05:a4:88:2e:65:8f:9c:a8:77:a6:50:a5:94:4f:
ed:26:da:11:f8:aa:d2:dc:d7:cf:1d:48:5b:8e:91:bc:58:0e:
1d:a9:ce:6d:71:35:61:7a:17:75:48:a2:2e:56:f7:e3:52:b1:
b4:fa:07:f3:54:f8:cb:67:6d:c1:26:86:36:01:7b:57:59:e9:
20:19:8f:e5:c5:d4:1e:60:7f:2f:f0:c1:43:f2:12:82:f8:a9:
04:0c:7f:90:2a:c7:f9:04:d8:1b:6c:9e:ce:a7:8b:0c:df:4e:
ee:3f:48:ac:76:9f:87:12:e0:de:2a:2d:f2:10:1f:57:73:fe:
94:bf:dd:83:56:d0:d4:35:64:87:89:39:dc:64:e0:6a:9e:a7:
99:db:26:38:3a:09:0a:87:ea:b5:63:94:24:70:96:e6:48:4e:
79:24:94:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 22:28:16 2025 by rpki-client